$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft File: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft (raw, json) Hash identifier: xd+8Uk5jPtonJbGv6HmmFvCdNXEFSn/mCUxH12Lfdv4= Subject key identifier: 0A:90:0E:9B:8A:54:6C:75:06:B4:B9:8B:A3:1E:7E:94:83:6C:0F:C3 Authority key identifier: 0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 Certificate issuer: /CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Certificate serial: 6C6DF9EFD0A737D11954E97A0D1A24E3F7FAA890 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft Manifest number: CE Signing time: Sat 05 Apr 2025 15:00:29 +0000 Manifest this update: Sat 05 Apr 2025 14:55:29 +0000 Manifest next update: Wed 09 Apr 2025 22:29:29 +0000 Files and hashes: 1: 3230302e37312e38382e302f32312d3234203d3e203237393936.roa (hash: r/EnoAJ/QDLRyKJ2eUMGsfZEAwWctbmLg0N+5EAKcZA=) 2: 3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa (hash: ALd1zdR/wdEwWr8XpENniianx6ebOr87tR/bFvCA3As=) 3: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl (hash: DZevWlR0FVPSm9y84abUEYi+mCuAeJIt4VbmBZAE/8U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 22:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6d:f9:ef:d0:a7:37:d1:19:54:e9:7a:0d:1a:24:e3:f7:fa:a8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Validity Not Before: Apr 5 14:55:29 2025 GMT Not After : Apr 9 22:29:29 2025 GMT Subject: CN=0A900E9B8A546C7506B4B98BA31E7E94836C0FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:04:9a:88:54:89:02:45:e7:8b:33:9d:a3: 62:3a:3d:ad:07:29:f2:76:48:32:22:03:17:66:e0: 41:4d:ae:4c:c0:50:a5:53:aa:e3:bb:00:f9:f7:2d: ba:d8:d6:f9:94:2c:79:f4:3b:f1:ac:00:b9:56:e2: e5:ed:9f:45:e4:33:7d:ee:fd:51:57:05:f0:8e:9b: 97:62:99:b9:52:d5:48:c6:f1:5d:3b:5c:d8:fc:41: 7b:37:53:4d:1f:54:94:1c:90:0b:26:d8:7d:67:8d: b0:3b:a1:b6:e0:58:f8:a2:85:f3:3a:2c:fa:c2:3d: e1:30:8d:3d:05:aa:10:4e:84:c7:5e:3a:9e:0a:b1: 74:7b:d4:31:df:ad:3d:04:da:22:0c:b4:6f:a9:f4: 83:9d:2a:44:20:a3:8e:8d:84:5e:09:fd:9d:4f:8e: d9:56:d8:d0:2a:9f:da:3f:e5:b1:6c:5d:7b:60:3a: 04:df:7f:c4:6e:e9:ed:64:54:13:35:4c:82:cc:a3: 22:a8:69:28:6c:ef:41:5f:1c:5a:53:9e:26:bb:91: e9:c7:4d:e5:0f:c1:ab:89:24:ca:61:72:0a:c2:47: 37:67:6a:34:ab:6e:fb:a4:bc:a8:0c:84:ea:da:04: c9:c8:4e:28:09:3d:2b:a9:3b:7d:e9:66:30:b0:6b: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:90:0E:9B:8A:54:6C:75:06:B4:B9:8B:A3:1E:7E:94:83:6C:0F:C3 X509v3 Authority Key Identifier: keyid:0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a4:f9:b0:25:5f:64:20:cb:0a:9d:ed:e2:ce:c9:02:75:94: e0:17:a8:5a:0a:5e:57:fc:fe:fc:8f:d2:85:90:34:8d:fe:39: f3:cf:06:a1:61:47:06:61:5c:39:26:59:ec:87:87:23:96:36: 53:5a:d8:ab:a7:07:c3:eb:83:d9:2c:78:45:e9:81:26:61:db: c7:3e:4f:c1:87:2c:3d:ee:5b:e3:a6:3b:36:88:b3:cf:5b:42: 9c:c4:6b:7e:bb:c1:59:04:33:ac:c0:0e:ee:dc:69:3d:c5:cb: a4:a4:39:2a:55:92:38:15:07:a5:1f:69:d2:f0:68:9f:8b:a2: 08:9d:63:6a:71:d4:d1:20:23:81:42:48:78:38:2d:80:e6:d9: ac:e9:94:68:83:b7:59:e9:69:97:be:20:11:ae:be:20:4f:57: c4:04:cd:c1:9f:e0:4a:23:74:fb:4e:25:87:a3:85:18:d0:f5: fb:2e:d3:bc:a1:91:1b:a6:c6:eb:4e:a6:2f:71:d3:40:a8:be: 45:da:d1:ff:fc:e3:08:cb:e9:12:39:96:e5:29:99:2f:d7:62: 2d:c0:03:aa:7f:b8:ef:f0:22:c2:fc:9a:2f:fd:8e:84:a3:2b: 8f:55:18:0c:0a:98:e2:a6:7d:f7:a1:eb:23:77:b3:4f:11:c8: f4:67:cb:30 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbG3579CnN9EZVOl6DRok4/f6qJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENCMEM3NzY2ODcwMDFBNkJFRkE5RUREMjBGOUJBNkM4 ODhFRTg1NDAeFw0yNTA0MDUxNDU1MjlaFw0yNTA0MDkyMjI5MjlaMDMxMTAvBgNV BAMTKDBBOTAwRTlCOEE1NDZDNzUwNkI0Qjk4QkEzMUU3RTk0ODM2QzBGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXLgSaiFSJAkXnizOdo2I6Pa0H KfJ2SDIiAxdm4EFNrkzAUKVTquO7APn3LbrY1vmULHn0O/GsALlW4uXtn0XkM33u /VFXBfCOm5dimblS1UjG8V07XNj8QXs3U00fVJQckAsm2H1njbA7obbgWPiihfM6 LPrCPeEwjT0FqhBOhMdeOp4KsXR71DHfrT0E2iIMtG+p9IOdKkQgo46NhF4J/Z1P jtlW2NAqn9o/5bFsXXtgOgTff8Ru6e1kVBM1TILMoyKoaShs70FfHFpTnia7kenH TeUPwauJJMphcgrCRzdnajSrbvukvKgMhOraBMnITigJPSupO33pZjCwa34PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCpAOm4pUbHUGtLmLox5+lINsD8MwHwYDVR0j BBgwFoAUDLDHdmhwAaa++p7dIPm6bIiO6FQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkY0RjNFMUEyQkY5RkExNTVGMzM4RkNCREE1RjYwNDIy QkRCODEwRDc0OUZEMTE2N0VDQUQ4RURCNERCOEQxLzAvMENCMEM3NzY2ODcwMDFB NkJFRkE5RUREMjBGOUJBNkM4ODhFRTg1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0IwQzc3NjY4NzAwMUE2QkVG QTlFREQyMEY5QkE2Qzg4OEVFODU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZGNEYzRTFBMkJGOUZBMTU1RjMzOEZDQkRBNUY2MDQyMkJEQjgxMEQ3 NDlGRDExNjdFQ0FEOEVEQjREQjhEMS8wLzBDQjBDNzc2Njg3MDAxQTZCRUZBOUVE RDIwRjlCQTZDODg4RUU4NTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASpPmwJV9kIMsKne3izskCdZTg F6haCl5X/P78j9KFkDSN/jnzzwahYUcGYVw5Jlnsh4cjljZTWtirpwfD64PZLHhF 6YEmYdvHPk/Bhyw97lvjpjs2iLPPW0KcxGt+u8FZBDOswA7u3Gk9xcukpDkqVZI4 FQelH2nS8Gifi6IInWNqcdTRICOBQkh4OC2A5tms6ZRog7dZ6WmXviARrr4gT1fE BM3Bn+BKI3T7TiWHo4UY0PX7LtO8oZEbpsbrTqYvcdNAqL5F2tH//OMIy+kSOZbl KZkv12ItwAOqf7jv8CLC/Jov/Y6EoyuPVRgMCpjipn33oesjd7NPEcj0Z8sw -----END CERTIFICATE-----Generated at Sun Apr 6 19:54:30 2025 by rpki-client