$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft File: CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft (raw, json) Hash identifier: f8jgVrL7a0khTYZJwsX83nk0Ix89bPcw1rclQJ8OYEY= Subject key identifier: 95:9B:25:B4:2E:71:A7:73:C9:26:5D:03:F2:91:71:3F:09:82:71:7A Authority key identifier: CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D Certificate issuer: /CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D Certificate serial: 4A0E3840434F8FACB25D99F52A1EAE68EB249EC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft Manifest number: D5 Signing time: Sun 04 May 2025 13:51:09 +0000 Manifest this update: Sun 04 May 2025 13:46:09 +0000 Manifest next update: Sat 10 May 2025 04:09:09 +0000 Files and hashes: 1: 3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa (hash: HwF8jM6XhVJlwX2VuQmMsPtBvqjrEGL6EWEhZzl60pA=) 2: 323830333a313265303a3a2f33322d3332203d3e20323639393234.roa (hash: T3kuSsUQg8wLrJbQLbZUZYrWwt/NFR0jQ0OQgfO9Cn4=) 3: CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl (hash: ZESeTEa276EudPcw26y3c57EjodgTyYGzOvL19ZnBRA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0e:38:40:43:4f:8f:ac:b2:5d:99:f5:2a:1e:ae:68:eb:24:9e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D Validity Not Before: May 4 13:46:09 2025 GMT Not After : May 10 04:09:09 2025 GMT Subject: CN=959B25B42E71A773C9265D03F291713F0982717A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:63:29:f3:a1:f0:f8:6f:06:ae:e6:bc:23: 7c:12:54:54:bf:4c:3b:85:9e:4c:de:09:c9:04:b5: 1c:ef:af:b3:21:83:76:70:86:c4:d8:a1:94:a2:bc: 5e:69:6f:30:76:dc:03:ed:2b:03:ef:08:45:9e:a6: c5:fd:1b:25:02:d8:eb:a6:9c:f8:62:fd:a5:63:38: e0:64:35:71:e2:93:36:34:aa:88:08:56:ed:56:79: 46:02:a1:2c:82:f0:a2:0a:c4:c3:03:c9:76:99:a8: ac:2b:83:02:63:10:d9:4e:85:09:27:86:83:51:9c: cd:c7:85:da:8c:e1:78:20:08:c6:17:76:a6:0c:5d: 65:51:8b:be:12:8c:a7:d6:b2:67:a5:d9:c3:60:30: 7c:2c:47:f9:cb:af:2c:92:1f:72:f6:11:fb:9f:83: 10:58:0d:17:c7:b6:8b:79:fd:c0:52:89:80:1e:50: 37:ed:1c:aa:f3:7d:43:b8:39:b4:6d:1c:29:84:38: 5c:18:f7:cb:44:47:92:78:6a:06:40:77:4f:3f:f5: 18:d2:8e:3f:3c:68:f1:ac:2b:22:e8:ae:cd:47:af: a7:c0:ef:03:43:6a:aa:d3:56:5f:48:34:d1:a0:28: 44:9c:b0:71:ba:4f:f6:45:3e:23:0d:c5:25:7e:3b: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9B:25:B4:2E:71:A7:73:C9:26:5D:03:F2:91:71:3F:09:82:71:7A X509v3 Authority Key Identifier: keyid:CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9a:2f:ff:46:8e:7e:be:25:c9:dc:f4:93:44:af:50:b5:e2: e4:c4:2a:65:31:71:57:1a:eb:46:f0:a1:c6:0b:e8:7e:1b:85: 19:db:16:55:97:8a:cf:12:07:72:3a:09:da:d3:89:75:47:7f: 1a:7e:92:20:d8:23:87:92:51:1f:6f:aa:52:76:d7:e4:49:f2: f1:25:b1:fb:26:5e:c0:82:00:7b:29:b4:1f:33:d5:15:00:46: 2d:70:c3:71:b0:03:29:76:30:10:0e:06:06:2f:f4:a0:86:87: da:1f:3a:a6:71:22:78:ba:76:5a:e1:79:c5:2e:e9:14:74:0d: 6d:9e:39:a1:cf:a5:c5:74:21:6e:79:5b:7d:aa:52:2d:ac:5d: 76:4d:d5:68:d9:f4:49:4a:48:b7:43:d6:a3:55:c9:5f:b6:4d: 0d:f3:9b:4e:9b:47:a6:df:2c:56:32:1d:4a:0a:7f:3b:4b:48: f9:af:57:01:bc:2b:db:f4:c0:a1:ff:f5:b9:8b:36:0d:90:f8: 2d:73:8f:00:c0:ea:9f:77:d3:7b:99:d7:4e:9d:02:a7:8f:f1: cd:0f:59:57:39:66:24:95:48:90:a7:d0:b7:d0:b3:08:e4:5d: 85:93:29:c0:fb:32:71:6b:0a:68:6d:49:61:03:20:9c:86:46: e5:c4:f6:81 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSg44QENPj6yyXZn1Kh6uaOsknsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCREFEOUM3MUU2MTM0MjU2NUVCM0Q2NTQwMjlGNDFG MkFGNTMzRDAeFw0yNTA1MDQxMzQ2MDlaFw0yNTA1MTAwNDA5MDlaMDMxMTAvBgNV BAMTKDk1OUIyNUI0MkU3MUE3NzNDOTI2NUQwM0YyOTE3MTNGMDk4MjcxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrsGMp86Hw+G8Grua8I3wSVFS/ TDuFnkzeCckEtRzvr7Mhg3ZwhsTYoZSivF5pbzB23APtKwPvCEWepsX9GyUC2Oum nPhi/aVjOOBkNXHikzY0qogIVu1WeUYCoSyC8KIKxMMDyXaZqKwrgwJjENlOhQkn hoNRnM3HhdqM4XggCMYXdqYMXWVRi74SjKfWsmel2cNgMHwsR/nLryySH3L2Efuf gxBYDRfHtot5/cBSiYAeUDftHKrzfUO4ObRtHCmEOFwY98tER5J4agZAd08/9RjS jj88aPGsKyLors1Hr6fA7wNDaqrTVl9INNGgKEScsHG6T/ZFPiMNxSV+O+tNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlZsltC5xp3PJJl0D8pFxPwmCcXowHwYDVR0j BBgwFoAUzr2tnHHmE0JWXrPWVAKfQfKvUz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MDI4ODdDRDMzQjA5QTBFOEY4OTAyMTdEQjAzRkEwQjg4 OUQ0NzhGQjE2MzkxMEU4NDRDQTAxMEE0OENDMjc1LzAvQ0VCREFEOUM3MUU2MTM0 MjU2NUVCM0Q2NTQwMjlGNDFGMkFGNTMzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUJEQUQ5QzcxRTYxMzQyNTY1 RUIzRDY1NDAyOUY0MUYyQUY1MzNELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTAyODg3Q0QzM0IwOUEwRThGODkwMjE3REIwM0ZBMEI4ODlENDc4RkIx NjM5MTBFODQ0Q0EwMTBBNDhDQzI3NS8wL0NFQkRBRDlDNzFFNjEzNDI1NjVFQjNE NjU0MDI5RjQxRjJBRjUzM0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSmi//Ro5+viXJ3PSTRK9QteLk xCplMXFXGutG8KHGC+h+G4UZ2xZVl4rPEgdyOgna04l1R38afpIg2COHklEfb6pS dtfkSfLxJbH7Jl7AggB7KbQfM9UVAEYtcMNxsAMpdjAQDgYGL/SghofaHzqmcSJ4 unZa4XnFLukUdA1tnjmhz6XFdCFueVt9qlItrF12TdVo2fRJSki3Q9ajVclftk0N 85tOm0em3yxWMh1KCn87S0j5r1cBvCvb9MCh//W5izYNkPgtc48AwOqfd9N7mddO nQKnj/HND1lXOWYklUiQp9C30LMI5F2FkynA+zJxawpobUlhAyCchkblxPaB -----END CERTIFICATE-----Generated at Mon May 5 00:43:03 2025 by rpki-client