$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json) Hash identifier: arNvCo5gw/HQUpp4IeSrQ16PeLOucNpAM4U4O9K/aTE= Subject key identifier: 49:BF:95:9B:C7:94:16:BD:C6:F9:20:08:7E:5B:28:B3:1D:A7:46:DF Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Certificate serial: 69F7A5153AE1CEB59939DBBDF801B6CBAC0A682B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft Manifest number: D2 Signing time: Fri 02 May 2025 17:19:08 +0000 Manifest this update: Fri 02 May 2025 17:14:08 +0000 Manifest next update: Thu 08 May 2025 03:13:08 +0000 Files and hashes: 1: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: TnOVedbp+yogJRQK4jz8NHuHBn2RuKd+k8b7N8MvRe4=) 2: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: NqZEyVFq1UNZcsIi53Fr9YXrIWy1N4/qYF5lngfp6FU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 03:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f7:a5:15:3a:e1:ce:b5:99:39:db:bd:f8:01:b6:cb:ac:0a:68:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Validity Not Before: May 2 17:14:08 2025 GMT Not After : May 8 03:13:08 2025 GMT Subject: CN=49BF959BC79416BDC6F920087E5B28B31DA746DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:43:e4:f1:67:c6:69:5b:59:34:79:b0:b7: 93:2a:e0:22:a6:b5:49:a5:ba:56:63:dd:ca:6f:c9: 35:75:b5:6a:85:c0:2f:58:f8:dd:ab:26:30:9e:77: 46:e1:bc:4a:3f:08:ec:ff:18:94:2d:cc:68:81:9e: db:6c:80:76:20:0b:20:35:16:02:6d:aa:8d:b2:73: 2f:7b:c4:fe:6f:ab:a1:37:e9:57:21:0a:b9:38:29: 89:e2:87:bc:f9:cb:dc:fd:44:de:bf:12:ed:ec:25: 1d:9f:ef:b8:a8:95:94:22:bc:67:16:77:f1:76:1b: e9:62:79:03:24:0a:0b:f2:44:1d:d1:96:54:26:05: 79:65:d3:06:ec:ee:b9:17:a6:48:89:ce:6e:a2:71: ba:90:6f:54:bf:c4:ce:c5:9f:cc:02:83:40:4f:b9: bd:6f:e7:6a:fb:e0:60:6e:70:10:71:b8:ca:37:87: 88:60:8a:28:39:af:ba:1e:26:f5:31:b6:ca:b3:95: 7f:5f:32:2e:b6:a4:87:95:59:ac:25:e9:45:c8:17: c6:4c:5b:cb:07:31:2a:24:1b:6f:1f:fd:da:4c:99: 11:d2:e9:ec:ff:78:fc:a6:1e:3a:84:7e:65:5e:e6: df:70:c2:d6:a9:a5:b9:c0:35:66:20:20:41:4a:14: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BF:95:9B:C7:94:16:BD:C6:F9:20:08:7E:5B:28:B3:1D:A7:46:DF X509v3 Authority Key Identifier: keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1c:ed:be:e3:e8:be:1c:27:c5:88:68:93:fc:b2:22:fc:27: 9f:94:1e:ff:ca:bb:8e:c8:5c:b7:e2:d3:0e:c8:fb:ee:53:87: 87:0e:c7:c5:75:81:26:d9:7d:25:bb:70:30:cf:2c:3f:30:21: 6a:47:63:a6:29:43:c2:af:53:a0:76:e8:08:76:2b:95:a2:8d: 87:90:56:67:f0:8b:2a:f0:5c:25:06:c3:de:6d:27:4e:22:f7: 60:af:5a:72:a4:dd:4a:73:4b:07:8c:dc:09:c6:01:6d:b0:d7: 52:ea:99:8f:e7:09:2d:43:8d:dd:64:8a:e3:bf:74:2e:e8:92: 16:4d:e6:f8:05:1c:91:95:23:e1:b2:60:2e:50:72:d4:cf:52: 9e:21:a7:0f:c9:fa:90:23:c6:9e:c2:45:a6:c0:27:53:b7:6f: 08:db:33:02:58:32:23:b5:99:a6:e4:c4:09:40:ac:93:61:e1: ab:29:31:b3:b8:4c:6c:de:c4:f6:92:7a:2c:a6:da:82:90:9f: 37:f2:62:b1:94:9c:91:b0:b5:98:d9:e2:a4:54:f2:ac:d7:c3: 46:35:d5:d2:e7:25:ea:a5:58:d9:61:5c:ac:a0:12:d9:f3:4b: 5b:1a:60:bc:a8:33:bb:b0:c1:18:b6:44:27:5f:6c:3a:34:74: ec:8b:d3:da -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUafelFTrhzrWZOdu9+AG2y6wKaCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB OUUzN0NDNzAeFw0yNTA1MDIxNzE0MDhaFw0yNTA1MDgwMzEzMDhaMDMxMTAvBgNV BAMTKDQ5QkY5NTlCQzc5NDE2QkRDNkY5MjAwODdFNUIyOEIzMURBNzQ2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7o0Pk8WfGaVtZNHmwt5Mq4CKm tUmlulZj3cpvyTV1tWqFwC9Y+N2rJjCed0bhvEo/COz/GJQtzGiBnttsgHYgCyA1 FgJtqo2ycy97xP5vq6E36VchCrk4KYnih7z5y9z9RN6/Eu3sJR2f77iolZQivGcW d/F2G+lieQMkCgvyRB3RllQmBXll0wbs7rkXpkiJzm6icbqQb1S/xM7Fn8wCg0BP ub1v52r74GBucBBxuMo3h4hgiig5r7oeJvUxtsqzlX9fMi62pIeVWawl6UXIF8ZM W8sHMSokG28f/dpMmRHS6ez/ePymHjqEfmVe5t9wwtappbnANWYgIEFKFLUjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSb+Vm8eUFr3G+SAIflsosx2nRt8wHwYDVR0j BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2 RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5 QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wL0JEOUQzOThCQUNFMzkwQzI2QTMyQ0Q0 Qzc3NThBQTFGQTlFMzdDQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJHO2+4+i+HCfFiGiT/LIi/Cef lB7/yruOyFy34tMOyPvuU4eHDsfFdYEm2X0lu3Awzyw/MCFqR2OmKUPCr1OgdugI diuVoo2HkFZn8Isq8FwlBsPebSdOIvdgr1pypN1Kc0sHjNwJxgFtsNdS6pmP5wkt Q43dZIrjv3Qu6JIWTeb4BRyRlSPhsmAuUHLUz1KeIacPyfqQI8aewkWmwCdTt28I 2zMCWDIjtZmm5MQJQKyTYeGrKTGzuExs3sT2knosptqCkJ838mKxlJyRsLWY2eKk VPKs18NGNdXS5yXqpVjZYVysoBLZ80tbGmC8qDO7sMEYtkQnX2w6NHTsi9Pa -----END CERTIFICATE-----Generated at Mon May 5 01:51:53 2025 by rpki-client