$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft File: C73971A2080A975B88CBA6005895BD357D233BC8.mft (raw, json) Hash identifier: Xhitg7OPOq3bNK2X6rU9jy5uTOH5+kAJuzK9uQe9EjI= Subject key identifier: 8B:0C:8E:0A:DD:EB:7B:8B:D0:2A:BF:E3:6E:B4:4F:00:E9:C4:3B:42 Authority key identifier: C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8 Certificate issuer: /CN=C73971A2080A975B88CBA6005895BD357D233BC8 Certificate serial: 454077078912D47F86383ECFFF27427A8A1DB9AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft Manifest number: D3 Signing time: Mon 05 May 2025 03:13:45 +0000 Manifest this update: Mon 05 May 2025 03:08:45 +0000 Manifest next update: Sat 10 May 2025 23:30:45 +0000 Files and hashes: 1: 3137302e38302e39322e302f32342d3234203d3e20323730303839.roa (hash: 92tXpcK8kH013Eh6mfAXCQLBG3MSr9enHEFmjdKCBiw=) 2: 3137302e38302e39342e302f32342d3234203d3e20323730303839.roa (hash: vXt+beH9OJFbxpuThBiBpUBV1RY1PIYcmYotUmhR6qs=) 3: 3137302e38302e39352e302f32342d3234203d3e20323730303839.roa (hash: K3DxmHTDu6eFpZODxbZtswRCUIi0dv8z42105G6k+PI=) 4: 323830333a366265303a3a2f33322d3438203d3e20323730303839.roa (hash: kI3C+rcCX2VcP36cJLXobaV7aOVCeWtH/PO5cwEApSE=) 5: 3137302e38302e39332e302f32342d3234203d3e20323730303839.roa (hash: yhjs0HxG1AKB1/JW1SZayzdGpqyUZrZPQ3d0k2poMKU=) 6: 3137302e38302e39322e302f32322d3234203d3e20323730303839.roa (hash: E+bqgjQppVQeioFTjGE3mcg932M/yWGL6RWK69JLrQg=) 7: C73971A2080A975B88CBA6005895BD357D233BC8.crl (hash: ZCmNzCwt1mxtIJmnviBaAwWRX0u6qUMNzaglGsAXqUM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 23:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:40:77:07:89:12:d4:7f:86:38:3e:cf:ff:27:42:7a:8a:1d:b9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73971A2080A975B88CBA6005895BD357D233BC8 Validity Not Before: May 5 03:08:45 2025 GMT Not After : May 10 23:30:45 2025 GMT Subject: CN=8B0C8E0ADDEB7B8BD02ABFE36EB44F00E9C43B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:f3:03:6f:54:91:2b:d5:d4:a5:7c:5f:9a: 73:20:53:19:35:71:c5:8e:4a:c9:7a:1b:ea:6e:9e: a8:e0:f8:2a:34:21:bb:fd:7a:54:68:40:0b:e0:a2: b7:71:41:1c:62:a8:88:6b:b2:db:9a:02:15:c3:36: 08:b5:11:6e:84:d0:8d:0f:fb:f6:f3:51:53:b2:f1: 1d:65:fa:81:fa:df:d5:de:0d:d7:ab:9a:33:f5:aa: 30:5d:87:76:10:b2:15:f1:ce:3c:f6:2b:0e:e0:c0: 55:32:e5:a7:9a:c1:9a:45:8d:52:6c:86:03:20:23: d4:37:ad:0f:5f:bd:2d:1f:25:fe:ef:0d:0e:03:91: 0f:b4:a9:90:96:e4:45:eb:35:b3:e4:37:4e:0b:77: 1d:f5:44:b8:0b:56:82:fd:ec:2c:36:10:12:43:52: 8b:c5:b3:0e:cd:43:cd:9b:dc:52:66:dd:25:5a:2f: a4:36:4a:a0:f5:2d:44:1e:7a:19:9e:7b:d1:9a:8e: 07:1c:8d:d8:55:00:f6:a6:56:4b:6e:ee:f3:19:c7: 7b:d1:ac:5c:b7:c5:60:5e:a9:61:25:db:e2:aa:9d: fc:6d:07:05:35:9a:97:f8:f3:b1:4a:7b:6a:f5:6e: dc:3b:6e:5c:c4:2d:49:7a:05:69:9a:f9:16:5d:9e: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0C:8E:0A:DD:EB:7B:8B:D0:2A:BF:E3:6E:B4:4F:00:E9:C4:3B:42 X509v3 Authority Key Identifier: keyid:C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2a:4c:1e:06:29:bf:eb:22:1e:85:4b:11:31:c7:58:a4:e5: 32:b8:c1:5f:53:00:c3:9a:dc:07:d9:38:88:00:26:d2:c2:b4: e9:91:12:71:0f:b9:aa:bb:29:8d:48:ab:ec:f4:d2:d8:26:71: 01:ad:96:a8:6f:67:e1:bf:26:c6:9c:06:de:19:13:68:a9:ae: 15:59:29:f3:27:25:86:6c:60:9c:57:ad:85:21:5c:95:33:60: 5a:2b:4f:7a:70:0d:0c:56:82:8f:6e:8e:8b:42:2c:90:f5:35: 5f:55:d4:ef:5e:0b:3b:8b:f2:c1:a9:1f:e9:c2:80:36:fa:50: 5f:1d:b5:e7:d9:5f:2d:02:4e:87:91:02:10:07:fb:ad:e5:00: 76:0e:5e:4b:4e:67:b4:d1:61:ae:34:95:0c:d9:a7:68:3e:dc: de:00:b3:06:b5:69:20:69:f7:81:f6:16:09:dc:fa:58:ef:01: 31:2b:f6:18:5f:89:42:31:d1:c0:b3:11:a6:31:af:9c:0d:bd: 34:7e:3a:10:b8:9c:ed:8e:0d:3c:c4:62:ff:5b:da:a5:c5:36: ea:08:56:a1:b2:a6:fc:0d:3a:e6:cc:cf:ac:ad:55:de:29:42: 67:20:95:9f:b3:29:7b:4d:e2:99:65:04:43:78:c9:33:fe:30: 9c:c1:da:0d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURUB3B4kS1H+GOD7P/ydCeoodua0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczOTcxQTIwODBBOTc1Qjg4Q0JBNjAwNTg5NUJEMzU3 RDIzM0JDODAeFw0yNTA1MDUwMzA4NDVaFw0yNTA1MTAyMzMwNDVaMDMxMTAvBgNV BAMTKDhCMEM4RTBBRERFQjdCOEJEMDJBQkZFMzZFQjQ0RjAwRTlDNDNCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoN/MDb1SRK9XUpXxfmnMgUxk1 ccWOSsl6G+punqjg+Co0Ibv9elRoQAvgordxQRxiqIhrstuaAhXDNgi1EW6E0I0P +/bzUVOy8R1l+oH639XeDdermjP1qjBdh3YQshXxzjz2Kw7gwFUy5aeawZpFjVJs hgMgI9Q3rQ9fvS0fJf7vDQ4DkQ+0qZCW5EXrNbPkN04Ldx31RLgLVoL97Cw2EBJD UovFsw7NQ82b3FJm3SVaL6Q2SqD1LUQeehmee9GajgccjdhVAPamVktu7vMZx3vR rFy3xWBeqWEl2+KqnfxtBwU1mpf487FKe2r1btw7blzELUl6BWma+RZdnkB7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiwyOCt3re4vQKr/jbrRPAOnEO0IwHwYDVR0j BBgwFoAUxzlxoggKl1uIy6YAWJW9NX0jO8gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MjhENTJFNzA5OTE1Rjg3ODIyQzE5NkQ1MjE3QTZBNTA4 MDkzOTJFQzkzQ0FBRTBDMDE1M0FDRkM0NDk4OThGLzAvQzczOTcxQTIwODBBOTc1 Qjg4Q0JBNjAwNTg5NUJEMzU3RDIzM0JDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzM5NzFBMjA4MEE5NzVCODhD QkE2MDA1ODk1QkQzNTdEMjMzQkM4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjI4RDUyRTcwOTkxNUY4NzgyMkMxOTZENTIxN0E2QTUwODA5MzkyRUM5 M0NBQUUwQzAxNTNBQ0ZDNDQ5ODk4Ri8wL0M3Mzk3MUEyMDgwQTk3NUI4OENCQTYw MDU4OTVCRDM1N0QyMzNCQzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByKkweBim/6yIehUsRMcdYpOUy uMFfUwDDmtwH2TiIACbSwrTpkRJxD7mquymNSKvs9NLYJnEBrZaob2fhvybGnAbe GRNoqa4VWSnzJyWGbGCcV62FIVyVM2BaK096cA0MVoKPbo6LQiyQ9TVfVdTvXgs7 i/LBqR/pwoA2+lBfHbXn2V8tAk6HkQIQB/ut5QB2Dl5LTme00WGuNJUM2adoPtze ALMGtWkgafeB9hYJ3PpY7wExK/YYX4lCMdHAsxGmMa+cDb00fjoQuJztjg08xGL/ W9qlxTbqCFahsqb8DTrmzM+srVXeKUJnIJWfsyl7TeKZZQRDeMkz/jCcwdoN -----END CERTIFICATE-----Generated at Wed May 7 13:59:10 2025 by rpki-client