$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: Sgj3zWL/d1hr7z4NszoQLlirEdaBQ1tSaqaHEJP9GV4= Subject key identifier: D1:69:D5:C1:29:62:E7:39:44:5D:19:E1:43:12:F4:2C:EA:F8:AB:A1 Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 6FD35F9A41F465C78829037E98436DBF37A4B322 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: C8 Signing time: Sat 05 Apr 2025 04:04:06 +0000 Manifest this update: Sat 05 Apr 2025 03:59:06 +0000 Manifest next update: Thu 10 Apr 2025 07:48:06 +0000 Files and hashes: 1: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: awSHfYu5olO3Sr1hdIR9ko/TcZ0IMSchh5DLzNlGd+k=) 2: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: BiCRgYF9WqGBeDCTwH0sWrlbpZeGJH5mND51yMR10Oc=) 3: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: Tpu5mtmY/E6RnTTm3zG1QJJywy3a24/BBCfGwU0oGCo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d3:5f:9a:41:f4:65:c7:88:29:03:7e:98:43:6d:bf:37:a4:b3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Apr 5 03:59:06 2025 GMT Not After : Apr 10 07:48:06 2025 GMT Subject: CN=D169D5C12962E739445D19E14312F42CEAF8ABA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:73:cd:eb:f5:c4:77:cd:5a:a5:3d:0d:31: 38:6d:1f:b9:e5:be:9d:bb:51:62:4d:11:77:32:a3: e7:74:90:55:98:b5:66:01:a3:24:03:8d:95:d1:7e: 39:da:3e:1d:f8:79:38:9b:9e:1a:6c:96:02:ca:b4: 6f:57:fb:72:36:14:b1:6e:1c:72:42:97:10:6e:23: 0f:b1:6f:37:f3:5a:b6:cd:cb:8c:09:3f:82:0c:49: 97:8c:50:89:a8:7a:1a:35:c3:22:f0:f3:28:ec:06: ce:7a:0b:84:a4:88:1c:90:eb:a4:16:2e:5b:1a:3b: 6f:05:62:d1:e1:56:ca:41:5a:d3:45:ba:47:71:5c: 1e:32:e4:f3:9c:c5:54:0b:17:f5:94:a1:8d:d0:9a: a7:9f:17:db:58:d2:8a:2c:bb:95:3d:f2:f5:bd:2b: 6f:be:d1:55:9f:cf:a7:2d:ce:58:2f:28:dc:5e:4f: 93:07:5c:9a:50:54:54:75:73:e8:4f:db:a1:42:1e: 61:b4:ce:44:a7:07:9e:fa:31:39:b3:54:ba:c0:55: 0f:0a:fa:a8:9f:92:58:ad:06:ff:fa:84:2e:64:7b: d2:a1:0a:31:f4:aa:36:af:f9:c0:77:2e:2d:ab:41: e4:a1:d1:da:ea:c4:59:ac:89:aa:b7:5e:f5:54:31: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:69:D5:C1:29:62:E7:39:44:5D:19:E1:43:12:F4:2C:EA:F8:AB:A1 X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:31:25:c6:26:f1:ef:8d:a6:28:c5:9f:9c:d2:bc:93:2e:3e: 70:53:24:79:b1:a9:19:46:74:13:d4:d8:49:70:0a:a9:98:17: 20:15:72:e1:6a:a4:3d:23:b5:b1:f0:23:01:cc:c9:8a:60:97: b9:99:13:d9:f3:da:29:30:1d:a6:71:f3:56:5f:86:f5:ec:ed: fb:c8:c3:81:fa:b4:55:27:74:18:10:1e:87:76:12:cf:d7:9c: 14:e9:29:6d:d3:28:99:10:57:52:88:08:ed:31:77:f9:39:8e: e2:89:f5:82:cf:c1:58:f1:d3:42:bf:08:5d:d2:24:9f:2e:97: 02:52:5e:dd:82:e2:2f:00:c7:f3:e7:91:83:d2:b8:71:94:c6: ac:13:b7:87:78:72:8c:c9:1b:13:7e:4b:a3:e8:02:86:d1:ad: 33:c5:f0:11:8d:01:9a:d8:d2:c1:59:ba:fe:70:45:42:f1:78: 78:91:53:93:b1:21:45:ab:0a:8e:50:83:9e:cd:b7:fe:6b:78: ef:21:09:d0:0d:4b:98:63:9b:12:16:bd:7e:32:30:94:fd:2c: 1a:51:37:8f:fd:78:35:fa:88:5f:70:66:ac:91:70:e0:77:5a: e9:c3:6f:e2:d9:9c:cb:27:72:96:3f:1b:e1:ff:67:14:c3:2f: 1d:76:9f:3e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUb9NfmkH0ZceIKQN+mENtvzeksyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNTA0MDUwMzU5MDZaFw0yNTA0MTAwNzQ4MDZaMDMxMTAvBgNV BAMTKEQxNjlENUMxMjk2MkU3Mzk0NDVEMTlFMTQzMTJGNDJDRUFGOEFCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXe3PN6/XEd81apT0NMThtH7nl vp27UWJNEXcyo+d0kFWYtWYBoyQDjZXRfjnaPh34eTibnhpslgLKtG9X+3I2FLFu HHJClxBuIw+xbzfzWrbNy4wJP4IMSZeMUImoeho1wyLw8yjsBs56C4SkiByQ66QW LlsaO28FYtHhVspBWtNFukdxXB4y5POcxVQLF/WUoY3QmqefF9tY0oosu5U98vW9 K2++0VWfz6ctzlgvKNxeT5MHXJpQVFR1c+hP26FCHmG0zkSnB576MTmzVLrAVQ8K +qifklitBv/6hC5ke9KhCjH0qjav+cB3Li2rQeSh0drqxFmsiaq3XvVUMQ/vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0WnVwSli5zlEXRnhQxL0LOr4q6EwHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhMSXGJvHvjaYoxZ+c0ryTLj5w UyR5sakZRnQT1NhJcAqpmBcgFXLhaqQ9I7Wx8CMBzMmKYJe5mRPZ89opMB2mcfNW X4b17O37yMOB+rRVJ3QYEB6HdhLP15wU6Slt0yiZEFdSiAjtMXf5OY7iifWCz8FY 8dNCvwhd0iSfLpcCUl7dguIvAMfz55GD0rhxlMasE7eHeHKMyRsTfkuj6AKG0a0z xfARjQGa2NLBWbr+cEVC8Xh4kVOTsSFFqwqOUIOezbf+a3jvIQnQDUuYY5sSFr1+ MjCU/SwaUTeP/Xg1+ohfcGaskXDgd1rpw2/i2ZzLJ3KWPxvh/2cUwy8ddp8+ -----END CERTIFICATE-----Generated at Sun Apr 6 20:01:46 2025 by rpki-client