$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft File: 963A20938985B7260F30AFD597E6AA10A2E76FE2.mft (raw, json) Hash identifier: ZlWXYJnaRZCPPeBtZjkCIIQi1n180TTjaIAaEu34fGo= Subject key identifier: 5D:C5:90:8C:A3:E1:BD:7E:1A:82:78:0B:A7:01:15:ED:4E:A0:0B:33 Authority key identifier: 96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2 Certificate issuer: /CN=963A20938985B7260F30AFD597E6AA10A2E76FE2 Certificate serial: 28D72644991911A9DE1F6E5F5ED5C7D79B57BAE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft Manifest number: D2 Signing time: Fri 18 Apr 2025 08:12:29 +0000 Manifest this update: Fri 18 Apr 2025 08:07:29 +0000 Manifest next update: Wed 23 Apr 2025 01:52:29 +0000 Files and hashes: 1: 963A20938985B7260F30AFD597E6AA10A2E76FE2.crl (hash: 69ghkhggx+VUGpSzVScVRyi4exztWXKkO3uRVUm6Q5Y=) 2: 323830333a386631303a3a2f33322d3332203d3e20323732313137.roa (hash: 2V/sn9AsNltMPOvUOLFZv3DLgE3TAbM04cvqSQJQK4w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d7:26:44:99:19:11:a9:de:1f:6e:5f:5e:d5:c7:d7:9b:57:ba:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=963A20938985B7260F30AFD597E6AA10A2E76FE2 Validity Not Before: Apr 18 08:07:29 2025 GMT Not After : Apr 23 01:52:29 2025 GMT Subject: CN=5DC5908CA3E1BD7E1A82780BA70115ED4EA00B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:84:ba:6a:7f:74:cf:37:cf:1c:70:e1:2f: ef:45:35:63:a3:bb:2d:c8:a8:e0:87:df:97:63:01: c1:3f:b0:64:3f:48:7a:06:7e:42:da:95:8f:38:2c: d0:71:a2:3b:10:86:40:1c:51:01:b7:35:4e:70:1e: 77:06:5d:b7:bb:7b:e0:9f:52:ef:aa:f1:c1:ae:0c: af:b6:01:25:0d:bd:4e:aa:9d:bd:71:ca:44:2e:e1: 60:74:f9:2a:0b:2a:bf:22:16:2b:33:17:f8:15:ae: 8c:90:9a:49:c6:1f:9a:c6:f5:ef:16:88:47:5f:65: e8:d6:70:72:2a:da:a8:78:92:ad:27:56:de:dc:62: c4:ef:55:5c:a4:21:d3:41:b0:24:e7:77:5e:a8:26: bb:12:3b:fe:7e:b4:e6:27:98:cb:56:f5:91:c6:f2: 67:9d:b6:74:42:5f:3a:69:08:48:22:1c:88:a3:0b: 8b:2d:5f:02:63:50:68:6e:0b:54:81:d7:f6:2d:70: ce:61:08:f1:1f:c2:18:12:21:cd:b4:f9:de:47:83: fd:e5:f8:fa:11:01:d1:37:0c:58:0d:f0:d1:a8:0e: 3b:22:e2:aa:3f:06:19:10:0c:57:3d:75:0d:42:c3: 77:99:02:b0:47:fe:ea:1d:33:d1:f5:88:55:a4:7b: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C5:90:8C:A3:E1:BD:7E:1A:82:78:0B:A7:01:15:ED:4E:A0:0B:33 X509v3 Authority Key Identifier: keyid:96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:59:eb:a7:a9:ba:e5:8e:e1:a3:07:89:4f:52:83:6c:47:55: be:d3:b9:5e:27:cc:79:5c:c6:f9:6d:f7:9c:23:10:ea:b7:9d: c7:39:cc:13:44:e0:c3:6e:f4:72:43:71:bb:af:d3:7d:81:bf: 7e:ea:a0:8d:7b:42:97:45:67:b8:85:e2:67:47:5d:50:cc:1d: 0a:39:ed:6b:82:24:ff:47:c1:4d:55:a5:e0:19:3a:c6:5e:9f: 68:3d:f2:26:e3:71:7d:78:6f:3e:56:37:3a:8a:e9:4d:e9:0c: d9:f4:ba:d1:77:7d:9a:8a:b9:2e:99:b8:20:df:ad:11:b6:dd: e7:49:06:e3:df:7e:a5:a0:db:f3:a0:29:e3:fa:c6:d2:f4:6a: a5:2a:99:7a:03:6a:69:1d:fb:3d:33:d3:cf:c4:c9:22:27:79: 06:03:e6:2f:04:83:da:09:03:17:3c:20:5c:7a:be:bd:63:f4: 0f:fa:14:d1:f4:84:93:f6:aa:69:0c:dc:e6:40:b0:08:ea:59: 64:38:c5:84:44:df:98:26:67:00:dd:1e:2d:44:69:73:f5:aa: d1:6d:92:01:c8:11:6a:c1:ae:68:43:09:52:b1:1a:b1:2b:91: a2:63:36:25:c9:83:9f:3d:17:4d:8a:38:f1:71:1d:e6:82:a6: 85:ba:01:af -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKNcmRJkZEaneH25fXtXH15tXuuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYzQTIwOTM4OTg1QjcyNjBGMzBBRkQ1OTdFNkFBMTBB MkU3NkZFMjAeFw0yNTA0MTgwODA3MjlaFw0yNTA0MjMwMTUyMjlaMDMxMTAvBgNV BAMTKDVEQzU5MDhDQTNFMUJEN0UxQTgyNzgwQkE3MDExNUVENEVBMDBCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNs4S6an90zzfPHHDhL+9FNWOj uy3IqOCH35djAcE/sGQ/SHoGfkLalY84LNBxojsQhkAcUQG3NU5wHncGXbe7e+Cf Uu+q8cGuDK+2ASUNvU6qnb1xykQu4WB0+SoLKr8iFiszF/gVroyQmknGH5rG9e8W iEdfZejWcHIq2qh4kq0nVt7cYsTvVVykIdNBsCTnd16oJrsSO/5+tOYnmMtW9ZHG 8medtnRCXzppCEgiHIijC4stXwJjUGhuC1SB1/YtcM5hCPEfwhgSIc20+d5Hg/3l +PoRAdE3DFgN8NGoDjsi4qo/BhkQDFc9dQ1Cw3eZArBH/uodM9H1iFWke96HAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXcWQjKPhvX4agngLpwEV7U6gCzMwHwYDVR0j BBgwFoAUljogk4mFtyYPMK/Vl+aqEKLnb+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNzRDNzdDRjBGNDQ1RDlFODdFODc5MTY0ODAxRTk1RTBD N0QwQkZBRTk1QjkzNzlCNzNBOUU4NzIwRkRCRkRBLzAvOTYzQTIwOTM4OTg1Qjcy NjBGMzBBRkQ1OTdFNkFBMTBBMkU3NkZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjNBMjA5Mzg5ODVCNzI2MEYz MEFGRDU5N0U2QUExMEEyRTc2RkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzc0Qzc3Q0YwRjQ0NUQ5RTg3RTg3OTE2NDgwMUU5NUUwQzdEMEJGQUU5 NUI5Mzc5QjczQTlFODcyMEZEQkZEQS8wLzk2M0EyMDkzODk4NUI3MjYwRjMwQUZE NTk3RTZBQTEwQTJFNzZGRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPWeunqbrljuGjB4lPUoNsR1W+ 07leJ8x5XMb5bfecIxDqt53HOcwTRODDbvRyQ3G7r9N9gb9+6qCNe0KXRWe4heJn R11QzB0KOe1rgiT/R8FNVaXgGTrGXp9oPfIm43F9eG8+Vjc6iulN6QzZ9LrRd32a irkumbgg360Rtt3nSQbj336loNvzoCnj+sbS9GqlKpl6A2ppHfs9M9PPxMkiJ3kG A+YvBIPaCQMXPCBcer69Y/QP+hTR9IST9qppDNzmQLAI6llkOMWERN+YJmcA3R4t RGlz9arRbZIByBFqwa5oQwlSsRqxK5GiYzYlyYOfPRdNijjxcR3mgqaFugGv -----END CERTIFICATE-----Generated at Fri Apr 18 22:43:33 2025 by rpki-client