$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.mft File: 33765A5A53AB5641AF9C73A1929D99EAB1234478.mft (raw, json) Hash identifier: 2EtOwSUhWR4z5gK9VNUSrjAWNVkblSD+jz+vejXC2/4= Subject key identifier: 59:14:00:82:C9:BA:C8:F1:B8:D8:C8:76:1F:C0:43:11:C0:06:7E:C0 Authority key identifier: 33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78 Certificate issuer: /CN=33765A5A53AB5641AF9C73A1929D99EAB1234478 Certificate serial: 4557810772E4693127376B34F8052A81786092A7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.mft Manifest number: CA Signing time: Sat 05 Apr 2025 16:36:27 +0000 Manifest this update: Sat 05 Apr 2025 16:31:27 +0000 Manifest next update: Wed 09 Apr 2025 22:19:27 +0000 Files and hashes: 1: 34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa (hash: 1dpN82cjn8j0A/8BH+JFJRiN/JeAD4LON3ljlachpyE=) 2: 34352e3136382e3137352e302f32342d3234203d3e20323639383736.roa (hash: oP81MfO4q2r0fr+ArWV0Mj+PrZ+hac+rVYFIykVYl6o=) 3: 33765A5A53AB5641AF9C73A1929D99EAB1234478.crl (hash: HWWw2URCgv9elvQdEaB7jHBAnbtRWjSWSc9PyvOoRk0=) 4: 34352e3136382e3137342e302f32342d3234203d3e20323639383736.roa (hash: guQWwnZHVw5KdwZHnXAqmjQ4AVYxhAruGJ6nYnJrTX4=) 5: 323830333a373761303a3a2f33322d3332203d3e20323639383736.roa (hash: E4AAme4QClGvB0pDKhPG2U6t/iOBUn89N8iomQFTeX4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 22:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:57:81:07:72:e4:69:31:27:37:6b:34:f8:05:2a:81:78:60:92:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33765A5A53AB5641AF9C73A1929D99EAB1234478 Validity Not Before: Apr 5 16:31:27 2025 GMT Not After : Apr 9 22:19:27 2025 GMT Subject: CN=59140082C9BAC8F1B8D8C8761FC04311C0067EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:e1:62:4e:6f:de:70:5a:00:bc:f0:79:ee: dd:1b:7e:4e:83:84:18:be:20:6e:c0:31:ee:cc:45: 74:fb:35:e0:c9:e8:46:53:1f:73:67:fc:73:4a:45: 82:ef:25:7b:8b:21:00:8f:07:f4:69:d7:5e:85:9d: ff:bf:fe:50:30:b4:a1:1c:3b:92:5d:bb:f6:5a:70: ee:ce:d9:9d:65:d0:b1:8d:b3:04:ea:f2:37:e5:74: 84:49:69:12:84:0d:a9:61:29:11:e1:ef:0d:6b:4f: 00:cb:d5:ce:b2:f1:2e:35:83:39:6c:f4:08:33:36: d3:60:21:48:37:50:63:50:3c:00:45:cb:ad:b3:9f: 11:e3:3f:6a:60:b1:3f:1c:43:0f:50:43:16:d6:3e: ee:c9:da:e4:0f:6c:dd:74:93:ee:86:f2:26:55:ee: 62:73:5b:2e:bb:66:e5:a2:0c:9d:02:57:36:31:53: 07:6d:40:06:ff:72:0e:4e:f8:a2:a3:e3:6d:6e:2f: d7:fa:97:5a:6a:89:52:65:6c:05:05:85:18:58:23: 58:c1:6f:e4:c7:81:b1:ef:d2:47:f3:97:34:52:cb: 2f:01:e6:ff:d4:6d:2f:3f:57:c9:c8:36:c3:43:46: 49:6e:5d:e6:b1:c8:11:00:90:9a:d0:6b:51:05:7d: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:14:00:82:C9:BA:C8:F1:B8:D8:C8:76:1F:C0:43:11:C0:06:7E:C0 X509v3 Authority Key Identifier: keyid:33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:06:b8:e0:53:a5:7f:4b:16:84:0a:92:cb:6c:18:2e:89:a6: b6:c1:25:e6:d2:d9:d6:12:ab:41:f4:a3:17:92:e2:6f:4f:3f: e5:04:73:7a:95:9a:4f:72:22:36:6c:fe:48:5d:b1:5e:82:50: 49:5d:9b:5b:1e:3a:66:04:88:d6:a9:01:48:9c:38:ab:42:4b: a7:3e:9c:86:7b:e4:98:f7:09:9a:54:3c:dd:fe:97:3e:3c:98: b3:87:f5:2c:66:89:94:38:47:ef:2b:75:c8:52:44:19:ef:3f: 5d:2b:33:89:9c:14:fe:52:4c:d9:83:f4:af:00:83:71:69:11: 38:94:cb:4d:07:bd:9d:a9:c7:f0:36:b0:2d:72:eb:cf:29:09: 79:56:9d:64:e0:bc:12:6f:37:10:1f:b0:88:8e:01:83:0c:ff: d2:9d:c7:79:20:b5:41:4c:06:f5:b3:15:e7:94:d5:57:10:b9: 90:a6:55:95:5b:a6:a5:0d:c4:48:d6:d9:9c:ea:5b:b4:e9:22: 2d:49:0a:4f:f6:70:d5:98:65:bd:f5:da:5a:ea:78:eb:16:a3: e8:8d:f2:c5:7a:b1:8c:41:ea:19:5d:ce:29:d3:b3:7f:4d:93: 9d:95:9c:e5:f2:9f:be:b0:c7:78:a2:43:c6:67:d3:50:12:9e: 9b:a1:fa:24 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURVeBB3LkaTEnN2s0+AUqgXhgkqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3NjVBNUE1M0FCNTY0MUFGOUM3M0ExOTI5RDk5RUFC MTIzNDQ3ODAeFw0yNTA0MDUxNjMxMjdaFw0yNTA0MDkyMjE5MjdaMDMxMTAvBgNV BAMTKDU5MTQwMDgyQzlCQUM4RjFCOEQ4Qzg3NjFGQzA0MzExQzAwNjdFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/uFiTm/ecFoAvPB57t0bfk6D hBi+IG7AMe7MRXT7NeDJ6EZTH3Nn/HNKRYLvJXuLIQCPB/Rp116Fnf+//lAwtKEc O5Jdu/ZacO7O2Z1l0LGNswTq8jfldIRJaRKEDalhKRHh7w1rTwDL1c6y8S41gzls 9AgzNtNgIUg3UGNQPABFy62znxHjP2pgsT8cQw9QQxbWPu7J2uQPbN10k+6G8iZV 7mJzWy67ZuWiDJ0CVzYxUwdtQAb/cg5O+KKj421uL9f6l1pqiVJlbAUFhRhYI1jB b+THgbHv0kfzlzRSyy8B5v/UbS8/V8nINsNDRkluXeaxyBEAkJrQa1EFfatNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWRQAgsm6yPG42Mh2H8BDEcAGfsAwHwYDVR0j BBgwFoAUM3ZaWlOrVkGvnHOhkp2Z6rEjRHgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDREQzY4MzBCMjA5MDVFNDBFRkY2RDY2MzBCNzU3MUFB RTYyQTkyOTgxODdEOTY5QTVGOUE1RURFQUM5MTA1LzAvMzM3NjVBNUE1M0FCNTY0 MUFGOUM3M0ExOTI5RDk5RUFCMTIzNDQ3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzc2NUE1QTUzQUI1NjQxQUY5 QzczQTE5MjlEOTlFQUIxMjM0NDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ0REM2ODMwQjIwOTA1RTQwRUZGNkQ2NjMwQjc1NzFBQUU2MkE5Mjk4 MTg3RDk2OUE1RjlBNUVERUFDOTEwNS8wLzMzNzY1QTVBNTNBQjU2NDFBRjlDNzNB MTkyOUQ5OUVBQjEyMzQ0NzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4BrjgU6V/SxaECpLLbBguiaa2 wSXm0tnWEqtB9KMXkuJvTz/lBHN6lZpPciI2bP5IXbFeglBJXZtbHjpmBIjWqQFI nDirQkunPpyGe+SY9wmaVDzd/pc+PJizh/UsZomUOEfvK3XIUkQZ7z9dKzOJnBT+ UkzZg/SvAINxaRE4lMtNB72dqcfwNrAtcuvPKQl5Vp1k4LwSbzcQH7CIjgGDDP/S ncd5ILVBTAb1sxXnlNVXELmQplWVW6alDcRI1tmc6lu06SItSQpP9nDVmGW99dpa 6njrFqPojfLFerGMQeoZXc4p07N/TZOdlZzl8p++sMd4okPGZ9NQEp6bofok -----END CERTIFICATE-----Generated at Sun Apr 6 18:49:25 2025 by rpki-client