$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft File: 1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft (raw, json) Hash identifier: GqOUrfNvxTIjHZ0vrcK9N8lZZMOw6cYNl5UD9K2axtA= Subject key identifier: D6:6F:34:18:2F:87:59:F0:31:F8:73:7D:35:22:2E:B2:19:1E:08:F8 Authority key identifier: 1C:BD:B3:7A:B8:E4:CD:D5:71:7B:BF:2A:56:ED:47:FC:4E:35:F1:67 Certificate issuer: /CN=1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167 Certificate serial: 64609BFB412F7EF35D5391A197AAF6BCA279E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft Manifest number: D4 Signing time: Tue 15 Apr 2025 10:50:49 +0000 Manifest this update: Tue 15 Apr 2025 10:45:49 +0000 Manifest next update: Sun 20 Apr 2025 04:04:49 +0000 Files and hashes: 1: 323830313a31303a3830303a3a2f34382d3438203d3e203138373437.roa (hash: FpdtKovKQN2/OcXNHQIfKL9k5wdU39zR3a6EvXhQvJM=) 2: 1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl (hash: Zp9aKJagTM2XtnnfspJtIAUQBevpAT9rIHwBHu8T/+s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 23:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:60:9b:fb:41:2f:7e:f3:5d:53:91:a1:97:aa:f6:bc:a2:79:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167 Validity Not Before: Apr 15 10:45:49 2025 GMT Not After : Apr 20 04:04:49 2025 GMT Subject: CN=D66F34182F8759F031F8737D35222EB2191E08F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b5:b1:4d:8d:c5:32:c9:e9:e7:b3:00:43:a9: 1e:44:3a:30:35:7c:b3:67:2c:90:6a:72:43:bb:38: e4:b2:7e:dc:d0:35:99:e4:c5:dd:2d:62:33:e9:a3: f3:47:83:e2:cd:99:b5:dc:90:89:9b:ea:bd:45:2d: fa:81:d9:ed:c7:ab:99:9d:67:89:fe:3b:e0:75:f5: d2:51:0e:35:68:95:36:59:11:96:5d:5c:37:cf:75: 98:71:10:aa:d9:dc:24:5a:1a:79:e2:3a:78:f1:59: e6:30:98:61:35:16:ab:3d:37:32:6f:49:25:00:0b: ce:3e:20:44:81:c0:db:4b:a2:c9:30:ef:97:97:05: 50:62:0a:c6:e5:c4:87:f4:7f:b4:a5:0d:9c:0d:21: 0d:4b:f3:e1:1a:f8:80:a1:de:ea:e5:17:58:fc:0c: 3e:ba:60:b4:50:7f:7d:cf:53:91:73:6b:e4:7a:85: 7a:0b:2f:a2:8d:ef:3d:ea:73:2c:59:b2:b2:4a:f7: 3f:9d:39:c1:28:a0:10:1f:93:8f:0c:b6:8e:8d:87: 42:33:34:7e:5d:4a:20:92:9f:23:ab:10:ec:d6:5a: f7:38:1d:44:0d:ed:f8:28:30:31:cf:57:55:be:df: 0c:da:8d:b2:41:f9:29:8f:d9:07:31:67:e3:29:dd: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:34:18:2F:87:59:F0:31:F8:73:7D:35:22:2E:B2:19:1E:08:F8 X509v3 Authority Key Identifier: keyid:1C:BD:B3:7A:B8:E4:CD:D5:71:7B:BF:2A:56:ED:47:FC:4E:35:F1:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:09:87:49:05:d6:36:72:0a:4b:0e:95:ce:8d:9f:52:3f:a4: f0:e3:a9:cc:02:70:a8:bb:4f:f5:47:14:5a:89:93:fc:03:b7: c1:b9:46:b9:aa:b1:d2:57:8f:77:a9:a6:01:01:e3:36:6c:64: cb:29:92:4f:57:1d:de:c0:f3:10:d5:9d:74:57:c9:61:e9:ba: 1c:da:fe:87:47:f8:cd:06:43:ca:ad:7d:90:b6:f3:f4:fc:be: f6:41:5c:d6:64:80:a8:cc:4b:23:ec:89:6e:56:3c:3f:ff:8f: 46:03:46:59:1e:28:33:8c:25:11:cb:7f:70:f8:9a:99:aa:b5: 5c:38:ea:e5:64:31:2b:eb:23:77:67:f2:26:4e:e3:e4:70:1d: 8c:31:76:10:dd:af:d0:4a:ba:91:da:40:da:b2:a1:95:77:4f: f9:58:5a:a5:a7:dc:0b:6f:13:93:55:55:9a:7d:fa:4d:f8:99: 45:fc:1b:89:55:ca:2a:16:6f:6d:af:c9:26:c6:d0:2d:87:f6: b1:bf:1e:1b:29:bf:ca:a1:40:ec:de:32:5d:63:b0:6a:13:64: da:34:2c:98:62:d2:70:6c:ed:06:f1:a5:00:a0:37:d9:a6:01: 8e:74:6b:ab:c0:aa:97:d5:41:47:54:d2:e4:cd:ee:17:81:86: de:2f:c1:ee -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgITZGCb+0EvfvNdU5Ghl6r2vKJ55zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxQ0JEQjM3QUI4RTRDREQ1NzE3QkJGMkE1NkVENDdGQzRF MzVGMTY3MB4XDTI1MDQxNTEwNDU0OVoXDTI1MDQyMDA0MDQ0OVowMzExMC8GA1UE AxMoRDY2RjM0MTgyRjg3NTlGMDMxRjg3MzdEMzUyMjJFQjIxOTFFMDhGODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOu1sU2NxTLJ6eezAEOpHkQ6MDV8 s2cskGpyQ7s45LJ+3NA1meTF3S1iM+mj80eD4s2ZtdyQiZvqvUUt+oHZ7cermZ1n if474HX10lEONWiVNlkRll1cN891mHEQqtncJFoaeeI6ePFZ5jCYYTUWqz03Mm9J JQALzj4gRIHA20uiyTDvl5cFUGIKxuXEh/R/tKUNnA0hDUvz4Rr4gKHe6uUXWPwM PrpgtFB/fc9TkXNr5HqFegsvoo3vPepzLFmyskr3P505wSigEB+Tjwy2jo2HQjM0 fl1KIJKfI6sQ7NZa9zgdRA3t+CgwMc9XVb7fDNqNskH5KY/ZBzFn4yndLQcCAwEA AaOCAtMwggLPMB0GA1UdDgQWBBTWbzQYL4dZ8DH4c301Ii6yGR4I+DAfBgNVHSME GDAWgBQcvbN6uOTN1XF7vypW7Uf8TjXxZzAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0 L3Jwa2kvbGFjbmljL0ExRDA1NDhBMjIwQURFOEYzRkY3Q0QxMDZEMzA3QkE1Qjk2 Mzc1MEMyNzZGNTI5MEZGN0NDQUJEMDMyNUFBNzUvMC8xQ0JEQjM3QUI4RTRDREQ1 NzE3QkJGMkE1NkVENDdGQzRFMzVGMTY3LmNybDCBuQYIKwYBBQUHAQEEgawwgakw gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzFDQkRCMzdBQjhFNENERDU3MTdC QkYyQTU2RUQ0N0ZDNEUzNUYxNjcuY2VyMIG5BggrBgEFBQcBCwSBrDCBqTCBpgYI KwYBBQUHMAuGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMUQwNTQ4QTIyMEFERThGM0ZGN0NEMTA2RDMwN0JBNUI5NjM3NTBDMjc2 RjUyOTBGRjdDQ0FCRDAzMjVBQTc1LzAvMUNCREIzN0FCOEU0Q0RENTcxN0JCRjJB NTZFRDQ3RkM0RTM1RjE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAEJh0kF1jZyCksOlc6Nn1I/pPDj qcwCcKi7T/VHFFqJk/wDt8G5RrmqsdJXj3eppgEB4zZsZMspkk9XHd7A8xDVnXRX yWHpuhza/odH+M0GQ8qtfZC28/T8vvZBXNZkgKjMSyPsiW5WPD//j0YDRlkeKDOM JRHLf3D4mpmqtVw46uVkMSvrI3dn8iZO4+RwHYwxdhDdr9BKupHaQNqyoZV3T/lY WqWn3AtvE5NVVZp9+k34mUX8G4lVyioWb22vySbG0C2H9rG/Hhspv8qhQOzeMl1j sGoTZNo0LJhi0nBs7QbxpQCgN9mmAY50a6vAqpfVQUdU0uTN7heBht4vwe4= -----END CERTIFICATE-----Generated at Wed Apr 16 00:07:02 2025 by rpki-client