$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft File: F941F05838322F3861C4923BEDA92F310248FAF9.mft (raw, json) Hash identifier: g3H3AT3KX9p41MHGpeU3zhPzzfSjcP7j+cM8ZYORiXE= Subject key identifier: C8:51:9D:75:DB:9B:5A:7F:7E:EA:6D:F1:26:0E:F0:63:02:07:C4:9E Authority key identifier: F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9 Certificate issuer: /CN=F941F05838322F3861C4923BEDA92F310248FAF9 Certificate serial: 4C7770AB9E30D43E19E66ED3F124550D67D85E2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft Manifest number: D2 Signing time: Sun 20 Apr 2025 10:12:02 +0000 Manifest this update: Sun 20 Apr 2025 10:07:02 +0000 Manifest next update: Fri 25 Apr 2025 14:43:02 +0000 Files and hashes: 1: 3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa (hash: KKJfQLLThGAAKVwtivTsfa5yqUnFZhZ/02wzS1bCmlQ=) 2: F941F05838322F3861C4923BEDA92F310248FAF9.crl (hash: 30HHuriC3CXoMG5UE3DqUmTZ6MQi2RCB6UaiKZAPaRM=) 3: 323830333a6431303a3a2f33322d3332203d3e20323732303335.roa (hash: WY6VRrpxv8aG5czo6X+zAGJp7ft5IIjhhxZIhKK6p2k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 14:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:77:70:ab:9e:30:d4:3e:19:e6:6e:d3:f1:24:55:0d:67:d8:5e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F941F05838322F3861C4923BEDA92F310248FAF9 Validity Not Before: Apr 20 10:07:02 2025 GMT Not After : Apr 25 14:43:02 2025 GMT Subject: CN=C8519D75DB9B5A7F7EEA6DF1260EF0630207C49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:ed:a1:9d:ad:72:9f:b4:8d:f8:7b:de:35: 03:db:b8:d9:e4:48:66:ef:16:42:8b:98:c8:14:d3: b8:7e:ec:d7:66:19:33:1e:86:b8:be:f6:e0:64:5e: 33:a4:02:cc:da:ac:b3:4c:51:8c:0b:cd:03:76:96: 0c:0d:3a:e3:ee:9b:1a:0f:89:aa:09:db:a3:14:cc: 42:73:62:14:17:42:bf:a3:d5:b5:7d:3b:93:9f:77: bc:41:e8:73:24:ba:4a:41:4b:eb:63:30:59:ff:81: 19:d3:c4:67:f8:96:79:6e:40:34:c9:7a:84:c2:b0: 39:60:0e:ac:87:4d:b5:1a:2f:4a:91:43:6c:94:6d: 7e:dd:eb:fc:5e:fd:ae:08:91:d4:bc:f1:03:3a:39: 49:03:b8:5c:40:a7:72:7a:b8:7d:48:8c:97:29:ee: 71:5a:81:4b:07:1b:47:c6:dd:61:47:37:e3:d1:89: 8b:55:63:5c:53:58:16:6d:13:d1:55:4a:b1:ba:e8: c6:92:aa:ec:33:e1:d5:43:a9:74:5a:88:8a:eb:77: 6f:a0:6e:82:ce:c5:76:ff:a3:b3:ed:1b:ec:fa:f9: 3b:2b:47:ee:cc:61:01:d4:56:f5:98:11:6b:03:e6: 2a:83:4e:50:5f:65:f0:a0:23:55:bc:e0:e6:75:48: 51:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:9D:75:DB:9B:5A:7F:7E:EA:6D:F1:26:0E:F0:63:02:07:C4:9E X509v3 Authority Key Identifier: keyid:F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3e:b8:4a:fe:f4:e9:3e:af:c2:ea:b3:02:19:d7:66:08:87: a8:d4:95:eb:f0:c1:91:e3:c5:64:6c:0f:6b:55:70:fe:6e:90: 55:0b:28:25:8e:12:1e:b6:c2:54:cd:1e:24:e1:b2:2b:3c:d3: 9e:53:e3:bc:93:00:03:92:c7:4f:cb:5f:75:78:16:e3:0b:10: ca:0a:eb:4e:69:90:e3:1b:2d:d5:c1:ca:06:a2:ab:b3:4b:13: 24:01:4e:6b:1f:96:e5:f9:be:ae:8b:bc:56:7a:bf:53:bd:76: 5d:95:d0:bb:35:cc:bf:8b:4e:0c:cf:4a:de:62:df:ba:bc:f3: 2e:d7:65:cf:f0:24:9f:da:d7:9d:cd:cd:ed:fa:cb:5f:53:fe: ce:14:0b:93:13:93:5c:7a:37:f6:a9:4e:a7:30:37:13:17:a1: 1a:b2:cd:60:00:49:5c:4c:0c:ad:92:85:a7:f4:02:da:2e:b5: ac:0b:32:07:3f:2e:c3:93:7b:9e:97:92:d2:f2:5f:56:26:e3: 4f:16:27:2d:b9:4d:d9:6c:e2:f9:7f:82:2e:ac:aa:f7:20:a2: 48:30:55:44:7e:db:e1:bf:72:30:17:2f:3c:08:d0:40:c1:3f: 43:2b:fb:f8:f9:fe:a2:06:23:42:27:54:b1:73:96:88:fd:31: fd:a9:49:4d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTHdwq54w1D4Z5m7T8SRVDWfYXi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk0MUYwNTgzODMyMkYzODYxQzQ5MjNCRURBOTJGMzEw MjQ4RkFGOTAeFw0yNTA0MjAxMDA3MDJaFw0yNTA0MjUxNDQzMDJaMDMxMTAvBgNV BAMTKEM4NTE5RDc1REI5QjVBN0Y3RUVBNkRGMTI2MEVGMDYzMDIwN0M0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWt+2hna1yn7SN+HveNQPbuNnk SGbvFkKLmMgU07h+7NdmGTMehri+9uBkXjOkAszarLNMUYwLzQN2lgwNOuPumxoP iaoJ26MUzEJzYhQXQr+j1bV9O5Ofd7xB6HMkukpBS+tjMFn/gRnTxGf4lnluQDTJ eoTCsDlgDqyHTbUaL0qRQ2yUbX7d6/xe/a4IkdS88QM6OUkDuFxAp3J6uH1IjJcp 7nFagUsHG0fG3WFHN+PRiYtVY1xTWBZtE9FVSrG66MaSquwz4dVDqXRaiIrrd2+g boLOxXb/o7PtG+z6+TsrR+7MYQHUVvWYEWsD5iqDTlBfZfCgI1W84OZ1SFHZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyFGdddubWn9+6m3xJg7wYwIHxJ4wHwYDVR0j BBgwFoAU+UHwWDgyLzhhxJI77akvMQJI+vkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTlCNEVBMTRDMkY3MTE3QzcyRjFGMENFRkZBNkI1RDAz QUIzNUUyMTMzMDVENEQwMDI2NEZGOTcyMzg1NEY2LzAvRjk0MUYwNTgzODMyMkYz ODYxQzQ5MjNCRURBOTJGMzEwMjQ4RkFGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTQxRjA1ODM4MzIyRjM4NjFD NDkyM0JFREE5MkYzMTAyNDhGQUY5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUE5QjRFQTE0QzJGNzExN0M3MkYxRjBDRUZGQTZCNUQwM0FCMzVFMjEz MzA1RDREMDAyNjRGRjk3MjM4NTRGNi8wL0Y5NDFGMDU4MzgzMjJGMzg2MUM0OTIz QkVEQTkyRjMxMDI0OEZBRjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6PrhK/vTpPq/C6rMCGddmCIeo 1JXr8MGR48VkbA9rVXD+bpBVCygljhIetsJUzR4k4bIrPNOeU+O8kwADksdPy191 eBbjCxDKCutOaZDjGy3VwcoGoquzSxMkAU5rH5bl+b6ui7xWer9TvXZdldC7Ncy/ i04Mz0reYt+6vPMu12XP8CSf2tedzc3t+stfU/7OFAuTE5Ncejf2qU6nMDcTF6Ea ss1gAElcTAytkoWn9ALaLrWsCzIHPy7Dk3uel5LS8l9WJuNPFictuU3ZbOL5f4Iu rKr3IKJIMFVEftvhv3IwFy88CNBAwT9DK/v4+f6iBiNCJ1Sxc5aI/TH9qUlN -----END CERTIFICATE-----Generated at Tue Apr 22 12:47:35 2025 by rpki-client