$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json) Hash identifier: 593yYmdp3kPKpn2k0F5q7zYMIFGR19rkjJHdjZvwFXg= Subject key identifier: C9:D5:77:27:59:0D:5C:3F:EB:F7:78:0E:07:43:5F:A4:DD:5C:A2:C6 Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 18028286C8E279934EDB6533D7F2CB953CA4A422 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft Manifest number: D3 Signing time: Sun 04 May 2025 18:23:36 +0000 Manifest this update: Sun 04 May 2025 18:18:36 +0000 Manifest next update: Sat 10 May 2025 00:27:36 +0000 Files and hashes: 1: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: 7k2vT2hPcNL/9+pyHS8Gaa/UYV6ugrNYbMIjHyw2smI=) 2: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 23:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:02:82:86:c8:e2:79:93:4e:db:65:33:d7:f2:cb:95:3c:a4:a4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: May 4 18:18:36 2025 GMT Not After : May 10 00:27:36 2025 GMT Subject: CN=C9D57727590D5C3FEBF7780E07435FA4DD5CA2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:e8:16:cf:8c:4b:da:ae:26:38:08:96:4e: c9:07:d1:51:e9:be:aa:55:b0:37:55:ad:11:80:95: 99:67:03:16:2c:78:e7:a4:db:51:57:e8:70:03:2f: e1:27:ff:13:37:9e:ba:61:8d:64:e5:b6:06:0a:20: 50:fc:d8:d2:79:29:49:59:d9:2f:2d:a2:fa:b1:a9: 8a:c4:aa:3f:97:d9:70:77:f2:98:b9:6f:cf:00:28: 26:f3:c5:24:bc:8f:44:f7:3a:21:5f:5c:99:bb:36: a1:ab:a8:7f:7f:9b:88:4b:42:e2:34:2a:d9:96:d1: 78:40:f3:e1:4e:25:0d:50:9f:31:a6:c9:ef:2e:9a: 52:35:f1:cf:71:52:e5:03:2d:38:56:56:bb:52:6c: 26:83:20:e2:86:f8:28:73:19:fe:3d:f6:cd:b6:a8: 45:65:0e:ca:82:ef:ee:eb:df:c8:a4:6a:d6:73:e3: 42:aa:3d:bd:85:7d:b7:44:bd:4b:6f:2c:99:fe:aa: f8:d4:d9:b0:21:8a:93:75:17:7c:62:fb:93:fe:97: 24:2e:d0:5b:a5:e5:98:df:03:1c:cb:47:dc:fc:f3: 13:48:cd:4a:6c:ea:9c:0c:a0:c4:e7:b7:48:0f:ca: 5d:c9:51:1d:57:0c:99:2a:38:8d:36:df:7d:dd:42: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D5:77:27:59:0D:5C:3F:EB:F7:78:0E:07:43:5F:A4:DD:5C:A2:C6 X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:47:e6:29:29:2c:24:38:cc:a1:fd:e2:89:b2:01:07:16:e6: e1:02:cf:cc:7d:98:6b:31:96:9f:8c:33:1f:38:2c:45:d4:0e: 85:a9:58:81:92:cf:ff:b4:b6:16:44:ff:c0:8e:b2:f0:61:9d: 1b:59:94:59:0e:74:a2:3a:37:27:dd:08:ce:05:f0:5f:26:85: 88:97:a6:28:9a:20:f3:74:16:00:85:b1:5a:b2:3d:a9:e8:73: a2:03:3f:5a:6e:64:50:ae:f9:60:67:7d:73:50:75:35:62:68: 0a:9f:83:49:70:25:7b:76:15:b3:64:93:61:bd:ab:cc:a1:a5: fb:f7:95:b4:9b:f5:55:98:09:3e:a5:e9:27:f8:38:a9:ad:e1: ac:4c:4c:3d:25:5e:b3:e3:fd:56:9c:69:04:a0:cd:38:ac:20: b5:e4:7f:ef:0c:c2:f5:bf:c7:26:94:69:d3:8d:c2:f7:c2:6e: 4c:f8:a0:44:57:df:46:01:1e:36:c9:87:fb:b5:37:37:7c:dd: e0:85:d0:49:54:33:7e:b4:1b:f0:64:8c:28:09:23:e0:77:89: 8d:fc:54:eb:9a:71:4b:64:ad:79:32:37:bc:7f:f9:15:4a:f5: 22:95:b5:ba:63:7c:ad:43:25:4c:e5:54:d0:b7:ca:89:c0:56: 9a:17:d8:08 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGAKChsjieZNO22Uz1/LLlTykpCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNTA1MDQxODE4MzZaFw0yNTA1MTAwMDI3MzZaMDMxMTAvBgNV BAMTKEM5RDU3NzI3NTkwRDVDM0ZFQkY3NzgwRTA3NDM1RkE0REQ1Q0EyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+egWz4xL2q4mOAiWTskH0VHp vqpVsDdVrRGAlZlnAxYseOek21FX6HADL+En/xM3nrphjWTltgYKIFD82NJ5KUlZ 2S8tovqxqYrEqj+X2XB38pi5b88AKCbzxSS8j0T3OiFfXJm7NqGrqH9/m4hLQuI0 KtmW0XhA8+FOJQ1QnzGmye8umlI18c9xUuUDLThWVrtSbCaDIOKG+ChzGf499s22 qEVlDsqC7+7r38ikatZz40KqPb2FfbdEvUtvLJn+qvjU2bAhipN1F3xi+5P+lyQu 0Ful5ZjfAxzLR9z88xNIzUps6pwMoMTnt0gPyl3JUR1XDJkqOI02333dQhedAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUydV3J1kNXD/r93gOB0NfpN1cosYwHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wL0ZGQjRCRjNENjBCNEZGMkZBQThBMzY0 NDY1MkMyRTJBQkY4MzZBQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwR+YpKSwkOMyh/eKJsgEHFubh As/MfZhrMZafjDMfOCxF1A6FqViBks//tLYWRP/AjrLwYZ0bWZRZDnSiOjcn3QjO BfBfJoWIl6YomiDzdBYAhbFasj2p6HOiAz9abmRQrvlgZ31zUHU1YmgKn4NJcCV7 dhWzZJNhvavMoaX795W0m/VVmAk+pekn+DipreGsTEw9JV6z4/1WnGkEoM04rCC1 5H/vDML1v8cmlGnTjcL3wm5M+KBEV99GAR42yYf7tTc3fN3ghdBJVDN+tBvwZIwo CSPgd4mN/FTrmnFLZK15Mje8f/kVSvUilbW6Y3ytQyVM5VTQt8qJwFaaF9gI -----END CERTIFICATE-----Generated at Mon May 5 21:51:28 2025 by rpki-client