$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft File: 21B9887060F924CDFF24C230D32A91B83A17CD97.mft (raw, json) Hash identifier: /oV5SkwBgMCSbiO6cvDgMIAylUow7HowIAaD1u1rZ0o= Subject key identifier: 5C:07:F3:DC:F5:2F:B3:6C:A7:FA:78:68:98:27:CB:5B:FD:C2:CA:DB Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Certificate serial: 2326CAE1E0A44D9D6E17FC2BF441BA37FF29962C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft Manifest number: DC Signing time: Sat 10 May 2025 00:49:09 +0000 Manifest this update: Sat 10 May 2025 00:44:09 +0000 Manifest next update: Wed 14 May 2025 16:49:09 +0000 Files and hashes: 1: 21B9887060F924CDFF24C230D32A91B83A17CD97.crl (hash: S1Ve0bTyKvE9QIE3iU9EpTqcUuCwpAX73gontRYoa8Q=) 2: 323830303a3163303a3a2f33322d3332203d3e203237373730.roa (hash: 4FSJXV5thJKx6H5OTH8Mp5tqHztsrWOngAC7cBidY1k=) 3: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (hash: e7fwKCAwrJBOARxXUFeN2hPCUL05RIozWzYfyHXA7Ss=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 16:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:26:ca:e1:e0:a4:4d:9d:6e:17:fc:2b:f4:41:ba:37:ff:29:96:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Validity Not Before: May 10 00:44:09 2025 GMT Not After : May 14 16:49:09 2025 GMT Subject: CN=5C07F3DCF52FB36CA7FA78689827CB5BFDC2CADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:01:64:5d:a4:91:3f:76:22:ed:b7:c2:08: 74:66:88:3f:9f:71:5b:9b:e2:81:ef:9f:8b:dd:13: b7:5a:17:85:c6:ee:b3:19:7c:cb:a7:f3:9f:cd:10: b1:74:97:02:d3:aa:e7:5a:c2:da:68:eb:f4:15:dc: 97:47:13:66:51:f9:60:f0:fe:52:d9:c4:ed:c2:57: e0:b5:7a:2e:0b:3a:c1:97:0e:01:84:a3:e1:e1:3c: 73:73:2b:c9:be:48:d0:2e:59:37:9c:31:87:2f:4f: 3a:51:37:6e:23:35:ac:ce:48:b7:4d:de:ca:c9:23: 63:bc:ee:3f:d6:d7:68:15:58:27:4f:c5:7a:16:79: ad:36:e7:e3:f4:1f:69:5d:d4:b4:1b:d8:26:7d:01: bf:48:26:71:af:29:69:4a:01:97:6d:cf:a8:cc:00: 8a:58:23:5b:8d:94:5f:ed:2b:6e:2b:0b:5e:71:e1: f3:95:93:e6:42:ba:14:46:16:0b:00:77:74:bd:a4: e5:9b:83:2f:aa:17:01:f0:0c:8a:4b:de:ff:63:bf: a6:b5:f7:50:f1:ca:2b:6b:68:1a:84:28:43:90:c3: 86:7e:be:f1:af:d7:70:fc:e5:91:00:f0:4f:bf:fb: 56:5d:fe:d0:6e:58:64:04:e3:73:58:46:98:b8:4b: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:07:F3:DC:F5:2F:B3:6C:A7:FA:78:68:98:27:CB:5B:FD:C2:CA:DB X509v3 Authority Key Identifier: keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:8a:58:bb:ec:de:53:01:7c:8a:ca:bf:ff:41:63:f2:64:e0: 64:03:b8:e8:af:b1:67:8f:82:da:cc:36:2e:64:6c:39:9a:ed: 9e:67:bb:41:02:75:e0:71:56:a1:9b:87:a3:67:ed:ec:aa:99: 9e:37:56:72:32:f9:89:f3:cc:04:09:4b:7c:db:d6:3f:0d:9f: 79:d4:4b:b1:0d:11:df:b9:c3:4f:33:44:43:97:a9:ee:65:79: 55:81:1f:a8:a5:c1:29:39:15:ab:d5:cf:c9:96:6f:57:f2:66: 34:81:cf:be:26:ca:d1:c9:3c:d1:1d:11:e1:33:f5:f9:89:26: 02:04:cf:3a:15:7d:07:9f:d4:3f:bd:92:ee:5c:57:d3:29:60: af:5c:22:08:62:88:9b:2f:4c:c4:94:74:da:5d:74:f9:60:b4: c5:a9:33:bc:b0:18:a9:b9:94:20:b9:b6:8e:50:a5:5f:8b:dd: bc:d6:f9:90:79:24:6f:40:e9:1e:b5:89:eb:5b:cf:3a:dd:60: 90:8c:02:c8:25:06:76:97:86:e6:f8:ab:aa:45:95:c7:ec:d8: d4:bb:7d:dc:3b:dd:fb:3c:72:4f:25:a8:30:66:2c:43:b0:40: a4:24:47:08:d4:c9:0b:9e:86:07:e2:a4:c3:8d:02:2f:03:0b: 02:9c:d7:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIybK4eCkTZ1uF/wr9EG6N/8pliwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCOTg4NzA2MEY5MjRDREZGMjRDMjMwRDMyQTkxQjgz QTE3Q0Q5NzAeFw0yNTA1MTAwMDQ0MDlaFw0yNTA1MTQxNjQ5MDlaMDMxMTAvBgNV BAMTKDVDMDdGM0RDRjUyRkIzNkNBN0ZBNzg2ODk4MjdDQjVCRkRDMkNBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzgFkXaSRP3Yi7bfCCHRmiD+f cVub4oHvn4vdE7daF4XG7rMZfMun85/NELF0lwLTqudawtpo6/QV3JdHE2ZR+WDw /lLZxO3CV+C1ei4LOsGXDgGEo+HhPHNzK8m+SNAuWTecMYcvTzpRN24jNazOSLdN 3srJI2O87j/W12gVWCdPxXoWea025+P0H2ld1LQb2CZ9Ab9IJnGvKWlKAZdtz6jM AIpYI1uNlF/tK24rC15x4fOVk+ZCuhRGFgsAd3S9pOWbgy+qFwHwDIpL3v9jv6a1 91DxyitraBqEKEOQw4Z+vvGv13D85ZEA8E+/+1Zd/tBuWGQE43NYRpi4S64LAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXAfz3PUvs2yn+nhomCfLW/3CytswHwYDVR0j BBgwFoAUIbmIcGD5JM3/JMIw0yqRuDoXzZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDM3Q0E4Q0Q5NTc4Qjg1MTZGRjMzRjI0NzY0QUYxREEy MDc4ODA5MzA4RUJGM0YzMERCRjRFRjEwNzdEMzZDLzAvMjFCOTg4NzA2MEY5MjRD REZGMjRDMjMwRDMyQTkxQjgzQTE3Q0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI5ODg3MDYwRjkyNENERkYy NEMyMzBEMzJBOTFCODNBMTdDRDk3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQzN0NBOENEOTU3OEI4NTE2RkYzM0YyNDc2NEFGMURBMjA3ODgwOTMw OEVCRjNGMzBEQkY0RUYxMDc3RDM2Qy8wLzIxQjk4ODcwNjBGOTI0Q0RGRjI0QzIz MEQzMkE5MUI4M0ExN0NEOTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDCili77N5TAXyKyr//QWPyZOBk A7jor7Fnj4LazDYuZGw5mu2eZ7tBAnXgcVahm4ejZ+3sqpmeN1ZyMvmJ88wECUt8 29Y/DZ951EuxDRHfucNPM0RDl6nuZXlVgR+opcEpORWr1c/Jlm9X8mY0gc++JsrR yTzRHRHhM/X5iSYCBM86FX0Hn9Q/vZLuXFfTKWCvXCIIYoibL0zElHTaXXT5YLTF qTO8sBipuZQgubaOUKVfi9281vmQeSRvQOketYnrW8863WCQjALIJQZ2l4bm+Kuq RZXH7NjUu33cO937PHJPJagwZixDsECkJEcI1MkLnoYH4qTDjQIvAwsCnNeg -----END CERTIFICATE-----Generated at Sun May 11 17:56:19 2025 by rpki-client