$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft File: 0F648EC543C3C7C2094A45E4678D768C42B868C7.mft (raw, json) Hash identifier: CXlAGkEIMSoROUAyCL1QCivLwdoc1wVH1FUt4v6GTVw= Subject key identifier: 70:89:23:76:F5:3A:CD:91:AE:81:2D:EB:16:F5:BF:02:EF:1C:A0:9B Authority key identifier: 0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7 Certificate issuer: /CN=0F648EC543C3C7C2094A45E4678D768C42B868C7 Certificate serial: 3DFE0E2A3389A39EC0F48D55A3D6075C1630AFAB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft Manifest number: CA Signing time: Sat 05 Apr 2025 05:25:03 +0000 Manifest this update: Sat 05 Apr 2025 05:20:03 +0000 Manifest next update: Thu 10 Apr 2025 21:11:03 +0000 Files and hashes: 1: 34352e3138372e39322e302f32322d3234203d3e20323639383239.roa (hash: DsR7Kw4S3rkA/zGa3refmkybFOi5SDZ21QI4VlouRIY=) 2: 0F648EC543C3C7C2094A45E4678D768C42B868C7.crl (hash: 1VDE9jeOPDoQbrK0kn48eAMeZbrhTY2o+8zgoNorGBg=) 3: 323830333a373736303a3a2f33322d3438203d3e20323639383239.roa (hash: dtvDvLwK8pBxIL//65k4EFucdXxsWGXiABJesqzfnv0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fe:0e:2a:33:89:a3:9e:c0:f4:8d:55:a3:d6:07:5c:16:30:af:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F648EC543C3C7C2094A45E4678D768C42B868C7 Validity Not Before: Apr 5 05:20:03 2025 GMT Not After : Apr 10 21:11:03 2025 GMT Subject: CN=70892376F53ACD91AE812DEB16F5BF02EF1CA09B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:f1:ce:2a:50:d7:06:9a:42:e7:11:ea:5d: 9b:a5:a0:70:eb:29:e0:dd:df:c9:24:f4:2d:9c:04: 50:3f:cb:1e:4b:6a:c2:cc:1b:d7:d6:c5:f9:19:d3: cb:f0:b2:dc:56:4e:06:64:a2:23:27:b5:75:62:32: 30:92:9a:08:ca:d8:a8:98:35:d2:7e:4d:ef:21:ce: 46:b4:b5:80:7c:c6:68:ec:1e:28:2f:46:fa:12:1a: 8e:dd:01:17:fd:a5:3f:81:43:76:72:81:1d:7a:f8: 04:9c:1a:63:03:15:bc:c2:af:0b:a5:ba:23:45:48: df:18:fc:6c:aa:c0:dc:e9:fa:99:bd:33:13:3b:3d: d4:b3:61:d7:31:ee:60:52:b3:b5:7f:4a:0b:db:9a: 90:0b:bb:eb:77:45:6b:4a:4c:1e:c6:bd:6a:47:f8: 5f:4e:cd:3c:f3:bd:3b:05:19:d6:b2:5d:0d:6e:de: 20:d5:70:ad:7b:5d:82:bd:1c:50:34:5c:5e:68:03: 57:6d:78:b2:db:0b:4a:3d:a0:7e:09:dc:08:a8:43: 04:4f:1b:4a:1a:76:fd:0b:9b:18:09:bf:12:43:24: da:4d:67:0b:03:00:17:77:96:16:be:b0:34:0a:4b: 01:c2:f6:23:fb:8d:f1:8e:e3:26:9e:11:31:0e:d4: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:89:23:76:F5:3A:CD:91:AE:81:2D:EB:16:F5:BF:02:EF:1C:A0:9B X509v3 Authority Key Identifier: keyid:0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5b:2c:0a:b2:2a:2c:18:6f:48:b3:0b:70:5c:66:05:2c:92: af:23:de:ac:ba:16:8a:30:69:aa:39:ae:58:f6:de:e8:a0:c1: 3e:e7:4f:4e:b1:ef:a7:fc:0d:bb:cb:54:c4:38:e2:26:41:fc: 9e:ad:99:b8:e6:00:26:14:d9:2c:9c:6a:b8:f9:ea:c2:2a:9d: 1f:62:f2:f5:92:2e:0a:f3:14:fe:0e:ab:b8:33:4c:c7:06:1f: eb:25:07:a1:45:7f:84:10:de:ed:9c:3e:7f:72:da:60:7c:25: ae:34:59:89:25:c7:c9:e5:14:61:f1:6e:c7:d7:19:de:ee:c0: 79:67:de:02:b3:5d:37:bf:e7:41:00:4e:73:db:a5:dd:14:c3: 07:27:fa:3a:e9:fc:62:0d:9f:0c:a6:fc:00:17:ef:56:c6:ef: 4b:18:c5:3e:58:5e:0d:c2:f1:44:d0:6f:70:cb:16:b5:66:35: 40:9d:a1:88:71:cd:6b:bc:91:73:12:9e:14:15:ec:3c:3d:54: 84:22:08:eb:dd:24:7a:48:ae:61:c9:71:71:91:9a:ac:00:bc: 2c:9a:66:84:ec:4d:f8:2c:43:cf:64:c5:df:20:f9:63:14:f6: d2:c0:a1:ae:77:3e:55:96:db:48:49:e6:09:b9:f7:8f:cc:fc: 9a:ba:87:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPf4OKjOJo57A9I1Vo9YHXBYwr6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2NDhFQzU0M0MzQzdDMjA5NEE0NUU0Njc4RDc2OEM0 MkI4NjhDNzAeFw0yNTA0MDUwNTIwMDNaFw0yNTA0MTAyMTExMDNaMDMxMTAvBgNV BAMTKDcwODkyMzc2RjUzQUNEOTFBRTgxMkRFQjE2RjVCRjAyRUYxQ0EwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWYfHOKlDXBppC5xHqXZuloHDr KeDd38kk9C2cBFA/yx5LasLMG9fWxfkZ08vwstxWTgZkoiMntXViMjCSmgjK2KiY NdJ+Te8hzka0tYB8xmjsHigvRvoSGo7dARf9pT+BQ3ZygR16+AScGmMDFbzCrwul uiNFSN8Y/GyqwNzp+pm9MxM7PdSzYdcx7mBSs7V/SgvbmpALu+t3RWtKTB7GvWpH +F9OzTzzvTsFGdayXQ1u3iDVcK17XYK9HFA0XF5oA1dteLLbC0o9oH4J3AioQwRP G0oadv0LmxgJvxJDJNpNZwsDABd3lha+sDQKSwHC9iP7jfGO4yaeETEO1JZDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcIkjdvU6zZGugS3rFvW/Au8coJswHwYDVR0j BBgwFoAUD2SOxUPDx8IJSkXkZ412jEK4aMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNzc3RTU3RUE2REJEMjVFOUUwRTFDRTMwNkM3NzBCQzkx RUU4NDY3NDAxNTI3QzkxOTY1QzM4MjhGRDAwMDY5LzAvMEY2NDhFQzU0M0MzQzdD MjA5NEE0NUU0Njc4RDc2OEM0MkI4NjhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjY0OEVDNTQzQzNDN0MyMDk0 QTQ1RTQ2NzhENzY4QzQyQjg2OEM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjc3N0U1N0VBNkRCRDI1RTlFMEUxQ0UzMDZDNzcwQkM5MUVFODQ2NzQw MTUyN0M5MTk2NUMzODI4RkQwMDA2OS8wLzBGNjQ4RUM1NDNDM0M3QzIwOTRBNDVF NDY3OEQ3NjhDNDJCODY4QzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVWywKsiosGG9IswtwXGYFLJKv I96suhaKMGmqOa5Y9t7ooME+509Ose+n/A27y1TEOOImQfyerZm45gAmFNksnGq4 +erCKp0fYvL1ki4K8xT+Dqu4M0zHBh/rJQehRX+EEN7tnD5/ctpgfCWuNFmJJcfJ 5RRh8W7H1xne7sB5Z94Cs103v+dBAE5z26XdFMMHJ/o66fxiDZ8MpvwAF+9Wxu9L GMU+WF4NwvFE0G9wyxa1ZjVAnaGIcc1rvJFzEp4UFew8PVSEIgjr3SR6SK5hyXFx kZqsALwsmmaE7E34LEPPZMXfIPljFPbSwKGudz5VlttISeYJufePzPyauoeg -----END CERTIFICATE-----Generated at Sun Apr 6 14:25:27 2025 by rpki-client