$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft File: 097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft (raw, json) Hash identifier: F8dORsPpuszsYJ4WlR7j3tJdbbR215BuwFGtphqPf/w= Subject key identifier: 0A:42:3A:43:7F:13:F3:D3:C3:FF:F9:1F:93:19:41:74:00:43:4F:E5 Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4 Certificate issuer: /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4 Certificate serial: 79388C8FF2EEAC12428BA3226DCB1BC4F60FFE5E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft Manifest number: CA Signing time: Thu 03 Apr 2025 15:41:47 +0000 Manifest this update: Thu 03 Apr 2025 15:36:46 +0000 Manifest next update: Wed 09 Apr 2025 10:41:46 +0000 Files and hashes: 1: 34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa (hash: Kz1/0X+uJKzXFAtLfFogOPWPvnzYg/J2jrZw7uCurpo=) 2: 097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl (hash: EY6hM5xJBBrR1ObOp6+NkCHpGqOpxy3uC2syORy8hgw=) 3: 34352e3136372e3135362e302f32342d3234203d3e20323633313537.roa (hash: sHh4HZxpqgx2ZTIZ8r7XvDUMqHRURZoEV29/EBPUjzs=) 4: 34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa (hash: UIXEawx2DYcI+pLPU43S72Fp7w2iCEBJ8Qeb52fSum4=) 5: 34352e3136372e3135392e302f32342d3234203d3e20323633313537.roa (hash: 4Mq1We2jPvHGHNovEJweieCRcTIn25J6U/Wvod+EimQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:38:8c:8f:f2:ee:ac:12:42:8b:a3:22:6d:cb:1b:c4:f6:0f:fe:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4 Validity Not Before: Apr 3 15:36:46 2025 GMT Not After : Apr 9 10:41:46 2025 GMT Subject: CN=0A423A437F13F3D3C3FFF91F9319417400434FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:5f:4b:c3:41:40:b4:31:f5:e6:54:f9:00: a5:e8:c4:08:c4:bb:86:fe:67:04:c9:4a:86:ab:fa: 9d:43:c0:4f:38:ec:39:cd:dc:f2:ae:06:fe:fb:c4: 6c:4c:64:2c:14:95:7e:71:3e:45:b0:c9:87:a3:5f: 05:4d:09:dc:5d:71:03:54:d4:ad:8a:b4:ce:34:0b: 83:91:80:05:e0:58:94:1e:4c:33:e5:23:1b:60:8c: 64:62:2d:12:bf:fe:6b:75:d5:03:7f:c9:ff:18:65: 08:6e:4b:d4:cb:fe:99:86:d4:59:c0:7d:8d:08:0d: 5e:03:7c:3a:11:d6:d3:a5:b6:a2:39:1e:b4:c9:dd: 2d:a9:cc:3f:af:76:ff:cc:58:23:49:ac:30:1f:fa: 1f:62:18:57:4c:5a:22:62:33:d9:71:57:0f:f2:fe: 27:d9:e1:18:98:74:44:2f:88:cb:2e:36:51:61:c0: 67:5a:54:be:c4:eb:72:5b:51:3f:26:6e:59:10:80: a5:03:ad:c8:6e:f0:5e:77:bf:91:75:47:d6:37:56: dd:25:ed:de:f2:09:69:0d:41:78:6f:de:33:ed:f1: 29:1d:f1:06:b6:d0:0d:3e:8e:68:c4:0d:04:f4:52: 31:98:71:aa:e8:f5:aa:a0:5c:74:e8:6a:46:c1:02: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:42:3A:43:7F:13:F3:D3:C3:FF:F9:1F:93:19:41:74:00:43:4F:E5 X509v3 Authority Key Identifier: keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:37:e4:de:da:d7:8b:81:44:53:9e:f7:85:b7:08:2c:61:09: 80:5a:f0:d8:aa:d8:8a:b1:9f:e2:77:17:88:2d:d6:3b:4b:60: 96:98:f9:55:bb:b6:0c:d1:cc:39:45:bd:9f:7e:7f:3a:8b:91: cf:12:65:96:5e:cd:86:ae:be:d8:10:eb:6d:01:e6:71:7e:86: be:11:54:4c:d7:2c:4b:7c:71:00:4d:69:12:17:7d:81:a4:11: 13:33:7c:dd:52:97:0e:92:2a:71:c8:fb:e4:b9:73:7d:9a:b7: 62:56:1f:c0:2a:f1:21:73:20:9a:4b:fa:71:b3:ea:c7:c2:87: d8:b6:f5:eb:37:67:ce:69:09:e7:a2:95:e0:73:14:ba:78:be: 93:a2:b3:b4:55:65:68:f3:91:68:a5:09:5f:e2:07:39:4c:92: dc:df:58:e4:2a:69:19:15:de:d1:37:0f:4b:2c:fe:d5:58:29: 9a:eb:ce:56:fb:07:f2:9a:6d:89:15:95:85:1a:3a:47:7b:68: b8:6e:63:a3:40:91:20:50:9d:bd:d6:2b:6a:ff:6c:3e:a3:08: 04:d7:c3:ee:2a:85:7e:11:cb:5a:29:e7:b7:b2:02:e3:d9:ba: 67:64:35:2e:1a:a2:87:a4:28:7a:4e:90:a8:cf:e1:bb:c6:8e: 66:16:59:51 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeTiMj/LurBJCi6MibcsbxPYP/l4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3RkM4MUE1RUE0OUE4OEZGNEJCRjIzOEIwQjk5ODg2 QTgyQTZBNDAeFw0yNTA0MDMxNTM2NDZaFw0yNTA0MDkxMDQxNDZaMDMxMTAvBgNV BAMTKDBBNDIzQTQzN0YxM0YzRDNDM0ZGRjkxRjkzMTk0MTc0MDA0MzRGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvV9Lw0FAtDH15lT5AKXoxAjE u4b+ZwTJSoar+p1DwE847DnN3PKuBv77xGxMZCwUlX5xPkWwyYejXwVNCdxdcQNU 1K2KtM40C4ORgAXgWJQeTDPlIxtgjGRiLRK//mt11QN/yf8YZQhuS9TL/pmG1FnA fY0IDV4DfDoR1tOltqI5HrTJ3S2pzD+vdv/MWCNJrDAf+h9iGFdMWiJiM9lxVw/y /ifZ4RiYdEQviMsuNlFhwGdaVL7E63JbUT8mblkQgKUDrchu8F53v5F1R9Y3Vt0l 7d7yCWkNQXhv3jPt8Skd8Qa20A0+jmjEDQT0UjGYcaro9aqgXHToakbBAs4hAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCkI6Q38T89PD//kfkxlBdABDT+UwHwYDVR0j BBgwFoAUCX/IGl6kmoj/S78jiwuZiGqCpqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85Qzk5MjMxNTgwQkQ2OUI5NUY4NTI3MkQxMzczNENDODRE OUVDNjVBMzlBQjkzNEY0ODUyQTYxRUFGOTc1NjA2LzAvMDk3RkM4MUE1RUE0OUE4 OEZGNEJCRjIzOEIwQjk5ODg2QTgyQTZBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTdGQzgxQTVFQTQ5QTg4RkY0 QkJGMjM4QjBCOTk4ODZBODJBNkE0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUM5OTIzMTU4MEJENjlCOTVGODUyNzJEMTM3MzRDQzg0RDlFQzY1QTM5 QUI5MzRGNDg1MkE2MUVBRjk3NTYwNi8wLzA5N0ZDODFBNUVBNDlBODhGRjRCQkYy MzhCMEI5OTg4NkE4MkE2QTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDN+Te2teLgURTnveFtwgsYQmA WvDYqtiKsZ/idxeILdY7S2CWmPlVu7YM0cw5Rb2ffn86i5HPEmWWXs2Grr7YEOtt AeZxfoa+EVRM1yxLfHEATWkSF32BpBETM3zdUpcOkipxyPvkuXN9mrdiVh/AKvEh cyCaS/pxs+rHwofYtvXrN2fOaQnnopXgcxS6eL6TorO0VWVo85FopQlf4gc5TJLc 31jkKmkZFd7RNw9LLP7VWCma685W+wfymm2JFZWFGjpHe2i4bmOjQJEgUJ291itq /2w+owgE18PuKoV+EctaKee3sgLj2bpnZDUuGqKHpCh6TpCoz+G7xo5mFllR -----END CERTIFICATE-----Generated at Sat Apr 5 14:08:55 2025 by rpki-client