$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft File: B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft (raw, json) Hash identifier: j7bCXFDCPYN+I5BztEbDG/fnSA/dGGHBofdqlDRX+GQ= Subject key identifier: 5D:3D:4E:A6:36:60:79:0E:13:23:8E:51:75:28:E6:74:D3:4A:A0:BC Authority key identifier: B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B Certificate issuer: /CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B Certificate serial: 035DD4E6CF472B314CB588FEA84990113F1BED1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft Manifest number: C4 Signing time: Fri 04 Apr 2025 20:29:30 +0000 Manifest this update: Fri 04 Apr 2025 20:24:30 +0000 Manifest next update: Wed 09 Apr 2025 18:09:30 +0000 Files and hashes: 1: 3133312e3235352e3130342e302f32322d3232203d3e203238303037.roa (hash: ctOY+G+5Zhar+6fbk/i1mfCd30UbYTcNU5VliLr9iWg=) 2: 323830333a3738303a3a2f33322d3332203d3e203238303037.roa (hash: 61q10x1ytwdqKbMMxNEhCc+9le7Iprzx39GE50JyFMU=) 3: B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl (hash: 2eOvXF0kRHMulGJ7k5n+1i4oL8Ttl2P3iE1Nz8mD/vE=) 4: 3133312e3235352e3130342e302f32322d3232203d3e20333934363834.roa (hash: 5t0uMjPhQAY1RJ1Ge6qvt6vbKyABCB4En1Ez3/KcM3I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 18:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5d:d4:e6:cf:47:2b:31:4c:b5:88:fe:a8:49:90:11:3f:1b:ed:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B Validity Not Before: Apr 4 20:24:30 2025 GMT Not After : Apr 9 18:09:30 2025 GMT Subject: CN=5D3D4EA63660790E13238E517528E674D34AA0BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:7e:b9:64:32:32:6a:ab:60:fc:ff:0c:43: 9d:5e:27:a8:c8:04:74:3a:5c:68:64:f0:62:d4:b0: aa:d7:22:1f:46:d0:33:00:25:5d:f2:47:80:0d:aa: 78:58:57:cd:e1:b8:3a:83:f1:2c:89:0d:60:8c:3a: 68:8a:0b:ee:4d:38:0b:6d:42:9e:96:d6:f5:3b:ed: be:3d:41:2d:1d:f7:cc:3c:28:e1:53:cc:32:14:8e: bb:ea:0e:a9:7c:9d:16:82:c6:87:68:96:12:ff:7f: 76:48:b6:55:f2:ed:eb:f1:f1:26:bd:4f:90:1a:11: 31:64:73:f3:80:6c:32:34:65:f5:a8:9a:9f:e4:6e: dd:94:b1:4e:e2:4c:df:10:77:55:07:f5:ea:50:8f: 25:d4:fe:5a:ab:5f:4c:2d:34:7e:dc:8c:1d:2b:4a: e7:d7:47:31:a7:c7:26:c1:a0:66:b5:2e:43:ff:42: bc:2a:74:95:8b:f8:b8:1a:f1:fd:48:a5:e2:95:2a: 16:80:2d:22:23:5a:b0:1c:63:02:bd:fe:bf:03:2d: 9c:4d:31:4d:e5:d2:f9:36:95:ac:f0:81:9c:72:85: ff:c1:7e:46:7d:0a:7d:92:1a:d5:00:a4:3d:10:d9: df:4b:d7:d1:38:f4:6c:8a:0f:f5:fc:f4:a1:dd:1c: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3D:4E:A6:36:60:79:0E:13:23:8E:51:75:28:E6:74:D3:4A:A0:BC X509v3 Authority Key Identifier: keyid:B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9f:ff:11:cd:30:21:68:87:38:77:c8:16:13:ed:cb:d5:9d: f1:f7:cd:8b:2c:6f:0c:06:22:e5:fd:ab:c6:a4:2e:fd:13:7c: 4f:10:1c:fc:f1:38:e7:70:69:69:d2:b4:27:19:0f:aa:58:ad: 3a:7c:f5:46:62:e8:0e:61:65:75:11:f0:be:10:c0:65:97:42: 32:3e:93:e1:38:d4:d3:03:d5:16:79:11:75:b8:07:53:ca:06: fb:4d:99:8f:26:f7:16:e8:80:85:04:80:0d:96:7a:03:a6:cd: 16:22:08:bc:ef:9d:27:2d:3f:5f:56:72:2c:c0:53:17:69:91: 5c:90:68:48:35:12:29:5f:27:b7:d9:7e:f7:97:2f:d3:1a:ce: d0:a5:61:15:a0:de:80:22:94:d6:50:b3:f5:e7:81:8e:5b:89: 8d:d1:02:95:8b:9f:1b:ca:63:f8:30:9a:79:6b:3b:8e:8c:1c: 5f:40:0f:16:b0:4e:10:15:30:28:96:43:15:dd:aa:58:80:82: db:31:00:05:55:70:00:76:b5:c2:a2:0d:12:b3:b5:d0:c2:00: d1:ba:46:c8:35:a1:8f:4d:3c:4d:c9:d7:2e:4c:c3:5b:19:98: 4c:fd:1d:b4:b9:21:c5:80:d2:97:07:eb:81:b7:cc:26:49:9f: 0f:7e:eb:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUA13U5s9HKzFMtYj+qEmQET8b7RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFFRDhDMkI0MzZGODQ1NkE5RkZCN0E4MDM3NzBFNTc2 MEEyNTg5QjAeFw0yNTA0MDQyMDI0MzBaFw0yNTA0MDkxODA5MzBaMDMxMTAvBgNV BAMTKDVEM0Q0RUE2MzY2MDc5MEUxMzIzOEU1MTc1MjhFNjc0RDM0QUEwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLGn65ZDIyaqtg/P8MQ51eJ6jI BHQ6XGhk8GLUsKrXIh9G0DMAJV3yR4ANqnhYV83huDqD8SyJDWCMOmiKC+5NOAtt Qp6W1vU77b49QS0d98w8KOFTzDIUjrvqDql8nRaCxodolhL/f3ZItlXy7evx8Sa9 T5AaETFkc/OAbDI0ZfWomp/kbt2UsU7iTN8Qd1UH9epQjyXU/lqrX0wtNH7cjB0r SufXRzGnxybBoGa1LkP/QrwqdJWL+Lga8f1IpeKVKhaALSIjWrAcYwK9/r8DLZxN MU3l0vk2lazwgZxyhf/BfkZ9Cn2SGtUApD0Q2d9L19E49GyKD/X89KHdHGE9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXT1OpjZgeQ4TI45RdSjmdNNKoLwwHwYDVR0j BBgwFoAUse2MK0NvhFap/7eoA3cOV2CiWJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85Q0JFQzEyN0E4MEMzRTFGMUEzNEU1NTNCODc4QjU4NTdB QUMwRkJDREI1NDJFOUQ4OEY5RkUyRUNCQTczNjlGLzAvQjFFRDhDMkI0MzZGODQ1 NkE5RkZCN0E4MDM3NzBFNTc2MEEyNTg5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUVEOEMyQjQzNkY4NDU2QTlG RkI3QTgwMzc3MEU1NzYwQTI1ODlCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUNCRUMxMjdBODBDM0UxRjFBMzRFNTUzQjg3OEI1ODU3QUFDMEZCQ0RC NTQyRTlEODhGOUZFMkVDQkE3MzY5Ri8wL0IxRUQ4QzJCNDM2Rjg0NTZBOUZGQjdB ODAzNzcwRTU3NjBBMjU4OUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7n/8RzTAhaIc4d8gWE+3L1Z3x 982LLG8MBiLl/avGpC79E3xPEBz88TjncGlp0rQnGQ+qWK06fPVGYugOYWV1EfC+ EMBll0IyPpPhONTTA9UWeRF1uAdTygb7TZmPJvcW6ICFBIANlnoDps0WIgi8750n LT9fVnIswFMXaZFckGhINRIpXye32X73ly/TGs7QpWEVoN6AIpTWULP154GOW4mN 0QKVi58bymP4MJp5azuOjBxfQA8WsE4QFTAolkMV3apYgILbMQAFVXAAdrXCog0S s7XQwgDRukbINaGPTTxNydcuTMNbGZhM/R20uSHFgNKXB+uBt8wmSZ8PfuvJ -----END CERTIFICATE-----Generated at Sun Apr 6 19:54:49 2025 by rpki-client