$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: o3yaAeafIwiqCFvUHfB1XYy6c5Fy/fn17NZ0W1zvL2I= Subject key identifier: 26:46:37:42:D4:C8:0C:C1:1F:8F:C4:55:79:11:DE:05:42:78:68:D7 Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 6C83DD62B8293DB58D0569882F3ACD96E2A4BD41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: C4 Signing time: Sat 05 Apr 2025 00:01:44 +0000 Manifest this update: Fri 04 Apr 2025 23:56:44 +0000 Manifest next update: Wed 09 Apr 2025 06:57:44 +0000 Files and hashes: 1: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: FBQLSfAoEcG/IPybyjMXIGCa31FHILeHbuFiYwT+/mI=) 2: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk=) 3: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: ItjXaKOwb+QHZwLhWYBWCIH0VcsHfuLK9e+dIUcT39E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:83:dd:62:b8:29:3d:b5:8d:05:69:88:2f:3a:cd:96:e2:a4:bd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Apr 4 23:56:44 2025 GMT Not After : Apr 9 06:57:44 2025 GMT Subject: CN=26463742D4C80CC11F8FC4557911DE05427868D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:f6:d5:4b:e5:67:60:5d:4a:46:c6:99:c7: 9a:c8:89:a5:bb:6b:e1:4f:f7:dd:fe:56:d3:8b:94: ce:6c:3f:3e:4c:bc:46:e3:a2:d3:ea:71:0f:7e:8f: 1b:bf:49:81:f0:1e:9f:f0:0e:6b:3d:e3:83:13:c9: ec:3c:c7:d2:4d:c1:86:ba:3c:1f:c4:f6:15:e4:93: 07:c6:fa:19:17:c5:02:e4:1c:76:b1:e7:23:62:e3: ce:84:4f:c0:1b:3b:2c:68:ee:35:44:46:eb:6a:bb: fd:94:74:29:e5:b6:e6:8a:a5:98:d1:01:8f:d6:c2: 23:1f:09:c2:5c:ea:21:f0:04:ce:bd:57:1b:bd:70: 4c:cc:1d:bf:c3:b7:de:b6:af:c6:0d:06:d0:b0:f1: eb:c7:3c:33:c3:43:69:8d:1a:68:26:82:6c:30:18: 23:72:21:ec:98:f0:45:46:b2:14:c1:32:82:82:a3: 4e:02:66:47:da:45:79:c1:f1:72:e2:a6:e1:9a:3f: 77:bc:54:26:e8:b6:62:1e:97:53:52:19:f5:c1:41: b8:e3:f0:3a:82:5a:9a:76:a2:11:47:34:76:ce:58: dd:a5:62:03:06:2e:6c:93:17:02:41:02:a7:4e:93: 82:b3:2b:66:fb:30:cb:d0:3b:82:62:9b:8f:ee:1f: 91:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:37:42:D4:C8:0C:C1:1F:8F:C4:55:79:11:DE:05:42:78:68:D7 X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e2:4c:a5:e2:43:cb:17:42:42:57:94:d5:32:b8:fe:f4:8b: be:cf:98:aa:11:b1:81:0f:06:44:2a:aa:89:82:1a:09:7b:38: c4:da:fe:14:0e:79:da:cc:68:3a:3b:fe:46:18:28:ff:47:52: 39:ce:1d:66:41:0d:49:46:87:85:c1:2a:d2:b3:bf:fe:26:20: 79:ec:c7:70:43:87:67:1e:18:e2:aa:fb:53:0c:b4:01:db:40: 41:83:af:b9:e9:49:2f:10:a8:39:9d:49:0b:0a:fd:88:d3:94: cf:f6:83:46:d7:1d:4d:5a:ab:5f:b9:5f:f9:c7:ac:72:01:66: b1:36:a8:4c:e2:14:8b:24:49:02:66:fd:37:1f:d2:a5:6b:5b: f0:ea:6b:87:5e:96:76:e5:17:28:9a:15:05:02:62:eb:52:c7: 46:50:30:8c:a2:69:73:af:be:e2:72:43:4f:2f:03:fe:c5:ec: 44:d4:0d:f8:fd:e5:3a:5d:02:27:0f:1d:b7:ac:29:e1:a8:ff: 36:6a:2f:d8:ea:9c:d8:cc:bd:a7:20:c5:92:c9:36:f7:a3:59: d0:08:c3:e4:5a:00:83:ca:9d:e6:a7:fb:14:4b:85:09:a8:e1: e7:b1:e4:4f:40:fb:55:3d:b0:f2:47:c3:ff:41:e5:68:0e:b5: 65:e1:5a:dc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbIPdYrgpPbWNBWmILzrNluKkvUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNTA0MDQyMzU2NDRaFw0yNTA0MDkwNjU3NDRaMDMxMTAvBgNV BAMTKDI2NDYzNzQyRDRDODBDQzExRjhGQzQ1NTc5MTFERTA1NDI3ODY4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQPbVS+VnYF1KRsaZx5rIiaW7 a+FP993+VtOLlM5sPz5MvEbjotPqcQ9+jxu/SYHwHp/wDms944MTyew8x9JNwYa6 PB/E9hXkkwfG+hkXxQLkHHax5yNi486ET8AbOyxo7jVERutqu/2UdCnltuaKpZjR AY/WwiMfCcJc6iHwBM69Vxu9cEzMHb/Dt962r8YNBtCw8evHPDPDQ2mNGmgmgmww GCNyIeyY8EVGshTBMoKCo04CZkfaRXnB8XLipuGaP3e8VCbotmIel1NSGfXBQbjj 8DqCWpp2ohFHNHbOWN2lYgMGLmyTFwJBAqdOk4KzK2b7MMvQO4Jim4/uH5E3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJkY3QtTIDMEfj8RVeRHeBUJ4aNcwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCG4kyl4kPLF0JCV5TVMrj+9Iu+ z5iqEbGBDwZEKqqJghoJezjE2v4UDnnazGg6O/5GGCj/R1I5zh1mQQ1JRoeFwSrS s7/+JiB57MdwQ4dnHhjiqvtTDLQB20BBg6+56UkvEKg5nUkLCv2I05TP9oNG1x1N WqtfuV/5x6xyAWaxNqhM4hSLJEkCZv03H9Kla1vw6muHXpZ25RcomhUFAmLrUsdG UDCMomlzr77ickNPLwP+xexE1A34/eU6XQInDx23rCnhqP82ai/Y6pzYzL2nIMWS yTb3o1nQCMPkWgCDyp3mp/sUS4UJqOHnseRPQPtVPbDyR8P/QeVoDrVl4Vrc -----END CERTIFICATE-----Generated at Sat Apr 5 10:48:24 2025 by rpki-client