$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft File: 21FD9011B33FD9996D9085D654F9943A95C37269.mft (raw, json) Hash identifier: OKMIfS5tFgfjd9z3Mbqmhfw11Q5DNuGnElsJMWnAyuk= Subject key identifier: B4:FD:49:B6:A2:C8:41:BF:EB:8D:21:EC:F0:58:28:34:EA:D9:70:C7 Authority key identifier: 21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69 Certificate issuer: /CN=21FD9011B33FD9996D9085D654F9943A95C37269 Certificate serial: 63D34E3B3F6458212E0109813290E256805D1B6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft Manifest number: C7 Signing time: Fri 18 Apr 2025 06:26:14 +0000 Manifest this update: Fri 18 Apr 2025 06:21:14 +0000 Manifest next update: Tue 22 Apr 2025 18:37:14 +0000 Files and hashes: 1: 21FD9011B33FD9996D9085D654F9943A95C37269.crl (hash: rt73akMPO17+pjS3AyntbChxKhzaoTG4Y88QBy7Sttk=) 2: 3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa (hash: m7CwULIfhxlFDZTFDGl2RKFUpt0QDAud3A4YNlhNMRE=) 3: 323830363a3363303a3a2f33322d3332203d3e20323635353233.roa (hash: xNEheoQ7Eju9cbHTPDU2kysDJLRlFUorSa3dPia/xuM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 18:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d3:4e:3b:3f:64:58:21:2e:01:09:81:32:90:e2:56:80:5d:1b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21FD9011B33FD9996D9085D654F9943A95C37269 Validity Not Before: Apr 18 06:21:14 2025 GMT Not After : Apr 22 18:37:14 2025 GMT Subject: CN=B4FD49B6A2C841BFEB8D21ECF0582834EAD970C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:24:c9:6d:41:98:ea:2d:c4:47:c8:c9:e7: bd:5d:ec:1c:2f:f8:eb:dd:1f:c6:57:82:7b:cf:6d: 0f:bc:a2:17:d1:1a:42:27:8b:44:07:a9:5a:23:96: 58:59:f7:97:44:95:e9:a5:c4:c9:5f:f9:d5:86:e7: 27:0e:bf:6f:c1:96:66:d1:42:f6:50:63:70:49:6d: cb:05:19:ec:84:16:16:db:6e:31:bd:e7:7e:61:2c: ba:91:37:5e:ab:30:91:dc:66:53:57:cc:2e:9f:4e: 40:b6:e3:47:b7:f7:ec:c7:d9:4d:62:15:ff:00:a2: e3:56:0e:66:7a:ed:34:ee:72:10:ff:05:93:7e:fe: 24:f4:43:06:23:d2:c4:19:cb:e3:37:65:cd:e9:c9: 67:e9:12:70:25:8e:27:24:4b:2c:ce:84:96:87:e3: 7e:fb:f4:14:5b:10:4b:d4:eb:53:28:1b:30:75:1d: 3f:83:e5:b4:42:68:d5:f4:15:bc:25:f2:ab:c8:92: 9c:8f:be:d8:c1:aa:c6:c6:ab:2f:2a:aa:24:78:7b: 43:31:4d:73:7c:cd:35:80:a1:80:98:b5:c7:56:37: 6c:87:ea:8c:83:d6:8e:ae:52:82:4f:8f:11:6a:3b: e3:12:14:b7:96:51:68:6c:db:7c:56:d4:65:38:9c: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FD:49:B6:A2:C8:41:BF:EB:8D:21:EC:F0:58:28:34:EA:D9:70:C7 X509v3 Authority Key Identifier: keyid:21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:51:51:62:e3:9d:a6:22:0f:c4:23:31:ba:56:37:c2:fd:92: 15:6c:c1:a6:62:aa:24:61:be:cd:2a:86:01:90:33:9a:7c:99: 43:dc:89:9d:8f:de:5b:04:94:dd:39:2f:d5:4e:a9:8b:74:ab: f1:f0:47:fc:9a:30:a9:66:98:58:d6:fa:08:89:e4:d6:41:58: 88:d9:9b:8d:89:0c:b9:20:99:9e:c4:0f:55:5d:a2:a6:33:b3: de:dc:44:35:58:0b:11:04:8d:4c:b3:5d:40:35:5c:71:4e:fb: 57:43:2c:86:4f:bc:e9:52:d7:b5:0a:2f:cc:29:b2:81:37:cc: 64:e8:54:6c:ad:9b:20:60:56:4e:6d:88:65:21:56:d0:2f:dc: 1a:d9:50:2b:47:06:cb:af:bb:53:0b:6a:c6:83:3f:6f:d9:04: 7a:33:66:3a:c1:83:3c:df:54:09:da:ac:28:6d:46:12:00:62: 4e:28:30:3c:20:06:db:ed:90:df:2a:61:cb:b0:2c:67:98:c4: 34:a7:eb:cb:b2:1e:51:9a:0e:f8:d4:8c:e3:29:6c:7e:6a:3e: 8f:39:77:af:e2:94:db:f0:a4:d4:34:6c:ca:14:f7:43:a2:17: 06:7e:99:bf:d0:b9:c7:41:99:b1:03:4f:d9:09:29:62:3a:b9: c2:b9:47:79 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUY9NOOz9kWCEuAQmBMpDiVoBdG24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGRDkwMTFCMzNGRDk5OTZEOTA4NUQ2NTRGOTk0M0E5 NUMzNzI2OTAeFw0yNTA0MTgwNjIxMTRaFw0yNTA0MjIxODM3MTRaMDMxMTAvBgNV BAMTKEI0RkQ0OUI2QTJDODQxQkZFQjhEMjFFQ0YwNTgyODM0RUFEOTcwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPSTJbUGY6i3ER8jJ571d7Bwv +OvdH8ZXgnvPbQ+8ohfRGkIni0QHqVojllhZ95dElemlxMlf+dWG5ycOv2/BlmbR QvZQY3BJbcsFGeyEFhbbbjG9535hLLqRN16rMJHcZlNXzC6fTkC240e39+zH2U1i Ff8AouNWDmZ67TTuchD/BZN+/iT0QwYj0sQZy+M3Zc3pyWfpEnAljickSyzOhJaH 43779BRbEEvU61MoGzB1HT+D5bRCaNX0Fbwl8qvIkpyPvtjBqsbGqy8qqiR4e0Mx TXN8zTWAoYCYtcdWN2yH6oyD1o6uUoJPjxFqO+MSFLeWUWhs23xW1GU4nMutAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUtP1JtqLIQb/rjSHs8FgoNOrZcMcwHwYDVR0j BBgwFoAUIf2QEbM/2ZltkIXWVPmUOpXDcmkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83OUQxOTAxODk5NjVEQTFBQUQ4NjcwNjNDQjY1MzM0MDA0 ODdBNjg3MzZFQzk3MUY1MEYzNEMyMjUyNEZDMEZGLzAvMjFGRDkwMTFCMzNGRDk5 OTZEOTA4NUQ2NTRGOTk0M0E5NUMzNzI2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUZEOTAxMUIzM0ZEOTk5NkQ5 MDg1RDY1NEY5OTQzQTk1QzM3MjY5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzlEMTkwMTg5OTY1REExQUFEODY3MDYzQ0I2NTMzNDAwNDg3QTY4NzM2 RUM5NzFGNTBGMzRDMjI1MjRGQzBGRi8wLzIxRkQ5MDExQjMzRkQ5OTk2RDkwODVE NjU0Rjk5NDNBOTVDMzcyNjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfUVFi452mIg/EIzG6VjfC/ZIV bMGmYqokYb7NKoYBkDOafJlD3Imdj95bBJTdOS/VTqmLdKvx8Ef8mjCpZphY1voI ieTWQViI2ZuNiQy5IJmexA9VXaKmM7Pe3EQ1WAsRBI1Ms11ANVxxTvtXQyyGT7zp Ute1Ci/MKbKBN8xk6FRsrZsgYFZObYhlIVbQL9wa2VArRwbLr7tTC2rGgz9v2QR6 M2Y6wYM831QJ2qwobUYSAGJOKDA8IAbb7ZDfKmHLsCxnmMQ0p+vLsh5Rmg741Izj KWx+aj6POXev4pTb8KTUNGzKFPdDohcGfpm/0LnHQZmxA0/ZCSliOrnCuUd5 -----END CERTIFICATE-----Generated at Fri Apr 18 21:28:56 2025 by rpki-client