$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: Z7rpYfAekqdtxdd0rAci7hc3Bxu4B0/ldpF6GpYvnwc= Subject key identifier: AA:0C:0F:B3:1B:18:FB:3F:21:10:81:AB:35:E2:7E:F4:7F:21:9C:43 Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 11D91F34D1A73E1C26F9E280FA95809750F200AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: C7 Signing time: Thu 03 Apr 2025 09:32:51 +0000 Manifest this update: Thu 03 Apr 2025 09:27:51 +0000 Manifest next update: Tue 08 Apr 2025 22:30:51 +0000 Files and hashes: 1: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: hiq3f5SQVXyvVqAHJFD41H8GmsplFaT7zWIIcFR5Zms=) 2: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: cg044uuxioF07LpoAGEa3TcH1zFRrrytckcS1bdmjjM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 22:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d9:1f:34:d1:a7:3e:1c:26:f9:e2:80:fa:95:80:97:50:f2:00:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Apr 3 09:27:51 2025 GMT Not After : Apr 8 22:30:51 2025 GMT Subject: CN=AA0C0FB31B18FB3F211081AB35E27EF47F219C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:be:69:96:3c:b7:19:c3:c7:53:69:53:07: dc:20:67:72:b2:23:8b:30:a4:5e:d7:82:32:c7:5b: ad:fe:5b:48:5c:60:15:92:78:fa:ce:fe:ea:46:b3: 99:f7:1c:ba:53:05:2a:87:13:b4:4d:55:21:b4:9c: c2:5d:00:33:c7:89:c8:5c:c2:c3:20:d8:58:de:5c: 44:58:85:dc:66:7a:da:33:6a:b8:04:f3:4b:de:87: 09:d3:06:23:5b:87:7b:42:59:45:5f:51:58:1f:d7: df:56:14:00:c1:c9:81:80:06:1a:2a:09:2d:34:6a: 43:4e:8d:2a:de:36:ae:e4:76:74:b1:17:fe:f2:d2: b3:b7:b3:d8:14:53:88:ea:a6:95:5d:10:21:92:3c: f4:a6:58:92:de:9f:de:2d:cf:b0:fb:4c:fd:80:fd: 9d:7c:06:ba:b6:f7:30:f9:bf:73:95:f4:88:02:81: 3a:bf:24:92:30:61:ee:00:97:2d:4a:fa:13:48:75: 3e:63:a5:e9:dc:26:24:83:e3:31:1e:2e:a5:09:de: 79:4e:e1:e1:5d:66:aa:10:8d:c3:9a:9e:44:7b:38: c4:e8:00:c9:43:c3:f2:f1:0e:a5:af:07:cb:db:20: 7b:75:05:5e:98:ba:c0:c3:33:99:bd:3f:43:a7:b0: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0C:0F:B3:1B:18:FB:3F:21:10:81:AB:35:E2:7E:F4:7F:21:9C:43 X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:78:a9:3d:a7:10:6a:29:fd:67:4f:d8:3e:06:90:60:3c:0c: fe:47:be:0e:be:87:3c:a2:28:c3:97:fc:e5:4b:a2:22:e2:0a: 54:25:5c:87:61:d3:ca:3e:d5:94:4e:9b:02:08:48:99:53:c7: 4d:d6:00:cc:db:cf:e6:a5:38:01:22:9e:83:e0:72:fa:51:f3: 39:1a:4a:09:d0:c2:7d:55:1e:c0:b7:32:d2:74:03:6c:58:f7: 85:66:5b:5d:f6:26:2c:da:96:1c:85:12:cd:76:5f:f6:79:6e: ba:2f:c8:c7:f5:20:df:cb:92:8a:ab:ca:6c:96:f4:6f:9c:3e: 42:41:a7:34:39:ce:c8:2d:c9:62:65:50:89:5c:88:f2:a1:58: ab:d3:7e:0a:70:81:55:71:04:7d:1e:b3:b0:84:e4:13:3f:3d: 6b:fa:20:b6:55:69:b3:f8:3c:37:b9:99:2c:66:d5:4e:b5:f5: 85:3b:19:26:00:fa:f6:1c:6c:db:f5:39:fd:36:a5:94:66:06: f1:34:c1:cd:bf:0d:89:a4:22:e1:36:13:3d:10:de:38:db:2e: 55:cb:78:40:b9:d8:9a:d0:04:c4:da:e1:1e:f7:91:83:b0:c2: 93:6d:b0:53:37:68:67:41:56:fa:b4:e2:6b:61:5a:40:47:e5: 5e:57:70:f7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEdkfNNGnPhwm+eKA+pWAl1DyAKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNTA0MDMwOTI3NTFaFw0yNTA0MDgyMjMwNTFaMDMxMTAvBgNV BAMTKEFBMEMwRkIzMUIxOEZCM0YyMTEwODFBQjM1RTI3RUY0N0YyMTlDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIr5pljy3GcPHU2lTB9wgZ3Ky I4swpF7XgjLHW63+W0hcYBWSePrO/upGs5n3HLpTBSqHE7RNVSG0nMJdADPHichc wsMg2FjeXERYhdxmetozargE80vehwnTBiNbh3tCWUVfUVgf199WFADByYGABhoq CS00akNOjSreNq7kdnSxF/7y0rO3s9gUU4jqppVdECGSPPSmWJLen94tz7D7TP2A /Z18Brq29zD5v3OV9IgCgTq/JJIwYe4Aly1K+hNIdT5jpencJiSD4zEeLqUJ3nlO 4eFdZqoQjcOankR7OMToAMlDw/LxDqWvB8vbIHt1BV6YusDDM5m9P0OnsE/NAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqgwPsxsY+z8hEIGrNeJ+9H8hnEMwHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCleKk9pxBqKf1nT9g+BpBgPAz+ R74Ovoc8oijDl/zlS6Ii4gpUJVyHYdPKPtWUTpsCCEiZU8dN1gDM28/mpTgBIp6D 4HL6UfM5GkoJ0MJ9VR7AtzLSdANsWPeFZltd9iYs2pYchRLNdl/2eW66L8jH9SDf y5KKq8pslvRvnD5CQac0Oc7ILcliZVCJXIjyoVir034KcIFVcQR9HrOwhOQTPz1r +iC2VWmz+Dw3uZksZtVOtfWFOxkmAPr2HGzb9Tn9NqWUZgbxNMHNvw2JpCLhNhM9 EN442y5Vy3hAudia0ATE2uEe95GDsMKTbbBTN2hnQVb6tOJrYVpAR+VeV3D3 -----END CERTIFICATE-----Generated at Sat Apr 5 17:15:17 2025 by rpki-client