$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft File: 1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft (raw, json) Hash identifier: lfzcWYr7DXRV7bgdqrJyySd+x0axTUFpmM0Ns5uWZaw= Subject key identifier: 85:4D:76:F8:09:8E:CF:F0:40:DB:42:4F:C5:5B:DE:D4:0F:0D:1B:45 Authority key identifier: 1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3 Certificate issuer: /CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3 Certificate serial: 7EF18E0FD06B97090AB722F307A51CB1B24B6F8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft Manifest number: C5 Signing time: Sun 06 Apr 2025 02:32:16 +0000 Manifest this update: Sun 06 Apr 2025 02:27:16 +0000 Manifest next update: Fri 11 Apr 2025 14:48:16 +0000 Files and hashes: 1: 3230302e372e38322e302f32342d3234203d3e203631343638.roa (hash: FOD8OQk20A/eq2N9y6ackZVwqKJUvTQb1AdF0WNa5lY=) 2: 3230302e372e38322e302f32342d3234203d3e203237393437.roa (hash: cpJp85gDiAy7w6x5p6f2JVH83PYJ34J68UsPIBLGWPs=) 3: 1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl (hash: 1R1uMP9XZTR8skQhwH+1gkqd+IGceUYwSBljdKBua+s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f1:8e:0f:d0:6b:97:09:0a:b7:22:f3:07:a5:1c:b1:b2:4b:6f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3 Validity Not Before: Apr 6 02:27:16 2025 GMT Not After : Apr 11 14:48:16 2025 GMT Subject: CN=854D76F8098ECFF040DB424FC55BDED40F0D1B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8b:78:ee:ff:9b:e6:a7:85:f7:54:d1:07:10: b6:3b:e1:58:27:13:12:af:71:fa:bb:10:76:9a:e9: 03:1f:e9:36:8e:f0:11:6f:37:f1:37:dd:6c:05:01: 1b:82:c1:fa:df:cb:39:d7:f5:50:fc:ba:b6:d0:30: 38:50:22:21:fd:cd:37:4d:8d:76:87:8b:1a:78:15: 47:7b:9f:1e:12:48:2c:d3:fb:ec:77:ee:04:f3:90: a4:ee:ec:70:12:34:02:87:50:6b:e3:1b:d3:e4:5e: 26:6e:38:c2:a3:4e:d4:90:f6:4d:02:36:99:aa:87: 6f:fd:8a:1f:91:06:f2:e0:3f:37:50:56:9f:de:49: 46:f6:87:f0:bf:c1:aa:24:79:f0:07:6e:42:07:6e: 7a:c3:01:13:90:f5:49:65:8f:6f:80:11:a1:5d:f0: 9e:fd:eb:fb:49:15:47:2c:4b:91:54:05:53:e2:f5: 47:ab:95:2c:05:13:3c:4f:ed:7a:11:fd:fe:04:f6: bf:fc:75:06:e4:59:20:fb:3e:67:96:d9:17:de:a4: 19:1a:ed:16:c9:a5:9a:1f:d1:54:ed:a2:46:d5:8d: 19:e0:95:57:29:f3:35:72:c1:a1:12:bd:81:ae:20: 99:34:2d:75:1b:db:8d:24:90:6e:6d:4d:2f:6f:0f: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4D:76:F8:09:8E:CF:F0:40:DB:42:4F:C5:5B:DE:D4:0F:0D:1B:45 X509v3 Authority Key Identifier: keyid:1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:74:0c:95:95:2a:78:94:42:56:24:93:38:13:77:36:46:77: ba:a0:98:05:28:01:5b:eb:d8:2d:c8:d6:d7:0b:48:21:c1:60: 36:50:57:3a:60:b1:99:d4:f3:60:59:ec:91:a7:09:c9:f4:ba: af:5e:92:dd:30:65:0f:d3:ec:2b:3e:f6:d3:a0:e8:9d:e8:5f: 69:bd:86:09:24:06:5e:4c:28:94:3d:e9:bb:1a:37:86:6c:f8: 1b:40:25:79:99:76:60:7b:5b:2b:ae:f4:98:5b:4b:1c:cf:b4: 23:f9:14:ae:65:2e:39:0d:bf:4c:37:5d:04:bc:99:e5:2b:8f: ab:1d:21:a2:24:ae:34:ed:13:27:50:9a:c3:1f:c9:ce:c9:9c: 6a:b8:b2:5d:cc:38:58:4c:21:55:85:18:0b:e3:d4:32:34:4c: 39:f6:a7:d0:3c:6a:41:2e:1d:40:ae:09:ad:91:fe:77:49:d9: 13:78:bc:b6:83:28:0d:85:2a:85:4b:99:f8:e7:dd:63:e2:ea: f5:77:9a:2b:d3:d1:4e:55:40:2a:e5:9c:74:af:d6:ad:d2:91: 76:5c:cb:16:e2:8c:43:00:0e:16:38:03:17:3c:2d:1e:49:da: 7f:5e:7d:41:b5:10:d6:18:ae:b5:7c:19:6d:4f:45:d1:c9:24: 71:04:44:d4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfvGOD9BrlwkKtyLzB6UcsbJLb44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBNjA0MEMwNkEzQTg0RjIxRTkwQTY2MzUyM0FBQzgy NjA5QTlGMzAeFw0yNTA0MDYwMjI3MTZaFw0yNTA0MTExNDQ4MTZaMDMxMTAvBgNV BAMTKDg1NEQ3NkY4MDk4RUNGRjA0MERCNDI0RkM1NUJERUQ0MEYwRDFCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSi3ju/5vmp4X3VNEHELY74Vgn ExKvcfq7EHaa6QMf6TaO8BFvN/E33WwFARuCwfrfyznX9VD8urbQMDhQIiH9zTdN jXaHixp4FUd7nx4SSCzT++x37gTzkKTu7HASNAKHUGvjG9PkXiZuOMKjTtSQ9k0C Npmqh2/9ih+RBvLgPzdQVp/eSUb2h/C/waokefAHbkIHbnrDAROQ9Ullj2+AEaFd 8J796/tJFUcsS5FUBVPi9UerlSwFEzxP7XoR/f4E9r/8dQbkWSD7PmeW2RfepBka 7RbJpZof0VTtokbVjRnglVcp8zVywaESvYGuIJk0LXUb240kkG5tTS9vD0G/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhU12+AmOz/BA20JPxVve1A8NG0UwHwYDVR0j BBgwFoAUHaYEDAajqE8h6QpmNSOqyCYJqfMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTgxMjE0RjkxQkI3NjFBNEM0NTJBQzAwM0VGNzE0NEIy QTk5QUIyNkE2NjUxRUVEN0E1OEU4MzdDQ0NFMzZBLzAvMURBNjA0MEMwNkEzQTg0 RjIxRTkwQTY2MzUyM0FBQzgyNjA5QTlGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xREE2MDQwQzA2QTNBODRGMjFF OTBBNjYzNTIzQUFDODI2MDlBOUYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU4MTIxNEY5MUJCNzYxQTRDNDUyQUMwMDNFRjcxNDRCMkE5OUFCMjZB NjY1MUVFRDdBNThFODM3Q0NDRTM2QS8wLzFEQTYwNDBDMDZBM0E4NEYyMUU5MEE2 NjM1MjNBQUM4MjYwOUE5RjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBldAyVlSp4lEJWJJM4E3c2Rne6 oJgFKAFb69gtyNbXC0ghwWA2UFc6YLGZ1PNgWeyRpwnJ9LqvXpLdMGUP0+wrPvbT oOid6F9pvYYJJAZeTCiUPem7GjeGbPgbQCV5mXZge1srrvSYW0scz7Qj+RSuZS45 Db9MN10EvJnlK4+rHSGiJK407RMnUJrDH8nOyZxquLJdzDhYTCFVhRgL49QyNEw5 9qfQPGpBLh1Argmtkf53SdkTeLy2gygNhSqFS5n4591j4ur1d5or09FOVUAq5Zx0 r9at0pF2XMsW4oxDAA4WOAMXPC0eSdp/Xn1BtRDWGK61fBltT0XRySRxBETU -----END CERTIFICATE-----Generated at Sun Apr 6 08:10:36 2025 by rpki-client