$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft File: 848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft (raw, json) Hash identifier: OmpwgJpX9wgsJ/AbLFPY0MFsGo9P733+B/Qa8b/C3ME= Subject key identifier: D5:99:8A:86:5F:D1:4C:17:83:87:7D:75:46:EE:41:44:5B:2C:8F:1B Authority key identifier: 84:8C:7E:4D:8C:40:1E:55:9D:FC:0C:DD:58:C6:C5:2E:0D:14:72:0B Certificate issuer: /CN=848C7E4D8C401E559DFC0CDD58C6C52E0D14720B Certificate serial: 17EA4AFCAF6C7B28E3CEA6D85F7F581E0D18D0AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft Manifest number: DE Signing time: Sat 10 May 2025 23:02:20 +0000 Manifest this update: Sat 10 May 2025 22:57:20 +0000 Manifest next update: Thu 15 May 2025 18:27:20 +0000 Files and hashes: 1: 323830333a623061303a3a2f33322d3438203d3e20323636383036.roa (hash: pUD9UtE08N9B8N54/XkaiIw5Vm9SaOmEvgbCFfc08tw=) 2: 848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl (hash: JTrJwjCJ8mYWsd4aBVRpfhwI07nj0lcrMHb3EvBVHzw=) 3: 34352e3233362e3130302e302f32322d3234203d3e20323636383036.roa (hash: Fa6/7CNSZsifFiuQGLRqEd3nbPfptI4Iu7hqOWho6FU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 15:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ea:4a:fc:af:6c:7b:28:e3:ce:a6:d8:5f:7f:58:1e:0d:18:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848C7E4D8C401E559DFC0CDD58C6C52E0D14720B Validity Not Before: May 10 22:57:20 2025 GMT Not After : May 15 18:27:20 2025 GMT Subject: CN=D5998A865FD14C1783877D7546EE41445B2C8F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:e6:64:60:20:a9:96:b7:70:8e:88:a2:40: 17:ad:43:b2:85:d2:87:c0:6b:01:4f:09:d7:21:60: 46:0b:50:73:1f:4c:30:5b:02:01:a0:47:61:39:f2: df:84:13:4f:a6:c4:2b:95:b6:80:a5:89:09:10:a1: 94:eb:4d:62:38:e4:e4:32:23:1b:ae:b3:98:2f:81: 44:a3:02:54:0d:22:f7:3b:77:5b:33:b1:26:a0:ae: 23:9b:0e:8e:26:f9:dd:b8:76:68:e0:96:09:7f:4f: 81:48:68:fe:19:12:71:d3:3f:26:02:35:4f:94:87: 42:12:e7:ad:9c:3a:9a:8f:5e:bc:e3:f8:79:ca:87: 31:24:9e:06:74:fd:17:ce:23:4a:2a:e1:98:7f:fa: 52:1d:cb:e5:d2:5b:9a:2e:7f:e7:5b:30:0e:e4:5c: 75:31:b2:92:89:79:f6:8e:7b:3b:b6:78:e1:50:9e: cd:21:15:ba:12:d3:5e:b5:16:6a:2c:a1:fd:53:8a: 1a:51:bc:2f:2d:90:1a:a8:54:55:4e:42:d7:e2:94: 9a:0e:22:1b:16:31:ea:33:06:01:6b:73:76:fc:93: 18:a4:ad:17:bb:0e:12:49:fb:31:6d:89:10:cf:98: d5:75:d7:f5:1e:18:f1:78:f3:f6:7a:01:91:03:85: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:99:8A:86:5F:D1:4C:17:83:87:7D:75:46:EE:41:44:5B:2C:8F:1B X509v3 Authority Key Identifier: keyid:84:8C:7E:4D:8C:40:1E:55:9D:FC:0C:DD:58:C6:C5:2E:0D:14:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:99:bf:69:2b:0f:13:14:03:9e:a2:0f:0e:52:84:5e:dc:bd: 3e:1d:3c:72:9a:4b:06:80:89:43:ad:94:07:26:1c:fe:21:5f: a9:3f:0a:51:e4:aa:52:8c:59:11:4d:bb:92:ce:06:fb:17:6d: cf:e7:09:f8:87:96:9a:1f:54:1e:21:0e:05:d7:23:d0:8d:46: a3:dd:5d:19:06:67:71:d1:98:ab:98:9b:7c:bd:f0:71:17:de: 83:75:f7:6b:96:f9:70:95:74:41:61:ef:51:82:6a:5f:d5:4b: bb:71:39:e0:e5:b6:7b:7b:3c:be:51:4a:22:15:f4:3a:2b:6e: b3:ba:05:56:9c:0f:79:79:53:a2:22:6c:a3:b9:fe:61:6b:34: 94:90:d7:54:53:67:fa:ad:88:b0:be:f6:5c:cf:37:1b:bf:be: c8:e1:50:a7:86:b7:7c:fb:86:fd:29:94:3c:27:2c:94:2b:54: 3d:1b:ab:a4:2a:bd:8f:66:cf:0d:50:de:d0:3c:ba:a9:d3:78: bf:55:9c:a6:7f:6d:ea:e0:95:bc:af:0e:3b:09:a7:98:c3:cb: 76:cc:58:3f:bc:50:01:c2:68:13:07:51:da:b3:a0:19:e2:6a: f1:94:a1:36:98:78:5c:c3:99:50:cc:d0:73:b9:5e:9e:4b:7f: 64:4e:78:e4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUF+pK/K9seyjjzqbYX39YHg0Y0KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QzdFNEQ4QzQwMUU1NTlERkMwQ0RENThDNkM1MkUw RDE0NzIwQjAeFw0yNTA1MTAyMjU3MjBaFw0yNTA1MTUxODI3MjBaMDMxMTAvBgNV BAMTKEQ1OTk4QTg2NUZEMTRDMTc4Mzg3N0Q3NTQ2RUU0MTQ0NUIyQzhGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD9uZkYCCplrdwjoiiQBetQ7KF 0ofAawFPCdchYEYLUHMfTDBbAgGgR2E58t+EE0+mxCuVtoCliQkQoZTrTWI45OQy Ixuus5gvgUSjAlQNIvc7d1szsSagriObDo4m+d24dmjglgl/T4FIaP4ZEnHTPyYC NU+Uh0IS562cOpqPXrzj+HnKhzEkngZ0/RfOI0oq4Zh/+lIdy+XSW5ouf+dbMA7k XHUxspKJefaOezu2eOFQns0hFboS0161Fmosof1TihpRvC8tkBqoVFVOQtfilJoO IhsWMeozBgFrc3b8kxikrRe7DhJJ+zFtiRDPmNV11/UeGPF48/Z6AZEDhTaLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1ZmKhl/RTBeDh311Ru5BRFssjxswHwYDVR0j BBgwFoAUhIx+TYxAHlWd/AzdWMbFLg0UcgswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjAzMkQ5QzQ1Qzc3QTUwRTUwMUU0NkRFMjA0RkVCNjhF MTJFM0E0NTFBRTVBNjlENTVEQjBBMUI1QjBFM0Y1LzAvODQ4QzdFNEQ4QzQwMUU1 NTlERkMwQ0RENThDNkM1MkUwRDE0NzIwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDhDN0U0RDhDNDAxRTU1OURG QzBDREQ1OEM2QzUyRTBEMTQ3MjBCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYwMzJEOUM0NUM3N0E1MEU1MDFFNDZERTIwNEZFQjY4RTEyRTNBNDUx QUU1QTY5RDU1REIwQTFCNUIwRTNGNS8wLzg0OEM3RTREOEM0MDFFNTU5REZDMENE RDU4QzZDNTJFMEQxNDcyMEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBImb9pKw8TFAOeog8OUoRe3L0+ HTxymksGgIlDrZQHJhz+IV+pPwpR5KpSjFkRTbuSzgb7F23P5wn4h5aaH1QeIQ4F 1yPQjUaj3V0ZBmdx0ZirmJt8vfBxF96DdfdrlvlwlXRBYe9Rgmpf1Uu7cTng5bZ7 ezy+UUoiFfQ6K26zugVWnA95eVOiImyjuf5hazSUkNdUU2f6rYiwvvZczzcbv77I 4VCnhrd8+4b9KZQ8JyyUK1Q9G6ukKr2PZs8NUN7QPLqp03i/VZymf23q4JW8rw47 CaeYw8t2zFg/vFABwmgTB1Has6AZ4mrxlKE2mHhcw5lQzNBzuV6eS39kTnjk -----END CERTIFICATE-----Generated at Sun May 11 12:44:51 2025 by rpki-client