$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft File: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft (raw, json) Hash identifier: MtzIb8n0LLaUc1MMcnLZJwxTrxb3NR7Zl6yZqKKnzH4= Subject key identifier: 88:E1:BD:4D:F4:26:92:E3:46:A5:46:C6:B8:94:4E:A3:F0:EF:84:43 Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 Certificate issuer: /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Certificate serial: 34C9AA0FC4BE960253F719582BA308EF964A8918 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft Manifest number: D5 Signing time: Mon 05 May 2025 11:28:53 +0000 Manifest this update: Mon 05 May 2025 11:23:53 +0000 Manifest next update: Sat 10 May 2025 00:28:53 +0000 Files and hashes: 1: 3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa (hash: rihQQJVFtZKUDCwHDYSaMs0ULFC3fG8dHmriGQNp/VM=) 2: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl (hash: PiblUmTHihT+uSdYpHkQGrSgbhOwPs6PhmEuw1D9/rU=) 3: 3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa (hash: whz10X8rtZzGp5KMzk05l4IUJVXM4z7n6YqJR8ewZes=) 4: 3139302e3131332e33322e302f32322d3234203d3e20323731383634.roa (hash: Ykcu8jC4UzsyZvhSzf6AMozsyx0Qjpsc4oSXGJYv0m4=) 5: 3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa (hash: lFSysIKlLWf7JB59Euh1O3A3OikH4P+rns7uXXpwjWg=) 6: 323830333a623431303a3a2f33322d3332203d3e20323731383634.roa (hash: Q2PshefDUXGnhMVo308cN4VQhDiScT++G8OK9eTiar4=) 7: 3139302e3131332e33332e302f32342d3234203d3e20323731383634.roa (hash: azN9pRvg5DpbUa7YhuECMfpkA3UkUWDg8qQJHMhMr7A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 18:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c9:aa:0f:c4:be:96:02:53:f7:19:58:2b:a3:08:ef:96:4a:89:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Validity Not Before: May 5 11:23:53 2025 GMT Not After : May 10 00:28:53 2025 GMT Subject: CN=88E1BD4DF42692E346A546C6B8944EA3F0EF8443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b8:ed:62:bb:c2:03:07:9b:29:fa:e7:01:28: ad:16:49:9a:81:b8:15:c3:de:25:da:e4:8f:39:6e: fe:09:45:87:ef:09:78:96:ce:07:fa:55:65:e8:de: 9e:58:f1:0d:f1:7a:ad:88:4b:2d:39:ad:2d:d3:88: b5:e6:1b:47:d7:28:0c:eb:63:09:6d:db:ba:6d:18: 4c:e0:9b:e2:91:ed:27:d6:a2:17:0f:20:b9:09:0c: ef:fc:f2:7c:7c:b6:87:92:ea:40:cc:c1:56:4b:e6: cc:00:04:db:7b:b4:61:83:18:8e:60:ae:c1:1d:84: 15:85:fe:94:c0:54:13:02:a0:d7:5d:32:52:da:11: 75:1d:95:dc:a5:e2:92:be:14:0f:82:49:50:f2:29: 41:00:48:1b:6b:35:5c:63:07:78:c9:aa:59:a5:d0: 6c:29:18:20:73:53:99:a9:ae:67:b3:f9:24:e0:dc: cf:66:7b:31:21:d0:e6:83:19:44:74:b5:bd:4a:30: 5b:a8:57:aa:5e:51:4f:53:a7:f1:4a:f4:24:96:e3: 94:d2:ba:0c:0b:21:be:8c:2f:df:aa:01:97:c8:ac: fc:b4:ef:69:a8:54:13:4c:40:00:97:04:cc:0f:4d: fa:6f:02:bb:88:77:93:42:6f:36:29:ff:56:05:15: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E1:BD:4D:F4:26:92:E3:46:A5:46:C6:B8:94:4E:A3:F0:EF:84:43 X509v3 Authority Key Identifier: keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cb:7a:b6:bd:1e:13:17:95:2e:c0:86:84:3e:81:46:9f:b5: c3:39:94:4f:58:15:00:a9:f0:30:f9:47:ce:2e:33:40:6d:cf: c6:5a:0e:f8:71:cb:45:dc:a2:32:d3:3a:b7:12:06:8f:00:ff: 28:71:e4:c0:ea:89:fc:aa:cc:08:60:2b:5b:43:91:77:3a:0e: c3:01:c6:98:77:6f:0f:17:97:d1:2e:b2:2c:25:ad:d7:c9:6c: fe:52:f5:e1:f3:86:78:1a:b9:7b:a7:04:0e:bd:da:63:56:f8: ee:87:6d:1c:03:e8:26:43:a3:31:09:bf:e4:16:80:15:6f:aa: 54:e4:07:4c:36:ee:86:e1:3f:e4:44:e2:41:8e:99:f1:62:7a: f3:84:34:86:1b:f9:88:29:a0:a2:7a:e5:a9:ff:93:e3:5c:f3: 3f:a4:b6:3a:6d:5e:e5:88:27:45:5f:77:28:84:a6:7b:3b:48: 4d:f7:90:fe:e3:fe:4f:9c:6d:7b:16:d1:44:e0:46:77:fd:f2: c4:13:06:24:0e:53:cd:1e:02:de:e3:31:ba:bd:34:94:7a:99: 64:80:ff:3b:d1:2f:84:ef:db:62:99:e8:18:8b:b1:63:00:51: ff:23:b8:ff:8c:16:3d:05:69:7d:3b:29:47:01:65:be:da:11: 86:92:89:bf -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNMmqD8S+lgJT9xlYK6MI75ZKiRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1MTdENEJBQUI4NUQzQzhGNTAwOEY0MEJDNDhCMjFD QkVBNzJCODAeFw0yNTA1MDUxMTIzNTNaFw0yNTA1MTAwMDI4NTNaMDMxMTAvBgNV BAMTKDg4RTFCRDRERjQyNjkyRTM0NkE1NDZDNkI4OTQ0RUEzRjBFRjg0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDquO1iu8IDB5sp+ucBKK0WSZqB uBXD3iXa5I85bv4JRYfvCXiWzgf6VWXo3p5Y8Q3xeq2ISy05rS3TiLXmG0fXKAzr Ywlt27ptGEzgm+KR7SfWohcPILkJDO/88nx8toeS6kDMwVZL5swABNt7tGGDGI5g rsEdhBWF/pTAVBMCoNddMlLaEXUdldyl4pK+FA+CSVDyKUEASBtrNVxjB3jJqlml 0GwpGCBzU5mprmez+STg3M9mezEh0OaDGUR0tb1KMFuoV6peUU9Tp/FK9CSW45TS ugwLIb6ML9+qAZfIrPy072moVBNMQACXBMwPTfpvAruId5NCbzYp/1YFFU+fAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiOG9TfQmkuNGpUbGuJROo/DvhEMwHwYDVR0j BBgwFoAU6lF9S6q4XTyPUAj0C8SLIcvqcrgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QTNDNjVFMDExMzhBNzk3Q0MxQ0Q4OEI3QjMyQTgwRjE1 NjQyMzE2MDg3QzI5NTEzRDNEQUMyQjExMTdBMzY4LzAvRUE1MTdENEJBQUI4NUQz QzhGNTAwOEY0MEJDNDhCMjFDQkVBNzJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQTUxN0Q0QkFBQjg1RDNDOEY1 MDA4RjQwQkM0OEIyMUNCRUE3MkI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEEzQzY1RTAxMTM4QTc5N0NDMUNEODhCN0IzMkE4MEYxNTY0MjMxNjA4 N0MyOTUxM0QzREFDMkIxMTE3QTM2OC8wL0VBNTE3RDRCQUFCODVEM0M4RjUwMDhG NDBCQzQ4QjIxQ0JFQTcyQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFy3q2vR4TF5UuwIaEPoFGn7XD OZRPWBUAqfAw+UfOLjNAbc/GWg74cctF3KIy0zq3EgaPAP8oceTA6on8qswIYCtb Q5F3Og7DAcaYd28PF5fRLrIsJa3XyWz+UvXh84Z4Grl7pwQOvdpjVvjuh20cA+gm Q6MxCb/kFoAVb6pU5AdMNu6G4T/kROJBjpnxYnrzhDSGG/mIKaCieuWp/5PjXPM/ pLY6bV7liCdFX3cohKZ7O0hN95D+4/5PnG17FtFE4EZ3/fLEEwYkDlPNHgLe4zG6 vTSUeplkgP870S+E79timegYi7FjAFH/I7j/jBY9BWl9OylHAWW+2hGGkom/ -----END CERTIFICATE-----Generated at Mon May 5 19:07:57 2025 by rpki-client