$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft File: 48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft (raw, json) Hash identifier: XW51t+B1ozXs0aqJamirVHX2Vgb7m8wd7LJZaKpE0Mw= Subject key identifier: 61:5C:E0:99:44:B9:E9:66:91:F2:EA:BF:C9:88:37:7D:19:0C:49:CF Authority key identifier: 48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04 Certificate issuer: /CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04 Certificate serial: 1B7E41B389913B05AE47DE5D72D67A7445220CCE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft Manifest number: CC Signing time: Sat 05 Apr 2025 09:57:32 +0000 Manifest this update: Sat 05 Apr 2025 09:52:32 +0000 Manifest next update: Wed 09 Apr 2025 15:57:32 +0000 Files and hashes: 1: 3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa (hash: MP6KEuLTduKTC2jHbRBOFmj+93tQPIRLRkDk6Pnwtn0=) 2: 323830333a613738303a3a2f33322d3332203d3e20323633373136.roa (hash: g6fwQ9c/YcROHd2Xo5dCiX0Z/Vw4hDcb+Ki3Yp36vS8=) 3: 48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl (hash: X/gYipvbIv3fFu7qr4cKrpxlVhVmOiAof9BktZbw8Oo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7e:41:b3:89:91:3b:05:ae:47:de:5d:72:d6:7a:74:45:22:0c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04 Validity Not Before: Apr 5 09:52:32 2025 GMT Not After : Apr 9 15:57:32 2025 GMT Subject: CN=615CE09944B9E96691F2EABFC988377D190C49CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:c4:55:92:10:bc:1c:36:38:1a:f3:20:45: 1b:17:9d:0e:59:f1:56:90:a9:87:cb:c7:2a:7a:cf: aa:a2:bb:23:f5:3d:fd:9a:96:4e:17:11:39:87:d8: 51:5e:f5:a8:cd:62:39:08:ce:f2:50:57:76:c9:8a: 73:6d:cf:8d:bf:43:0e:47:b8:46:d8:57:7c:c6:a5: 01:e8:17:d6:a7:8a:14:de:fa:32:d4:19:49:22:f6: d6:4a:ef:93:f8:48:63:9d:b3:06:a4:ec:44:82:99: 56:f0:3e:9e:79:b6:d5:01:b2:1f:11:72:fb:e4:9c: 6d:d2:14:13:5c:3e:cf:c5:fe:14:b2:b2:bd:bc:54: b3:50:a7:11:84:1b:b6:4b:0f:4b:a9:64:42:90:c7: d7:ca:cd:13:72:a8:c2:0b:15:27:62:a9:3c:3e:d8: 47:5f:82:90:86:76:27:38:16:54:cd:41:80:4d:3d: 67:22:0b:f0:ac:31:10:2d:0c:01:4b:a5:f9:3c:b9: 36:18:dc:cd:b9:14:f6:c9:41:bb:b4:b6:17:18:b3: c2:6d:ab:92:2e:7a:74:fe:11:4b:10:7b:02:ae:09: 5d:39:a0:9b:36:25:d9:46:d5:b4:ff:63:d9:63:5e: 7f:d5:af:40:65:ad:13:9b:c7:6d:f8:e6:e9:2e:54: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:E0:99:44:B9:E9:66:91:F2:EA:BF:C9:88:37:7D:19:0C:49:CF X509v3 Authority Key Identifier: keyid:48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a4:4c:d4:b0:70:08:b4:3f:e8:96:be:2e:21:eb:fa:07:df: 3e:27:26:32:47:62:9f:d0:55:f1:4a:57:e2:50:ba:3f:f0:7e: 8c:82:08:3c:a1:db:4d:ae:0c:7a:9f:cf:ac:96:79:b3:d7:19: 77:1c:66:c4:09:fc:8b:bb:d5:b6:55:b9:3b:06:6e:37:a1:93: 44:e9:eb:f1:c8:91:3b:b0:4a:0d:c1:fd:31:d9:41:0f:a3:b6: 7f:85:02:b5:8e:ac:61:c5:af:f7:c3:89:3c:41:f0:00:75:33: ec:98:39:9c:ce:88:0b:23:c1:4c:4a:1a:f4:7a:e5:db:de:7e: 99:c0:8d:29:be:58:bb:71:f0:8e:53:52:d7:53:5f:86:11:16: 40:f0:47:b5:f9:4b:4b:76:a2:b3:00:e9:b6:21:f6:f9:16:1e: 17:37:6b:ad:bf:01:89:f2:e2:b3:40:95:18:2e:fe:53:8f:76: 4d:a0:2f:40:17:ca:f4:e8:f3:0c:05:91:b7:1b:56:68:19:10: 36:48:bb:c1:eb:8f:d6:23:f6:ad:b2:c4:df:54:4c:80:6b:f4: f0:73:b1:4b:7d:21:fb:34:dd:5a:fa:a4:7c:d7:ba:86:ae:4e: 44:b0:15:02:8f:49:a3:41:ed:36:0a:50:f2:95:df:4d:72:96: ae:f7:61:09 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG35Bs4mROwWuR95dctZ6dEUiDM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhBMkFFNTEwQzI4MTIyNjM3MzJGQTJBOUYwQUYxODlE MUI3M0IwNDAeFw0yNTA0MDUwOTUyMzJaFw0yNTA0MDkxNTU3MzJaMDMxMTAvBgNV BAMTKDYxNUNFMDk5NDRCOUU5NjY5MUYyRUFCRkM5ODgzNzdEMTkwQzQ5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXCcRVkhC8HDY4GvMgRRsXnQ5Z 8VaQqYfLxyp6z6qiuyP1Pf2alk4XETmH2FFe9ajNYjkIzvJQV3bJinNtz42/Qw5H uEbYV3zGpQHoF9anihTe+jLUGUki9tZK75P4SGOdswak7ESCmVbwPp55ttUBsh8R cvvknG3SFBNcPs/F/hSysr28VLNQpxGEG7ZLD0upZEKQx9fKzRNyqMILFSdiqTw+ 2EdfgpCGdic4FlTNQYBNPWciC/CsMRAtDAFLpfk8uTYY3M25FPbJQbu0thcYs8Jt q5IuenT+EUsQewKuCV05oJs2JdlG1bT/Y9ljXn/Vr0BlrRObx2345ukuVAKNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYVzgmUS56WaR8uq/yYg3fRkMSc8wHwYDVR0j BBgwFoAUSKKuUQwoEiY3MvoqnwrxidG3OwQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMjkxQUVCMTdCREVGQUNEMDg2N0E2MEFFQUQzMDdBRDZB MUMwRTE2MjhGM0VGOEQxRURCRTJERjg0REZDNUFELzAvNDhBMkFFNTEwQzI4MTIy NjM3MzJGQTJBOUYwQUYxODlEMUI3M0IwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OEEyQUU1MTBDMjgxMjI2Mzcz MkZBMkE5RjBBRjE4OUQxQjczQjA0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzI5MUFFQjE3QkRFRkFDRDA4NjdBNjBBRUFEMzA3QUQ2QTFDMEUxNjI4 RjNFRjhEMUVEQkUyREY4NERGQzVBRC8wLzQ4QTJBRTUxMEMyODEyMjYzNzMyRkEy QTlGMEFGMTg5RDFCNzNCMDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8pEzUsHAItD/olr4uIev6B98+ JyYyR2Kf0FXxSlfiULo/8H6Mggg8odtNrgx6n8+slnmz1xl3HGbECfyLu9W2Vbk7 Bm43oZNE6evxyJE7sEoNwf0x2UEPo7Z/hQK1jqxhxa/3w4k8QfAAdTPsmDmczogL I8FMShr0euXb3n6ZwI0pvli7cfCOU1LXU1+GERZA8Ee1+UtLdqKzAOm2Ifb5Fh4X N2utvwGJ8uKzQJUYLv5Tj3ZNoC9AF8r06PMMBZG3G1ZoGRA2SLvB64/WI/atssTf VEyAa/Twc7FLfSH7NN1a+qR817qGrk5EsBUCj0mjQe02ClDyld9Ncpau92EJ -----END CERTIFICATE-----Generated at Sat Apr 5 14:51:26 2025 by rpki-client