$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft File: 2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft (raw, json) Hash identifier: xI1krd52L6RP+5AQCXvv+Hmf7ZrDuG/aRGqikqs7iDg= Subject key identifier: 21:96:8A:94:0D:07:6E:68:80:17:25:A3:9F:EF:5A:08:61:BB:6D:00 Authority key identifier: 2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9 Certificate issuer: /CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9 Certificate serial: 6B5AA43F64F1410240EC52AFB1AC5C1491A8F1E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft Manifest number: A1 Signing time: Sat 03 May 2025 05:06:25 +0000 Manifest this update: Sat 03 May 2025 05:01:25 +0000 Manifest next update: Thu 08 May 2025 02:51:25 +0000 Files and hashes: 1: 323830333a333635303a3a2f33322d3332203d3e20323733323038.roa (hash: GJSfPhI/P0iMIecaGynWrRn8xPkJTBeOBnft/w0YP+s=) 2: 2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl (hash: ClWIQePitUN1DrUr1VFrdO7uixCPbjFG94MUbhJJGJw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 02:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5a:a4:3f:64:f1:41:02:40:ec:52:af:b1:ac:5c:14:91:a8:f1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9 Validity Not Before: May 3 05:01:25 2025 GMT Not After : May 8 02:51:25 2025 GMT Subject: CN=21968A940D076E68801725A39FEF5A0861BB6D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:b7:f1:c2:e2:9d:35:ea:93:ee:92:0c:e7: d3:cb:4b:80:fa:f3:d2:a9:04:2b:b9:7b:19:2e:21: de:45:24:91:ab:e3:33:f4:4a:29:cc:7e:e0:b4:56: b8:3f:c1:70:29:e1:f9:34:32:7d:94:01:27:2f:cf: 8b:04:8c:b0:29:35:5f:3b:84:a8:a8:31:c6:bd:e7: ed:21:5e:c8:f8:d7:b2:3a:1d:2f:bc:22:a9:33:6e: 6a:42:05:51:23:37:1a:8d:8f:f9:09:ae:ad:b4:11: ec:7f:4e:f3:65:b2:f1:e0:c9:69:39:68:c1:d3:ff: d5:ee:9a:2a:88:d6:2d:d6:d6:d9:89:ce:42:f4:74: 79:43:cc:a2:07:4c:ea:f6:19:24:37:75:e8:d6:d8: 99:69:03:89:1c:aa:a1:79:cd:92:5b:a2:3e:8a:ff: ca:00:f6:3c:0e:0b:ff:87:03:a3:48:92:69:f9:48: 90:bf:4a:07:8e:ed:8f:ad:8e:64:af:64:a8:7f:7a: 51:93:8d:28:6f:3b:05:a9:be:f6:25:c2:ec:c4:5e: e0:67:fe:a8:e7:31:de:35:2b:a8:ff:f2:30:ac:27: af:a8:61:e1:22:1f:0e:0e:88:9b:16:d5:a1:5a:37: 9b:5c:00:42:d2:66:ca:37:ec:a5:84:57:84:5a:90: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:96:8A:94:0D:07:6E:68:80:17:25:A3:9F:EF:5A:08:61:BB:6D:00 X509v3 Authority Key Identifier: keyid:2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:bf:0a:08:8d:e0:bf:98:d7:e8:f2:22:e9:87:e3:2a:a3:8c: 47:83:2d:1e:33:11:f1:e2:50:5c:9c:ab:22:3c:f1:ba:ef:d3: 31:a1:4e:26:74:d5:05:4e:1d:a3:ff:f2:12:ac:af:69:6f:6e: b2:7d:b7:5a:e9:45:41:40:4e:6d:76:87:dc:c6:23:4d:44:86: f5:6c:f0:10:3d:30:48:2e:e9:ab:c8:ab:b0:f8:2c:16:91:c8: 00:ae:d3:1c:81:bb:c7:16:ce:a2:48:cc:67:56:d5:fb:5c:7f: 04:35:b8:38:25:dd:95:4d:7f:3f:fd:3f:01:56:8a:77:b0:0f: ca:1f:7f:a0:ae:5f:e7:2e:2a:e2:42:ac:e5:f0:f5:89:37:32: cc:ee:b3:3c:d6:cb:a6:96:1c:20:4d:e6:0e:5e:c9:9c:1b:83: e2:9c:a9:6b:06:ea:b8:a1:b1:2e:c8:01:b7:65:19:d2:22:b8: da:b2:36:f3:54:4a:20:0d:7d:06:de:28:44:a8:a1:38:46:5d: 77:e9:5a:1e:27:3b:26:a0:51:c1:ff:cc:1a:e6:5c:d3:9b:2b: 59:55:d1:7e:d4:e5:4b:09:97:8e:59:8e:a0:ca:d0:55:8f:33: c4:0e:24:25:77:c7:3d:7b:d3:05:ba:02:88:50:e0:77:11:63: 4e:25:56:36 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa1qkP2TxQQJA7FKvsaxcFJGo8eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RTAyOUVGRERCQ0FCOEQwQkREREU1Mjc0REI2ODJE RDQxNTRCOTAeFw0yNTA1MDMwNTAxMjVaFw0yNTA1MDgwMjUxMjVaMDMxMTAvBgNV BAMTKDIxOTY4QTk0MEQwNzZFNjg4MDE3MjVBMzlGRUY1QTA4NjFCQjZEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR0bfxwuKdNeqT7pIM59PLS4D6 89KpBCu5exkuId5FJJGr4zP0SinMfuC0Vrg/wXAp4fk0Mn2UAScvz4sEjLApNV87 hKioMca95+0hXsj417I6HS+8IqkzbmpCBVEjNxqNj/kJrq20Eex/TvNlsvHgyWk5 aMHT/9XumiqI1i3W1tmJzkL0dHlDzKIHTOr2GSQ3dejW2JlpA4kcqqF5zZJboj6K /8oA9jwOC/+HA6NIkmn5SJC/SgeO7Y+tjmSvZKh/elGTjShvOwWpvvYlwuzEXuBn /qjnMd41K6j/8jCsJ6+oYeEiHw4OiJsW1aFaN5tcAELSZso37KWEV4RakFVZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIZaKlA0HbmiAFyWjn+9aCGG7bQAwHwYDVR0j BBgwFoAULW4Cnv3byrjQvd3lJ022gt1BVLkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRDlCNzA5MDNDRUFDM0RDNkI3RTVGNTY3MjZDM0U0QzFG MTE0RkMxNTNFRTUwNTJEODM2MEJDRDFBNTg3QjdFLzAvMkQ2RTAyOUVGRERCQ0FC OEQwQkREREU1Mjc0REI2ODJERDQxNTRCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDZFMDI5RUZEREJDQUI4RDBC RERERTUyNzREQjY4MkRENDE1NEI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0Q5QjcwOTAzQ0VBQzNEQzZCN0U1RjU2NzI2QzNFNEMxRjExNEZDMTUz RUU1MDUyRDgzNjBCQ0QxQTU4N0I3RS8wLzJENkUwMjlFRkREQkNBQjhEMEJERERF NTI3NERCNjgyREQ0MTU0QjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyvwoIjeC/mNfo8iLph+Mqo4xH gy0eMxHx4lBcnKsiPPG679MxoU4mdNUFTh2j//ISrK9pb26yfbda6UVBQE5tdofc xiNNRIb1bPAQPTBILumryKuw+CwWkcgArtMcgbvHFs6iSMxnVtX7XH8ENbg4Jd2V TX8//T8BVop3sA/KH3+grl/nLiriQqzl8PWJNzLM7rM81sumlhwgTeYOXsmcG4Pi nKlrBuq4obEuyAG3ZRnSIrjasjbzVEogDX0G3ihEqKE4Rl136VoeJzsmoFHB/8wa 5lzTmytZVdF+1OVLCZeOWY6gytBVjzPEDiQld8c9e9MFugKIUOB3EWNOJVY2 -----END CERTIFICATE-----Generated at Sun May 4 23:47:26 2025 by rpki-client