$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft File: C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft (raw, json) Hash identifier: QWDtBMptDIdOorUDyEwtFxFooqiSiqxPn+HF+MiNA1o= Subject key identifier: 20:A7:D1:1D:CA:FE:AB:F2:95:BD:54:3F:CC:47:D3:BB:A1:29:FB:F4 Authority key identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A Certificate issuer: /CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A Certificate serial: 6FB7D414FDC48093B351E15AAB4BA2D6E708189C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft Manifest number: CA Signing time: Thu 03 Apr 2025 09:12:36 +0000 Manifest this update: Thu 03 Apr 2025 09:07:36 +0000 Manifest next update: Wed 09 Apr 2025 07:43:36 +0000 Files and hashes: 1: C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl (hash: fYASvq8jG0DxSUKxk0J13zLruKP9a7TWqTxQv3Jjc6s=) 2: 323830313a31393a623030303a3a2f34382d3438203d3e20323636363636.roa (hash: lPXWZxoNCCYdO7zJmMozHctJ4l6BfWA/blOvYqrwWUk=) 3: 34352e3232382e3135322e302f32322d3234203d3e20323636363636.roa (hash: VAJMDD2gzKGTxy0lVmUaZyyxmJbvCtzkZIiZPOKk/Q8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b7:d4:14:fd:c4:80:93:b3:51:e1:5a:ab:4b:a2:d6:e7:08:18:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A Validity Not Before: Apr 3 09:07:36 2025 GMT Not After : Apr 9 07:43:36 2025 GMT Subject: CN=20A7D11DCAFEABF295BD543FCC47D3BBA129FBF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d8:7f:c8:da:19:9a:f9:79:7b:72:38:1e:ee: 00:ce:a5:56:cf:34:e4:94:6e:41:2b:f7:e0:5e:01: 4e:1b:5f:46:21:e6:a1:91:3e:d4:70:86:97:83:80: 2a:aa:c4:69:24:c8:87:20:44:55:39:65:e1:84:c4: 0f:88:29:95:cd:a9:c6:d3:aa:03:f9:6b:51:dd:20: 2b:71:3a:56:f8:5c:05:69:84:42:2c:99:85:a1:ce: c0:82:a6:d5:dc:4a:04:86:1f:a5:b4:52:4b:21:44: bc:d4:24:22:fd:56:b7:19:c1:8a:2d:69:3e:8d:f8: 59:d1:90:de:f1:cc:c8:07:ba:8e:9c:82:b5:8f:6c: 77:e4:c1:7b:c7:ef:5c:32:fd:22:e1:a8:1a:bd:eb: ae:ba:07:c3:cd:b0:50:1a:ec:82:83:8e:16:18:53: b5:c9:bf:5b:0c:40:bb:af:22:4a:52:21:c0:05:42: 2f:76:64:13:d6:e9:ce:f6:f1:55:fc:bd:29:89:43: 13:f8:2b:aa:db:64:e2:b2:6f:f5:0e:a2:23:82:0b: c0:bf:f7:16:35:30:25:67:10:d8:ca:5b:99:83:a3: 23:0d:3a:7d:ce:e3:bc:ce:6a:1d:35:38:17:10:92: 94:5d:b0:f9:0d:b7:b0:79:bc:17:f7:e6:bb:5b:a9: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:D1:1D:CA:FE:AB:F2:95:BD:54:3F:CC:47:D3:BB:A1:29:FB:F4 X509v3 Authority Key Identifier: keyid:C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ea:59:ca:6a:7f:1a:47:5b:f4:c3:30:8b:83:55:1a:f4:11: cb:93:3c:16:d5:ea:0e:2a:60:ee:0d:84:55:3b:c1:0a:aa:16: 50:83:e1:5e:fb:bb:81:86:f0:35:23:20:81:e4:74:a0:d3:b8: 8e:6c:44:4b:8a:de:93:ea:83:31:5e:68:97:77:12:0a:8a:37: db:d8:64:62:e5:fe:7d:f3:da:09:63:e0:b0:d6:d0:02:8d:ad: cc:9e:bd:ca:8b:c5:84:cd:ad:f3:18:b9:e0:09:a7:9c:2e:09: 35:f5:34:4d:53:1b:e1:d3:2e:ee:e9:85:a6:5a:2d:c0:69:69: f7:91:1c:89:2a:54:e9:22:8f:90:b2:05:af:dd:57:f9:07:41: c9:2a:ff:4f:a4:99:b0:7e:1e:76:38:fe:0f:bb:fa:db:aa:47: 67:7b:4b:3a:de:79:b2:6b:7d:06:84:b1:f8:ca:8a:29:41:55: a3:21:b4:cb:f3:48:bc:59:6e:7f:a0:d7:60:fc:2f:f6:52:b7: 7e:d5:18:de:ac:b7:ee:7f:35:8a:97:9f:13:64:9c:eb:bd:a9: 68:f1:89:8b:07:c6:1c:c4:9b:ff:06:e5:8a:af:05:13:de:09: 30:0c:c0:29:82:5e:3e:06:6f:ae:b2:98:e5:df:88:c5:84:a8: 51:f2:a0:84 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUb7fUFP3EgJOzUeFaq0ui1ucIGJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDlCNUZBOUFBMjRCQkY3MEU2MkE0MzE4RTQzNDhD NjlGNzAwQTAeFw0yNTA0MDMwOTA3MzZaFw0yNTA0MDkwNzQzMzZaMDMxMTAvBgNV BAMTKDIwQTdEMTFEQ0FGRUFCRjI5NUJENTQzRkNDNDdEM0JCQTEyOUZCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf2H/I2hma+Xl7cjge7gDOpVbP NOSUbkEr9+BeAU4bX0Yh5qGRPtRwhpeDgCqqxGkkyIcgRFU5ZeGExA+IKZXNqcbT qgP5a1HdICtxOlb4XAVphEIsmYWhzsCCptXcSgSGH6W0UkshRLzUJCL9VrcZwYot aT6N+FnRkN7xzMgHuo6cgrWPbHfkwXvH71wy/SLhqBq96666B8PNsFAa7IKDjhYY U7XJv1sMQLuvIkpSIcAFQi92ZBPW6c728VX8vSmJQxP4K6rbZOKyb/UOoiOCC8C/ 9xY1MCVnENjKW5mDoyMNOn3O47zOah01OBcQkpRdsPkNt7B5vBf35rtbqZCBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIKfRHcr+q/KVvVQ/zEfTu6Ep+/QwHwYDVR0j BBgwFoAUxxCbX6mqJLv3DmKkMY5DSMafcAowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DODI4MTQ4QUE5Q0FENDFGNjA3NUY0MkRERDRERDUxQzg4 NDA2RDRGQTBGNDIxMjlFOTlGNDU1MzQyODI4QTdBLzAvQzcxMDlCNUZBOUFBMjRC QkY3MEU2MkE0MzE4RTQzNDhDNjlGNzAwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzEwOUI1RkE5QUEyNEJCRjcw RTYyQTQzMThFNDM0OEM2OUY3MDBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzgyODE0OEFBOUNBRDQxRjYwNzVGNDJEREQ0REQ1MUM4ODQwNkQ0RkEw RjQyMTI5RTk5RjQ1NTM0MjgyOEE3QS8wL0M3MTA5QjVGQTlBQTI0QkJGNzBFNjJB NDMxOEU0MzQ4QzY5RjcwMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/6lnKan8aR1v0wzCLg1Ua9BHL kzwW1eoOKmDuDYRVO8EKqhZQg+Fe+7uBhvA1IyCB5HSg07iObERLit6T6oMxXmiX dxIKijfb2GRi5f5989oJY+Cw1tACja3Mnr3Ki8WEza3zGLngCaecLgk19TRNUxvh 0y7u6YWmWi3AaWn3kRyJKlTpIo+QsgWv3Vf5B0HJKv9PpJmwfh52OP4Pu/rbqkdn e0s63nmya30GhLH4yoopQVWjIbTL80i8WW5/oNdg/C/2Urd+1RjerLfufzWKl58T ZJzrvalo8YmLB8YcxJv/BuWKrwUT3gkwDMApgl4+Bm+uspjl34jFhKhR8qCE -----END CERTIFICATE-----Generated at Sat Apr 5 23:06:25 2025 by rpki-client