$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.mft File: 00D66BC9589B906B6A52A31D7187FE6686118DFA.mft (raw, json) Hash identifier: vndPK2FQVb73G1sAFRfd56TkuDBSkWunrS1OoMLPrj4= Subject key identifier: 91:68:C6:47:3A:ED:35:D8:C0:74:3F:F1:63:E6:8D:46:29:2C:83:AB Authority key identifier: 00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA Certificate issuer: /CN=00D66BC9589B906B6A52A31D7187FE6686118DFA Certificate serial: 35E45AE2CDF5C006C000F39F02AB19C9F1093E05 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.mft Manifest number: AD Signing time: Sat 05 Apr 2025 07:41:17 +0000 Manifest this update: Sat 05 Apr 2025 07:36:17 +0000 Manifest next update: Thu 10 Apr 2025 02:11:17 +0000 Files and hashes: 1: 323830333a616361303a3a2f33322d3332203d3e20323636383037.roa (hash: sj4tdcF6or3lFFiogvAJ1Uus53DW2FlMb8o4S1LE0xs=) 2: 00D66BC9589B906B6A52A31D7187FE6686118DFA.crl (hash: afUxk/OkXmQxPfQng4ZHKLwMkZipMWU0nWnXB+fS3Ns=) 3: 34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa (hash: S81tlBe+KN1ODOXhuLJ+o0FyfIFQPmZOCKsXLyRbvFs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e4:5a:e2:cd:f5:c0:06:c0:00:f3:9f:02:ab:19:c9:f1:09:3e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D66BC9589B906B6A52A31D7187FE6686118DFA Validity Not Before: Apr 5 07:36:17 2025 GMT Not After : Apr 10 02:11:17 2025 GMT Subject: CN=9168C6473AED35D8C0743FF163E68D46292C83AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:3e:18:49:d7:1e:53:18:49:49:92:ef:91: a7:e3:91:d1:b9:02:ea:3f:3f:4a:d4:1e:45:64:07: 17:34:f8:ff:39:09:fa:ac:5b:2e:86:4f:32:37:a1: 93:a4:df:e9:70:45:40:2f:9b:9f:64:72:13:6b:0c: 87:3d:b0:41:74:fd:91:75:11:ac:59:47:37:25:47: d6:e3:e0:3b:9e:84:8f:82:ed:1c:60:42:d5:1b:e4: e5:bd:ee:92:44:cf:1c:0b:af:4c:19:c7:f3:31:6f: 9a:91:f8:95:b9:3d:ce:3f:3b:1f:79:13:d8:a9:a0: 45:35:50:33:1b:ab:c1:a7:f8:e9:0c:96:e6:8c:b3: 2d:54:fb:3f:0d:36:12:64:a8:74:73:22:ae:f6:91: ca:3f:b6:6e:38:41:8e:96:6f:76:2a:bf:45:00:f1: 0d:4d:8c:32:11:c4:f4:9e:a1:30:0e:65:48:b3:d8: 78:0d:b9:2a:a7:78:00:a8:cc:db:be:a0:4e:c5:19: 21:eb:a1:50:61:d9:1b:3a:e9:9d:24:85:b4:7c:a6: 7b:1f:e5:76:39:7a:9f:33:c9:f8:24:0e:a5:1a:f6: f4:ce:3c:91:e8:39:3a:ed:05:5b:7b:e3:3f:0b:d0: 7a:8b:e6:ca:67:d1:0b:b6:f2:18:36:99:ce:c2:c9: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:68:C6:47:3A:ED:35:D8:C0:74:3F:F1:63:E6:8D:46:29:2C:83:AB X509v3 Authority Key Identifier: keyid:00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:df:8d:fa:23:67:05:14:60:a7:dc:0d:e8:c2:ee:8f:7c:05: db:35:ab:f4:e0:47:c4:b4:d1:56:81:7f:fc:8e:90:e1:d6:a9: 95:66:3c:1a:41:5f:a8:cd:41:fc:29:5b:aa:05:fb:ff:e1:9e: 91:f8:b1:a2:25:ae:0d:b7:51:29:14:19:2b:1a:63:3d:66:e9: e6:98:31:e1:6a:c5:9c:88:1a:29:cc:3c:ce:4a:56:ca:35:3d: a1:ba:3c:41:cf:1c:3f:5e:93:30:99:79:3e:37:0b:c4:2c:fe: 7e:37:37:d4:c8:98:c1:ad:05:5f:d1:c9:86:14:67:a4:17:f3: 7a:1c:dd:f8:e5:3b:6c:62:b5:79:9b:ce:cc:0c:33:b4:cc:d0: c0:e4:43:72:e1:e6:ce:cf:1e:01:9b:3d:74:12:6b:9e:a2:10: d1:78:ca:b7:3d:8d:b8:f8:7e:01:c9:2a:1e:9d:5a:fc:2c:62: 0e:70:5d:93:c0:f1:52:47:ab:c8:d5:66:a9:47:d6:16:17:71: 2a:8e:03:85:d2:72:cf:9f:43:90:5d:b5:e3:10:d4:01:aa:7c: 1f:e3:80:88:d3:4d:08:76:ef:2b:9c:e5:fa:12:be:b0:09:51: b2:c3:48:fe:69:fb:d8:c9:79:43:f6:8c:2e:e6:20:b3:2d:b4: e6:ef:bb:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNeRa4s31wAbAAPOfAqsZyfEJPgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBENjZCQzk1ODlCOTA2QjZBNTJBMzFENzE4N0ZFNjY4 NjExOERGQTAeFw0yNTA0MDUwNzM2MTdaFw0yNTA0MTAwMjExMTdaMDMxMTAvBgNV BAMTKDkxNjhDNjQ3M0FFRDM1RDhDMDc0M0ZGMTYzRTY4RDQ2MjkyQzgzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rD4YSdceUxhJSZLvkafjkdG5 Auo/P0rUHkVkBxc0+P85CfqsWy6GTzI3oZOk3+lwRUAvm59kchNrDIc9sEF0/ZF1 EaxZRzclR9bj4DuehI+C7RxgQtUb5OW97pJEzxwLr0wZx/Mxb5qR+JW5Pc4/Ox95 E9ipoEU1UDMbq8Gn+OkMluaMsy1U+z8NNhJkqHRzIq72kco/tm44QY6Wb3Yqv0UA 8Q1NjDIRxPSeoTAOZUiz2HgNuSqneACozNu+oE7FGSHroVBh2Rs66Z0khbR8pnsf 5XY5ep8zyfgkDqUa9vTOPJHoOTrtBVt74z8L0HqL5spn0Qu28hg2mc7CybfzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkWjGRzrtNdjAdD/xY+aNRiksg6swHwYDVR0j BBgwFoAUANZryVibkGtqUqMdcYf+ZoYRjfowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNDdDMTJFOENGQjEzMzIyODE2OUQ2RjBBNDg0RURBMEQ4 MTk2NzBCRTdFQjI0QjgwQTMzNDc3M0E0NjdDRTRELzAvMDBENjZCQzk1ODlCOTA2 QjZBNTJBMzFENzE4N0ZFNjY4NjExOERGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEQ2NkJDOTU4OUI5MDZCNkE1 MkEzMUQ3MTg3RkU2Njg2MTE4REZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTQ3QzEyRThDRkIxMzMyMjgxNjlENkYwQTQ4NEVEQTBEODE5NjcwQkU3 RUIyNEI4MEEzMzQ3NzNBNDY3Q0U0RC8wLzAwRDY2QkM5NTg5QjkwNkI2QTUyQTMx RDcxODdGRTY2ODYxMThERkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBU3436I2cFFGCn3A3owu6PfAXb Nav04EfEtNFWgX/8jpDh1qmVZjwaQV+ozUH8KVuqBfv/4Z6R+LGiJa4Nt1EpFBkr GmM9ZunmmDHhasWciBopzDzOSlbKNT2hujxBzxw/XpMwmXk+NwvELP5+NzfUyJjB rQVf0cmGFGekF/N6HN345TtsYrV5m87MDDO0zNDA5ENy4ebOzx4Bmz10EmueohDR eMq3PY24+H4BySoenVr8LGIOcF2TwPFSR6vI1WapR9YWF3EqjgOF0nLPn0OQXbXj ENQBqnwf44CI000Idu8rnOX6Er6wCVGyw0j+afvYyXlD9owu5iCzLbTm77up -----END CERTIFICATE-----Generated at Sat Apr 5 14:02:31 2025 by rpki-client