$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft File: 2F04FD11390F25856E2C138CD67BF473814525F2.mft (raw, json) Hash identifier: e7fbYfzUiIkz4JuC8iNaURzteL0BDGhQtNJ/7j9Dd0w= Subject key identifier: BA:86:24:91:D3:6A:50:42:91:3D:94:A3:9A:90:EF:84:E0:72:E6:F8 Authority key identifier: 2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2 Certificate issuer: /CN=2F04FD11390F25856E2C138CD67BF473814525F2 Certificate serial: 61E47BF3882F41E6C2E26F8362FFC7EE31F35BAC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft Manifest number: 3A Signing time: Thu 17 Apr 2025 10:54:43 +0000 Manifest this update: Thu 17 Apr 2025 10:49:43 +0000 Manifest next update: Wed 23 Apr 2025 08:59:43 +0000 Files and hashes: 1: 323830333a316631303a3a2f33322d3438203d3e20323732313532.roa (hash: zTSGhGTkTCAH6zsxvvBlAjk40oGDytEBhp7Bbe3b3F0=) 2: 2F04FD11390F25856E2C138CD67BF473814525F2.crl (hash: fUjchJ1wd2fud6XUiPZmkSQJfq4JPfqfBeXfA9ZE5wM=) 3: 3138312e3233322e3138342e302f32322d3234203d3e20323732313532.roa (hash: D0BBlOT/TvG3K7alLZh9sUJL9g2iXx3iUdWEBhbFLm4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.crl rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e4:7b:f3:88:2f:41:e6:c2:e2:6f:83:62:ff:c7:ee:31:f3:5b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F04FD11390F25856E2C138CD67BF473814525F2 Validity Not Before: Apr 17 10:49:43 2025 GMT Not After : Apr 23 08:59:43 2025 GMT Subject: CN=BA862491D36A5042913D94A39A90EF84E072E6F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:81:d2:1e:23:af:47:e8:a5:f4:f4:ca:ec: 73:a7:1f:c9:9b:3a:13:80:a1:78:8c:9e:e7:45:7f: 7b:f6:77:f4:cd:ff:27:76:88:da:f6:09:3e:0d:89: be:16:11:c6:6f:64:63:7b:a4:4e:8a:98:ee:40:ff: fa:ec:44:12:6c:54:1e:aa:a3:5b:36:c0:ce:95:3c: bc:8e:ea:81:96:db:e4:55:78:47:f8:de:a7:9e:cb: 64:b9:48:79:e5:d0:63:f9:68:10:15:2c:ae:05:c6: d8:70:fa:37:f2:24:62:0a:b4:c1:ea:6f:01:ce:ce: e1:4c:03:40:f0:de:17:54:09:23:99:8c:8f:49:3e: 34:a7:d2:77:6c:53:ce:84:75:28:f3:02:36:49:b1: c6:58:54:cb:4e:6d:61:de:e9:ab:09:99:8f:8e:30: 51:20:b5:47:7b:70:0b:97:03:0d:90:c3:fe:f4:04: 5b:d6:76:0d:f3:2e:d6:57:a2:6c:6d:17:c7:27:5b: 20:7c:7b:dc:8b:eb:ee:db:42:4b:6b:31:d3:92:ff: 3e:96:fc:13:db:47:c5:f3:1c:ef:14:59:85:e3:c9: d6:72:cd:45:ea:02:0b:94:c4:fc:e4:59:e1:5a:2b: f4:56:cc:21:55:16:13:36:a8:2d:99:48:3f:57:42: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:86:24:91:D3:6A:50:42:91:3D:94:A3:9A:90:EF:84:E0:72:E6:F8 X509v3 Authority Key Identifier: keyid:2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:35:ac:ab:aa:10:72:09:36:4f:5f:9e:1f:a5:1b:29:60:c6: 4a:35:5a:cf:c8:75:e6:c6:aa:f2:d4:91:a8:f6:77:fa:89:17: aa:a6:71:75:28:0b:4e:3f:52:46:ad:9c:b9:20:ec:c7:fb:a5: 11:e5:aa:2c:44:2d:45:d3:0d:a0:bd:33:7c:32:7f:b1:81:1e: 98:c5:f6:8f:8f:44:86:da:08:f7:5c:f5:4b:4b:d7:bc:ae:bd: d9:ad:97:12:b1:32:41:d4:fb:c5:5c:81:59:73:0c:91:39:21: 7b:63:89:d6:63:7d:fb:ce:80:85:03:68:24:1d:50:1f:45:58: fd:da:b2:25:ee:e7:dd:4f:ed:99:fc:3e:8f:37:5a:b7:dc:29: 33:63:2c:9d:38:68:1a:a7:90:7a:14:39:3a:a3:3e:d6:90:bd: 1d:c6:a1:7c:3d:3f:31:e2:58:fc:06:32:df:37:38:4c:84:85: 31:44:9d:c0:ba:33:46:18:2b:45:10:f9:68:d2:9b:63:10:10: 2b:e3:05:1a:33:95:48:27:10:fa:55:17:26:38:ff:5b:3a:52: be:68:2f:50:19:84:f3:a3:5d:1b:3f:83:b9:cc:43:20:28:08: db:49:89:0d:10:09:44:2a:c1:20:fa:b4:e3:3a:3f:ec:8c:3f: 48:b7:fa:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYeR784gvQebC4m+DYv/H7jHzW6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwNEZEMTEzOTBGMjU4NTZFMkMxMzhDRDY3QkY0NzM4 MTQ1MjVGMjAeFw0yNTA0MTcxMDQ5NDNaFw0yNTA0MjMwODU5NDNaMDMxMTAvBgNV BAMTKEJBODYyNDkxRDM2QTUwNDI5MTNEOTRBMzlBOTBFRjg0RTA3MkU2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8oHSHiOvR+il9PTK7HOnH8mb OhOAoXiMnudFf3v2d/TN/yd2iNr2CT4Nib4WEcZvZGN7pE6KmO5A//rsRBJsVB6q o1s2wM6VPLyO6oGW2+RVeEf43qeey2S5SHnl0GP5aBAVLK4Fxthw+jfyJGIKtMHq bwHOzuFMA0Dw3hdUCSOZjI9JPjSn0ndsU86EdSjzAjZJscZYVMtObWHe6asJmY+O MFEgtUd7cAuXAw2Qw/70BFvWdg3zLtZXomxtF8cnWyB8e9yL6+7bQktrMdOS/z6W /BPbR8XzHO8UWYXjydZyzUXqAguUxPzkWeFaK/RWzCFVFhM2qC2ZSD9XQkzzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuoYkkdNqUEKRPZSjmpDvhOBy5vgwHwYDVR0j BBgwFoAULwT9ETkPJYVuLBOM1nv0c4FFJfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENDA1M0UxNTc5M0Q4QkE3MzgxMjRCNzBGOTdENUI5MDQ2 OUZGMUEyOUIwQTU3RTE0MkFGNkRENEQ4MTExMUM5LzAvMkYwNEZEMTEzOTBGMjU4 NTZFMkMxMzhDRDY3QkY0NzM4MTQ1MjVGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjA0RkQxMTM5MEYyNTg1NkUy QzEzOENENjdCRjQ3MzgxNDUyNUYyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDQwNTNFMTU3OTNEOEJBNzM4MTI0QjcwRjk3RDVCOTA0NjlGRjFBMjlC MEE1N0UxNDJBRjZERDREODExMTFDOS8wLzJGMDRGRDExMzkwRjI1ODU2RTJDMTM4 Q0Q2N0JGNDczODE0NTI1RjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBNayrqhByCTZPX54fpRspYMZK NVrPyHXmxqry1JGo9nf6iReqpnF1KAtOP1JGrZy5IOzH+6UR5aosRC1F0w2gvTN8 Mn+xgR6YxfaPj0SG2gj3XPVLS9e8rr3ZrZcSsTJB1PvFXIFZcwyROSF7Y4nWY337 zoCFA2gkHVAfRVj92rIl7ufdT+2Z/D6PN1q33CkzYyydOGgap5B6FDk6oz7WkL0d xqF8PT8x4lj8BjLfNzhMhIUxRJ3AujNGGCtFEPlo0ptjEBAr4wUaM5VIJxD6VRcm OP9bOlK+aC9QGYTzo10bP4O5zEMgKAjbSYkNEAlEKsEg+rTjOj/sjD9It/pc -----END CERTIFICATE-----Generated at Fri Apr 18 21:08:14 2025 by rpki-client