$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft File: C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft (raw, json) Hash identifier: hVrSMtNl6wMxfvbdj/Q7F3nvd+2sxK4b6qTd4LB6Cxc= Subject key identifier: BC:F7:E2:EE:70:F1:94:BA:6B:22:61:FC:28:1D:C4:78:14:69:84:64 Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1 Certificate issuer: /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1 Certificate serial: 2880B722757E7C36C24E0F4817A106FD5958BC00 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft Manifest number: CA Signing time: Sat 12 Apr 2025 13:45:02 +0000 Manifest this update: Sat 12 Apr 2025 13:40:02 +0000 Manifest next update: Fri 18 Apr 2025 01:39:02 +0000 Files and hashes: 1: 323830303a6233303a3a2f33312d3334203d3e203237373430.roa (hash: VWLDTQjqwqVtOiNDU+XUFJBqTy+RY03ZbYqxdMrvh0A=) 2: 3139302e3130382e36342e302f32312d3234203d3e203237373430.roa (hash: +6Lrcn9wtCAKhPmaJpwAkFs3/f2FaKDHkeUsatILNHQ=) 3: C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl (hash: BHkCyAVX6z6sXOlcQtXSLh7AklQSnquCjkAMaBh7R04=) 4: 3139302e31312e3234302e302f32302d3234203d3e203237373430.roa (hash: TXQ6kOxW37TAzLDJKo7bgWMqNu+TeYMqAgzeYDBmxSg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 01:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:80:b7:22:75:7e:7c:36:c2:4e:0f:48:17:a1:06:fd:59:58:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1 Validity Not Before: Apr 12 13:40:02 2025 GMT Not After : Apr 18 01:39:02 2025 GMT Subject: CN=BCF7E2EE70F194BA6B2261FC281DC47814698464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:ee:e4:38:03:9a:ef:72:1c:2f:2a:03:2c: 42:6b:6b:a6:b1:e7:e6:31:8f:49:54:ac:db:d2:72: 84:72:a1:06:dd:a4:59:b4:22:1b:9d:ef:cf:b8:01: f1:63:db:c1:30:53:68:77:83:ef:f1:33:65:ae:06: 13:27:f1:f1:d1:dd:c7:b5:f7:87:3d:05:28:8a:b5: ef:79:e0:40:ff:88:6e:ff:e9:c2:b1:25:26:bd:f2: 19:13:7d:0d:67:47:1f:07:b7:30:13:89:07:38:0b: 9d:08:0a:e8:b1:4e:8b:e7:72:1e:8f:ce:7b:03:a3: 01:3a:45:12:b0:f5:13:94:fa:2f:23:ed:aa:92:78: d3:99:0a:f3:22:e3:ae:ca:ad:a0:4f:64:fc:b3:27: a3:a3:c5:66:e4:12:4c:88:76:13:ee:54:9b:72:e1: ed:8c:46:b0:c8:44:11:e7:de:5b:79:bb:ab:b5:4b: 75:57:48:5a:20:d1:37:69:66:00:b6:69:9c:b0:da: 1e:7f:33:a3:cc:91:8e:f8:8e:42:3c:57:36:2a:49: a1:05:fd:b8:ed:09:c7:4e:07:37:59:d6:27:24:df: 67:35:69:d7:d6:76:fe:51:42:c9:de:98:df:92:83: 75:56:b2:de:5b:bd:19:03:a3:d0:3d:25:40:c5:b6: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:E2:EE:70:F1:94:BA:6B:22:61:FC:28:1D:C4:78:14:69:84:64 X509v3 Authority Key Identifier: keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7f:9e:29:dd:2d:d1:b9:8d:54:04:f4:dc:83:1c:14:43:64: 8e:42:c6:80:c9:b6:5e:ee:c2:d8:02:2f:46:04:23:34:fd:63: 53:35:ee:79:4c:36:6a:bd:7a:f1:e8:4e:14:3d:45:bc:dc:4c: 2b:13:dc:7d:74:59:c0:86:9b:cc:bd:e1:3f:aa:c5:fc:b8:1b: 78:8c:2b:0e:60:cb:9c:91:e6:02:a6:e7:53:82:7b:1f:ac:18: 9b:9c:21:84:ee:ca:26:6c:4a:45:38:ee:b2:5a:1e:de:fa:c5: 68:31:1b:8a:b9:e3:a8:71:56:d6:12:f3:f7:aa:94:09:c1:fe: 5e:4f:22:34:24:73:ac:d6:2b:4c:68:e7:8a:91:93:77:37:7b: 7b:cd:50:33:03:4c:5a:5c:d1:1d:89:ce:ec:4a:78:c0:5a:e5: 0c:e4:b5:be:af:4b:12:54:68:ce:56:29:6d:b4:08:af:3c:5a: f1:78:96:e3:3c:e9:1e:39:81:f2:64:e5:3e:57:97:cb:c7:7b: ca:2e:f5:13:ef:ec:8a:d8:04:2a:5d:f0:de:54:9e:59:de:6f: 99:27:d0:fd:51:fe:48:23:c9:c4:52:e3:f4:86:e2:80:0e:d6: d6:ca:2e:11:60:3a:ed:e4:70:42:02:7e:7b:5a:73:73:e4:a7: ad:d3:5a:7d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKIC3InV+fDbCTg9IF6EG/VlYvAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwQjFDRTQ2RDI0RjlCNEI0MUFBNkNEREQ5RUI5NkU4 QjIzQzJCMTAeFw0yNTA0MTIxMzQwMDJaFw0yNTA0MTgwMTM5MDJaMDMxMTAvBgNV BAMTKEJDRjdFMkVFNzBGMTk0QkE2QjIyNjFGQzI4MURDNDc4MTQ2OTg0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmzO7kOAOa73IcLyoDLEJra6ax 5+Yxj0lUrNvScoRyoQbdpFm0Ihud78+4AfFj28EwU2h3g+/xM2WuBhMn8fHR3ce1 94c9BSiKte954ED/iG7/6cKxJSa98hkTfQ1nRx8HtzATiQc4C50ICuixTovnch6P znsDowE6RRKw9ROU+i8j7aqSeNOZCvMi467KraBPZPyzJ6OjxWbkEkyIdhPuVJty 4e2MRrDIRBHn3lt5u6u1S3VXSFog0TdpZgC2aZyw2h5/M6PMkY74jkI8VzYqSaEF /bjtCcdOBzdZ1ick32c1adfWdv5RQsnemN+Sg3VWst5bvRkDo9A9JUDFtqtxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvPfi7nDxlLprImH8KB3EeBRphGQwHwYDVR0j BBgwFoAUwgsc5G0k+bS0GqbN3Z65bosjwrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkMwQjU4OUY4NTBFNjg0Mzc4QkE2MDE0RDAwQ0UxRjFE NzM5NjQ3NTNFQ0MwMkFDQzNGQjg5OUNFMzY0NUEzLzAvQzIwQjFDRTQ2RDI0RjlC NEI0MUFBNkNEREQ5RUI5NkU4QjIzQzJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjBCMUNFNDZEMjRGOUI0QjQx QUE2Q0RERDlFQjk2RThCMjNDMkIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZDMEI1ODlGODUwRTY4NDM3OEJBNjAxNEQwMENFMUYxRDczOTY0NzUz RUNDMDJBQ0MzRkI4OTlDRTM2NDVBMy8wL0MyMEIxQ0U0NkQyNEY5QjRCNDFBQTZD REREOUVCOTZFOEIyM0MyQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0f54p3S3RuY1UBPTcgxwUQ2SO QsaAybZe7sLYAi9GBCM0/WNTNe55TDZqvXrx6E4UPUW83EwrE9x9dFnAhpvMveE/ qsX8uBt4jCsOYMuckeYCpudTgnsfrBibnCGE7sombEpFOO6yWh7e+sVoMRuKueOo cVbWEvP3qpQJwf5eTyI0JHOs1itMaOeKkZN3N3t7zVAzA0xaXNEdic7sSnjAWuUM 5LW+r0sSVGjOVilttAivPFrxeJbjPOkeOYHyZOU+V5fLx3vKLvUT7+yK2AQqXfDe VJ5Z3m+ZJ9D9Uf5II8nEUuP0huKADtbWyi4RYDrt5HBCAn57WnNz5Ket01p9 -----END CERTIFICATE-----Generated at Tue Apr 15 00:45:34 2025 by rpki-client