$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft File: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft (raw, json) Hash identifier: ffwtFjQJe30u/iQe01P2j22SQcm8quqFeqB/UtVOxco= Subject key identifier: 6A:EA:C7:CE:FF:1B:AF:6E:15:69:5E:76:57:D6:B9:C4:12:EA:E2:61 Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD Certificate issuer: /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Certificate serial: 6E3039836978F05432314F47F3F241D2CEF69794 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft Manifest number: 1E Signing time: Sat 05 Apr 2025 03:43:50 +0000 Manifest this update: Sat 05 Apr 2025 03:38:50 +0000 Manifest next update: Thu 10 Apr 2025 11:04:50 +0000 Files and hashes: 1: 323830333a643235303a3a2f33322d3438203d3e20323733313430.roa (hash: geoujJRGCj9IdFnQTVkXi07vvN0KssDDUghEY7PjuWI=) 2: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl (hash: 2ZFagMgw9DJOvpLNdQHGDVp6+EU9udUUoiYNdDXFrNc=) 3: 323830333a643235303a3a2f33322d3438203d3e20323733313637.roa (hash: zqMMKCkFdouQccillLfonx6zoQUGUVMhftJE8TOMWWc=) 4: 323830333a643235303a3a2f33322d3438203d3e20323732383237.roa (hash: e58Gafs3SHJ2RbKcTBdQ4etki7t0Yu0X9IXpmL+ZrFM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 11:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:30:39:83:69:78:f0:54:32:31:4f:47:f3:f2:41:d2:ce:f6:97:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Validity Not Before: Apr 5 03:38:50 2025 GMT Not After : Apr 10 11:04:50 2025 GMT Subject: CN=6AEAC7CEFF1BAF6E15695E7657D6B9C412EAE261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:eb:f7:80:15:8a:5e:d7:e5:8a:69:65:46: 7d:c5:67:42:85:2f:5a:9c:52:05:55:e2:9d:97:d4: 58:1e:0c:16:3b:c7:35:61:42:fb:aa:03:62:5a:63: e5:27:ed:03:af:74:47:d5:ae:07:6a:fd:e0:32:a1: 6d:57:60:36:72:c2:76:01:eb:5b:a0:29:6a:07:4f: 45:0b:d7:1c:97:33:27:5b:8e:85:26:39:d5:3c:06: d0:7a:70:de:b4:6b:33:b8:df:8f:f1:af:9c:64:96: c0:f7:1d:a9:69:18:14:94:79:ef:3d:d2:43:86:dd: 09:9b:53:aa:96:03:cb:77:4a:2c:a3:a9:cb:fb:d8: 4b:73:a2:5b:16:34:d0:f0:cb:b8:1a:7b:2b:28:b7: 56:b9:be:bf:eb:91:07:38:2c:e9:29:ef:70:04:20: e2:99:d8:bd:0f:c4:72:38:0b:57:78:aa:f6:f3:78: a9:cc:c6:c2:b9:74:f9:ab:5a:eb:73:57:41:bd:48: 6c:b7:09:2d:c8:27:37:11:1b:80:58:18:c5:c1:76: e2:61:3d:d6:08:8f:57:08:75:b8:d4:1e:1a:85:48: b9:49:a4:23:91:d7:e7:b7:90:55:b3:d1:35:99:9a: 8f:ba:f5:e2:d0:90:be:11:f8:fb:c5:7a:ac:6a:4c: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EA:C7:CE:FF:1B:AF:6E:15:69:5E:76:57:D6:B9:C4:12:EA:E2:61 X509v3 Authority Key Identifier: keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:27:51:68:a9:70:c4:97:3f:d1:f8:6e:63:6f:fe:f6:98:fe: 12:7d:d8:26:9e:8e:f0:8c:d1:5c:52:86:8c:b8:81:a9:16:32: 9f:5d:a5:88:86:7d:3c:2e:bd:4f:a8:40:89:7e:81:5d:e8:2b: aa:d1:be:ca:ef:be:01:ab:52:d4:62:c1:9d:06:8f:25:db:38: 43:be:0f:e8:5e:10:a4:81:fb:a2:a9:a5:48:13:65:a0:84:67: 54:3e:11:c0:e2:e7:bd:96:d0:13:a9:7d:5b:ae:09:ec:45:29: d7:ae:27:54:c3:b7:6d:fb:ec:f0:16:eb:3e:46:ec:15:5a:12: fc:e3:05:12:80:18:38:b6:dd:00:89:2a:8d:35:3a:48:47:f2: 37:3d:2f:34:24:8e:e1:ee:38:03:ce:18:a2:4c:9f:e7:8a:7d: ed:3b:a2:49:ad:d6:b9:b1:c5:ba:1d:7f:fc:a7:db:4f:17:95: 84:7d:30:ce:21:62:cb:14:20:84:95:9a:94:ef:c8:33:d3:f2: 10:e4:75:18:9b:22:fa:2c:fe:35:64:f2:ff:a9:a4:fe:7f:c2: c2:8c:6b:fd:fa:0b:9f:10:e3:a7:9a:ef:be:bb:0c:7b:2d:c9: ab:90:2b:bb:71:4d:48:64:05:6c:9a:ab:ba:57:0b:4d:c3:6b: bc:2d:b7:d2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbjA5g2l48FQyMU9H8/JB0s72l5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD NzUwRENCRDAeFw0yNTA0MDUwMzM4NTBaFw0yNTA0MTAxMTA0NTBaMDMxMTAvBgNV BAMTKDZBRUFDN0NFRkYxQkFGNkUxNTY5NUU3NjU3RDZCOUM0MTJFQUUyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8Ov3gBWKXtflimllRn3FZ0KF L1qcUgVV4p2X1FgeDBY7xzVhQvuqA2JaY+Un7QOvdEfVrgdq/eAyoW1XYDZywnYB 61ugKWoHT0UL1xyXMydbjoUmOdU8BtB6cN60azO434/xr5xklsD3HalpGBSUee89 0kOG3QmbU6qWA8t3Siyjqcv72EtzolsWNNDwy7gaeysot1a5vr/rkQc4LOkp73AE IOKZ2L0PxHI4C1d4qvbzeKnMxsK5dPmrWutzV0G9SGy3CS3IJzcRG4BYGMXBduJh PdYIj1cIdbjUHhqFSLlJpCOR1+e3kFWz0TWZmo+69eLQkL4R+PvFeqxqTFq3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaurHzv8br24VaV52V9a5xBLq4mEwHwYDVR0j BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wL0Q0M0VBREU1QjhDRDZEQ0Q4MEY3MEZE NDZBNkQxQkY0Qzc1MERDQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSJ1FoqXDElz/R+G5jb/72mP4S fdgmno7wjNFcUoaMuIGpFjKfXaWIhn08Lr1PqECJfoFd6Cuq0b7K774Bq1LUYsGd Bo8l2zhDvg/oXhCkgfuiqaVIE2WghGdUPhHA4ue9ltATqX1brgnsRSnXridUw7dt ++zwFus+RuwVWhL84wUSgBg4tt0AiSqNNTpIR/I3PS80JI7h7jgDzhiiTJ/nin3t O6JJrda5scW6HX/8p9tPF5WEfTDOIWLLFCCElZqU78gz0/IQ5HUYmyL6LP41ZPL/ qaT+f8LCjGv9+gufEOOnmu++uwx7LcmrkCu7cU1IZAVsmqu6VwtNw2u8LbfS -----END CERTIFICATE-----Generated at Mon Apr 7 09:02:57 2025 by rpki-client