$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft File: 03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft (raw, json) Hash identifier: x2iHR9uYNuXl8/1Mc/OsjfV/kBBvRwhlq4kj9D5T9B4= Subject key identifier: FE:DA:EA:12:51:FC:D5:38:A0:95:E8:7B:D5:06:75:D6:7C:11:47:38 Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53 Certificate issuer: /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253 Certificate serial: 07A860B9BC2B06DD00923E42DBF7539737C7A387 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft Manifest number: D6 Signing time: Wed 07 May 2025 05:03:40 +0000 Manifest this update: Wed 07 May 2025 04:58:40 +0000 Manifest next update: Sun 11 May 2025 21:06:40 +0000 Files and hashes: 1: 3230312e3138322e3135302e302f32332d3234203d3e203532343638.roa (hash: WSMOqdyoE1ic1M/wXhWBvVgxHsF2CSe6rHQv+9gKKQI=) 2: 3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa (hash: MvedPI8wPX0DLSbpSEQnJQeBsGh+GfB3rH7mbTvmdEE=) 3: 03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl (hash: Gk8SPsA+78VB2HiUeGMqx/kDbD86ruydSGBVhwcxYMk=) 4: 323830333a623832303a3a2f33322d3332203d3e20323635383135.roa (hash: BgiZVEBkCsQBpduxD2lkBm4tWZPrSE7ZdRvsOKcVcyw=) 5: 3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa (hash: kUx7ZC/Avh4F/D6K24kJ0nu91aTs1NFQuO+O+sND8Wc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 21:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a8:60:b9:bc:2b:06:dd:00:92:3e:42:db:f7:53:97:37:c7:a3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253 Validity Not Before: May 7 04:58:40 2025 GMT Not After : May 11 21:06:40 2025 GMT Subject: CN=FEDAEA1251FCD538A095E87BD50675D67C114738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:ba:f4:f8:d3:1c:26:eb:b6:49:bd:f4:1e: 37:25:2c:f5:3b:fc:d7:84:b7:10:e2:83:25:f0:df: cd:62:78:93:39:7a:10:5f:9b:3d:76:e4:3c:ee:3f: c7:ce:71:8e:83:dd:ed:ce:fc:d9:50:23:6a:f8:70: c1:ae:cf:66:33:75:53:a1:fa:aa:b4:e4:2a:8d:05: b4:8c:e0:32:86:4b:ba:b7:16:22:2a:a0:8b:87:2d: 01:36:30:b8:8b:67:a1:e9:2b:b5:e3:47:84:28:7a: fd:36:52:03:c4:ca:25:38:7a:c8:8d:51:75:29:2e: 6e:42:7e:29:cf:66:7f:62:e2:9a:af:fd:a4:d9:e3: 29:fa:9c:2d:b3:4f:8c:a8:77:fd:b0:ca:aa:52:50: 51:aa:e1:68:9e:9d:6d:00:af:85:7f:4d:ae:9d:82: 10:dc:ab:b8:cf:80:e1:9f:11:86:d0:f7:b9:d3:ad: 71:12:32:74:46:13:f0:95:62:33:91:2e:fd:be:9e: 51:d9:59:48:0e:ab:08:98:23:7c:2d:ff:a6:da:39: ad:0c:9d:b6:43:cd:7b:61:38:a0:6f:76:b3:06:0b: bd:e2:d1:9f:c3:84:3f:49:23:e8:a4:1e:3c:bf:1b: 4d:35:aa:67:b7:69:21:9e:46:eb:5c:d0:88:89:ff: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DA:EA:12:51:FC:D5:38:A0:95:E8:7B:D5:06:75:D6:7C:11:47:38 X509v3 Authority Key Identifier: keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:59:46:bd:be:45:54:81:61:e3:3f:23:8f:25:98:db:d6:7d: a6:bf:bb:37:58:23:7a:8c:82:12:ca:b4:1d:c1:09:34:1c:90: c5:f2:46:5d:ce:02:5e:df:b5:1e:71:84:16:89:d6:4a:da:7b: 24:b1:3d:6e:ba:8c:cd:b8:7f:6b:c7:16:bd:4f:ca:4e:94:16: 93:fc:fc:5f:d0:7e:83:93:10:1a:49:90:9a:f7:ba:a7:e5:77: 47:e7:22:80:6c:7d:dd:00:bc:6c:5e:29:e4:1c:0e:77:4d:a3: 83:f6:01:c6:8e:f2:d1:99:c1:01:c1:14:47:ff:bf:b2:a7:ef: 29:f9:2f:a2:63:79:e5:19:25:c3:bf:23:9a:8f:50:02:3e:4f: cc:b0:b4:17:a6:26:0e:a7:4b:e7:fe:60:d6:b6:90:ed:a5:4c: 6d:8c:52:ed:43:6c:4a:d7:fb:8b:9a:89:c8:24:18:b3:54:94: 6f:69:8f:4f:5c:4e:af:cb:8f:ac:24:5f:e0:a7:55:95:8c:9a: 1d:7d:c2:d1:ce:37:4b:80:7f:81:26:14:06:39:b4:b2:86:be: fd:67:6d:8f:79:03:3f:3f:50:a9:67:ec:60:6c:cc:7c:51:d2: dc:8d:72:9e:ea:da:99:6a:b2:65:6d:cf:7a:e6:8d:ca:f8:23: 5a:98:94:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB6hgubwrBt0Akj5C2/dTlzfHo4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4NjJBOUJGQ0I5N0VFNkI2MkNFMURCMDc3RTNCNkVB RDVGRTI1MzAeFw0yNTA1MDcwNDU4NDBaFw0yNTA1MTEyMTA2NDBaMDMxMTAvBgNV BAMTKEZFREFFQTEyNTFGQ0Q1MzhBMDk1RTg3QkQ1MDY3NUQ2N0MxMTQ3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3Lr0+NMcJuu2Sb30HjclLPU7 /NeEtxDigyXw381ieJM5ehBfmz125DzuP8fOcY6D3e3O/NlQI2r4cMGuz2YzdVOh +qq05CqNBbSM4DKGS7q3FiIqoIuHLQE2MLiLZ6HpK7XjR4Qoev02UgPEyiU4esiN UXUpLm5CfinPZn9i4pqv/aTZ4yn6nC2zT4yod/2wyqpSUFGq4WienW0Ar4V/Ta6d ghDcq7jPgOGfEYbQ97nTrXESMnRGE/CVYjORLv2+nlHZWUgOqwiYI3wt/6baOa0M nbZDzXthOKBvdrMGC73i0Z/DhD9JI+ikHjy/G001qme3aSGeRutc0IiJ/xALAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/trqElH81Tigleh71QZ11nwRRzgwHwYDVR0j BBgwFoAUA4Yqm/y5fua2LOHbB347bq1f4lMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNEM4OUQ0MzE2OTY2NEI5QjBGNDI3Nzk3NDlCOEUyNzE4 NEJFMTA3OUQ1N0M3QTc2QTc2RDVEODgxMDhGODBDLzAvMDM4NjJBOUJGQ0I5N0VF NkI2MkNFMURCMDc3RTNCNkVBRDVGRTI1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMzg2MkE5QkZDQjk3RUU2QjYy Q0UxREIwNzdFM0I2RUFENUZFMjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTRDODlENDMxNjk2NjRCOUIwRjQyNzc5NzQ5QjhFMjcxODRCRTEwNzlE NTdDN0E3NkE3NkQ1RDg4MTA4RjgwQy8wLzAzODYyQTlCRkNCOTdFRTZCNjJDRTFE QjA3N0UzQjZFQUQ1RkUyNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAWUa9vkVUgWHjPyOPJZjb1n2m v7s3WCN6jIISyrQdwQk0HJDF8kZdzgJe37UecYQWidZK2nsksT1uuozNuH9rxxa9 T8pOlBaT/Pxf0H6DkxAaSZCa97qn5XdH5yKAbH3dALxsXinkHA53TaOD9gHGjvLR mcEBwRRH/7+yp+8p+S+iY3nlGSXDvyOaj1ACPk/MsLQXpiYOp0vn/mDWtpDtpUxt jFLtQ2xK1/uLmonIJBizVJRvaY9PXE6vy4+sJF/gp1WVjJodfcLRzjdLgH+BJhQG ObSyhr79Z22PeQM/P1CpZ+xgbMx8UdLcjXKe6tqZarJlbc965o3K+CNamJTy -----END CERTIFICATE-----Generated at Thu May 8 21:07:43 2025 by rpki-client