$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: L90hTCNhdY5z9WgKjoJ/fbmhJOYzBHgAtnbwlaFJ2FE= Subject key identifier: 0D:72:40:B5:58:A1:65:12:DA:98:72:17:4F:F2:E7:3A:B9:A5:79:6E Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 26C2E2C980339EF55960BD48B67CD91C5DD748D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: C3 Signing time: Sun 06 Apr 2025 17:21:15 +0000 Manifest this update: Sun 06 Apr 2025 17:16:15 +0000 Manifest next update: Sat 12 Apr 2025 06:54:15 +0000 Files and hashes: 1: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: Q0UxlK2USwVNiqtUXHDxkUL70F6Ilw8/trrnd7EEUDQ=) 2: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: Axfi1vgCv2D0D6QqnuJcrPN9fByY9W/ouznL3Xg+MfY=) 3: 323830333a323231303a3a2f33362d3438203d3e20323731383936.roa (hash: fwMFuYTmneqYkrVV1PPwraanGPuBSlMGUI9BuNyUKqQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c2:e2:c9:80:33:9e:f5:59:60:bd:48:b6:7c:d9:1c:5d:d7:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Apr 6 17:16:15 2025 GMT Not After : Apr 12 06:54:15 2025 GMT Subject: CN=0D7240B558A16512DA9872174FF2E73AB9A5796E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:25:3c:30:25:79:99:bd:83:68:86:0a:e5: 1a:90:05:29:7b:ae:83:3a:e0:67:c2:6e:ec:bd:43: dc:8d:3d:d9:f4:ee:7d:de:f8:be:46:f4:8e:b9:da: 19:7d:a3:66:ee:f1:c7:6f:d0:e4:9c:5c:c9:8e:94: 0e:09:df:d9:6b:aa:a7:10:8b:63:0d:68:c5:36:ff: 59:6e:ee:48:0a:f7:0b:9d:72:d0:e3:69:af:07:5a: 8a:2b:a3:48:63:66:e9:2b:a5:7f:84:3a:9f:14:eb: c0:11:f8:90:6a:ea:e8:7b:8b:b2:23:8d:f5:9e:44: bd:17:c9:ba:ea:1b:ea:77:db:72:17:18:26:e2:db: 41:55:e3:ab:2d:3d:8f:45:c4:a0:a9:e5:20:01:2e: 8e:96:1f:63:f1:87:ff:94:17:a5:0c:78:e9:1f:b0: a8:6e:31:4b:c9:17:25:bf:49:86:6c:b4:61:0e:8b: 1d:2e:0b:d7:8d:45:b1:b7:ab:db:f0:de:0f:cc:65: 0d:db:a5:a7:cd:9b:8a:d8:70:ec:12:e8:c3:37:d7: 46:b2:f8:3b:a9:c1:56:42:58:f2:40:34:48:75:6a: f7:6d:d0:52:6b:39:c7:48:e1:12:2f:48:50:b1:83: d4:0f:f6:2f:d4:96:69:2f:2b:1b:b7:a8:8a:ee:d2: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:72:40:B5:58:A1:65:12:DA:98:72:17:4F:F2:E7:3A:B9:A5:79:6E X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:63:54:90:26:f9:ed:5e:f1:9c:c0:40:f5:f3:3e:56:bb:2d: 2d:c8:4c:24:f4:dd:fc:73:40:db:ce:41:56:fd:82:72:39:4f: 55:f1:c1:76:c1:97:94:0d:e5:47:db:4c:4a:6c:7e:24:16:e7: 0d:9e:95:b5:10:78:a4:41:43:be:f2:87:35:42:f5:32:87:50: 94:80:a9:73:8e:71:2d:97:dc:03:e3:79:c7:77:6a:ca:12:84: d1:d7:95:59:0c:2b:91:a6:24:15:e9:74:cc:41:01:86:e7:dc: 5d:5b:89:55:a2:b1:10:78:2f:7e:08:52:a5:cb:75:40:4c:be: 64:cb:2c:66:f0:7d:63:79:ee:89:ef:bc:c9:a0:cf:99:97:a8: 69:dd:5d:5c:ab:20:09:f4:2c:18:7f:e7:2d:01:af:2f:6e:e1: 34:7b:29:99:3f:f7:ef:8c:f6:eb:9b:83:15:16:6a:61:b2:14: c0:b0:8f:0e:a0:c4:0b:7b:ac:27:dc:39:a8:7c:24:69:ea:48: 14:46:bb:1e:03:31:c8:c4:d4:e9:0e:71:6a:db:8e:76:bb:d9: c8:ee:8b:e4:b1:ec:f5:e4:43:ca:4b:5d:42:d8:72:35:e0:0c: a0:82:3c:fd:e5:a4:95:a1:1b:12:f6:00:af:77:fc:11:f3:88: 00:ab:64:82 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJsLiyYAznvVZYL1ItnzZHF3XSNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNTA0MDYxNzE2MTVaFw0yNTA0MTIwNjU0MTVaMDMxMTAvBgNV BAMTKDBENzI0MEI1NThBMTY1MTJEQTk4NzIxNzRGRjJFNzNBQjlBNTc5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeySU8MCV5mb2DaIYK5RqQBSl7 roM64GfCbuy9Q9yNPdn07n3e+L5G9I652hl9o2bu8cdv0OScXMmOlA4J39lrqqcQ i2MNaMU2/1lu7kgK9wudctDjaa8HWooro0hjZukrpX+EOp8U68AR+JBq6uh7i7Ij jfWeRL0XybrqG+p323IXGCbi20FV46stPY9FxKCp5SABLo6WH2Pxh/+UF6UMeOkf sKhuMUvJFyW/SYZstGEOix0uC9eNRbG3q9vw3g/MZQ3bpafNm4rYcOwS6MM310ay +DupwVZCWPJANEh1avdt0FJrOcdI4RIvSFCxg9QP9i/UlmkvKxu3qIru0kShAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDXJAtVihZRLamHIXT/LnOrmleW4wHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0Y1SQJvntXvGcwED18z5Wuy0t yEwk9N38c0DbzkFW/YJyOU9V8cF2wZeUDeVH20xKbH4kFucNnpW1EHikQUO+8oc1 QvUyh1CUgKlzjnEtl9wD43nHd2rKEoTR15VZDCuRpiQV6XTMQQGG59xdW4lVorEQ eC9+CFKly3VATL5kyyxm8H1jee6J77zJoM+Zl6hp3V1cqyAJ9CwYf+ctAa8vbuE0 eymZP/fvjPbrm4MVFmphshTAsI8OoMQLe6wn3DmofCRp6kgURrseAzHIxNTpDnFq 2452u9nI7ovksez15EPKS11C2HI14Ayggjz95aSVoRsS9gCvd/wR84gAq2SC -----END CERTIFICATE-----Generated at Sun Apr 6 19:52:28 2025 by rpki-client