$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft File: EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft (raw, json) Hash identifier: 0leG+tZSKg+IEBRGgfbwt+F/34H5DpRaH5RXRxLNI9k= Subject key identifier: 71:1A:4E:C2:B1:D8:EE:CA:B4:4E:23:44:55:2D:18:A2:A3:BF:F7:FE Authority key identifier: EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22 Certificate issuer: /CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222 Certificate serial: 6B8B9565A45BB94E2B550ACC91CFBCA00251A754 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft Manifest number: D1 Signing time: Sun 06 Apr 2025 10:01:56 +0000 Manifest this update: Sun 06 Apr 2025 09:56:56 +0000 Manifest next update: Fri 11 Apr 2025 14:05:56 +0000 Files and hashes: 1: EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl (hash: RtMHElg70OUCWa17JhBNOoumm39rCJZv9nxI5xvNeP8=) 2: 323830333a653230303a3a2f33322d3634203d3e20323635373438.roa (hash: TNy0LNJ07y3CLnWDgBfu/hQOg2xqYYTZBhN5Ybtp5C0=) 3: 3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa (hash: fNdO3pYhZPjxXT7gsU6/StkShcxtYpfmYdBJjYCiYug=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8b:95:65:a4:5b:b9:4e:2b:55:0a:cc:91:cf:bc:a0:02:51:a7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222 Validity Not Before: Apr 6 09:56:56 2025 GMT Not After : Apr 11 14:05:56 2025 GMT Subject: CN=711A4EC2B1D8EECAB44E2344552D18A2A3BFF7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:5a:54:05:1e:94:2e:68:b5:d6:4e:d2:2a: 99:e9:7d:23:1c:e9:c6:b7:60:38:a5:90:7e:28:ab: b8:47:fb:ae:ce:5e:83:b2:d7:07:e6:ea:fc:b6:20: 3b:9e:11:7f:2e:a8:aa:51:48:e2:51:a1:55:2a:46: 42:f2:d8:df:7b:5d:ed:91:8b:c6:45:31:27:62:04: 87:82:02:51:f0:49:92:27:f6:46:e1:86:0a:c9:bd: 69:9a:da:19:59:44:b8:6f:ca:bb:9c:40:75:db:0a: 63:34:ca:49:d2:5a:54:76:0a:fe:64:78:e5:6f:61: 32:84:45:37:ac:fe:f2:18:77:15:87:28:5a:d4:9d: 42:4d:b8:6e:c9:60:96:a2:d9:70:8e:fd:a0:bf:ae: 5b:a0:86:ca:89:e1:35:3d:f2:b3:1a:9b:6a:9d:1c: cf:8b:b4:53:2a:33:31:6c:94:da:00:4c:f4:de:1a: 65:34:0f:53:57:f7:65:39:f6:af:ab:06:00:60:09: 58:13:a8:74:50:6d:42:9f:f6:87:18:f1:83:cb:79: e6:21:f1:d7:c0:6c:8b:79:14:19:cb:d1:12:a6:c3: 6e:1c:ce:0d:74:51:1d:e2:31:35:88:2d:96:14:b4: 3f:92:59:91:97:fe:55:b5:ad:16:bf:18:ac:a3:80: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1A:4E:C2:B1:D8:EE:CA:B4:4E:23:44:55:2D:18:A2:A3:BF:F7:FE X509v3 Authority Key Identifier: keyid:EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:19:3d:fc:4c:d2:1f:33:eb:ac:ae:8c:1b:19:10:cc:a0:08: 41:a0:29:a0:99:95:62:0b:8e:7e:34:79:19:cf:41:6e:21:dd: 35:03:66:1c:9b:a4:48:40:22:cd:b9:90:66:fd:10:12:03:0e: c1:40:14:b0:96:ff:0d:98:99:ac:96:64:5b:cc:cf:d1:42:d3: 72:d1:bf:b3:f4:4b:bb:32:dd:48:9c:0d:ae:78:c9:9a:34:7b: ba:b7:d1:72:da:4b:23:5c:86:f1:3d:0a:45:46:7e:cd:2f:72: 54:55:d4:04:af:8e:d6:78:af:32:be:67:35:82:8e:2f:0b:07: e5:3e:2e:2c:47:3b:15:b6:ee:55:ab:a5:68:b6:20:15:48:b2: 17:14:08:57:f6:52:3f:64:d7:d6:75:77:9a:ca:37:94:a7:7a: 50:b0:8d:e8:bd:05:e7:25:ec:a0:34:1d:7d:aa:1d:15:c2:d7: 8e:03:e2:af:c5:32:da:dd:35:ea:83:20:2d:17:16:5f:a7:9a: e5:94:cc:67:c3:8f:8f:66:8e:43:1d:60:86:2f:80:ed:de:73: e4:9a:45:8f:7f:d0:d7:2d:c4:70:af:c6:11:1c:ff:63:53:6c: 33:eb:2d:d5:f5:9a:19:1c:65:c5:f4:22:24:2e:2b:02:69:32: eb:e2:7f:ce -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa4uVZaRbuU4rVQrMkc+8oAJRp1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZFMDBBNzZBOURFOTM1RTZDQURFMjY4QTcyOUNGMTk3 QUZGMjIyMjAeFw0yNTA0MDYwOTU2NTZaFw0yNTA0MTExNDA1NTZaMDMxMTAvBgNV BAMTKDcxMUE0RUMyQjFEOEVFQ0FCNDRFMjM0NDU1MkQxOEEyQTNCRkY3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIlpUBR6ULmi11k7SKpnpfSMc 6ca3YDilkH4oq7hH+67OXoOy1wfm6vy2IDueEX8uqKpRSOJRoVUqRkLy2N97Xe2R i8ZFMSdiBIeCAlHwSZIn9kbhhgrJvWma2hlZRLhvyrucQHXbCmM0yknSWlR2Cv5k eOVvYTKERTes/vIYdxWHKFrUnUJNuG7JYJai2XCO/aC/rlughsqJ4TU98rMam2qd HM+LtFMqMzFslNoATPTeGmU0D1NX92U59q+rBgBgCVgTqHRQbUKf9ocY8YPLeeYh 8dfAbIt5FBnL0RKmw24czg10UR3iMTWILZYUtD+SWZGX/lW1rRa/GKyjgD3rAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcRpOwrHY7sq0TiNEVS0YoqO/9/4wHwYDVR0j BBgwFoAU7+AKdqnek15sreJopynPGXr/IiIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NEQ2RDFBMjIxMDA2RTA5REU3MzhCMkJEQkMxQURBNkJF OUFFNDAzMTAxMTdEODIxOTkzMkE4M0I2Q0VCMDgxLzAvRUZFMDBBNzZBOURFOTM1 RTZDQURFMjY4QTcyOUNGMTk3QUZGMjIyMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRkUwMEE3NkE5REU5MzVFNkNB REUyNjhBNzI5Q0YxOTdBRkYyMjIyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODRENkQxQTIyMTAwNkUwOURFNzM4QjJCREJDMUFEQTZCRTlBRTQwMzEw MTE3RDgyMTk5MzJBODNCNkNFQjA4MS8wL0VGRTAwQTc2QTlERTkzNUU2Q0FERTI2 OEE3MjlDRjE5N0FGRjIyMjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7GT38TNIfM+usrowbGRDMoAhB oCmgmZViC45+NHkZz0FuId01A2Ycm6RIQCLNuZBm/RASAw7BQBSwlv8NmJmslmRb zM/RQtNy0b+z9Eu7Mt1InA2ueMmaNHu6t9Fy2ksjXIbxPQpFRn7NL3JUVdQEr47W eK8yvmc1go4vCwflPi4sRzsVtu5Vq6VotiAVSLIXFAhX9lI/ZNfWdXeayjeUp3pQ sI3ovQXnJeygNB19qh0VwteOA+KvxTLa3TXqgyAtFxZfp5rllMxnw4+PZo5DHWCG L4Dt3nPkmkWPf9DXLcRwr8YRHP9jU2wz6y3V9ZoZHGXF9CIkLisCaTLr4n/O -----END CERTIFICATE-----Generated at Sun Apr 6 22:23:12 2025 by rpki-client