$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft File: 87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft (raw, json) Hash identifier: Wb8P60WR42cmA95+GTGkZBRertc0Wa/BJ9zfERsHI4A= Subject key identifier: 5C:E3:DF:92:B0:39:46:37:54:FA:BE:44:DF:B0:34:F8:B6:E9:9D:1A Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21 Certificate issuer: /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421 Certificate serial: 5A67AB22C96A12746A04893D1946BC10FF11F953 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft Manifest number: CD Signing time: Sat 12 Apr 2025 23:20:42 +0000 Manifest this update: Sat 12 Apr 2025 23:15:42 +0000 Manifest next update: Fri 18 Apr 2025 19:30:42 +0000 Files and hashes: 1: 34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa (hash: r9qoTXS4P/UF5C7L4DilGTBMU1vqPmN4JkObMwByVSY=) 2: 34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa (hash: VzKudr+ieFKJgOjwccj2C2am6TlsyHznqYbeTqVEoTI=) 3: 34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa (hash: bujUp7BJREwfFYcwzVYofSIcOCNVaUMdrVM2qo2m7Eg=) 4: 87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl (hash: 0pBsATwqhTaSGUdLz0cKdRCod3vzzFaEIMGKscF9awY=) 5: 323830333a3661303a3a2f33322d3332203d3e20323636383834.roa (hash: qYhb8x8oqlQ6pvcLzqdt0ZcUfZUCw9q7dAj5kJxa0+I=) 6: 34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa (hash: NHYLG/rtj3qB+Nv69TAJCsyV+ij9AF+9Ne706ZWzaZk=) 7: 34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa (hash: fcQQVwgjwAK65rUiK+6ZAey9cVNaHcmhq1VrdQz9ANQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:67:ab:22:c9:6a:12:74:6a:04:89:3d:19:46:bc:10:ff:11:f9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421 Validity Not Before: Apr 12 23:15:42 2025 GMT Not After : Apr 18 19:30:42 2025 GMT Subject: CN=5CE3DF92B039463754FABE44DFB034F8B6E99D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:48:b0:b6:59:f3:e4:dd:d8:6f:7f:79:7c:40: 17:6a:bc:e0:8a:8b:4d:82:0d:e8:c7:c8:bb:70:d5: d8:7d:df:d8:c5:77:f2:7d:bd:2a:a7:53:e7:97:50: 61:6c:87:ed:77:66:3b:ac:0a:9f:f2:1f:1b:8e:57: 3d:c9:1e:0b:08:39:ad:38:da:45:da:9c:d7:dc:35: 23:2b:ba:12:62:28:a5:46:c8:ed:78:b6:55:c6:2c: 52:0f:39:ad:21:f6:9d:96:e9:5d:fb:5c:28:4d:c5: 81:15:56:90:7c:4f:67:f4:c7:2a:d5:80:d1:6c:b3: fc:1d:87:de:ce:28:79:c6:54:5c:0d:31:9c:25:12: 88:89:8d:ba:60:63:87:6b:af:3a:e6:f8:0e:6c:91: cb:9f:7f:78:7a:3f:79:3e:4d:f9:5a:90:d6:47:a4: ff:89:3d:7c:31:8a:a6:0d:c4:ba:b2:e5:a8:3d:be: 71:39:fe:08:1e:68:95:a0:1e:d1:3b:05:c1:fa:e3: f6:97:9f:1b:d1:47:62:8e:48:4e:a4:12:99:d8:82: 6d:03:a6:e3:18:14:72:29:05:46:82:95:b6:70:59: 18:19:bf:87:4b:63:55:bc:b7:87:45:e4:12:f1:cf: b6:9c:87:99:aa:76:29:bd:fa:73:13:6b:f5:44:22: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E3:DF:92:B0:39:46:37:54:FA:BE:44:DF:B0:34:F8:B6:E9:9D:1A X509v3 Authority Key Identifier: keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7d:96:df:cd:4c:54:11:0e:9a:8a:27:1d:dc:df:cd:e9:cd: 5a:f1:1a:5a:31:0d:e4:64:80:f8:7e:c1:11:a3:0a:ef:46:5b: b3:39:48:89:cc:44:2d:83:27:70:eb:57:f3:0d:55:51:29:87: 2c:44:da:00:56:14:8e:99:d7:57:f8:b5:27:2e:51:bd:bc:81: fd:e2:36:ab:00:9e:a5:6e:2c:f4:d1:8d:d5:7f:5c:41:0f:7c: bc:d6:2f:d6:24:10:3d:b8:d2:70:93:29:75:a2:4a:75:40:f3: 78:20:bc:67:c0:4e:07:f9:af:73:a8:9e:42:05:bc:40:43:6c: 85:3a:c1:bb:5b:ea:36:2e:df:2d:71:55:cc:32:75:68:0c:fa: fe:d0:be:63:d0:1d:d9:f0:b7:5d:b7:53:62:49:ff:0b:66:c3: 04:a9:99:f6:b0:e3:2e:21:19:c4:2e:00:3b:c4:29:24:3b:fd: ce:41:3b:16:6c:d2:c1:fd:89:87:7c:58:7a:7d:bb:96:63:fc: d3:da:c6:92:3d:ec:ae:80:d6:92:3b:14:d0:49:ec:61:02:35: 63:56:23:3f:15:fe:c7:71:c0:f3:82:24:22:a1:b3:2f:f0:7d: 46:5a:84:02:3f:b5:12:c5:83:44:c7:76:b8:cd:f7:63:99:83: 3b:12:e1:53 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWmerIslqEnRqBIk9GUa8EP8R+VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBOTFFOThDOTBDMjVEMTgyMjJFMjlBOTJDNERBOUNB MDBEQTQyMTAeFw0yNTA0MTIyMzE1NDJaFw0yNTA0MTgxOTMwNDJaMDMxMTAvBgNV BAMTKDVDRTNERjkyQjAzOTQ2Mzc1NEZBQkU0NERGQjAzNEY4QjZFOTlEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2SLC2WfPk3dhvf3l8QBdqvOCK i02CDejHyLtw1dh939jFd/J9vSqnU+eXUGFsh+13ZjusCp/yHxuOVz3JHgsIOa04 2kXanNfcNSMruhJiKKVGyO14tlXGLFIPOa0h9p2W6V37XChNxYEVVpB8T2f0xyrV gNFss/wdh97OKHnGVFwNMZwlEoiJjbpgY4drrzrm+A5skcuff3h6P3k+TflakNZH pP+JPXwxiqYNxLqy5ag9vnE5/ggeaJWgHtE7BcH64/aXnxvRR2KOSE6kEpnYgm0D puMYFHIpBUaClbZwWRgZv4dLY1W8t4dF5BLxz7ach5mqdim9+nMTa/VEIp41AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXOPfkrA5RjdU+r5E37A0+LbpnRowHwYDVR0j BBgwFoAUh6kemMkMJdGCIuKaksTanKANpCEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RTg4MUYwOTkyNDM5M0E3QjlEODk5NzEwMUIwQUVEMzc3 QkJCOEQ2MUREMDg1NzE5RTNCQTJGMzhFMzczN0E5LzAvODdBOTFFOThDOTBDMjVE MTgyMjJFMjlBOTJDNERBOUNBMDBEQTQyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84N0E5MUU5OEM5MEMyNUQxODIy MkUyOUE5MkM0REE5Q0EwMERBNDIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0U4ODFGMDk5MjQzOTNBN0I5RDg5OTcxMDFCMEFFRDM3N0JCQjhENjFE RDA4NTcxOUUzQkEyRjM4RTM3MzdBOS8wLzg3QTkxRTk4QzkwQzI1RDE4MjIyRTI5 QTkyQzREQTlDQTAwREE0MjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7fZbfzUxUEQ6aiicd3N/N6c1a 8RpaMQ3kZID4fsERowrvRluzOUiJzEQtgydw61fzDVVRKYcsRNoAVhSOmddX+LUn LlG9vIH94jarAJ6lbiz00Y3Vf1xBD3y81i/WJBA9uNJwkyl1okp1QPN4ILxnwE4H +a9zqJ5CBbxAQ2yFOsG7W+o2Lt8tcVXMMnVoDPr+0L5j0B3Z8Lddt1NiSf8LZsME qZn2sOMuIRnELgA7xCkkO/3OQTsWbNLB/YmHfFh6fbuWY/zT2saSPeyugNaSOxTQ SexhAjVjViM/Ff7HccDzgiQiobMv8H1GWoQCP7USxYNEx3a4zfdjmYM7EuFT -----END CERTIFICATE-----Generated at Tue Apr 15 00:29:47 2025 by rpki-client