$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EEA1495AD1BB8A1DA374B881A1E6773AE960FA3C6F0441499324508DDD7A71B/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.mft File: 451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.mft (raw, json) Hash identifier: HwVks6VqNUpFz+jbEX4qWGtI2XQw51RcG9pmSJedBK8= Subject key identifier: A2:F1:23:CC:EF:1D:E7:03:35:90:16:01:DF:5D:76:B8:86:CC:11:CC Authority key identifier: 45:1C:A5:24:8F:C6:F7:C6:AF:7C:C6:41:35:B7:EE:80:A9:2B:6F:21 Certificate issuer: /CN=451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21 Certificate serial: 2E31CBF778D4871C89C44795584AEB5DFC6B3454 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2EEA1495AD1BB8A1DA374B881A1E6773AE960FA3C6F0441499324508DDD7A71B/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.mft Manifest number: 20 Signing time: Thu 17 Apr 2025 04:26:06 +0000 Manifest this update: Thu 17 Apr 2025 04:21:06 +0000 Manifest next update: Tue 22 Apr 2025 06:34:06 +0000 Files and hashes: 1: 3139302e3137302e3132382e302f31382d3138203d3e203237373731.roa (hash: ZMG2ke+8PRyaX9HMEINmyKz5Ekn3z8NAa1gPm4sXO1U=) 2: 451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.crl (hash: RsT0gKg+GheAUAX9xkdErXsR6Tt8FM1QpFjtbAivczY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2EEA1495AD1BB8A1DA374B881A1E6773AE960FA3C6F0441499324508DDD7A71B/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.crl rsync://repository.lacnic.net/rpki/lacnic/2EEA1495AD1BB8A1DA374B881A1E6773AE960FA3C6F0441499324508DDD7A71B/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 06:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:31:cb:f7:78:d4:87:1c:89:c4:47:95:58:4a:eb:5d:fc:6b:34:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21 Validity Not Before: Apr 17 04:21:06 2025 GMT Not After : Apr 22 06:34:06 2025 GMT Subject: CN=A2F123CCEF1DE70335901601DF5D76B886CC11CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:bc:e2:b5:10:20:28:56:80:1f:78:9e:f5: 87:be:a2:86:2a:30:9e:7e:a4:ab:7a:96:50:a2:b0: 51:6f:3a:34:d4:25:da:df:01:55:62:b5:a9:df:15: 29:f0:36:97:8f:e2:3a:c9:61:12:18:8f:b6:56:01: b9:56:91:a0:6b:e9:30:3b:0d:ef:db:d4:00:05:f7: 37:e0:47:ed:c0:57:55:80:11:10:f4:0d:2a:4c:73: a1:14:7a:04:af:02:96:b8:04:48:21:32:4f:83:99: 8e:d2:96:7d:3d:ce:fd:00:67:06:f5:9a:32:a5:2c: 9b:54:c6:6d:64:1b:84:5d:38:13:62:c5:9b:98:0d: bc:ae:8b:20:16:10:c8:97:b5:2f:eb:e5:7d:8e:5b: 0f:7a:89:29:09:4e:49:3a:de:ab:c0:bc:34:1b:21: 98:f7:1e:73:70:d9:48:51:e0:38:61:9f:ae:33:3d: 5c:c7:cb:57:d0:8a:dc:0b:f3:7f:30:83:ff:1c:a3: f4:bb:7c:b2:2a:fc:f3:a7:cc:3a:32:3f:29:06:4a: 76:a8:0a:99:d5:1f:f6:7b:5b:ab:9e:a7:1a:6e:c4: b7:8e:3c:26:08:17:66:2c:7f:b6:dd:4f:33:ce:01: 0b:b7:74:98:a7:85:12:6a:fe:af:62:31:d8:a9:d9: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F1:23:CC:EF:1D:E7:03:35:90:16:01:DF:5D:76:B8:86:CC:11:CC X509v3 Authority Key Identifier: keyid:45:1C:A5:24:8F:C6:F7:C6:AF:7C:C6:41:35:B7:EE:80:A9:2B:6F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2EEA1495AD1BB8A1DA374B881A1E6773AE960FA3C6F0441499324508DDD7A71B/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EEA1495AD1BB8A1DA374B881A1E6773AE960FA3C6F0441499324508DDD7A71B/0/451CA5248FC6F7C6AF7CC64135B7EE80A92B6F21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9e:2f:bd:87:0e:93:f9:2f:20:b2:40:80:9d:8a:e7:ef:27: f2:7f:3b:8b:b1:28:fb:63:38:5b:4f:34:26:2a:23:ad:f2:1f: 60:a8:4f:d6:b1:ab:0d:81:d2:c5:a7:28:16:ae:76:b3:3e:21: 34:0f:40:90:0b:20:c9:39:ed:9a:0f:fd:18:40:95:67:35:c0: 0f:d5:e9:91:c1:b4:4c:65:3a:f2:57:bf:cc:75:c0:41:7d:c1: e0:80:0a:21:46:6f:df:3a:ef:94:37:1c:7d:19:66:bd:a2:8a: bf:a0:56:7a:46:1e:25:82:e6:e7:94:ca:18:fa:9f:6d:23:47: e0:2c:41:4c:6b:e6:c0:21:31:d1:2b:d8:d5:8e:8e:b6:cc:80: 67:e4:0b:74:a3:57:d2:bc:46:da:b8:38:86:55:f7:55:0f:7a: b2:5f:d8:79:12:92:bb:a2:ed:06:d3:89:88:8e:13:ae:e2:c2: 0e:5c:9f:81:0e:81:d4:bb:23:6f:08:c2:3b:7e:33:e4:5f:16: 3b:20:bc:a5:d9:b3:cf:ad:ee:92:7e:d1:61:be:85:08:50:8a: 29:4c:6b:16:5a:2d:1d:d0:33:65:39:b7:82:56:3a:5f:11:48: e2:d3:b2:bc:24:52:f5:4b:8d:2b:a6:94:29:18:72:5b:db:4c: 9c:2c:0d:c8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULjHL93jUhxyJxEeVWErrXfxrNFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxQ0E1MjQ4RkM2RjdDNkFGN0NDNjQxMzVCN0VFODBB OTJCNkYyMTAeFw0yNTA0MTcwNDIxMDZaFw0yNTA0MjIwNjM0MDZaMDMxMTAvBgNV BAMTKEEyRjEyM0NDRUYxREU3MDMzNTkwMTYwMURGNUQ3NkI4ODZDQzExQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLULzitRAgKFaAH3ie9Ye+ooYq MJ5+pKt6llCisFFvOjTUJdrfAVVitanfFSnwNpeP4jrJYRIYj7ZWAblWkaBr6TA7 De/b1AAF9zfgR+3AV1WAERD0DSpMc6EUegSvApa4BEghMk+DmY7Sln09zv0AZwb1 mjKlLJtUxm1kG4RdOBNixZuYDbyuiyAWEMiXtS/r5X2OWw96iSkJTkk63qvAvDQb IZj3HnNw2UhR4Dhhn64zPVzHy1fQitwL838wg/8co/S7fLIq/POnzDoyPykGSnao CpnVH/Z7W6uepxpuxLeOPCYIF2Ysf7bdTzPOAQu3dJinhRJq/q9iMdip2ZNLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUovEjzO8d5wM1kBYB3112uIbMEcwwHwYDVR0j BBgwFoAURRylJI/G98avfMZBNbfugKkrbyEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRUVBMTQ5NUFEMUJCOEExREEzNzRCODgxQTFFNjc3M0FF OTYwRkEzQzZGMDQ0MTQ5OTMyNDUwOERERDdBNzFCLzAvNDUxQ0E1MjQ4RkM2RjdD NkFGN0NDNjQxMzVCN0VFODBBOTJCNkYyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NTFDQTUyNDhGQzZGN0M2QUY3 Q0M2NDEzNUI3RUU4MEE5MkI2RjIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkVFQTE0OTVBRDFCQjhBMURBMzc0Qjg4MUExRTY3NzNBRTk2MEZBM0M2 RjA0NDE0OTkzMjQ1MDhEREQ3QTcxQi8wLzQ1MUNBNTI0OEZDNkY3QzZBRjdDQzY0 MTM1QjdFRTgwQTkyQjZGMjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRni+9hw6T+S8gskCAnYrn7yfy fzuLsSj7YzhbTzQmKiOt8h9gqE/WsasNgdLFpygWrnazPiE0D0CQCyDJOe2aD/0Y QJVnNcAP1emRwbRMZTryV7/MdcBBfcHggAohRm/fOu+UNxx9GWa9ooq/oFZ6Rh4l gubnlMoY+p9tI0fgLEFMa+bAITHRK9jVjo62zIBn5At0o1fSvEbauDiGVfdVD3qy X9h5EpK7ou0G04mIjhOu4sIOXJ+BDoHUuyNvCMI7fjPkXxY7ILyl2bPPre6SftFh voUIUIopTGsWWi0d0DNlObeCVjpfEUji07K8JFL1S40rppQpGHJb20ycLA3I -----END CERTIFICATE-----Generated at Fri Apr 18 21:06:18 2025 by rpki-client