$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft File: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft (raw, json) Hash identifier: H7TFKxqqR+p3+fGdJfqzJ0DInsCg+Y7jtfFh+uC2i9g= Subject key identifier: 12:D5:FA:6C:5B:B9:52:A5:D3:1B:63:1F:BE:BF:91:6C:0B:D6:B4:11 Authority key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 Certificate issuer: /CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Certificate serial: 1A52F912CF0CEADBAF6B1F191FD24C80A6543403 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft Manifest number: D2 Signing time: Wed 07 May 2025 00:35:56 +0000 Manifest this update: Wed 07 May 2025 00:30:56 +0000 Manifest next update: Sun 11 May 2025 11:51:56 +0000 Files and hashes: 1: 323830333a623836303a3a2f33322d3332203d3e20323637383238.roa (hash: eJmlT26CwZyxaelOUPoLLiMMd4BSp8QyR8CJ1X/hKcM=) 2: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl (hash: XNIfrgA4JJOG2tNukC9ee2GFXAT6yKf0BILpsusgqqU=) 3: 34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa (hash: 00QHCnhmXQ1VG4RphdiKc9rqhCyv5e4wyawaUJTCyfw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:52:f9:12:cf:0c:ea:db:af:6b:1f:19:1f:d2:4c:80:a6:54:34:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Validity Not Before: May 7 00:30:56 2025 GMT Not After : May 11 11:51:56 2025 GMT Subject: CN=12D5FA6C5BB952A5D31B631FBEBF916C0BD6B411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:bc:51:fe:d6:25:e8:84:de:99:2e:7d:a1: 74:cd:ca:40:70:90:e2:61:80:d4:7b:c9:c8:d2:2f: 3c:64:c3:4a:f6:9d:59:52:90:0c:35:2c:82:3f:e0: d7:f1:e9:93:46:44:b8:ff:43:23:7a:f1:68:66:d4: 1d:81:f5:79:72:d6:5b:c7:52:b6:db:f0:d4:28:52: 8f:0f:88:42:86:36:a9:a8:29:d5:b0:69:48:cc:f5: ce:b0:f0:f4:9c:b2:c4:10:e9:4a:1a:29:fc:ec:86: 83:fb:ae:09:83:f2:8b:a3:c1:8b:7d:47:20:aa:d3: 04:9b:34:33:20:df:1b:c5:ea:62:c3:22:c4:3a:73: 9b:6e:6f:b2:54:89:0a:73:69:fd:24:7b:98:17:97: ba:64:00:81:fd:05:ca:12:d3:5f:69:bf:87:6a:f6: f8:8c:fb:63:a2:69:c0:60:3b:4b:a0:d8:4b:3a:32: cb:59:15:0d:e4:16:56:4f:d9:7d:fa:f9:d1:81:d3: 61:69:3b:36:09:3c:4d:df:43:77:d0:73:c5:55:80: 49:94:33:47:cf:f2:32:19:e0:4b:97:54:07:c7:bc: f0:21:17:90:b6:51:e3:be:04:62:5c:81:0a:1d:66: 5d:c1:53:2a:b2:b1:55:83:9c:39:93:c9:b2:35:e6: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:FA:6C:5B:B9:52:A5:D3:1B:63:1F:BE:BF:91:6C:0B:D6:B4:11 X509v3 Authority Key Identifier: keyid:29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:11:d2:ef:e1:20:31:bb:86:bc:e5:eb:cf:20:59:80:79:f5: f0:57:8b:1f:61:97:e3:67:16:5c:4b:05:81:60:db:d2:c8:60: fb:fd:a4:68:83:cd:30:a2:f7:2d:3e:c5:20:77:ef:25:b1:3c: 86:51:88:29:1b:3d:c2:da:56:b1:d2:1f:24:73:fa:18:1f:f2: 30:9a:41:70:72:6d:db:bb:e6:9e:5b:48:05:e3:42:50:23:ad: 23:c7:57:41:5c:a2:e9:b8:93:63:8d:59:95:82:ad:6a:d5:a7: c9:c9:d9:e1:18:de:e2:1d:94:f1:41:71:4c:33:78:dc:bf:81: fd:cc:08:3a:61:dc:ab:87:de:79:cd:e7:01:f6:14:69:3f:ea: 96:92:30:e6:2d:ec:6b:28:17:b8:f2:0a:df:5b:08:79:b4:27: e7:32:19:fc:d2:82:8b:62:6c:fe:ab:b9:83:42:bd:d6:72:55: f7:4b:a5:ad:5f:30:d2:62:39:e6:54:24:86:46:96:aa:b5:9a: db:4c:e2:98:2d:e4:72:ff:c4:3a:8f:aa:77:24:44:98:cd:82: eb:dc:78:53:2e:d4:cd:ae:cc:5a:84:2d:99:89:93:f2:ae:ec: 70:e8:44:75:ae:95:14:29:05:8a:c3:3d:f3:61:d0:cc:eb:3f: 84:f8:7d:63 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGlL5Es8M6tuvax8ZH9JMgKZUNAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4OTM1QzlBNDNDNUM5QkRDOUFFMUY4MTg1QkZEOThG RjFBN0IzOTAeFw0yNTA1MDcwMDMwNTZaFw0yNTA1MTExMTUxNTZaMDMxMTAvBgNV BAMTKDEyRDVGQTZDNUJCOTUyQTVEMzFCNjMxRkJFQkY5MTZDMEJENkI0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk17xR/tYl6ITemS59oXTNykBw kOJhgNR7ycjSLzxkw0r2nVlSkAw1LII/4Nfx6ZNGRLj/QyN68Whm1B2B9Xly1lvH Urbb8NQoUo8PiEKGNqmoKdWwaUjM9c6w8PScssQQ6UoaKfzshoP7rgmD8oujwYt9 RyCq0wSbNDMg3xvF6mLDIsQ6c5tub7JUiQpzaf0ke5gXl7pkAIH9BcoS019pv4dq 9viM+2OiacBgO0ug2Es6MstZFQ3kFlZP2X36+dGB02FpOzYJPE3fQ3fQc8VVgEmU M0fP8jIZ4EuXVAfHvPAhF5C2UeO+BGJcgQodZl3BUyqysVWDnDmTybI15tdjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUEtX6bFu5UqXTG2Mfvr+RbAvWtBEwHwYDVR0j BBgwFoAUKYk1yaQ8XJvcmuH4GFv9mP8aezkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRTY5OUE0QUM1RTdFMzNFQTQ2MzE4NTlGOTcyNTI1NDMw MkQxQzE5NURFODQ1NzMyNTE4Mjk1ODdBM0JCNDY2LzAvMjk4OTM1QzlBNDNDNUM5 QkRDOUFFMUY4MTg1QkZEOThGRjFBN0IzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTg5MzVDOUE0M0M1QzlCREM5 QUUxRjgxODVCRkQ5OEZGMUE3QjM5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEU2OTlBNEFDNUU3RTMzRUE0NjMxODU5Rjk3MjUyNTQzMDJEMUMxOTVE RTg0NTczMjUxODI5NTg3QTNCQjQ2Ni8wLzI5ODkzNUM5QTQzQzVDOUJEQzlBRTFG ODE4NUJGRDk4RkYxQTdCMzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoEdLv4SAxu4a85evPIFmAefXw V4sfYZfjZxZcSwWBYNvSyGD7/aRog80wovctPsUgd+8lsTyGUYgpGz3C2lax0h8k c/oYH/IwmkFwcm3bu+aeW0gF40JQI60jx1dBXKLpuJNjjVmVgq1q1afJydnhGN7i HZTxQXFMM3jcv4H9zAg6Ydyrh955zecB9hRpP+qWkjDmLexrKBe48grfWwh5tCfn Mhn80oKLYmz+q7mDQr3WclX3S6WtXzDSYjnmVCSGRpaqtZrbTOKYLeRy/8Q6j6p3 JESYzYLr3HhTLtTNrsxahC2ZiZPyruxw6ER1rpUUKQWKwz3zYdDM6z+E+H1j -----END CERTIFICATE-----Generated at Thu May 8 07:32:51 2025 by rpki-client