$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft File: 0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft (raw, json) Hash identifier: yqyIYC3gtNZ9XradOFFpBb9kztSZ7YGrlgCXnU+hJEg= Subject key identifier: 1D:38:FF:08:4F:63:F3:1F:A9:DC:E7:4C:06:33:7E:4C:AC:70:65:A9 Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0 Certificate issuer: /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0 Certificate serial: 40661D8C7B4A4A45281601BD76F820D2EA11D6D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft Manifest number: CA Signing time: Thu 03 Apr 2025 11:23:56 +0000 Manifest this update: Thu 03 Apr 2025 11:18:56 +0000 Manifest next update: Tue 08 Apr 2025 12:51:56 +0000 Files and hashes: 1: 0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl (hash: ymwhtMX4wVqB/k06XnP0zh6V/Inxoc3vqAG58T7dp4M=) 2: 323830303a3863303a3a2f33322d3332203d3e203138383430.roa (hash: +ZZUEk1wGoKD5v4TDf++5VjMeR9QZx+aQ13Srb25Q+w=) 3: 3138362e312e302e302f31382d3234203d3e203138383430.roa (hash: +u4oEiw0ugjn++zJewv0ccz6uaCxw+TLBl/H+eVsPoQ=) 4: 3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa (hash: x6fd72u+6Cy2Nlgxu9yw1q/p3isrLv6eHiwO8wuPHbs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 12:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:66:1d:8c:7b:4a:4a:45:28:16:01:bd:76:f8:20:d2:ea:11:d6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0 Validity Not Before: Apr 3 11:18:56 2025 GMT Not After : Apr 8 12:51:56 2025 GMT Subject: CN=1D38FF084F63F31FA9DCE74C06337E4CAC7065A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:95:f2:aa:a8:da:dc:2e:e7:85:ed:bb:65: 09:53:24:05:f1:4b:55:db:36:a8:f3:ea:07:94:c0: 00:aa:8d:93:07:6d:96:8a:db:6c:e0:8e:ea:49:97: f6:26:8c:61:a7:42:8e:1b:20:f3:bf:86:81:9b:05: 8c:fd:14:6b:27:0c:0f:6b:72:ae:6c:dd:65:6f:49: f8:a8:24:04:82:05:77:8e:2a:84:84:8d:63:3b:74: db:3a:d3:7d:6a:07:ec:83:2c:16:47:97:58:c4:1a: b1:0e:6f:0d:ad:b5:75:73:a0:85:94:49:13:72:fa: cd:30:3a:f0:ce:91:13:87:9e:de:66:f3:a8:58:23: 76:d1:69:92:0c:f8:c4:a8:7c:e3:b7:29:5a:15:21: 2f:c1:6b:60:c9:33:4a:55:4d:0a:1f:a7:39:4a:41: 8e:60:95:b3:64:27:7a:ae:17:39:f6:bf:87:12:89: 8d:fa:75:72:45:55:28:94:9a:4c:c7:91:f6:2e:92: a0:74:53:ec:4a:ea:1d:e7:50:d7:21:c1:89:df:7f: 28:d8:f2:bf:41:a4:c7:6d:01:a1:8a:36:08:8c:17: 06:ff:b6:a2:4f:40:4a:fc:c8:6d:6b:e4:2e:1e:50: bf:6b:15:9f:b0:23:a0:d6:2c:7b:28:7b:b7:f6:ab: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:FF:08:4F:63:F3:1F:A9:DC:E7:4C:06:33:7E:4C:AC:70:65:A9 X509v3 Authority Key Identifier: keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c2:23:0e:77:c3:bb:f3:1a:c2:4d:08:04:6b:a7:39:6a:72: 90:6f:52:3b:c7:4d:09:90:d5:e8:07:ca:3f:06:0d:61:51:aa: e7:e3:2a:06:26:0d:d9:aa:89:3a:34:9e:30:b2:47:92:48:17: 67:19:2f:b9:7d:e5:40:b9:75:4d:31:a4:75:cd:b6:01:b0:d5: f1:24:ce:b8:a9:11:d6:27:60:20:82:ed:f6:f2:a1:3d:86:8b: b4:c9:4f:b2:bf:45:cd:55:7a:48:df:45:bd:ff:eb:62:ee:b4: 8e:68:35:a6:01:56:af:c3:ad:f0:77:d5:03:85:00:c1:8d:49: f7:c2:81:1d:0f:da:ae:8c:fd:b6:70:0b:99:0e:39:75:50:78: 14:cc:f4:d9:12:9d:ba:e0:e1:bb:15:d5:17:af:31:7c:04:5b: 5f:0c:35:94:73:eb:cd:d5:a0:63:df:53:9f:53:ef:0b:3c:e5: 62:f3:7e:57:17:17:86:3c:d9:64:3d:50:2b:f2:e3:72:f7:69: a2:27:44:d1:15:10:bb:5a:65:f6:19:fd:d2:1b:d0:fa:e5:c8: 45:e4:16:3c:c2:5c:5c:79:65:42:92:1b:2b:94:f9:05:c7:dd: 1a:12:ac:b3:ac:fe:c7:77:ef:aa:d4:df:4d:fe:2d:d1:ab:0a: 46:ed:37:c6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQGYdjHtKSkUoFgG9dvgg0uoR1tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM4Q0UyQTE3RDgwMUJCNUM3NzBFNkVCNkFCM0REREJG NzYyNThDMDAeFw0yNTA0MDMxMTE4NTZaFw0yNTA0MDgxMjUxNTZaMDMxMTAvBgNV BAMTKDFEMzhGRjA4NEY2M0YzMUZBOURDRTc0QzA2MzM3RTRDQUM3MDY1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCod5Xyqqja3C7nhe27ZQlTJAXx S1XbNqjz6geUwACqjZMHbZaK22zgjupJl/YmjGGnQo4bIPO/hoGbBYz9FGsnDA9r cq5s3WVvSfioJASCBXeOKoSEjWM7dNs6031qB+yDLBZHl1jEGrEObw2ttXVzoIWU SRNy+s0wOvDOkROHnt5m86hYI3bRaZIM+MSofOO3KVoVIS/Ba2DJM0pVTQofpzlK QY5glbNkJ3quFzn2v4cSiY36dXJFVSiUmkzHkfYukqB0U+xK6h3nUNchwYnffyjY 8r9BpMdtAaGKNgiMFwb/tqJPQEr8yG1r5C4eUL9rFZ+wI6DWLHsoe7f2q/iLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHTj/CE9j8x+p3OdMBjN+TKxwZakwHwYDVR0j BBgwFoAUDIzioX2AG7XHcObrarPd2/diWMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QkRENzJGMDAyOTNDNkQ3M0IxQTRFMzk4OTlEMjVEQ0Ez QzMyOTVERkIyMDA0Qjc5NzlFNDYyM0U0MDQ2OUFGLzAvMEM4Q0UyQTE3RDgwMUJC NUM3NzBFNkVCNkFCM0REREJGNzYyNThDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzhDRTJBMTdEODAxQkI1Qzc3 MEU2RUI2QUIzREREQkY3NjI1OEMwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUJERDcyRjAwMjkzQzZENzNCMUE0RTM5ODk5RDI1RENBM0MzMjk1REZC MjAwNEI3OTc5RTQ2MjNFNDA0NjlBRi8wLzBDOENFMkExN0Q4MDFCQjVDNzcwRTZF QjZBQjNERERCRjc2MjU4QzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXwiMOd8O78xrCTQgEa6c5anKQ b1I7x00JkNXoB8o/Bg1hUarn4yoGJg3Zqok6NJ4wskeSSBdnGS+5feVAuXVNMaR1 zbYBsNXxJM64qRHWJ2Aggu328qE9hou0yU+yv0XNVXpI30W9/+ti7rSOaDWmAVav w63wd9UDhQDBjUn3woEdD9qujP22cAuZDjl1UHgUzPTZEp264OG7FdUXrzF8BFtf DDWUc+vN1aBj31OfU+8LPOVi835XFxeGPNlkPVAr8uNy92miJ0TRFRC7WmX2Gf3S G9D65chF5BY8wlxceWVCkhsrlPkFx90aEqyzrP7Hd++q1N9N/i3RqwpG7TfG -----END CERTIFICATE-----Generated at Sat Apr 5 13:41:47 2025 by rpki-client