$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft File: 1D8A96BE43E9FE347873058CD625D12612C5B798.mft (raw, json) Hash identifier: gwA8bY2UH53aL6U5sszlqXRrmP3Flzrn3KQDLcncOmc= Subject key identifier: E8:39:9C:50:53:58:8A:51:A1:D2:FB:30:14:5A:07:29:EA:0F:2B:38 Authority key identifier: 1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98 Certificate issuer: /CN=1D8A96BE43E9FE347873058CD625D12612C5B798 Certificate serial: 5A4B2B044907813B30655BA282E4E2E71E2D32AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft Manifest number: CB Signing time: Mon 07 Apr 2025 14:13:55 +0000 Manifest this update: Mon 07 Apr 2025 14:08:55 +0000 Manifest next update: Sat 12 Apr 2025 11:16:55 +0000 Files and hashes: 1: 3134332e3230382e3133322e302f32322d3234203d3e203237383433.roa (hash: 1M9HWw+a5p0ojEKCRln38BHOvSzSqmQZedu63jEwcWI=) 2: 1D8A96BE43E9FE347873058CD625D12612C5B798.crl (hash: rXsnhPGTobOvA2b2T+tVZ0GuQlWvEYvJHJLKp06MBus=) 3: 3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa (hash: 2OYXxmclU+zn+8DO74N5fJYMP5Hfgkm2n4bJx3AgWhM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4b:2b:04:49:07:81:3b:30:65:5b:a2:82:e4:e2:e7:1e:2d:32:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8A96BE43E9FE347873058CD625D12612C5B798 Validity Not Before: Apr 7 14:08:55 2025 GMT Not After : Apr 12 11:16:55 2025 GMT Subject: CN=E8399C5053588A51A1D2FB30145A0729EA0F2B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:81:b9:07:e8:fa:04:dd:fe:b7:0a:69:b0: 10:94:1a:a5:12:c9:1f:64:34:41:b1:5d:61:92:e4: 35:70:a0:8b:06:f0:e6:fa:24:85:4d:7f:81:7f:05: aa:cc:92:08:b8:f1:39:90:c9:f8:4f:84:c3:18:92: 0c:34:71:ab:18:0c:e3:cc:82:a9:43:d7:9f:75:d3: 72:20:8f:2a:2d:01:d4:53:2e:d8:3d:03:7c:7f:0c: 54:d6:61:fa:c9:60:47:3a:64:b0:4b:91:1d:41:ba: a7:01:03:e5:38:a0:d5:e3:e6:db:5c:24:a1:6a:ac: 0f:43:df:01:24:51:32:aa:26:94:24:0d:ca:03:0f: eb:32:54:5a:7a:f7:9b:81:c9:b1:2d:e8:30:f6:a9: d3:59:cb:52:a5:1e:59:54:a6:d5:b3:a6:ed:ea:5b: 7d:02:d3:d3:40:bd:d5:8e:98:90:2f:94:a4:10:97: d3:8b:89:6b:0e:0c:10:c7:ef:dc:08:03:9f:41:20: e0:64:eb:47:11:3d:ce:c0:5b:e5:29:d3:e3:22:e6: 53:bf:bf:22:2c:11:81:a6:9f:84:d0:aa:39:af:07: 17:8b:20:de:d0:77:1a:ba:7a:6a:cc:25:aa:82:3c: ed:ce:68:f3:d3:f6:f4:79:b3:4b:dd:10:35:ae:8c: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:39:9C:50:53:58:8A:51:A1:D2:FB:30:14:5A:07:29:EA:0F:2B:38 X509v3 Authority Key Identifier: keyid:1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e0:63:68:8a:6e:7e:54:c3:bb:42:4e:5f:5e:20:b3:9a:f7: 22:61:40:b1:26:76:02:d2:ac:61:47:7a:8e:7e:12:bf:98:1c: 54:51:5a:02:b2:2e:f4:d8:c2:a2:ec:7e:b9:84:f5:37:be:fc: d2:d3:fe:b1:cd:78:a3:02:4e:a4:5f:ff:f0:01:15:86:aa:47: fe:80:96:47:96:1b:1f:7f:ae:15:59:bc:cf:44:a3:5e:01:75: 28:e1:ea:69:76:1d:45:e0:3f:57:a8:31:7c:af:04:66:f8:46: be:28:f8:23:c2:8c:46:83:c5:42:35:21:a3:af:44:89:21:52: 18:2c:d8:c9:93:44:65:91:7d:14:3f:f0:4d:2c:36:2c:62:67: b7:2d:79:3a:78:bf:2c:22:66:4b:b4:78:52:58:f0:6d:51:9a: a7:80:e7:dc:6c:a3:0a:ab:c9:05:82:73:06:6f:f1:56:8b:1d: 72:ab:af:2b:fe:7f:8e:93:b3:69:71:0f:b7:af:58:4b:72:c0: 27:60:7b:a9:93:d2:9e:7d:08:10:d1:f4:25:60:8f:0a:e9:b0: d9:11:f6:39:fe:07:d3:dd:8e:fd:23:83:0d:d5:11:34:67:da: 0c:8d:be:0f:cd:95:8d:c2:4f:5a:52:bd:d1:ef:d4:ef:19:3b: 60:8b:93:d4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWksrBEkHgTswZVuiguTi5x4tMqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4QTk2QkU0M0U5RkUzNDc4NzMwNThDRDYyNUQxMjYx MkM1Qjc5ODAeFw0yNTA0MDcxNDA4NTVaFw0yNTA0MTIxMTE2NTVaMDMxMTAvBgNV BAMTKEU4Mzk5QzUwNTM1ODhBNTFBMUQyRkIzMDE0NUEwNzI5RUEwRjJCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qYG5B+j6BN3+twppsBCUGqUS yR9kNEGxXWGS5DVwoIsG8Ob6JIVNf4F/BarMkgi48TmQyfhPhMMYkgw0casYDOPM gqlD159103IgjyotAdRTLtg9A3x/DFTWYfrJYEc6ZLBLkR1BuqcBA+U4oNXj5ttc JKFqrA9D3wEkUTKqJpQkDcoDD+syVFp695uBybEt6DD2qdNZy1KlHllUptWzpu3q W30C09NAvdWOmJAvlKQQl9OLiWsODBDH79wIA59BIOBk60cRPc7AW+Up0+Mi5lO/ vyIsEYGmn4TQqjmvBxeLIN7Qdxq6emrMJaqCPO3OaPPT9vR5s0vdEDWujDd7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6DmcUFNYilGh0vswFFoHKeoPKzgwHwYDVR0j BBgwFoAUHYqWvkPp/jR4cwWM1iXRJhLFt5gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkVGNjYxRUMyQUJBMjlFRUYzRTA3RTA0MTY4RUQxRDc4 MzUwMkM2MEE5OTg3MzIwMEJBMzdGMTkxQjQ0MDQ5LzAvMUQ4QTk2QkU0M0U5RkUz NDc4NzMwNThDRDYyNUQxMjYxMkM1Qjc5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDhBOTZCRTQzRTlGRTM0Nzg3 MzA1OENENjI1RDEyNjEyQzVCNzk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZFRjY2MUVDMkFCQTI5RUVGM0UwN0UwNDE2OEVEMUQ3ODM1MDJDNjBB OTk4NzMyMDBCQTM3RjE5MUI0NDA0OS8wLzFEOEE5NkJFNDNFOUZFMzQ3ODczMDU4 Q0Q2MjVEMTI2MTJDNUI3OTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB54GNoim5+VMO7Qk5fXiCzmvci YUCxJnYC0qxhR3qOfhK/mBxUUVoCsi702MKi7H65hPU3vvzS0/6xzXijAk6kX//w ARWGqkf+gJZHlhsff64VWbzPRKNeAXUo4eppdh1F4D9XqDF8rwRm+Ea+KPgjwoxG g8VCNSGjr0SJIVIYLNjJk0RlkX0UP/BNLDYsYme3LXk6eL8sImZLtHhSWPBtUZqn gOfcbKMKq8kFgnMGb/FWix1yq68r/n+Ok7NpcQ+3r1hLcsAnYHupk9KefQgQ0fQl YI8K6bDZEfY5/gfT3Y79I4MN1RE0Z9oMjb4PzZWNwk9aUr3R79TvGTtgi5PU -----END CERTIFICATE-----Generated at Tue Apr 8 09:25:28 2025 by rpki-client