$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft File: 95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft (raw, json) Hash identifier: +mdJk1qMTreBYk3ijLPq//Imt1Ev+rTJC4kQUkBqZpU= Subject key identifier: 5F:C1:56:3E:16:1F:4F:FF:22:1E:8B:EE:AF:A4:D1:D9:D2:23:EE:A7 Authority key identifier: 95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA Certificate issuer: /CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA Certificate serial: 12EBF5093FE006D0F90E4BE93C40DCB69B32BC52 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft Manifest number: C2 Signing time: Thu 03 Apr 2025 17:37:49 +0000 Manifest this update: Thu 03 Apr 2025 17:32:49 +0000 Manifest next update: Wed 09 Apr 2025 17:09:49 +0000 Files and hashes: 1: 323830333a313036303a3a2f33322d3332203d3e20323637383039.roa (hash: WQ5sMngzQR3FD4qd+/KztoDpJWw0xBugfxE2LHi9q9k=) 2: 34352e3137332e3139362e302f32322d3234203d3e20323637383039.roa (hash: M6T1EhKheriACbjwRhR4La5Hn35w3cMrrxQObfXVLuk=) 3: 95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl (hash: TV6UDyeMhw7MLwX/3ZAIc/DYuRh2cgeFtHgVJpVDrZo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:eb:f5:09:3f:e0:06:d0:f9:0e:4b:e9:3c:40:dc:b6:9b:32:bc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA Validity Not Before: Apr 3 17:32:49 2025 GMT Not After : Apr 9 17:09:49 2025 GMT Subject: CN=5FC1563E161F4FFF221E8BEEAFA4D1D9D223EEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:e3:1f:46:b6:ad:7c:59:8a:29:99:6a:30: 9e:e0:bd:a2:d3:ed:b1:e6:ad:de:db:4b:5b:27:60: 93:89:f8:15:14:17:36:71:ba:54:46:14:58:66:15: 15:4a:73:03:02:dd:b4:f1:7f:81:d5:82:60:f4:1c: 6b:2a:e9:90:07:7c:12:38:13:d5:4a:2f:06:36:92: 8f:0e:3f:9a:37:7e:49:67:28:6f:0b:a0:70:42:d2: 32:1e:a2:31:6e:4d:e0:51:4f:d0:c0:5f:9d:8b:c7: 4f:b1:f8:c5:80:4f:16:45:98:e4:ca:f6:8d:f2:4c: e6:da:81:a3:bc:6e:e8:1b:46:b9:97:85:50:33:3c: ec:85:c6:ee:4f:45:0f:3e:66:88:f0:84:5d:58:d1: d0:92:68:b2:cc:d7:6a:59:27:96:ca:44:e9:74:d3: 6d:6b:04:58:f3:b0:ab:f0:c5:c0:94:9c:a3:ec:1c: 89:d3:56:9d:62:86:ed:33:29:a5:1b:cc:bc:cf:cf: be:71:b8:6e:ff:c1:2f:18:1e:26:34:11:ec:7f:1f: 40:02:6c:ed:44:d1:b6:71:82:a9:1a:42:ca:af:d1: eb:05:58:01:c5:30:25:6c:a2:f4:fd:f9:2e:8d:15: 73:a1:6b:52:d0:60:0d:30:36:d4:59:95:94:1d:eb: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C1:56:3E:16:1F:4F:FF:22:1E:8B:EE:AF:A4:D1:D9:D2:23:EE:A7 X509v3 Authority Key Identifier: keyid:95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7a:5c:28:70:e1:a8:ac:76:9c:94:4b:66:bd:1f:77:b0:52: e8:15:bf:8f:af:e7:0e:f4:27:7e:a6:a4:d9:1f:7a:37:ed:41: 2e:b4:19:51:18:56:50:e7:09:df:08:f6:7d:14:2c:61:cd:5a: 71:8e:b1:b4:ad:22:5a:b4:de:06:88:8b:ef:07:19:db:2d:dd: 26:d6:39:24:63:38:ae:37:fc:48:31:ff:81:d2:1f:73:3b:61: fd:4e:38:ab:13:67:8e:28:3b:95:72:1b:f8:f8:c8:e4:0c:eb: 1e:d4:22:1f:51:71:09:8d:b3:62:d2:cd:70:4c:f6:61:04:a3: ee:0d:0c:72:b2:bb:44:ff:8f:61:90:5e:75:df:2a:76:7e:e9: 98:a0:e9:90:7c:dd:cf:91:21:75:08:a9:23:95:0e:f7:99:e5: 9e:24:23:88:39:cd:1c:b4:a6:ba:18:bf:9b:35:97:c2:b4:20: e2:be:3e:5c:20:32:7c:1f:e6:7a:8b:75:72:5d:94:5d:27:ff: 1e:c0:12:7f:62:c7:67:fd:74:f4:35:5f:f3:b9:9f:50:7f:99: 0c:a5:e5:29:9d:14:39:e2:da:94:00:09:50:21:6d:9e:3c:98: 2a:64:57:86:56:9d:19:8a:fc:0e:3d:3e:6b:de:48:2e:c6:61: ec:0b:d4:7c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEuv1CT/gBtD5DkvpPEDctpsyvFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBOENFQTFGNzExNUMwRDk5MDgzMjhBMEI5MUJBNENF REQ0QjZEQTAeFw0yNTA0MDMxNzMyNDlaFw0yNTA0MDkxNzA5NDlaMDMxMTAvBgNV BAMTKDVGQzE1NjNFMTYxRjRGRkYyMjFFOEJFRUFGQTREMUQ5RDIyM0VFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxOMfRratfFmKKZlqMJ7gvaLT 7bHmrd7bS1snYJOJ+BUUFzZxulRGFFhmFRVKcwMC3bTxf4HVgmD0HGsq6ZAHfBI4 E9VKLwY2ko8OP5o3fklnKG8LoHBC0jIeojFuTeBRT9DAX52Lx0+x+MWATxZFmOTK 9o3yTObagaO8bugbRrmXhVAzPOyFxu5PRQ8+ZojwhF1Y0dCSaLLM12pZJ5bKROl0 021rBFjzsKvwxcCUnKPsHInTVp1ihu0zKaUbzLzPz75xuG7/wS8YHiY0Eex/H0AC bO1E0bZxgqkaQsqv0esFWAHFMCVsovT9+S6NFXOha1LQYA0wNtRZlZQd60BhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUX8FWPhYfT/8iHovur6TR2dIj7qcwHwYDVR0j BBgwFoAUlajOofcRXA2ZCDKKC5G6TO3UttowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82Q0RDNURFMkQ3Q0Q2QUM5QUYyN0YyQzc0OUJFMkRCODIz QkY0RDUzMUYyM0MwQzM1RTE3NDNCMkQ3RjExQzA5LzAvOTVBOENFQTFGNzExNUMw RDk5MDgzMjhBMEI5MUJBNENFREQ0QjZEQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NUE4Q0VBMUY3MTE1QzBEOTkw ODMyOEEwQjkxQkE0Q0VERDRCNkRBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkNEQzVERTJEN0NENkFDOUFGMjdGMkM3NDlCRTJEQjgyM0JGNEQ1MzFG MjNDMEMzNUUxNzQzQjJEN0YxMUMwOS8wLzk1QThDRUExRjcxMTVDMEQ5OTA4MzI4 QTBCOTFCQTRDRURENEI2REEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+elwocOGorHaclEtmvR93sFLo Fb+Pr+cO9Cd+pqTZH3o37UEutBlRGFZQ5wnfCPZ9FCxhzVpxjrG0rSJatN4GiIvv BxnbLd0m1jkkYziuN/xIMf+B0h9zO2H9TjirE2eOKDuVchv4+MjkDOse1CIfUXEJ jbNi0s1wTPZhBKPuDQxysrtE/49hkF513yp2fumYoOmQfN3PkSF1CKkjlQ73meWe JCOIOc0ctKa6GL+bNZfCtCDivj5cIDJ8H+Z6i3VyXZRdJ/8ewBJ/Ysdn/XT0NV/z uZ9Qf5kMpeUpnRQ54tqUAAlQIW2ePJgqZFeGVp0ZivwOPT5r3kguxmHsC9R8 -----END CERTIFICATE-----Generated at Sat Apr 5 19:30:57 2025 by rpki-client