$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft File: 331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft (raw, json) Hash identifier: bHZ80AOQcLFF6aLYacS9aYKLstXptcUIZ7AsIjG6p0o= Subject key identifier: 3F:7E:4C:30:43:C2:0E:0E:C1:52:F3:2A:11:7A:4D:55:13:4E:26:D1 Authority key identifier: 33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E Certificate issuer: /CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E Certificate serial: 375F203B478FEC14EDCA5C50254F416569B72CFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft Manifest number: C0 Signing time: Fri 04 Apr 2025 00:47:23 +0000 Manifest this update: Fri 04 Apr 2025 00:42:23 +0000 Manifest next update: Tue 08 Apr 2025 17:22:23 +0000 Files and hashes: 1: 331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl (hash: 5lYnXMufUwNbU4jHxlZZLl5G7HP4IK4szYquFsfJNzo=) 2: 3137302e37382e34342e302f32322d3234203d3e20323634373931.roa (hash: RsCCENVjKelC05tZQYcXRgdDXeCXX/OC2C/V40feFZY=) 3: 323830333a373863303a3a2f33322d3332203d3e20323634373931.roa (hash: Z1uxA0qiTnsS8GQpJ3Mk9VxUuIlpHMLzTiQd3Ofxl9M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 17:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5f:20:3b:47:8f:ec:14:ed:ca:5c:50:25:4f:41:65:69:b7:2c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E Validity Not Before: Apr 4 00:42:23 2025 GMT Not After : Apr 8 17:22:23 2025 GMT Subject: CN=3F7E4C3043C20E0EC152F32A117A4D55134E26D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:e5:1c:c8:11:ea:b7:6d:18:7c:41:6b:26: e5:d1:ee:ed:df:dc:c3:0c:af:c1:36:b6:7f:e8:36: 27:ef:24:37:bf:e8:68:cf:44:9e:1a:7e:d3:9c:f9: 82:5d:96:14:46:26:c4:91:6d:04:da:86:1e:52:41: 11:f1:a2:45:ad:75:bb:59:31:5f:33:bd:7a:f8:2c: 5c:15:d6:35:5b:75:5a:59:1a:8d:32:ff:02:25:72: e1:b8:8e:02:c8:3e:53:07:bb:3b:cd:0c:47:64:92: 13:86:a4:9f:51:ee:5e:4f:b6:d1:7b:9f:83:92:13: 01:13:33:eb:b6:8f:6d:4d:ed:17:dd:13:c4:34:04: df:35:ba:ab:4f:de:30:71:b9:13:7d:f5:b6:b8:e8: 13:c5:f3:70:8d:e6:68:72:ae:70:ad:1a:48:6f:b0: 3c:1b:82:32:2f:91:e6:4f:09:6e:f7:8d:62:14:86: bf:1a:39:8f:63:c3:4b:c3:31:1b:bc:64:65:ec:62: 7b:ad:69:35:ac:12:a8:f1:81:da:61:99:57:df:e1: f9:91:69:d2:77:e0:a4:fe:e8:9a:04:87:35:6e:4f: 53:20:64:4e:98:a6:bf:8f:93:1e:0e:90:00:79:d3: 74:c0:45:7d:62:3d:39:2e:35:a9:e5:55:bf:99:c9: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:4C:30:43:C2:0E:0E:C1:52:F3:2A:11:7A:4D:55:13:4E:26:D1 X509v3 Authority Key Identifier: keyid:33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c1:dc:22:c1:6c:a4:53:cc:1e:37:03:ad:cc:26:38:47:a2: 9a:c1:bd:51:f6:ca:57:97:72:93:54:8f:d8:df:e7:55:67:d9: 7b:e9:6b:89:b2:3a:a0:0e:de:f9:3c:2d:a0:cc:46:63:7d:b6: 30:7b:32:35:99:11:ff:9f:95:41:44:bc:b0:6f:a4:91:99:8d: 42:0f:d4:9d:6b:76:1c:69:2a:d4:4f:99:fd:d5:54:3c:48:f5: d7:6e:39:fe:11:77:43:d0:35:da:dd:0c:13:c5:d8:f8:d1:6c: b9:e1:43:bb:51:81:76:91:1f:37:06:41:d3:c8:8f:51:7f:77: 13:91:0b:6c:7a:25:7a:40:48:c9:1a:35:39:39:10:27:38:dc: 65:db:32:b3:87:d8:18:41:c1:27:76:78:d4:92:2c:de:36:ba: aa:c9:88:b4:5e:4d:1d:47:c5:95:94:7a:5b:e0:08:b7:78:04: 78:bb:ab:07:0d:ea:a4:1c:83:1a:63:b0:7e:27:90:b6:be:56: ed:32:e1:19:41:43:fc:1c:7e:bf:ee:dd:1d:5f:0e:53:58:88: 34:91:43:cc:5a:21:41:15:b6:6e:4d:a5:93:27:d0:cb:d1:a4: ca:90:bd:73:5a:30:be:44:46:cf:6e:d9:9a:a9:f7:a7:8e:27: 0d:c2:77:2b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUN18gO0eP7BTtylxQJU9BZWm3LP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNjYxQ0MyNjMzQTZBRDNFREQwOUJGRUU0MUM4MzM3 QTRENUMyRTAeFw0yNTA0MDQwMDQyMjNaFw0yNTA0MDgxNzIyMjNaMDMxMTAvBgNV BAMTKDNGN0U0QzMwNDNDMjBFMEVDMTUyRjMyQTExN0E0RDU1MTM0RTI2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFeUcyBHqt20YfEFrJuXR7u3f 3MMMr8E2tn/oNifvJDe/6GjPRJ4aftOc+YJdlhRGJsSRbQTahh5SQRHxokWtdbtZ MV8zvXr4LFwV1jVbdVpZGo0y/wIlcuG4jgLIPlMHuzvNDEdkkhOGpJ9R7l5PttF7 n4OSEwETM+u2j21N7RfdE8Q0BN81uqtP3jBxuRN99ba46BPF83CN5mhyrnCtGkhv sDwbgjIvkeZPCW73jWIUhr8aOY9jw0vDMRu8ZGXsYnutaTWsEqjxgdphmVff4fmR adJ34KT+6JoEhzVuT1MgZE6Ypr+Pkx4OkAB503TARX1iPTkuNanlVb+ZyXihAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUP35MMEPCDg7BUvMqEXpNVRNOJtEwHwYDVR0j BBgwFoAUMxZhzCYzpq0+3Qm/7kHIM3pNXC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82OThERjNBMkQ1RDE1QjFBOTQ5Qzk2OTdBRTNDOUFBNjQy NTU2MEE4RkQzRURFNTI5NkEzQkJBNTYwRUIzRDEzLzAvMzMxNjYxQ0MyNjMzQTZB RDNFREQwOUJGRUU0MUM4MzM3QTRENUMyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzE2NjFDQzI2MzNBNkFEM0VE RDA5QkZFRTQxQzgzMzdBNEQ1QzJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjk4REYzQTJENUQxNUIxQTk0OUM5Njk3QUUzQzlBQTY0MjU1NjBBOEZE M0VERTUyOTZBM0JCQTU2MEVCM0QxMy8wLzMzMTY2MUNDMjYzM0E2QUQzRUREMDlC RkVFNDFDODMzN0E0RDVDMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9wdwiwWykU8weNwOtzCY4R6Ka wb1R9spXl3KTVI/Y3+dVZ9l76WuJsjqgDt75PC2gzEZjfbYwezI1mRH/n5VBRLyw b6SRmY1CD9Sda3YcaSrUT5n91VQ8SPXXbjn+EXdD0DXa3QwTxdj40Wy54UO7UYF2 kR83BkHTyI9Rf3cTkQtseiV6QEjJGjU5ORAnONxl2zKzh9gYQcEndnjUkizeNrqq yYi0Xk0dR8WVlHpb4Ai3eAR4u6sHDeqkHIMaY7B+J5C2vlbtMuEZQUP8HH6/7t0d Xw5TWIg0kUPMWiFBFbZuTaWTJ9DL0aTKkL1zWjC+REbPbtmaqfenjicNwncr -----END CERTIFICATE-----Generated at Sat Apr 5 09:11:59 2025 by rpki-client