$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: hASRih13yzwvqE+Xxx5sjd/kUP4n/4ZMT0+vWp1TFNA= Subject key identifier: 57:42:09:BE:96:0D:CC:96:D1:0B:1D:28:6F:03:69:27:EE:3D:28:96 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 11CFAE6F5DB78D11B96254781B00F82DEA71F910 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: DD Signing time: Tue 06 May 2025 13:08:59 +0000 Manifest this update: Tue 06 May 2025 13:03:59 +0000 Manifest next update: Sat 10 May 2025 18:17:59 +0000 Files and hashes: 1: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) 2: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: BTbSq8I6vNiH+Bl5n2ZRlb1UdXiKUPsuBytfwSuUNws=) 3: 34352e3136342e32322e302f32342d3234203d3e203233343730.roa (hash: 575QiKowVCRz4op0BzHVRduNC7OYEq4japp+XRIL7j0=) 4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 18:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cf:ae:6f:5d:b7:8d:11:b9:62:54:78:1b:00:f8:2d:ea:71:f9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: May 6 13:03:59 2025 GMT Not After : May 10 18:17:59 2025 GMT Subject: CN=574209BE960DCC96D10B1D286F036927EE3D2896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:84:48:71:e6:9f:55:59:3d:4d:79:88:50: 67:21:6a:b2:09:19:fb:2b:74:f0:3d:e8:cb:ad:c5: 63:bb:f2:08:89:52:a0:62:49:b7:51:be:34:b3:34: 9f:7d:ca:da:2f:0d:fd:6d:f7:0d:e8:c2:69:cb:1d: 78:0f:db:24:69:fd:4c:c7:6b:16:f3:71:fa:17:86: 1c:7f:d1:3c:54:df:c0:db:1c:45:26:59:66:92:57: d4:68:a3:66:a5:e1:8b:35:af:5f:43:ce:1d:1e:9b: 91:f1:ee:56:fd:af:db:00:5b:f1:9c:c2:8d:63:89: ef:49:35:84:e4:b0:22:07:99:e6:34:f6:46:a5:0a: 00:7a:83:b1:20:7c:3b:93:f4:5f:11:11:13:ca:3b: e9:3a:e3:31:32:cf:85:a8:53:58:8f:d3:29:83:e1: 70:7d:4f:a2:20:80:c2:5b:55:3e:2e:e4:ad:38:95: f3:ac:8a:6c:cc:4e:2d:03:dc:7d:20:91:59:a8:35: 8d:c7:4a:b0:14:3c:92:f7:ea:c4:49:c0:bf:e9:8a: f4:83:f8:2f:36:7f:cf:05:a9:a6:fc:2b:0e:fe:15: da:7a:7e:d5:70:53:40:a2:06:2b:10:1b:41:d0:67: 9c:c7:6e:ca:d3:c1:d3:21:22:64:92:00:f4:bb:08: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:42:09:BE:96:0D:CC:96:D1:0B:1D:28:6F:03:69:27:EE:3D:28:96 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:14:8d:d8:83:10:04:ff:db:3c:ec:82:e9:6c:0e:55:34:e3: 3c:71:0c:ca:b9:88:96:51:2b:ea:ff:74:10:57:ea:e9:11:58: 2f:4c:43:9c:33:3f:67:9d:c4:87:7f:8e:94:1e:d3:a6:17:15: 99:54:1d:35:24:e6:63:3b:86:7d:07:a5:9a:dd:dd:a9:46:30: 90:e5:1d:f7:12:b2:4a:a4:06:ec:25:a4:18:bf:37:81:0f:90: 41:7d:92:94:f3:1b:9d:74:f1:f7:c3:3e:69:18:2d:d0:d0:80: fb:c2:22:69:bc:34:d6:0b:e2:71:d4:5a:09:bc:8a:e4:a9:7c: 50:5e:9c:9c:6f:91:a6:98:44:06:31:b3:11:74:f4:4f:ae:09: dc:e1:04:c6:65:7a:50:72:84:39:6e:6c:ca:a8:9c:e6:bf:04: 29:65:03:82:2d:be:54:73:17:b5:a0:bb:75:eb:c1:c3:9c:75: bf:60:90:4b:d4:9e:30:31:da:98:4f:9e:80:35:63:cb:43:8a: 13:29:bb:66:49:c9:14:06:19:1e:25:84:26:3e:b2:81:43:71: 56:94:fb:99:85:fc:44:a6:98:81:7f:c8:8c:6d:21:0c:1d:c9: 55:71:8b:a7:c3:12:70:44:04:5f:4b:05:3f:2f:29:a4:03:84: a9:66:c7:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEc+ub123jRG5YlR4GwD4Lepx+RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTA1MDYxMzAzNTlaFw0yNTA1MTAxODE3NTlaMDMxMTAvBgNV BAMTKDU3NDIwOUJFOTYwRENDOTZEMTBCMUQyODZGMDM2OTI3RUUzRDI4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCC0IRIceafVVk9TXmIUGcharIJ GfsrdPA96MutxWO78giJUqBiSbdRvjSzNJ99ytovDf1t9w3owmnLHXgP2yRp/UzH axbzcfoXhhx/0TxU38DbHEUmWWaSV9Roo2al4Ys1r19Dzh0em5Hx7lb9r9sAW/Gc wo1jie9JNYTksCIHmeY09kalCgB6g7EgfDuT9F8RERPKO+k64zEyz4WoU1iP0ymD 4XB9T6IggMJbVT4u5K04lfOsimzMTi0D3H0gkVmoNY3HSrAUPJL36sRJwL/pivSD +C82f88Fqab8Kw7+Fdp6ftVwU0CiBisQG0HQZ5zHbsrTwdMhImSSAPS7CDsVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUV0IJvpYNzJbRCx0obwNpJ+49KJYwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClFI3YgxAE/9s87ILpbA5VNOM8 cQzKuYiWUSvq/3QQV+rpEVgvTEOcMz9nncSHf46UHtOmFxWZVB01JOZjO4Z9B6Wa 3d2pRjCQ5R33ErJKpAbsJaQYvzeBD5BBfZKU8xuddPH3wz5pGC3Q0ID7wiJpvDTW C+Jx1FoJvIrkqXxQXpycb5GmmEQGMbMRdPRPrgnc4QTGZXpQcoQ5bmzKqJzmvwQp ZQOCLb5Ucxe1oLt168HDnHW/YJBL1J4wMdqYT56ANWPLQ4oTKbtmSckUBhkeJYQm PrKBQ3FWlPuZhfxEppiBf8iMbSEMHclVcYunwxJwRARfSwU/LymkA4SpZscC -----END CERTIFICATE-----Generated at Wed May 7 14:01:10 2025 by rpki-client