$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft File: 958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json) Hash identifier: sWSF20vXwscMnrdTRRrv3JIqmzImr1xOxYiJQwCohOQ= Subject key identifier: 8B:8F:B7:84:21:4A:09:C9:60:51:E6:0D:71:BA:AD:0A:AF:54:39:AE Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Certificate serial: 477A7FEC07E50E486A701D5B9449F1AC7FA49D04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft Manifest number: D4 Signing time: Sun 04 May 2025 01:43:20 +0000 Manifest this update: Sun 04 May 2025 01:38:20 +0000 Manifest next update: Fri 09 May 2025 20:53:20 +0000 Files and hashes: 1: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=) 2: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=) 3: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=) 4: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=) 5: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: umLSf230fDQiB0n4aOtDtykpg5wGwJ6ulVW5fSY+22Q=) 6: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=) 7: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 18:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7a:7f:ec:07:e5:0e:48:6a:70:1d:5b:94:49:f1:ac:7f:a4:9d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Validity Not Before: May 4 01:38:20 2025 GMT Not After : May 9 20:53:20 2025 GMT Subject: CN=8B8FB784214A09C96051E60D71BAAD0AAF5439AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:9a:91:ce:ec:e4:0e:39:f2:40:2f:16:d8: 81:59:65:16:60:73:d8:38:28:2f:58:1b:3e:11:cf: 25:79:b8:01:8e:5d:55:36:6d:61:41:12:ac:ae:c7: 17:40:b8:40:af:5b:f4:50:f3:5c:66:0f:1e:17:07: 3b:2f:52:b8:3f:01:2b:65:ca:76:ff:46:2e:a8:cb: 4e:0f:95:1a:0e:12:0e:d9:45:0e:dc:25:17:7b:c7: e0:24:08:03:88:09:d2:5d:b7:cb:3a:96:a8:d3:a2: bb:0f:ec:04:89:2b:cf:38:8e:73:3d:72:ed:07:d8: 6e:87:c5:8d:e7:00:e6:8d:3b:01:1e:1f:2b:9c:87: fb:bf:d4:20:9a:54:1a:4f:41:99:e7:65:65:61:58: 0b:3b:6b:cc:10:e2:96:8b:67:f1:b4:d4:12:d7:dc: 90:ea:fd:35:02:a3:d9:f6:4a:a4:98:53:c4:f5:57: 7b:ce:3b:31:8c:18:1b:c7:4d:78:7b:b5:aa:77:e2: bc:25:f3:b3:a1:28:97:d6:3d:67:f9:29:a7:7d:b0: f2:4d:47:cd:95:52:23:d7:dd:6c:a4:4b:d6:93:0e: 43:d1:5e:c4:b8:2d:f2:17:80:28:2c:87:a7:25:80: 4a:32:63:32:08:b1:80:59:e4:e5:25:c4:94:a6:40: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8F:B7:84:21:4A:09:C9:60:51:E6:0D:71:BA:AD:0A:AF:54:39:AE X509v3 Authority Key Identifier: keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5d:86:bd:39:6b:18:9e:ee:83:93:55:9d:7d:1c:b4:b3:bd: 8f:1d:3a:22:e5:35:e0:1f:62:47:91:f3:f2:f3:5f:c7:06:08: d4:89:56:29:99:4f:3f:99:20:0c:50:85:2c:00:5e:08:cc:32: 46:47:6f:a6:49:cf:fa:14:1a:b1:11:6d:e2:9b:fb:9d:d2:bc: 8e:91:84:12:4b:f2:d5:7a:79:b0:35:79:9b:a4:d7:55:f0:46: 69:26:e8:c8:dc:1f:49:f5:7f:32:25:93:e1:b5:3e:2d:4e:da: 7b:99:b4:0f:5d:d7:ec:1c:d1:81:27:9a:58:f2:db:2b:47:d4: 1b:e0:c6:94:de:fd:f6:1e:3a:f1:7b:62:9c:89:42:7a:36:b9: 21:ee:dd:04:8c:10:31:97:b5:13:c5:13:2c:ac:36:33:30:68: 33:22:5a:25:55:1b:d1:8f:fd:b5:90:66:c2:0c:24:79:26:6a: f1:b9:07:34:7b:d5:cc:7d:48:72:cb:b6:b8:1a:fc:77:5a:3a: 1e:11:b1:48:a5:c6:8f:ae:e4:d9:0a:48:0b:8d:b0:62:0b:79: 08:65:69:b5:1a:de:ac:d5:e5:93:1a:37:9c:7a:d3:ce:6e:87: de:b0:0a:3f:bc:ab:60:0d:f8:b6:a6:c7:cd:de:86:f3:62:73: e1:3b:26:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUR3p/7AflDkhqcB1blEnxrH+knQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy MTlGNTlCNTAeFw0yNTA1MDQwMTM4MjBaFw0yNTA1MDkyMDUzMjBaMDMxMTAvBgNV BAMTKDhCOEZCNzg0MjE0QTA5Qzk2MDUxRTYwRDcxQkFBRDBBQUY1NDM5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbZqRzuzkDjnyQC8W2IFZZRZg c9g4KC9YGz4RzyV5uAGOXVU2bWFBEqyuxxdAuECvW/RQ81xmDx4XBzsvUrg/AStl ynb/Ri6oy04PlRoOEg7ZRQ7cJRd7x+AkCAOICdJdt8s6lqjTorsP7ASJK884jnM9 cu0H2G6HxY3nAOaNOwEeHyuch/u/1CCaVBpPQZnnZWVhWAs7a8wQ4paLZ/G01BLX 3JDq/TUCo9n2SqSYU8T1V3vOOzGMGBvHTXh7tap34rwl87OhKJfWPWf5Kad9sPJN R82VUiPX3WykS9aTDkPRXsS4LfIXgCgsh6clgEoyYzIIsYBZ5OUlxJSmQPYRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUi4+3hCFKCclgUeYNcbqtCq9UOa4wHwYDVR0j BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzk1OEFFNzRDNzU1NUIzQTExNURCRkZD ODg0MDM5NUNFMjE5RjU5QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmXYa9OWsYnu6Dk1WdfRy0s72P HToi5TXgH2JHkfPy81/HBgjUiVYpmU8/mSAMUIUsAF4IzDJGR2+mSc/6FBqxEW3i m/ud0ryOkYQSS/LVenmwNXmbpNdV8EZpJujI3B9J9X8yJZPhtT4tTtp7mbQPXdfs HNGBJ5pY8tsrR9Qb4MaU3v32Hjrxe2KciUJ6Nrkh7t0EjBAxl7UTxRMsrDYzMGgz IlolVRvRj/21kGbCDCR5JmrxuQc0e9XMfUhyy7a4Gvx3WjoeEbFIpcaPruTZCkgL jbBiC3kIZWm1Gt6s1eWTGjecetPObofesAo/vKtgDfi2psfN3obzYnPhOyZe -----END CERTIFICATE-----Generated at Mon May 5 18:45:02 2025 by rpki-client