$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft File: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft (raw, json) Hash identifier: aEYGXR72WJYCOUBn/JPIQZjmLfoyJxq0ybWxOrWgLMk= Subject key identifier: 94:64:04:BF:13:66:2B:AD:3C:ED:64:DD:61:35:F3:E8:96:C1:94:EE Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98 Certificate issuer: /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498 Certificate serial: 4ABE9452930D7FBFFF03C906C3EE05A1945C5D76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft Manifest number: DC Signing time: Thu 08 May 2025 17:55:30 +0000 Manifest this update: Thu 08 May 2025 17:50:30 +0000 Manifest next update: Tue 13 May 2025 15:30:30 +0000 Files and hashes: 1: 3133322e3235352e362e302f32342d3234203d3e20323633363937.roa (hash: wXk1gBsCKAVBhA0HEaOwZW0Hk29YTL096/qFnG/gfRM=) 2: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (hash: 4enywTReuztkAZA8QfDVVO/DSjhDY+9zSMoXxSl8TDU=) 3: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl (hash: gwBGIpbc8dIgqUa14xEmLESaOwOtB46jMHtQBXgZi3M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 15:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:be:94:52:93:0d:7f:bf:ff:03:c9:06:c3:ee:05:a1:94:5c:5d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498 Validity Not Before: May 8 17:50:30 2025 GMT Not After : May 13 15:30:30 2025 GMT Subject: CN=946404BF13662BAD3CED64DD6135F3E896C194EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:a2:3d:eb:20:c7:9e:39:86:fd:0c:fe:7f: 91:39:ad:4a:f7:ce:53:49:2e:c7:7d:90:16:8e:eb: bb:f9:e1:39:4e:69:b7:5e:1f:9a:6e:90:65:46:f9: d2:42:f4:81:36:96:3d:03:c0:0b:f7:14:4a:81:7e: 9c:6d:d9:a2:f1:db:0f:5d:a8:e1:51:bd:69:6f:cc: 6a:71:3e:09:9e:92:9e:1f:71:2f:18:98:ea:17:9c: c1:2d:45:af:e2:fb:a7:62:0d:f8:c5:7b:6d:5f:15: 03:ac:bb:18:54:36:31:55:97:bd:23:63:ce:4a:83: 2e:26:55:a1:14:c0:94:5f:51:8d:a3:27:d0:58:9c: 60:01:ae:c6:ed:0e:ba:fd:ed:e4:03:c0:76:5b:a1: c8:38:81:c4:29:a1:fb:45:9d:e0:7f:d3:f1:6d:b2: 75:34:f8:ac:fc:3a:a3:66:d7:6b:33:79:42:19:3c: 1c:e8:e5:33:5e:a2:57:2b:29:8d:c9:07:74:3c:8c: e9:58:5d:26:99:26:bf:d9:3a:22:9d:49:10:26:8f: c6:90:fc:58:29:08:a2:d3:4d:02:dd:35:07:0b:00: c1:6f:5c:93:fe:1e:88:04:30:14:50:58:86:34:b3: 35:72:cc:04:8b:b3:0a:2a:1a:55:bd:7a:b9:50:b1: 50:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:64:04:BF:13:66:2B:AD:3C:ED:64:DD:61:35:F3:E8:96:C1:94:EE X509v3 Authority Key Identifier: keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ca:cb:b9:70:11:a7:ff:c4:67:25:9a:4f:25:52:ef:e4:52: bd:74:3e:c8:e9:79:1c:6e:c2:51:1a:7b:1e:6f:ac:e4:fe:32: cd:56:ba:5e:60:e8:40:18:bd:db:af:0b:7e:15:db:6a:8b:55: 10:0e:89:5e:e9:69:88:e3:5a:ca:6e:fd:5d:9d:35:56:63:d8: d9:95:7e:76:b0:ae:fa:57:a6:87:41:02:63:e4:47:a5:ea:cc: 05:9e:75:59:14:63:17:47:75:d2:ec:83:a2:d5:bd:64:f4:ad: ae:4a:39:36:f9:23:1e:d7:b4:e9:33:a8:e6:6a:77:9e:31:b0: 71:a9:04:6b:0f:86:31:55:e7:6e:ec:b3:b4:3b:e8:17:fd:c7: b1:bb:38:2d:d9:66:47:a3:6c:33:21:94:ce:03:1f:7f:9e:49: 51:77:f1:f4:9c:57:39:ac:59:2d:37:f5:ca:fb:11:15:be:1f: 00:ba:fd:13:91:a2:44:7d:f3:8d:f3:58:f9:31:9a:9e:96:52: 09:6c:72:22:19:28:b5:38:d0:80:34:73:6a:0d:35:b7:b7:1a: 4d:11:e7:e1:a3:b9:41:1f:19:26:4b:d0:15:99:dd:58:a5:b3: 8c:9a:54:f6:79:56:f6:ca:39:12:ef:30:db:5e:18:df:14:66: 90:a3:c9:3b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSr6UUpMNf7//A8kGw+4FoZRcXXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxMjNBRThDOUZERUQ0NkU1RjdEM0I0ODg3ODg1MUUx RThCNzQ5ODAeFw0yNTA1MDgxNzUwMzBaFw0yNTA1MTMxNTMwMzBaMDMxMTAvBgNV BAMTKDk0NjQwNEJGMTM2NjJCQUQzQ0VENjRERDYxMzVGM0U4OTZDMTk0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMTKI96yDHnjmG/Qz+f5E5rUr3 zlNJLsd9kBaO67v54TlOabdeH5pukGVG+dJC9IE2lj0DwAv3FEqBfpxt2aLx2w9d qOFRvWlvzGpxPgmekp4fcS8YmOoXnMEtRa/i+6diDfjFe21fFQOsuxhUNjFVl70j Y85Kgy4mVaEUwJRfUY2jJ9BYnGABrsbtDrr97eQDwHZbocg4gcQpoftFneB/0/Ft snU0+Kz8OqNm12szeUIZPBzo5TNeolcrKY3JB3Q8jOlYXSaZJr/ZOiKdSRAmj8aQ /FgpCKLTTQLdNQcLAMFvXJP+HogEMBRQWIY0szVyzASLswoqGlW9erlQsVB5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlGQEvxNmK6087WTdYTXz6JbBlO4wHwYDVR0j BBgwFoAUDRI66Mn97Ubl99O0iHiFHh6LdJgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CM0QzOTlDM0I3NzYyMjQwRDMzQzZENEYzRjIxM0E2NkUw NjFBQ0FFMjc4QjQ0MTUwREMyNEM5NzhDMDBFMEY4LzAvMEQxMjNBRThDOUZERUQ0 NkU1RjdEM0I0ODg3ODg1MUUxRThCNzQ5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDEyM0FFOEM5RkRFRDQ2RTVG N0QzQjQ4ODc4ODUxRTFFOEI3NDk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjNEMzk5QzNCNzc2MjI0MEQzM0M2RDRGM0YyMTNBNjZFMDYxQUNBRTI3 OEI0NDE1MERDMjRDOTc4QzAwRTBGOC8wLzBEMTIzQUU4QzlGREVENDZFNUY3RDNC NDg4Nzg4NTFFMUU4Qjc0OTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiysu5cBGn/8RnJZpPJVLv5FK9 dD7I6XkcbsJRGnseb6zk/jLNVrpeYOhAGL3brwt+Fdtqi1UQDole6WmI41rKbv1d nTVWY9jZlX52sK76V6aHQQJj5Eel6swFnnVZFGMXR3XS7IOi1b1k9K2uSjk2+SMe 17TpM6jmaneeMbBxqQRrD4YxVedu7LO0O+gX/cexuzgt2WZHo2wzIZTOAx9/nklR d/H0nFc5rFktN/XK+xEVvh8Auv0TkaJEffON81j5MZqellIJbHIiGSi1ONCANHNq DTW3txpNEefho7lBHxkmS9AVmd1YpbOMmlT2eVb2yjkS7zDbXhjfFGaQo8k7 -----END CERTIFICATE-----Generated at Fri May 9 16:41:15 2025 by rpki-client