$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: nqwSDE4ssRukv5Dd+57IoxzO6+grifkbImuIVD79e5s= Subject key identifier: 34:59:FF:7D:43:DD:24:6B:5F:6B:2D:81:DD:2B:60:9D:90:22:5B:4D Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 2240A9410D48ABF6423F2D7ED80B056CE23F739A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: D4 Signing time: Sun 04 May 2025 23:31:31 +0000 Manifest this update: Sun 04 May 2025 23:26:31 +0000 Manifest next update: Sat 10 May 2025 18:09:31 +0000 Files and hashes: 1: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: Ops9TSLJ+lFGc4FJb2FsqY1NFl03639ec1RsURfjBJM=) 2: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=) 3: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=) 4: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=) 5: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=) 6: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=) 7: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 23:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:40:a9:41:0d:48:ab:f6:42:3f:2d:7e:d8:0b:05:6c:e2:3f:73:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: May 4 23:26:31 2025 GMT Not After : May 10 18:09:31 2025 GMT Subject: CN=3459FF7D43DD246B5F6B2D81DD2B609D90225B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:c5:1b:e5:5f:30:63:5c:8e:0e:fa:3f:e4: 48:95:19:7c:ff:79:28:0c:43:65:71:6b:74:e7:9c: 4b:1b:ae:f6:5c:d8:85:be:20:d1:8c:14:2a:9d:a9: 75:36:67:15:35:f0:b4:bf:8d:9e:56:6d:03:5a:93: 5b:15:59:9b:42:c8:ca:a5:bf:bc:c0:02:d6:13:a7: 3c:42:75:99:e4:92:e0:b9:cc:ac:0c:67:c2:53:39: 77:89:61:b5:a2:43:00:be:8a:e9:84:62:71:55:14: ec:80:6f:c4:55:5d:65:ff:f3:16:a4:5d:06:a0:2f: 2e:bb:c4:b2:f5:88:8d:16:ca:e3:11:d6:12:93:cb: a6:24:c8:2d:22:77:a5:e8:09:44:5b:e8:53:dc:c8: ef:96:4b:85:bd:90:fa:ca:8f:df:a4:9b:b5:95:16: 6e:84:d1:30:6b:df:5c:7a:f7:3c:60:b4:86:d8:20: 1f:e6:16:dc:4c:02:3e:6c:30:a4:11:cd:fc:66:d6: aa:7f:4f:09:ef:97:03:b0:66:7d:48:6d:a1:b9:71: d0:a6:12:87:c7:32:df:25:22:3d:27:2b:8d:44:af: 6b:58:7c:af:e4:73:1a:a7:ad:f3:77:21:6f:c7:56: 34:b2:4c:d4:d5:6a:ab:ee:ad:c2:a2:ec:49:05:f6: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:59:FF:7D:43:DD:24:6B:5F:6B:2D:81:DD:2B:60:9D:90:22:5B:4D X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:f9:53:88:cf:ee:75:5c:3c:fb:0a:94:8a:8a:9b:16:96:f0: b9:44:ad:1a:a4:ee:5e:a6:29:42:12:f3:6a:ca:8b:1a:25:08: a8:a8:de:e3:6b:1d:aa:8b:17:a3:42:c0:17:7d:5d:df:8d:dc: 06:f2:9e:27:64:6e:9f:59:78:8a:f1:e7:dd:db:ca:f9:77:c4: 00:58:ed:b6:35:54:4b:12:cf:35:09:fb:c5:74:3f:c7:33:c5: 90:08:78:90:c0:d7:b4:d1:4f:1e:d9:65:cd:ab:88:b8:7f:63: 64:b7:9a:f3:3b:20:44:e2:ba:a8:74:7d:07:0c:d0:cd:f2:23: d5:d5:63:75:b4:ac:59:49:61:5c:b2:86:b7:2a:07:80:de:f9: f4:05:ae:2e:d9:1e:48:89:c1:9f:1e:7b:bb:64:5b:95:9b:6e: c7:d2:33:23:4e:90:d3:d4:ef:9d:8a:15:e1:ea:c7:73:9b:56: d5:f6:87:62:4a:98:50:95:20:3e:92:d3:b2:dc:ad:c8:16:b7: e2:b7:a6:24:76:9f:4b:8c:35:e8:43:a8:f4:36:ee:92:2b:24: d7:c2:63:d8:bf:4a:0e:a3:cf:01:d6:92:82:20:b9:93:54:a7: fd:e8:97:a7:c2:ed:ee:24:f0:ae:11:8c:09:73:bf:bf:83:4a: be:3a:0f:45 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIkCpQQ1Iq/ZCPy1+2AsFbOI/c5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNTA1MDQyMzI2MzFaFw0yNTA1MTAxODA5MzFaMDMxMTAvBgNV BAMTKDM0NTlGRjdENDNERDI0NkI1RjZCMkQ4MUREMkI2MDlEOTAyMjVCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzH8Ub5V8wY1yODvo/5EiVGXz/ eSgMQ2Vxa3TnnEsbrvZc2IW+INGMFCqdqXU2ZxU18LS/jZ5WbQNak1sVWZtCyMql v7zAAtYTpzxCdZnkkuC5zKwMZ8JTOXeJYbWiQwC+iumEYnFVFOyAb8RVXWX/8xak XQagLy67xLL1iI0WyuMR1hKTy6YkyC0id6XoCURb6FPcyO+WS4W9kPrKj9+km7WV Fm6E0TBr31x69zxgtIbYIB/mFtxMAj5sMKQRzfxm1qp/TwnvlwOwZn1IbaG5cdCm EofHMt8lIj0nK41Er2tYfK/kcxqnrfN3IW/HVjSyTNTVaqvurcKi7EkF9uTBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNFn/fUPdJGtfay2B3StgnZAiW00wHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDq+VOIz+51XDz7CpSKipsWlvC5 RK0apO5epilCEvNqyosaJQioqN7jax2qixejQsAXfV3fjdwG8p4nZG6fWXiK8efd 28r5d8QAWO22NVRLEs81CfvFdD/HM8WQCHiQwNe00U8e2WXNq4i4f2Nkt5rzOyBE 4rqodH0HDNDN8iPV1WN1tKxZSWFcsoa3KgeA3vn0Ba4u2R5IicGfHnu7ZFuVm27H 0jMjTpDT1O+dihXh6sdzm1bV9odiSphQlSA+ktOy3K3IFrfit6Ykdp9LjDXoQ6j0 Nu6SKyTXwmPYv0oOo88B1pKCILmTVKf96Jenwu3uJPCuEYwJc7+/g0q+Og9F -----END CERTIFICATE-----Generated at Tue May 6 00:25:54 2025 by rpki-client