$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json) Hash identifier: UTFPKrq702h0rGb7+XJjdHb1H0mpC7esdGok8x21cNA= Subject key identifier: 63:F3:3F:FC:4E:3E:37:CC:66:82:14:55:7B:4B:BB:97:66:E8:A4:94 Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5 Certificate serial: 71201CB2C55ADB9C5D1B10CEA42F1E9CF2719466 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft Manifest number: DA Signing time: Wed 07 May 2025 21:58:31 +0000 Manifest this update: Wed 07 May 2025 21:53:31 +0000 Manifest next update: Mon 12 May 2025 13:36:31 +0000 Files and hashes: 1: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: 0wG8UAY7ipzPPU6H/Qn8ayAErVsbpJ3ILXn1Xxmg05c=) 2: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: BFYzMk3CJ2GV5cbjVFGhKhwCs1Xf2ELKU7hoy50r0c4=) 3: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: YCM1oXKAOqvvmUFyPpzwfn80NaYV4PR/y9/a34CTUWE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:20:1c:b2:c5:5a:db:9c:5d:1b:10:ce:a4:2f:1e:9c:f2:71:94:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5 Validity Not Before: May 7 21:53:31 2025 GMT Not After : May 12 13:36:31 2025 GMT Subject: CN=63F33FFC4E3E37CC668214557B4BBB9766E8A494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:70:0f:ec:69:71:be:d9:34:fc:55:e9:44: 56:6b:72:a3:5e:cc:2a:97:04:32:18:1b:74:9a:dd: eb:ce:8e:68:38:fd:42:1a:52:7b:5a:54:f0:b8:f5: 18:53:dd:d1:21:c5:5b:d1:93:7d:f7:ed:00:14:53: a0:e6:be:fc:60:7f:ad:1a:e0:a8:fb:09:09:53:cf: cd:dd:72:82:d7:ad:31:4a:f4:54:c7:8a:e2:8c:92: 99:3f:fb:97:6f:34:78:ea:f6:b0:ef:cd:6b:f6:50: 9d:1f:d8:81:ec:a3:4b:74:08:58:7b:79:28:4f:26: ed:aa:c1:2d:b9:20:81:61:3c:25:4f:b7:20:38:d8: 02:71:46:1b:74:e0:7f:ac:62:69:f5:5f:ae:65:24: 0b:ee:ef:fd:5a:ab:2b:58:7e:06:cc:a2:6c:fe:30: ce:0b:4e:6e:1c:b7:eb:6d:cd:7a:cd:f9:31:3b:31: 47:e6:05:2f:d9:93:43:46:47:65:16:86:a4:38:a7: 6d:7d:f4:b7:1a:3c:7b:7f:4a:32:c8:80:70:0a:7c: f6:43:70:60:a3:6b:5e:62:dd:72:b0:a8:bf:f6:df: 8a:36:c7:e6:a9:cf:90:c1:16:c1:05:d2:19:aa:1f: d7:ea:5b:7a:61:a2:12:a6:f0:a0:78:72:df:d5:c9: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:3F:FC:4E:3E:37:CC:66:82:14:55:7B:4B:BB:97:66:E8:A4:94 X509v3 Authority Key Identifier: keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c2:af:8f:d2:48:a2:f9:1a:e0:a1:8a:15:13:d0:f3:71:94: 22:5b:1d:80:31:fc:4a:64:88:65:3b:7b:70:d5:86:f2:9c:3a: 6b:3b:a0:b7:16:09:e5:ca:be:51:21:32:6b:10:41:87:51:92: 09:59:fa:22:7e:f8:99:5c:b8:66:8b:5e:f6:84:96:e0:73:8b: 60:12:8d:0d:66:c3:58:6d:50:06:78:12:ff:cc:11:fd:5e:da: 99:2e:57:e3:07:60:44:99:5f:05:c7:94:8f:ef:b5:66:23:d2: 62:bb:23:9c:03:86:7a:8f:bc:19:ac:b9:c2:b1:d7:5d:38:50: 9a:c8:62:dd:4b:77:ab:d4:1b:9d:97:ea:ba:01:28:6d:1d:5e: 7b:37:ba:e3:5c:ef:c3:cc:23:c5:ca:e2:65:88:1a:92:fd:60: a6:fc:11:8d:a7:81:23:83:a7:10:41:5d:2f:d7:72:0e:80:e6: c7:60:d4:18:d4:ea:23:a4:60:27:17:98:48:f7:77:17:16:f0: 3a:75:e3:6e:81:8f:eb:55:b5:cf:b6:ba:32:79:23:0b:5c:24: 71:f0:37:57:d0:ad:0d:d1:95:2f:b1:33:ff:5a:b7:55:af:27: 81:9c:02:52:58:71:25:7d:d5:8c:1b:ea:9d:a9:4b:60:53:18: 3f:c7:f9:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcSAcssVa25xdGxDOpC8enPJxlGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4 OEZGMzZFNTAeFw0yNTA1MDcyMTUzMzFaFw0yNTA1MTIxMzM2MzFaMDMxMTAvBgNV BAMTKDYzRjMzRkZDNEUzRTM3Q0M2NjgyMTQ1NTdCNEJCQjk3NjZFOEE0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+XAP7Glxvtk0/FXpRFZrcqNe zCqXBDIYG3Sa3evOjmg4/UIaUntaVPC49RhT3dEhxVvRk3337QAUU6Dmvvxgf60a 4Kj7CQlTz83dcoLXrTFK9FTHiuKMkpk/+5dvNHjq9rDvzWv2UJ0f2IHso0t0CFh7 eShPJu2qwS25IIFhPCVPtyA42AJxRht04H+sYmn1X65lJAvu7/1aqytYfgbMomz+ MM4LTm4ct+ttzXrN+TE7MUfmBS/Zk0NGR2UWhqQ4p2199LcaPHt/SjLIgHAKfPZD cGCja15i3XKwqL/234o2x+apz5DBFsEF0hmqH9fqW3phohKm8KB4ct/VyXFTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUY/M//E4+N8xmghRVe0u7l2bopJQwHwYDVR0j BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5 QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3 OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzJBQTk0OTIzMzI1MTg0OUI1Rjc5MDg1 RkE4MTQwNkU1ODhGRjM2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0wq+P0kii+RrgoYoVE9DzcZQi Wx2AMfxKZIhlO3tw1YbynDprO6C3Fgnlyr5RITJrEEGHUZIJWfoifviZXLhmi172 hJbgc4tgEo0NZsNYbVAGeBL/zBH9XtqZLlfjB2BEmV8Fx5SP77VmI9JiuyOcA4Z6 j7wZrLnCsdddOFCayGLdS3er1Budl+q6AShtHV57N7rjXO/DzCPFyuJliBqS/WCm /BGNp4Ejg6cQQV0v13IOgObHYNQY1OojpGAnF5hI93cXFvA6deNugY/rVbXPtroy eSMLXCRx8DdX0K0N0ZUvsTP/WrdVryeBnAJSWHElfdWMG+qdqUtgUxg/x/mg -----END CERTIFICATE-----Generated at Wed May 7 23:41:46 2025 by rpki-client