$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft File: CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft (raw, json) Hash identifier: wiUAGuVN58XIcxr0vIpuxMeCiSqEapvVdSkpDYqNOAM= Subject key identifier: FF:91:AC:06:8A:9E:CB:DF:E2:7E:C2:D0:CD:9F:82:70:E7:73:86:9E Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 5E7692FE8CB2D57DEBA2DC01F2F1B2DE1861E998 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft Manifest number: CB Signing time: Sat 05 Apr 2025 07:46:20 +0000 Manifest this update: Sat 05 Apr 2025 07:41:20 +0000 Manifest next update: Fri 11 Apr 2025 07:36:20 +0000 Files and hashes: 1: 34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa (hash: rV6sucM7eymVUHum6OSirGN+dfHE8OAWxUcuB2GqyTM=) 2: 32342e3135322e35382e302f32342d3234203d3e20323637383233.roa (hash: RT+1F99+p+oEvsYp15mC8h3HNyJc3wqAUciuoqYsX70=) 3: 34352e3137332e31322e302f32342d3234203d3e20323637383233.roa (hash: ZgCHYRdtrqmoXiQXyGrK9sAx9NGmw1ebCUKBSmz5Jkc=) 4: CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl (hash: SkyWNQW5vXEyqmE58ChcXgusJ01SmK8iqRMecXNhLIU=) 5: 323830333a313836303a3a2f33322d3438203d3e20323637383233.roa (hash: v10XC0iedkPQD2QGgHpOqr4twJ7kTAZ0q9pBueYqk44=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:76:92:fe:8c:b2:d5:7d:eb:a2:dc:01:f2:f1:b2:de:18:61:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Apr 5 07:41:20 2025 GMT Not After : Apr 11 07:36:20 2025 GMT Subject: CN=FF91AC068A9ECBDFE27EC2D0CD9F8270E773869E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:ff:48:ca:68:cb:98:18:34:88:43:31:03: 2c:ec:d2:83:1b:29:40:03:82:40:92:46:5c:a2:d8: b4:f4:3f:58:46:a9:51:66:ba:f3:a6:29:8c:7e:a7: 63:f6:03:67:08:05:15:45:fe:ac:23:ac:5c:0d:7c: 0a:d8:dd:f3:56:08:46:81:8d:ec:cf:5b:3c:79:4b: 66:95:f0:4d:05:80:a3:bf:d3:61:56:84:14:b5:32: 90:4c:fb:b7:23:94:4a:ab:89:c4:7b:23:69:20:b5: cf:ef:db:d0:a9:6b:52:6d:d6:22:10:88:a2:c5:b2: 1b:5c:ba:2a:f5:21:c1:80:b2:32:6e:3d:37:7b:e7: d4:fa:f6:58:1f:5a:ce:bc:da:eb:63:aa:77:61:61: ee:dd:df:33:23:28:01:43:4f:c9:6e:c0:d1:aa:cc: e2:82:c3:fe:d0:8c:3b:f4:aa:30:df:33:01:56:66: d5:7e:ca:41:cd:35:bf:05:d7:72:56:b8:07:30:b6: 43:0f:3c:ae:42:9f:46:f5:94:8e:83:5f:0c:3d:1d: c0:97:8a:b4:92:97:7e:ab:4f:e9:32:58:06:11:fc: 8f:a7:13:2e:51:da:6f:80:eb:90:ab:bf:ae:a5:54: 25:4a:4e:75:28:d5:f2:a8:05:65:62:c5:57:10:c3: 5f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:91:AC:06:8A:9E:CB:DF:E2:7E:C2:D0:CD:9F:82:70:E7:73:86:9E X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b2:c2:8f:15:ea:76:18:74:39:9b:18:7f:22:22:16:6b:5d: 23:1d:55:96:01:88:40:5c:74:9a:af:19:86:b7:b0:66:89:95: dd:89:d1:6b:de:e3:2d:68:44:f2:f6:b6:c3:1c:5a:7d:61:df: bf:b8:37:9a:d3:4a:df:58:ee:d9:e2:4a:5a:14:12:aa:67:a5: 95:a2:ec:5c:2f:8f:19:62:82:bc:0c:1d:27:a9:35:dd:d9:63: 65:87:be:e5:db:d7:57:fc:c2:40:13:46:bd:2b:ca:94:09:4f: b4:d3:af:78:51:82:13:e8:db:c1:6c:99:c8:8d:22:29:76:84: 59:50:70:41:b7:e6:83:f5:dc:34:b2:c3:fa:c5:3d:75:06:eb: f7:90:c4:88:d0:23:1a:35:5f:7d:15:e4:c4:72:ea:b5:4a:59: e7:08:3e:05:76:db:0c:fd:f5:65:86:81:a4:4d:6a:78:6d:90: de:eb:6b:6d:30:6a:e2:1a:53:4c:a1:af:e6:e7:2f:a8:17:19: 62:3f:b1:b3:fe:5a:70:db:48:de:19:b0:76:36:1d:1a:8f:e2: 77:7b:23:b0:0e:a1:65:4c:42:b5:88:a9:cd:81:30:b6:7c:62: e9:71:e8:93:cf:9f:43:b6:cc:51:82:fc:29:f7:4c:96:87:f7: 7f:15:21:6d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXnaS/oyy1X3rotwB8vGy3hhh6ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNTA0MDUwNzQxMjBaFw0yNTA0MTEwNzM2MjBaMDMxMTAvBgNV BAMTKEZGOTFBQzA2OEE5RUNCREZFMjdFQzJEMENEOUY4MjcwRTc3Mzg2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfv9IymjLmBg0iEMxAyzs0oMb KUADgkCSRlyi2LT0P1hGqVFmuvOmKYx+p2P2A2cIBRVF/qwjrFwNfArY3fNWCEaB jezPWzx5S2aV8E0FgKO/02FWhBS1MpBM+7cjlEqricR7I2kgtc/v29Cpa1Jt1iIQ iKLFshtcuir1IcGAsjJuPTd759T69lgfWs682utjqndhYe7d3zMjKAFDT8luwNGq zOKCw/7QjDv0qjDfMwFWZtV+ykHNNb8F13JWuAcwtkMPPK5Cn0b1lI6DXww9HcCX irSSl36rT+kyWAYR/I+nEy5R2m+A65Crv66lVCVKTnUo1fKoBWVixVcQw1+pAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/5GsBoqey9/ifsLQzZ+CcOdzhp4wHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wL0NDMDlERkZENkJEODRCNjE3MUI3NjI3 RkJDRjEyODdEQUM0REM5RTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8ssKPFep2GHQ5mxh/IiIWa10j HVWWAYhAXHSarxmGt7BmiZXdidFr3uMtaETy9rbDHFp9Yd+/uDea00rfWO7Z4kpa FBKqZ6WVouxcL48ZYoK8DB0nqTXd2WNlh77l29dX/MJAE0a9K8qUCU+00694UYIT 6NvBbJnIjSIpdoRZUHBBt+aD9dw0ssP6xT11Buv3kMSI0CMaNV99FeTEcuq1Slnn CD4FdtsM/fVlhoGkTWp4bZDe62ttMGriGlNMoa/m5y+oFxliP7Gz/lpw20jeGbB2 Nh0aj+J3eyOwDqFlTEK1iKnNgTC2fGLpceiTz59DtsxRgvwp90yWh/d/FSFt -----END CERTIFICATE-----Generated at Sat Apr 5 19:42:21 2025 by rpki-client