$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft File: 921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft (raw, json) Hash identifier: xgcMzAmxo8NoUhrulPiY+z1Y3kU8y+CKYz9ij6XXUwc= Subject key identifier: 03:19:33:55:19:89:89:08:5E:F2:D4:5A:F8:21:2A:44:DE:0B:09:8D Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78 Certificate issuer: /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78 Certificate serial: 70186F285CEB0C3B8B9CCA4EB9764FB3BEF6E27C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft Manifest number: DC Signing time: Fri 02 May 2025 10:14:40 +0000 Manifest this update: Fri 02 May 2025 10:09:40 +0000 Manifest next update: Wed 07 May 2025 17:04:40 +0000 Files and hashes: 1: 323830333a663031303a3a2f33322d3332203d3e20323731383133.roa (hash: qqaslk0sU9AVspa6G1XMiSSBA6ctOLUE9WOLUGr6ebk=) 2: 3139302e3132332e36362e302f32332d3234203d3e20323731383133.roa (hash: NpOLpLhTWwA3mmDv+1931kKCv3F50MsqFYLUK+57Sdc=) 3: 921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl (hash: gyQWrdUaTzTGXdd/bC2rCPWLg9k1eYnDbxwpYvTkD78=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 May 2025 17:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:18:6f:28:5c:eb:0c:3b:8b:9c:ca:4e:b9:76:4f:b3:be:f6:e2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78 Validity Not Before: May 2 10:09:40 2025 GMT Not After : May 7 17:04:40 2025 GMT Subject: CN=03193355198989085EF2D45AF8212A44DE0B098D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:4b:73:4f:49:86:db:54:e4:31:1c:58:4d: d8:24:f0:07:a9:d0:20:2c:aa:0f:bf:a7:5b:6c:b1: 89:04:b3:ee:e4:db:93:9b:5f:ed:f1:bd:e0:92:36: d7:36:a1:81:b6:c1:e4:ea:36:09:53:55:0f:da:04: 1b:7e:19:9c:02:23:57:cc:40:5d:b6:46:13:e1:60: 39:a1:20:df:01:f4:2d:bf:52:f0:95:75:7e:9a:03: e8:91:df:8b:80:c0:be:5a:7d:7a:e4:c8:09:b9:67: dd:3d:8a:5d:c3:03:9a:ec:64:1e:2f:50:0e:a4:99: 1b:82:74:ba:84:ea:58:a5:1a:38:5e:55:af:71:9e: e6:96:4e:01:67:3d:3e:35:c6:b1:97:01:6a:bd:f9: 32:41:5c:5e:13:36:4a:c7:48:e1:71:9a:22:18:99: fe:c9:35:3f:6a:aa:dd:69:05:bb:d4:86:f3:d3:cc: 98:1c:96:1f:15:09:e9:13:31:4a:28:65:d3:36:bb: 04:82:65:ef:2b:69:d7:db:59:93:eb:66:f5:08:60: e5:02:2e:c5:64:4e:75:eb:96:d2:29:b4:ca:1f:0e: f3:f9:e1:b0:02:98:75:60:8f:75:c4:f6:82:92:77: 28:25:e9:ea:5a:4d:44:e7:00:15:a5:0d:83:3a:71: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:19:33:55:19:89:89:08:5E:F2:D4:5A:F8:21:2A:44:DE:0B:09:8D X509v3 Authority Key Identifier: keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1c:8d:2d:a4:53:26:05:d8:4f:c2:65:b8:7b:75:5d:55:10: cc:2f:68:b3:04:03:90:e4:ed:4c:ad:46:3d:8b:5f:49:82:bf: 12:36:70:7a:30:31:38:9c:8e:24:65:b9:ac:89:7c:9c:9f:97: 9f:14:2f:fe:f3:dd:17:0d:75:cc:f6:11:23:f5:b5:b3:40:88: a1:35:28:e6:50:e2:0f:c4:a5:9e:55:dd:3d:7a:e9:05:55:20: e6:10:19:bb:40:c3:44:6d:2a:f3:19:06:3a:af:db:bb:1d:71: 30:5c:fe:1b:1f:39:5c:4e:cb:7f:e0:0c:d8:19:50:17:6f:0e: 32:f6:bb:6c:40:ab:30:2e:83:08:78:6e:6c:08:5f:94:b2:4e: 5f:19:09:ea:2d:94:29:42:4f:97:8d:de:11:7c:98:df:a2:34: 5c:5b:75:c1:03:f6:f4:08:ff:6b:34:0b:4e:9a:7b:8e:30:17: 5a:63:34:e0:88:21:7b:d4:1f:ee:b7:66:61:d8:ec:28:65:54: 76:b2:59:75:74:84:86:e7:1f:18:9d:1e:44:33:26:8a:d9:ad: 9c:bf:42:ca:3c:93:1d:a6:a7:71:d8:07:9c:1b:e4:6a:e8:a6: b1:da:bd:e4:e5:2c:a8:ef:2b:46:17:da:53:af:1f:48:23:39: 44:88:0c:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcBhvKFzrDDuLnMpOuXZPs7724nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxOTM1RURENjdFOUMxODE2RTcwM0YxREFCRkZCRjg2 Q0ZBMUI3ODAeFw0yNTA1MDIxMDA5NDBaFw0yNTA1MDcxNzA0NDBaMDMxMTAvBgNV BAMTKDAzMTkzMzU1MTk4OTg5MDg1RUYyRDQ1QUY4MjEyQTQ0REUwQjA5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjktzT0mG21TkMRxYTdgk8Aep 0CAsqg+/p1tssYkEs+7k25ObX+3xveCSNtc2oYG2weTqNglTVQ/aBBt+GZwCI1fM QF22RhPhYDmhIN8B9C2/UvCVdX6aA+iR34uAwL5afXrkyAm5Z909il3DA5rsZB4v UA6kmRuCdLqE6lilGjheVa9xnuaWTgFnPT41xrGXAWq9+TJBXF4TNkrHSOFxmiIY mf7JNT9qqt1pBbvUhvPTzJgclh8VCekTMUooZdM2uwSCZe8radfbWZPrZvUIYOUC LsVkTnXrltIptMofDvP54bACmHVgj3XE9oKSdygl6epaTUTnABWlDYM6cdM5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAxkzVRmJiQhe8tRa+CEqRN4LCY0wHwYDVR0j BBgwFoAUkhk17dZ+nBgW5wPx2r/7+Gz6G3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MzgzNThBNDQ2N0VFQzNDMERBN0NGMkU1RDNGM0E0MkIy QTIyQjNENEFCNjMxQThENjlFOUVFMDg4NEYxQzAzLzAvOTIxOTM1RURENjdFOUMx ODE2RTcwM0YxREFCRkZCRjg2Q0ZBMUI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjE5MzVFREQ2N0U5QzE4MTZF NzAzRjFEQUJGRkJGODZDRkExQjc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTM4MzU4QTQ0NjdFRUMzQzBEQTdDRjJFNUQzRjNBNDJCMkEyMkIzRDRB QjYzMUE4RDY5RTlFRTA4ODRGMUMwMy8wLzkyMTkzNUVERDY3RTlDMTgxNkU3MDNG MURBQkZGQkY4NkNGQTFCNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrHI0tpFMmBdhPwmW4e3VdVRDM L2izBAOQ5O1MrUY9i19Jgr8SNnB6MDE4nI4kZbmsiXycn5efFC/+890XDXXM9hEj 9bWzQIihNSjmUOIPxKWeVd09eukFVSDmEBm7QMNEbSrzGQY6r9u7HXEwXP4bHzlc Tst/4AzYGVAXbw4y9rtsQKswLoMIeG5sCF+Usk5fGQnqLZQpQk+Xjd4RfJjfojRc W3XBA/b0CP9rNAtOmnuOMBdaYzTgiCF71B/ut2Zh2OwoZVR2sll1dISG5x8YnR5E MyaK2a2cv0LKPJMdpqdx2AecG+Rq6Kax2r3k5Syo7ytGF9pTrx9IIzlEiAzy -----END CERTIFICATE-----Generated at Sun May 4 11:45:45 2025 by rpki-client