$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft File: AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft (raw, json) Hash identifier: VwISjH2CfKQobqDVCLIZ6pauQWiJg0M4Kkz8YLbLPW0= Subject key identifier: B8:DB:A6:37:FB:6F:A2:E0:E7:1B:6A:A8:75:C1:91:98:35:83:E2:6D Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC Certificate issuer: /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC Certificate serial: 0298FFFCE3324D04DB23EC8B4077F638151526E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft Manifest number: D4 Signing time: Thu 01 May 2025 03:16:24 +0000 Manifest this update: Thu 01 May 2025 03:11:24 +0000 Manifest next update: Tue 06 May 2025 22:05:24 +0000 Files and hashes: 1: 3138362e3138392e38302e302f32302d3234203d3e203532333431.roa (hash: rXsrwxd2ecbfveLIjfTk6V21bNHTpAxzF0sgr3c6cy8=) 2: 3138362e3138392e37322e302f32312d3234203d3e203532333431.roa (hash: O8tWiXtgatOk8A0i9gCbbILmzuynUE6IJrA/LBGCQE4=) 3: 3136382e3139362e3230302e302f32322d3234203d3e203532333431.roa (hash: Tu7eLQPOZi+0Y51KE6+SD+RL2x9wKjhM0jbnj65zKjw=) 4: 3138362e3138392e37302e302f32332d3234203d3e203532333431.roa (hash: VicaMKc9n/2rpyh4iKb9nTQGgML0NC7SCq1ouiB/YlU=) 5: 3138362e3138392e36392e302f32342d3234203d3e203532333431.roa (hash: TgttYst7cWx7QCZmOUj/vK+kgDh4IAAUBf7nBvf+AkU=) 6: 3230312e3231392e3233322e302f32312d3234203d3e203532333431.roa (hash: y4iJQsqwX91vNCGsl8otx6pTvAXr9I31r6I688blIbg=) 7: 323830333a633138303a3a2f33322d3438203d3e203532333431.roa (hash: GWwxBvTnWhpfGM9BTV1NWmBVDHKZpD0o2ByWUJ4Hgk8=) 8: AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl (hash: i0tAO8tHwVesPQnsDZKbyVi55FV7OI9JL6PaP22PXgw=) 9: 3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa (hash: NZDNU+7qrqkUThZ2TJ9HL16NnfkFFpqh1S5ploh0bPs=) 10: 3138362e3138392e39362e302f31392d3234203d3e203532333431.roa (hash: 1evDIbQkybIDHC0PuJwyC5s1SkrMULEISiXmjPCNDTo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 May 2025 22:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:98:ff:fc:e3:32:4d:04:db:23:ec:8b:40:77:f6:38:15:15:26:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC Validity Not Before: May 1 03:11:24 2025 GMT Not After : May 6 22:05:24 2025 GMT Subject: CN=B8DBA637FB6FA2E0E71B6AA875C191983583E26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:15:fe:59:71:f8:5e:ab:5d:50:de:db:38: f1:62:3c:a3:0a:73:b4:d2:66:bb:83:54:e7:b6:87: de:70:98:6f:59:94:a3:90:75:3e:28:7a:7d:08:a6: 9d:1c:f1:88:c4:4e:33:7a:40:7b:94:61:68:ab:a9: f1:0f:db:bf:d7:af:67:a1:a9:e8:d8:1f:e9:5c:5d: f3:37:1d:15:e2:5e:a9:37:22:68:fd:05:5d:86:ab: 1f:93:23:19:15:97:c5:07:01:3c:4c:a3:c2:e7:d0: a2:05:3d:88:f9:4e:fe:7a:91:6a:6e:b7:05:c4:3b: 22:f0:a7:d1:0f:03:a7:3d:ff:4d:60:2b:bd:d9:1c: 82:36:e2:d7:94:65:39:16:e4:30:90:4f:7f:41:f1: 45:75:43:af:f2:98:b5:5c:c9:9b:01:6b:81:4a:50: f6:01:a6:de:47:50:20:8b:8b:c9:21:13:ae:f0:97: fb:e2:f2:6d:6f:18:65:45:50:c2:4e:8c:5e:2b:10: e4:2e:31:d5:48:c1:6f:86:a4:94:ad:bb:c5:af:13: 11:2b:32:69:40:a6:32:97:bd:5f:d4:85:9e:e5:6d: 28:9e:f1:a3:ad:a6:97:56:0a:59:dd:4d:b8:69:d5: 37:91:06:06:fa:ee:1a:0c:73:82:05:cb:cf:55:7a: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:A6:37:FB:6F:A2:E0:E7:1B:6A:A8:75:C1:91:98:35:83:E2:6D X509v3 Authority Key Identifier: keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d5:64:8e:0e:9d:65:5a:30:67:84:43:8a:be:03:dd:bc:6f: 1a:7c:af:45:96:34:ee:01:ab:20:19:75:16:57:19:7f:ae:be: 60:9a:e2:28:1f:60:f6:38:73:4c:d3:4c:b3:d2:3f:ab:b5:c6: 42:1f:b3:a4:fa:b5:6c:3f:85:89:00:a5:2c:26:1c:b3:fa:a6: 47:75:6f:d4:d1:e1:a9:4a:a2:dc:39:18:40:b6:42:be:c9:53: 05:d1:4a:ad:32:da:fb:e3:c2:6d:15:30:ed:36:09:5e:15:98: 6b:f4:ef:1d:95:2a:e1:c5:73:a3:0b:b7:e7:8d:18:b1:f1:a8: f7:72:09:6a:b5:ce:f4:b3:cf:ff:a0:dc:c2:29:27:2e:74:ca: 93:f1:37:e1:89:0b:a7:0b:d0:91:f1:9b:83:d4:90:96:ec:53: 23:85:f7:80:c5:a9:81:4e:5f:02:a4:bb:83:9a:fc:00:53:aa: 02:6a:e8:89:b0:fc:11:fc:35:29:a3:7a:73:32:59:00:7f:07: ea:c4:16:cf:fc:ba:5b:2b:1b:23:43:a2:a6:aa:8b:c7:bf:42: ff:bc:9d:70:be:8c:13:0e:71:e8:58:68:7b:5f:63:09:64:89: af:86:de:fe:df:9b:5a:92:e3:3a:aa:9c:97:91:96:d6:fe:54: 55:9f:ea:81 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUApj//OMyTQTbI+yLQHf2OBUVJuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDNDI3QjJCM0Y2NkZEMDQyMUMzNkY5RDhBNEE2MjVF Q0U4NTBGQzAeFw0yNTA1MDEwMzExMjRaFw0yNTA1MDYyMjA1MjRaMDMxMTAvBgNV BAMTKEI4REJBNjM3RkI2RkEyRTBFNzFCNkFBODc1QzE5MTk4MzU4M0UyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvThX+WXH4XqtdUN7bOPFiPKMK c7TSZruDVOe2h95wmG9ZlKOQdT4oen0Ipp0c8YjETjN6QHuUYWirqfEP27/Xr2eh qejYH+lcXfM3HRXiXqk3Imj9BV2Gqx+TIxkVl8UHATxMo8Ln0KIFPYj5Tv56kWpu twXEOyLwp9EPA6c9/01gK73ZHII24teUZTkW5DCQT39B8UV1Q6/ymLVcyZsBa4FK UPYBpt5HUCCLi8khE67wl/vi8m1vGGVFUMJOjF4rEOQuMdVIwW+GpJStu8WvExEr MmlApjKXvV/UhZ7lbSie8aOtppdWClndTbhp1TeRBgb67hoMc4IFy89VehQVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuNumN/tvouDnG2qodcGRmDWD4m0wHwYDVR0j BBgwFoAUqsQnsrP2b9BCHDb52KSmJezoUPwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wN0Y1NDU4ODA0QUMwMTU2MEM3QjJGQUM5NUJDMDcxMTM4 QzFCQTIxRDNFMDczRDE2REJFMzJGMDk3Q0RFQzc1LzAvQUFDNDI3QjJCM0Y2NkZE MDQyMUMzNkY5RDhBNEE2MjVFQ0U4NTBGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUM0MjdCMkIzRjY2RkQwNDIx QzM2RjlEOEE0QTYyNUVDRTg1MEZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDdGNTQ1ODgwNEFDMDE1NjBDN0IyRkFDOTVCQzA3MTEzOEMxQkEyMUQz RTA3M0QxNkRCRTMyRjA5N0NERUM3NS8wL0FBQzQyN0IyQjNGNjZGRDA0MjFDMzZG OUQ4QTRBNjI1RUNFODUwRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAG1WSODp1lWjBnhEOKvgPdvG8a fK9FljTuAasgGXUWVxl/rr5gmuIoH2D2OHNM00yz0j+rtcZCH7Ok+rVsP4WJAKUs Jhyz+qZHdW/U0eGpSqLcORhAtkK+yVMF0UqtMtr748JtFTDtNgleFZhr9O8dlSrh xXOjC7fnjRix8aj3cglqtc70s8//oNzCKScudMqT8TfhiQunC9CR8ZuD1JCW7FMj hfeAxamBTl8CpLuDmvwAU6oCauiJsPwR/DUpo3pzMlkAfwfqxBbP/LpbKxsjQ6Km qovHv0L/vJ1wvowTDnHoWGh7X2MJZImvht7+35takuM6qpyXkZbW/lRVn+qB -----END CERTIFICATE-----Generated at Sat May 3 22:34:36 2025 by rpki-client