$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft File: FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft (raw, json) Hash identifier: x3pWOXH+yj6wKTE7uDb2MeT0L/ECXsD8kwvdPAtsbTs= Subject key identifier: 62:41:AD:66:2C:7A:64:14:FC:2B:DE:48:A9:37:8F:54:ED:D4:E2:CA Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 Certificate issuer: /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Certificate serial: 7CFD74B8957E105417F91EFCBF0A2B79793B6726 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft Manifest number: D1 Signing time: Mon 05 May 2025 18:18:01 +0000 Manifest this update: Mon 05 May 2025 18:13:01 +0000 Manifest next update: Sun 11 May 2025 14:50:01 +0000 Files and hashes: 1: 3230302e362e31372e302f32342d3234203d3e203233303331.roa (hash: dIEVjdb3lQCo9g9fO5GmMpWFti9yLYGOF7cFBhbUkAQ=) 2: FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl (hash: sXpi327DIKmKZJcwvkrnsoK7L8Qoslo2s1Jsw5ueM8E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 23:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fd:74:b8:95:7e:10:54:17:f9:1e:fc:bf:0a:2b:79:79:3b:67:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Validity Not Before: May 5 18:13:01 2025 GMT Not After : May 11 14:50:01 2025 GMT Subject: CN=6241AD662C7A6414FC2BDE48A9378F54EDD4E2CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8a:e4:29:68:96:fc:92:db:96:08:c5:90:a8: 75:e0:eb:fb:0a:26:43:27:18:49:cb:b3:be:22:4d: 5f:d2:20:06:1c:1a:4e:41:69:48:97:8e:72:7e:12: 4a:52:13:a6:c0:88:ad:57:b3:5c:5d:b2:7d:da:fe: ab:a8:3c:08:10:ec:bf:21:a9:78:32:f6:71:95:87: ff:2e:5d:8b:c1:d3:fb:56:55:e3:2a:3b:2f:ca:14: 04:4f:a2:a0:fa:19:ab:78:e5:22:2a:d9:c8:21:20: e8:7f:c7:81:d7:c8:f4:03:fb:04:5d:3a:8d:e7:b6: 89:16:e4:ae:2b:a6:33:29:82:4e:20:b6:8f:e8:4a: bd:ef:3c:64:e3:a8:62:7f:29:bf:0a:65:a3:2a:53: d7:7e:98:db:80:67:6b:50:96:93:38:6d:c3:42:05: ac:cc:00:f8:1f:60:6d:2a:71:6b:97:c0:8f:ab:99: e5:b8:a2:14:4e:9d:de:58:88:21:79:d0:af:ba:0b: 75:70:ce:53:d0:08:88:01:69:68:b9:42:8f:c5:05: b9:f9:38:f0:a6:29:cc:5b:95:cb:50:79:87:d7:1c: 6b:31:3d:27:23:fa:12:bf:96:58:4d:3e:ba:71:bd: 0d:8c:99:55:d8:9f:c9:a9:4d:0f:ae:9a:49:4d:a9: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:41:AD:66:2C:7A:64:14:FC:2B:DE:48:A9:37:8F:54:ED:D4:E2:CA X509v3 Authority Key Identifier: keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0e:8b:fd:30:bc:3e:62:92:b1:2f:97:86:a7:87:6f:db:1a: 66:24:68:25:06:97:70:37:4d:c2:21:c7:41:72:1b:67:d9:b1: 34:e6:b6:8b:20:b6:92:57:dd:e2:6b:e7:ab:5c:75:71:ac:03: 4a:67:c6:39:53:f0:eb:64:86:76:93:c9:4c:cd:e5:45:e1:5a: e5:ab:76:35:2e:71:f9:91:fd:db:b3:8c:76:ff:43:6c:f1:38: 92:35:3d:9e:a1:0c:ad:d7:58:4d:be:d8:00:ed:79:74:82:8a: de:a3:ac:94:59:e1:30:f4:d9:ac:12:70:0c:c9:ad:29:6b:39: 7f:e6:b5:ac:89:04:8b:ab:bd:d8:7c:d8:ec:2a:f3:60:bd:d8: 25:be:a9:49:e5:db:5d:1f:4b:bc:59:a4:ed:c8:a8:8f:a5:f5: d1:7f:09:ba:c5:f6:4f:8a:d9:1c:87:2c:23:39:8f:79:09:eb: c7:7c:a3:12:9c:06:88:3b:fa:15:78:f1:8b:79:87:08:21:e5: 98:c9:62:3d:a9:10:b4:96:91:fb:58:5e:a2:b1:26:76:4a:1e: 22:cf:65:8b:06:a9:40:f4:7a:98:7a:1d:3b:24:de:8c:1e:b2: 0b:1a:83:fd:68:cc:4d:cc:0d:70:4e:52:8b:5e:b0:fd:b8:eb: 60:26:55:30 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfP10uJV+EFQX+R78vworeXk7ZyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjlGQzlFMjQ5MEQ1Mjc2NTNFRjdDRTg0NzE3M0Y5 Q0QwODgzMzAeFw0yNTA1MDUxODEzMDFaFw0yNTA1MTExNDUwMDFaMDMxMTAvBgNV BAMTKDYyNDFBRDY2MkM3QTY0MTRGQzJCREU0OEE5Mzc4RjU0RURENEUyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiuQpaJb8ktuWCMWQqHXg6/sK JkMnGEnLs74iTV/SIAYcGk5BaUiXjnJ+EkpSE6bAiK1Xs1xdsn3a/quoPAgQ7L8h qXgy9nGVh/8uXYvB0/tWVeMqOy/KFARPoqD6Gat45SIq2cghIOh/x4HXyPQD+wRd Oo3ntokW5K4rpjMpgk4gto/oSr3vPGTjqGJ/Kb8KZaMqU9d+mNuAZ2tQlpM4bcNC BazMAPgfYG0qcWuXwI+rmeW4ohROnd5YiCF50K+6C3VwzlPQCIgBaWi5Qo/FBbn5 OPCmKcxblctQeYfXHGsxPScj+hK/llhNPrpxvQ2MmVXYn8mpTQ+umklNqTYxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYkGtZix6ZBT8K95IqTePVO3U4sowHwYDVR0j BBgwFoAU+o+fyeJJDVJ2U+986EcXP5zQiDMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOEIyOUZCNTUwQUFFMkY4OTM2QzA4NTYzNjg2Q0VDRTMz N0U1OEJENUEyMkFFNjcwNUExRjdDQUEzMTM3QURBLzAvRkE4RjlGQzlFMjQ5MEQ1 Mjc2NTNFRjdDRTg0NzE3M0Y5Q0QwODgzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQThGOUZDOUUyNDkwRDUyNzY1 M0VGN0NFODQ3MTczRjlDRDA4ODMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDhCMjlGQjU1MEFBRTJGODkzNkMwODU2MzY4NkNFQ0UzMzdFNThCRDVB MjJBRTY3MDVBMUY3Q0FBMzEzN0FEQS8wL0ZBOEY5RkM5RTI0OTBENTI3NjUzRUY3 Q0U4NDcxNzNGOUNEMDg4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBDov9MLw+YpKxL5eGp4dv2xpm JGglBpdwN03CIcdBchtn2bE05raLILaSV93ia+erXHVxrANKZ8Y5U/DrZIZ2k8lM zeVF4Vrlq3Y1LnH5kf3bs4x2/0Ns8TiSNT2eoQyt11hNvtgA7Xl0goreo6yUWeEw 9NmsEnAMya0pazl/5rWsiQSLq73YfNjsKvNgvdglvqlJ5dtdH0u8WaTtyKiPpfXR fwm6xfZPitkchywjOY95CevHfKMSnAaIO/oVePGLeYcIIeWYyWI9qRC0lpH7WF6i sSZ2Sh4iz2WLBqlA9HqYeh07JN6MHrILGoP9aMxNzA1wTlKLXrD9uOtgJlUw -----END CERTIFICATE-----Generated at Tue May 6 01:09:43 2025 by rpki-client