$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft File: 0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft (raw, json) Hash identifier: DiR3t1xKhdKpYcZ19t6F1DU35ZtNZPqGqxhl/Sq9O1c= Subject key identifier: 45:E7:70:B1:A0:D1:6A:C8:AE:06:C9:E2:17:7E:46:5D:C2:D2:80:C0 Authority key identifier: 07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8 Certificate issuer: /CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8 Certificate serial: 3FAFB52D776D1FB876F1C3553F606662DB9CE5A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft Manifest number: CA Signing time: Fri 04 Apr 2025 15:46:45 +0000 Manifest this update: Fri 04 Apr 2025 15:41:45 +0000 Manifest next update: Thu 10 Apr 2025 13:02:45 +0000 Files and hashes: 1: 0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl (hash: ezhiASjK/LWnec/s446KQx+MhEgFmnI413XdwyveYPI=) 2: 323830333a353663303a3a2f33322d3332203d3e20323635363536.roa (hash: to1tLtw3k3VRAVckh40FOGejT7b8VLnirunioxeNjGc=) 3: 3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa (hash: 3ymxSBexA/LUtGIrYwOhO5wbt8sIa+H4/HA9ePyU42A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:af:b5:2d:77:6d:1f:b8:76:f1:c3:55:3f:60:66:62:db:9c:e5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8 Validity Not Before: Apr 4 15:41:45 2025 GMT Not After : Apr 10 13:02:45 2025 GMT Subject: CN=45E770B1A0D16AC8AE06C9E2177E465DC2D280C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:d1:47:53:d0:b7:5f:36:56:8e:61:b5:6d: eb:70:9b:22:17:de:c1:76:96:21:c5:64:30:e8:c6: 8b:33:66:da:18:47:48:2e:c7:22:b4:72:54:1e:c9: 2a:8c:f6:78:76:46:1b:d1:16:f5:a6:fc:d9:29:ab: 9d:9d:2e:15:d7:dc:e8:67:e9:4b:35:36:83:b9:0a: e2:b5:5d:90:b3:ed:16:aa:9a:4f:56:6b:f2:ad:e2: 8e:8c:5b:a7:dd:d7:3a:06:38:42:e6:e3:37:bb:c0: 67:d0:87:f6:af:74:48:c0:60:ee:15:fa:78:d8:4f: ea:7e:91:ee:22:70:fb:a4:da:bb:8e:05:92:cb:db: a8:2b:b7:86:3c:42:d7:67:ee:47:11:d4:36:36:2c: 5c:ba:bf:58:33:6a:58:66:20:cc:e3:12:1c:eb:7b: a3:ff:01:ae:00:4c:a2:26:5c:28:80:17:f6:e8:43: a6:32:c3:c3:78:db:68:ba:3a:56:92:32:fe:8f:9d: 27:cf:f0:9a:48:6e:8a:e4:08:82:a1:02:87:33:4b: 75:7b:be:c6:59:bb:af:8c:14:07:8f:c7:64:6f:ad: 3b:9c:0c:9b:af:82:ae:63:24:67:24:77:81:43:f4: 77:cb:cc:75:b1:cd:93:20:c6:74:80:4f:1d:04:13: 9f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E7:70:B1:A0:D1:6A:C8:AE:06:C9:E2:17:7E:46:5D:C2:D2:80:C0 X509v3 Authority Key Identifier: keyid:07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c9:13:74:ff:18:cd:b7:e3:68:ab:6c:93:33:08:ac:ca:da: e8:af:41:2b:24:35:fb:42:be:8d:25:7a:a1:e3:b5:98:1f:cf: 64:1d:74:10:cb:f3:d0:cb:41:fc:ab:8a:f4:f6:9a:34:5d:70: 5d:c2:9b:5f:c8:6f:b7:2e:c6:c8:6f:06:21:49:12:d4:c4:40: 72:a3:95:0c:7f:81:cf:41:06:15:2a:cd:bd:ef:d3:35:d0:23: d2:7a:bc:6a:70:81:4a:c8:d6:fd:19:9a:7c:e9:52:64:98:92: 07:79:52:c0:d6:97:e9:a9:0d:5b:86:77:a4:c3:6e:93:32:8d: ab:51:69:0d:e2:02:a8:a2:2d:59:f1:82:9f:00:ad:59:e4:0a: 6b:16:27:e3:70:bf:6d:35:b7:b7:6f:07:dd:a0:c8:5c:88:ec: 3c:20:0d:d7:bd:6f:b0:fd:a7:18:45:a0:5e:8c:5d:42:cf:d3: 5a:8d:d4:19:e4:0e:75:34:9f:b0:4c:2d:ac:d4:71:d5:cc:9d: e7:70:9d:fb:d5:c2:dc:de:91:b1:ec:53:f3:cd:4b:11:e6:3b: 69:81:6e:b2:dc:13:fa:e2:5e:6c:5f:24:b6:74:18:bc:31:1f: 23:cd:0a:e1:09:99:52:a8:69:e5:43:43:41:95:26:b4:30:6b: 84:ff:86:2a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUP6+1LXdtH7h28cNVP2BmYtuc5aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc0OUYwQzlGOThCNjgzOTJFMkRCMEYzRUMyNUI5RTIy RTg5QkJCODAeFw0yNTA0MDQxNTQxNDVaFw0yNTA0MTAxMzAyNDVaMDMxMTAvBgNV BAMTKDQ1RTc3MEIxQTBEMTZBQzhBRTA2QzlFMjE3N0U0NjVEQzJEMjgwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUANFHU9C3XzZWjmG1betwmyIX 3sF2liHFZDDoxoszZtoYR0guxyK0clQeySqM9nh2RhvRFvWm/Nkpq52dLhXX3Ohn 6Us1NoO5CuK1XZCz7Raqmk9Wa/Kt4o6MW6fd1zoGOELm4ze7wGfQh/avdEjAYO4V +njYT+p+ke4icPuk2ruOBZLL26grt4Y8Qtdn7kcR1DY2LFy6v1gzalhmIMzjEhzr e6P/Aa4ATKImXCiAF/boQ6Yyw8N422i6OlaSMv6PnSfP8JpIborkCIKhAoczS3V7 vsZZu6+MFAePx2RvrTucDJuvgq5jJGckd4FD9HfLzHWxzZMgxnSATx0EE5+fAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURedwsaDRasiuBsniF35GXcLSgMAwHwYDVR0j BBgwFoAUB0nwyfmLaDkuLbDz7CW54i6Ju7gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNzhGRDZCNkE4NTg2NzNDOTlEODcxRTlGQUQ0NjlGQ0FG RUQzNzAzMkZCRjQzQzBGM0NERDRCQTM3Qzg2NjAyLzAvMDc0OUYwQzlGOThCNjgz OTJFMkRCMEYzRUMyNUI5RTIyRTg5QkJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzQ5RjBDOUY5OEI2ODM5MkUy REIwRjNFQzI1QjlFMjJFODlCQkI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTc4RkQ2QjZBODU4NjczQzk5RDg3MUU5RkFENDY5RkNBRkVEMzcwMzJG QkY0M0MwRjNDREQ0QkEzN0M4NjYwMi8wLzA3NDlGMEM5Rjk4QjY4MzkyRTJEQjBG M0VDMjVCOUUyMkU4OUJCQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNyRN0/xjNt+Noq2yTMwisytro r0ErJDX7Qr6NJXqh47WYH89kHXQQy/PQy0H8q4r09po0XXBdwptfyG+3LsbIbwYh SRLUxEByo5UMf4HPQQYVKs2979M10CPSerxqcIFKyNb9GZp86VJkmJIHeVLA1pfp qQ1bhnekw26TMo2rUWkN4gKooi1Z8YKfAK1Z5AprFifjcL9tNbe3bwfdoMhciOw8 IA3XvW+w/acYRaBejF1Cz9NajdQZ5A51NJ+wTC2s1HHVzJ3ncJ371cLc3pGx7FPz zUsR5jtpgW6y3BP64l5sXyS2dBi8MR8jzQrhCZlSqGnlQ0NBlSa0MGuE/4Yq -----END CERTIFICATE-----Generated at Sun Apr 6 15:08:20 2025 by rpki-client