$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft File: BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft (raw, json) Hash identifier: jNLP4HW1C53n7nfnTH3q9qLb5fFaMm//sSI26cuhi20= Subject key identifier: 76:61:AC:F3:DB:FB:47:06:A3:A7:5D:FE:C8:37:10:FE:7D:C5:A0:D6 Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4 Certificate issuer: /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4 Certificate serial: 1B73CD92B04E75B19B350BDC6D43F4B6BD86DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft Manifest number: D1 Signing time: Thu 17 Apr 2025 02:34:44 +0000 Manifest this update: Thu 17 Apr 2025 02:29:44 +0000 Manifest next update: Wed 23 Apr 2025 02:15:44 +0000 Files and hashes: 1: BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl (hash: dcQKy4f3tGW7/3bC7u/Bi+Z2cEVy630YLqrnM/73g2o=) 2: 323830333a373634303a31303a3a2f34342d3434203d3e20323635363933.roa (hash: YQair6vj/+JtTqrQd6h4em3m36PYdaoWGx+nIh5k4rU=) 3: 3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa (hash: TwAqQW1fSbI/0+pvBRyhNjkNg5HiobVTl281HSD464I=) 4: 323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa (hash: ighy5HJCbj+DQQAnk/ojsDTF1GjCGquLBDJq+x/MKOk=) 5: 323830333a373634303a37303a3a2f34342d3434203d3e20323635363933.roa (hash: tN/GyBBdIliUZCGEqjt4pq2IQ30fEDcXnQ/Dc509UtU=) 6: 323830333a373634303a33303a3a2f34342d3434203d3e20323635363933.roa (hash: A6byAHfRWA0ykA3a0kTalMNaODuCI02LlW6nO3q6+Dc=) 7: 323830333a373634303a32303a3a2f34342d3434203d3e20323635363933.roa (hash: /PA5HeLZvfT0H4EDhbXLK1nY7JoNN2GgCg2rCE9M5U4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:73:cd:92:b0:4e:75:b1:9b:35:0b:dc:6d:43:f4:b6:bd:86:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4 Validity Not Before: Apr 17 02:29:44 2025 GMT Not After : Apr 23 02:15:44 2025 GMT Subject: CN=7661ACF3DBFB4706A3A75DFEC83710FE7DC5A0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:f7:04:a8:fd:b3:ca:b9:bb:bc:f2:bf:90: 1b:7b:df:d4:d8:15:55:dd:72:fb:7c:0e:e7:1c:86: d9:98:52:d1:96:6e:7d:32:f8:01:23:e2:99:88:a6: c8:b3:a3:72:13:07:f8:7b:da:fd:32:22:8c:20:6e: 55:b6:9a:dc:96:dc:ad:02:2f:7e:3f:f3:5c:54:a9: ba:33:df:8f:aa:f5:a0:00:36:c7:04:d4:61:70:49: 8a:c5:24:7e:7e:16:88:04:31:01:8d:b7:d3:4a:1f: ab:1a:e5:bb:9c:d5:39:66:1b:6d:43:70:16:2d:9b: 77:74:aa:8b:f4:84:f5:5b:cd:d5:29:86:de:a4:b8: f8:80:e3:8d:21:df:19:11:7b:b3:34:7a:1b:0d:6c: da:c2:08:15:30:a8:bb:76:f7:19:2f:cd:a8:cd:9e: 06:96:af:81:d5:d5:d1:ce:c1:8d:22:ce:b0:39:bb: 49:36:8e:03:a0:4b:26:47:f5:2d:91:c0:e7:59:0d: c2:43:1d:b5:c4:64:3c:d2:d9:cb:d5:04:d7:35:b6: fb:30:54:a6:05:93:51:85:72:d9:1f:a2:d7:d9:2b: 37:34:db:6f:00:12:63:3a:7a:b9:76:46:42:d2:64: 1e:3a:4f:29:82:2b:86:2a:1f:56:af:45:6f:b3:a0: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:61:AC:F3:DB:FB:47:06:A3:A7:5D:FE:C8:37:10:FE:7D:C5:A0:D6 X509v3 Authority Key Identifier: keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:13:2d:ca:5d:24:1e:d3:8e:2b:c2:f6:b7:73:92:8b:99:9f: 03:52:81:f6:cb:1f:6c:ed:5d:25:aa:67:62:4d:7b:1f:87:21: 57:a9:3f:da:d0:19:79:cd:17:ba:3c:c8:6d:94:95:93:97:89: 3c:87:92:b6:27:f8:f7:0d:4b:f5:55:83:71:ea:84:a4:84:34: c3:a8:f8:6c:0c:07:c5:48:87:48:a1:7b:f0:c9:aa:84:0f:46: ce:8b:1b:01:17:30:eb:4e:3b:d0:4e:f1:3a:dc:60:53:44:5f: a7:2f:cd:22:e2:6d:77:bc:b6:0d:2f:9f:a5:c4:51:fb:86:02: 54:d3:14:e6:4f:ed:90:93:2f:53:05:c8:9f:18:2c:1c:51:3c: e5:6d:09:65:d8:06:69:a9:9c:36:7a:32:87:5e:18:0b:21:46: 54:ae:70:21:9a:37:3f:28:4d:52:78:45:2c:71:49:e3:b8:6a: c2:55:91:8e:24:14:fa:17:09:b1:af:16:c9:63:00:15:23:f2: 2b:dc:45:aa:52:a8:a4:eb:34:83:a1:3f:a7:5d:23:60:fe:8a: a5:a1:77:51:f8:e7:15:39:48:9b:3d:45:1d:7e:01:81:67:74: c2:39:48:b2:eb:e3:df:af:8c:8e:d3:54:d0:ac:98:fc:97:c4: b6:41:6e:83 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgITG3PNkrBOdbGbNQvcbUP0tr2G3TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQzhGOTRDQ0Y2RUZERTQ0MDQzM0E2Q0EwQTRGNDI1QTND NzRBMUE0MB4XDTI1MDQxNzAyMjk0NFoXDTI1MDQyMzAyMTU0NFowMzExMC8GA1UE AxMoNzY2MUFDRjNEQkZCNDcwNkEzQTc1REZFQzgzNzEwRkU3REM1QTBENjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKKR9wSo/bPKubu88r+QG3vf1NgV Vd1y+3wO5xyG2ZhS0ZZufTL4ASPimYimyLOjchMH+Hva/TIijCBuVbaa3JbcrQIv fj/zXFSpujPfj6r1oAA2xwTUYXBJisUkfn4WiAQxAY2300ofqxrlu5zVOWYbbUNw Fi2bd3Sqi/SE9VvN1SmG3qS4+IDjjSHfGRF7szR6Gw1s2sIIFTCou3b3GS/NqM2e BpavgdXV0c7BjSLOsDm7STaOA6BLJkf1LZHA51kNwkMdtcRkPNLZy9UE1zW2+zBU pgWTUYVy2R+i19krNzTbbwASYzp6uXZGQtJkHjpPKYIrhiofVq9Fb7OgAfsCAwEA AaOCAtMwggLPMB0GA1UdDgQWBBR2Yazz2/tHBqOnXf7INxD+fcWg1jAfBgNVHSME GDAWgBS8j5TM9u/eRAQzpsoKT0JaPHShpDAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0 L3Jwa2kvbGFjbmljLzQ0QjNFOUM3MkI1Nzc1QkI2NkM4QzE2N0M0NDU5NURDOUU2 RUU5QUREQTI0RTZCOUU4RTk4NTVBMjZBMkM1OUYvMC9CQzhGOTRDQ0Y2RUZERTQ0 MDQzM0E2Q0EwQTRGNDI1QTNDNzRBMUE0LmNybDCBuQYIKwYBBQUHAQEEgawwgakw gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0JDOEY5NENDRjZFRkRFNDQwNDMz QTZDQTBBNEY0MjVBM0M3NEExQTQuY2VyMIG5BggrBgEFBQcBCwSBrDCBqTCBpgYI KwYBBQUHMAuGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80NEIzRTlDNzJCNTc3NUJCNjZDOEMxNjdDNDQ1OTVEQzlFNkVFOUFEREEy NEU2QjlFOEU5ODU1QTI2QTJDNTlGLzAvQkM4Rjk0Q0NGNkVGREU0NDA0MzNBNkNB MEE0RjQyNUEzQzc0QTFBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJITLcpdJB7TjivC9rdzkouZnwNS gfbLH2ztXSWqZ2JNex+HIVepP9rQGXnNF7o8yG2UlZOXiTyHkrYn+PcNS/VVg3Hq hKSENMOo+GwMB8VIh0ihe/DJqoQPRs6LGwEXMOtOO9BO8TrcYFNEX6cvzSLibXe8 tg0vn6XEUfuGAlTTFOZP7ZCTL1MFyJ8YLBxRPOVtCWXYBmmpnDZ6ModeGAshRlSu cCGaNz8oTVJ4RSxxSeO4asJVkY4kFPoXCbGvFsljABUj8ivcRapSqKTrNIOhP6dd I2D+iqWhd1H45xU5SJs9RR1+AYFndMI5SLLr49+vjI7TVNCsmPyXxLZBboM= -----END CERTIFICATE-----Generated at Fri Apr 18 21:59:25 2025 by rpki-client