$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft File: 949854C65FB68A162199F9EB159DEF051D92FBE6.mft (raw, json) Hash identifier: WxUpXD8n74eC7fSfBzRsOotb7VLjNKNbPdjmsyXOfM0= Subject key identifier: D2:5D:0F:24:08:00:1D:85:F3:F5:1A:62:5B:D4:F6:AE:B0:28:D8:10 Authority key identifier: 94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6 Certificate issuer: /CN=949854C65FB68A162199F9EB159DEF051D92FBE6 Certificate serial: 3B9E17A562442E7845E9D6733D849982DEEC6684 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft Manifest number: D2 Signing time: Mon 14 Apr 2025 00:00:04 +0000 Manifest this update: Sun 13 Apr 2025 23:55:04 +0000 Manifest next update: Sat 19 Apr 2025 23:43:04 +0000 Files and hashes: 1: 34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa (hash: eV6eWRioUKo3ZWllkR16xg8vvmQbBbZ5GLvhx6gD8gY=) 2: 949854C65FB68A162199F9EB159DEF051D92FBE6.crl (hash: Em4vxoKpJmgRdLTqEhl9/Dj0cDJv1DpLAkBUUDjHyq8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 23:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9e:17:a5:62:44:2e:78:45:e9:d6:73:3d:84:99:82:de:ec:66:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949854C65FB68A162199F9EB159DEF051D92FBE6 Validity Not Before: Apr 13 23:55:04 2025 GMT Not After : Apr 19 23:43:04 2025 GMT Subject: CN=D25D0F2408001D85F3F51A625BD4F6AEB028D810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:cb:e6:d9:0f:e1:ac:c0:c0:8d:1a:b0:e9: a3:ac:c1:35:3d:ad:c0:0b:37:0d:37:53:a3:48:65: 88:da:54:dc:54:c7:65:ca:e9:70:72:20:a6:81:11: cc:7b:d0:79:e7:88:6b:50:9d:86:fc:a7:a9:f0:5f: 1a:3b:55:dc:58:a7:67:b6:4e:b9:e5:6c:e2:b1:e8: 07:51:5f:6a:3c:ea:0a:cd:c0:40:25:b3:a0:4f:97: d5:66:ff:23:cf:0e:f1:73:68:ac:36:fc:1f:c6:e3: 29:21:c2:bb:34:5d:5c:54:ce:6b:39:a5:22:39:56: 34:37:c1:5f:1c:d5:5b:d5:48:e2:36:3f:e3:5b:04: c2:c8:06:4c:a0:94:38:c4:52:03:3e:58:29:c7:df: 06:3d:1c:31:71:82:1c:2e:be:79:ce:17:84:ba:2e: 3c:e5:5a:0d:fd:6a:a2:87:1c:fb:14:fe:e3:03:38: 9d:60:66:65:18:ff:7d:37:63:0b:eb:91:9c:ab:67: 78:00:b0:39:1c:a4:18:d9:f6:ca:d0:93:3f:db:f2: 2a:2f:df:93:92:f6:1b:b5:31:f8:1a:26:58:8b:ac: 9e:e1:e7:00:65:31:3b:71:22:2e:2f:95:5b:37:c1: e4:d7:f8:61:12:41:6d:55:94:28:18:88:51:68:76: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5D:0F:24:08:00:1D:85:F3:F5:1A:62:5B:D4:F6:AE:B0:28:D8:10 X509v3 Authority Key Identifier: keyid:94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4b:8e:22:ec:c4:0d:f6:ce:e3:e4:ff:27:f3:a8:c2:df:70: 8d:07:36:58:d7:70:68:7f:7f:00:f8:c4:86:55:8d:f4:e1:37: ee:d4:6b:c3:27:3e:dc:75:f2:01:82:45:df:6f:7d:64:7e:a4: 29:e4:ce:4b:7f:50:d6:65:53:df:c7:7e:6f:5b:34:4c:75:c0: 50:e3:a6:0b:cb:af:c0:b1:83:54:20:d5:8b:81:b7:95:73:17: 24:95:7a:fd:c6:cd:0c:fe:1c:b7:18:24:a5:ea:99:96:e9:b1: 43:d1:02:4e:a2:c0:c9:dc:29:fc:d6:a5:ca:b9:a5:12:7f:b2: 06:ed:55:8f:25:3b:eb:c6:87:2a:a1:d0:ba:c8:6b:01:94:13: f9:c8:98:39:1d:d7:f7:1e:b9:ef:3e:32:79:49:c0:cd:25:78: 64:1f:fa:6d:4d:50:a9:03:a8:31:54:94:68:4d:46:6f:95:a4: 84:1c:b1:0b:f4:98:ce:9d:3c:49:2a:23:2f:db:f2:27:cc:6c: 84:5e:52:60:d0:65:28:4f:1b:98:93:86:48:6f:a1:2e:2a:a7: 5d:79:4e:fc:66:bb:9d:15:f9:4c:27:43:9f:1d:fc:5e:94:57: 5a:d4:c3:7f:2c:de:30:1f:fc:91:00:4a:2f:fb:90:ea:d6:55: 6f:8d:aa:a8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUO54XpWJELnhF6dZzPYSZgt7sZoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ5ODU0QzY1RkI2OEExNjIxOTlGOUVCMTU5REVGMDUx RDkyRkJFNjAeFw0yNTA0MTMyMzU1MDRaFw0yNTA0MTkyMzQzMDRaMDMxMTAvBgNV BAMTKEQyNUQwRjI0MDgwMDFEODVGM0Y1MUE2MjVCRDRGNkFFQjAyOEQ4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWMvm2Q/hrMDAjRqw6aOswTU9 rcALNw03U6NIZYjaVNxUx2XK6XByIKaBEcx70HnniGtQnYb8p6nwXxo7VdxYp2e2 TrnlbOKx6AdRX2o86grNwEAls6BPl9Vm/yPPDvFzaKw2/B/G4ykhwrs0XVxUzms5 pSI5VjQ3wV8c1VvVSOI2P+NbBMLIBkyglDjEUgM+WCnH3wY9HDFxghwuvnnOF4S6 LjzlWg39aqKHHPsU/uMDOJ1gZmUY/303YwvrkZyrZ3gAsDkcpBjZ9srQkz/b8iov 35OS9hu1MfgaJliLrJ7h5wBlMTtxIi4vlVs3weTX+GESQW1VlCgYiFFodooFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0l0PJAgAHYXz9RpiW9T2rrAo2BAwHwYDVR0j BBgwFoAUlJhUxl+2ihYhmfnrFZ3vBR2S++YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NDNBM0FBODY2MTM4RThBNEM5RjUzQkFDQTk0MjVDMkUw NUY3RDY0NTczODFBQzUzMjcwQzkxQzY3NTM3MTVGLzAvOTQ5ODU0QzY1RkI2OEEx NjIxOTlGOUVCMTU5REVGMDUxRDkyRkJFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NDk4NTRDNjVGQjY4QTE2MjE5 OUY5RUIxNTlERUYwNTFEOTJGQkU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODQzQTNBQTg2NjEzOEU4QTRDOUY1M0JBQ0E5NDI1QzJFMDVGN0Q2NDU3 MzgxQUM1MzI3MEM5MUM2NzUzNzE1Ri8wLzk0OTg1NEM2NUZCNjhBMTYyMTk5RjlF QjE1OURFRjA1MUQ5MkZCRTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMS44i7MQN9s7j5P8n86jC33CN BzZY13Bof38A+MSGVY304Tfu1GvDJz7cdfIBgkXfb31kfqQp5M5Lf1DWZVPfx35v WzRMdcBQ46YLy6/AsYNUINWLgbeVcxcklXr9xs0M/hy3GCSl6pmW6bFD0QJOosDJ 3Cn81qXKuaUSf7IG7VWPJTvrxocqodC6yGsBlBP5yJg5Hdf3HrnvPjJ5ScDNJXhk H/ptTVCpA6gxVJRoTUZvlaSEHLEL9JjOnTxJKiMv2/InzGyEXlJg0GUoTxuYk4ZI b6EuKqddeU78ZrudFflMJ0OfHfxelFda1MN/LN4wH/yRAEov+5Dq1lVvjaqo -----END CERTIFICATE-----Generated at Wed Apr 16 05:19:39 2025 by rpki-client