$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.mft File: 8FCCFBBE6DE0FDE4939CA30A509504E052D77675.mft (raw, json) Hash identifier: 8pSQg2ip+hdnSWqcSacOTt/iJjjOuKESokYwSsTkcLE= Subject key identifier: C8:F5:72:44:BE:89:34:AC:54:C3:24:63:A8:88:03:E1:1B:1A:41:B5 Authority key identifier: 8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75 Certificate issuer: /CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675 Certificate serial: 349032C44EE08B98C824E0CA577DC80E00C804D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.mft Manifest number: D3 Signing time: Wed 07 May 2025 04:48:29 +0000 Manifest this update: Wed 07 May 2025 04:43:29 +0000 Manifest next update: Tue 13 May 2025 01:58:29 +0000 Files and hashes: 1: 8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl (hash: ciJhM3V9TOhki1S/0PpzY70WEtOxb/CU8QUb0kKnSKQ=) 2: 323830333a383336303a3a2f33322d3438203d3e20323639373739.roa (hash: MBygkztOsFGH3Dl4dVdpP0JGq3Ce+F9tmpVcE4IOpu0=) 3: 34352e3138342e32302e302f32322d3234203d3e20323639373739.roa (hash: 5eJ51KDzM11r4rFhRJX23rUzoirYpVZjamULoyKCWVw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 01:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:90:32:c4:4e:e0:8b:98:c8:24:e0:ca:57:7d:c8:0e:00:c8:04:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675 Validity Not Before: May 7 04:43:29 2025 GMT Not After : May 13 01:58:29 2025 GMT Subject: CN=C8F57244BE8934AC54C32463A88803E11B1A41B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b5:ce:52:59:96:89:31:a3:21:20:7d:d6:f1: c3:4d:79:fa:55:04:82:73:ce:23:14:41:d5:7f:aa: e2:5c:59:d2:d5:0f:31:31:26:09:18:2f:e7:9a:b9: 24:08:da:ab:9b:ba:eb:df:72:60:a8:97:e3:95:a7: d6:58:35:e6:86:ed:e9:f6:ee:24:95:66:63:0a:97: 51:35:87:f5:6a:2f:65:2a:cc:c0:74:59:e1:21:86: 3c:48:3c:cb:0d:03:f8:79:f1:7a:02:1d:d8:35:b8: c4:ff:2b:bc:5f:84:98:d2:e3:83:d4:c2:cb:59:3e: 66:60:5f:00:93:7e:ed:32:d5:ca:81:b6:cc:ec:79: 18:41:e6:d7:4a:1a:90:c3:16:5d:05:92:ab:d6:32: 68:27:b3:a3:e5:5b:d6:26:e4:74:f9:ec:2f:e0:ee: 24:8e:5b:74:63:c8:9e:4e:81:9d:bc:96:15:59:09: 4a:74:68:53:58:11:ac:a2:61:33:aa:81:cc:71:be: 95:f0:da:23:d2:e3:60:ba:56:98:46:94:27:e6:3a: c2:4d:ab:42:78:17:d3:03:19:dd:e6:b6:5f:9f:52: 8e:a4:66:d4:7f:99:6d:03:ac:9d:52:de:f6:bc:1d: 72:a5:b3:85:3d:11:1e:5e:ef:e3:f4:28:87:31:ea: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F5:72:44:BE:89:34:AC:54:C3:24:63:A8:88:03:E1:1B:1A:41:B5 X509v3 Authority Key Identifier: keyid:8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:a6:c0:89:60:04:7d:75:d1:a3:13:74:b3:cf:12:a5:b3: c8:77:af:e9:0a:10:8b:5d:0e:ef:79:6f:74:c2:f0:04:3e:ca: 10:3f:0a:87:26:8b:0d:e9:76:76:cd:e2:0e:47:92:4e:1d:ba: 18:fb:29:5b:e0:d2:71:d0:7f:82:4b:aa:52:ff:ba:93:9a:ee: bd:66:08:31:96:e6:45:e1:57:4b:68:22:b9:1d:9a:24:80:44: 83:fd:d8:a4:e9:d4:6e:ed:2c:96:bb:f3:ad:06:63:b5:7e:1e: b4:a8:4b:f9:29:74:49:7c:ae:95:ea:7c:9e:94:02:e7:60:48: 1b:c8:69:c6:59:bf:c5:c8:09:74:48:a3:94:23:c2:3f:77:ff: 2a:ca:7c:eb:bf:ac:8c:40:cb:2c:2a:dc:64:41:a0:3d:06:9e: 2d:70:17:dc:f0:9e:52:f2:d6:4f:b8:ba:7e:1d:65:c7:60:7d: 70:2f:85:be:c0:bc:99:24:25:53:72:77:c3:c5:86:67:fa:89: e4:bd:e5:90:b3:0f:e8:9c:df:6d:7e:9a:b3:fb:df:c0:8d:18: 23:63:88:ce:cb:08:a6:56:4f:e8:52:de:a9:6f:c4:f1:0b:74: df:9b:a5:89:b0:25:90:d6:f3:fb:52:18:ff:b2:ad:65:f9:8d: 45:c3:6b:d9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNJAyxE7gi5jIJODKV33IDgDIBNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDQ0ZCQkU2REUwRkRFNDkzOUNBMzBBNTA5NTA0RTA1 MkQ3NzY3NTAeFw0yNTA1MDcwNDQzMjlaFw0yNTA1MTMwMTU4MjlaMDMxMTAvBgNV BAMTKEM4RjU3MjQ0QkU4OTM0QUM1NEMzMjQ2M0E4ODgwM0UxMUIxQTQxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDktc5SWZaJMaMhIH3W8cNNefpV BIJzziMUQdV/quJcWdLVDzExJgkYL+eauSQI2qubuuvfcmCol+OVp9ZYNeaG7en2 7iSVZmMKl1E1h/VqL2UqzMB0WeEhhjxIPMsNA/h58XoCHdg1uMT/K7xfhJjS44PU wstZPmZgXwCTfu0y1cqBtszseRhB5tdKGpDDFl0FkqvWMmgns6PlW9Ym5HT57C/g 7iSOW3RjyJ5OgZ28lhVZCUp0aFNYEayiYTOqgcxxvpXw2iPS42C6VphGlCfmOsJN q0J4F9MDGd3mtl+fUo6kZtR/mW0DrJ1S3va8HXKls4U9ER5e7+P0KIcx6mfpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyPVyRL6JNKxUwyRjqIgD4RsaQbUwHwYDVR0j BBgwFoAUj8z7vm3g/eSTnKMKUJUE4FLXdnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRDFEQjlFRDlGNzQwQjU2OTY3MUVBMDgzNzY0MDlDQTdD OUQ3NjAyMTdDQzEwOUI5NUQ3QUQ0RDczMUMxMjcxLzAvOEZDQ0ZCQkU2REUwRkRF NDkzOUNBMzBBNTA5NTA0RTA1MkQ3NzY3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RkNDRkJCRTZERTBGREU0OTM5 Q0EzMEE1MDk1MDRFMDUyRDc3Njc1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0QxREI5RUQ5Rjc0MEI1Njk2NzFFQTA4Mzc2NDA5Q0E3QzlENzYwMjE3 Q0MxMDlCOTVEN0FENEQ3MzFDMTI3MS8wLzhGQ0NGQkJFNkRFMEZERTQ5MzlDQTMw QTUwOTUwNEUwNTJENzc2NzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuiqbAiWAEfXXRoxN0s88SpbPI d6/pChCLXQ7veW90wvAEPsoQPwqHJosN6XZ2zeIOR5JOHboY+ylb4NJx0H+CS6pS /7qTmu69ZggxluZF4VdLaCK5HZokgESD/dik6dRu7SyWu/OtBmO1fh60qEv5KXRJ fK6V6nyelALnYEgbyGnGWb/FyAl0SKOUI8I/d/8qynzrv6yMQMssKtxkQaA9Bp4t cBfc8J5S8tZPuLp+HWXHYH1wL4W+wLyZJCVTcnfDxYZn+onkveWQsw/onN9tfpqz +9/AjRgjY4jOywimVk/oUt6pb8TxC3Tfm6WJsCWQ1vP7Uhj/sq1l+Y1Fw2vZ -----END CERTIFICATE-----Generated at Wed May 7 07:28:06 2025 by rpki-client