$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: Fgb6VnAKjUbknjU57tVbewyXGv+iQLwk2KliXBlMZJY= Subject key identifier: 5F:09:64:E5:42:00:CA:3F:85:D1:50:D6:C6:62:5A:61:11:F6:91:4E Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 668F9C1F992B246A632DD78679010C02506E5409 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: DB Signing time: Tue 06 May 2025 04:34:02 +0000 Manifest this update: Tue 06 May 2025 04:29:02 +0000 Manifest next update: Mon 12 May 2025 03:25:02 +0000 Files and hashes: 1: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) 2: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: t2VPMJQqyRSi7/GkCAD2RCQcnlpHSBbqHTtRDm6LPFw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 03:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8f:9c:1f:99:2b:24:6a:63:2d:d7:86:79:01:0c:02:50:6e:54:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: May 6 04:29:02 2025 GMT Not After : May 12 03:25:02 2025 GMT Subject: CN=5F0964E54200CA3F85D150D6C6625A6111F6914E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:93:bd:12:b0:24:bf:e7:77:6b:7b:8a:e6: b5:aa:83:f4:16:27:fd:7b:15:a7:b3:7f:8a:43:b7: f1:e3:59:69:09:c2:85:f8:c5:15:f8:01:da:df:b5: d5:ad:60:79:e8:0c:12:f5:73:cd:26:75:30:18:33: 0f:a9:65:ac:fa:a2:03:cf:cc:5f:bf:d8:f0:cc:a3: 41:b9:b9:48:04:8a:2f:97:8e:cb:94:ee:cb:8f:2f: 82:57:80:79:ca:d6:43:02:d4:78:84:44:3d:f9:89: 21:40:3c:dd:f8:a2:f8:85:d6:98:e7:aa:25:cb:51: dd:80:61:85:23:89:2c:df:84:fc:9a:1e:cc:da:42: 71:04:c8:f5:29:e6:6c:bb:56:19:79:f0:e9:68:31: c2:e3:55:4e:97:8f:fd:da:3f:d7:6a:8c:cf:3d:f9: 5a:17:15:66:5c:6f:92:f4:55:a7:bb:79:e4:c1:76: 3b:f6:74:f8:e2:25:ca:df:cc:21:99:78:84:0a:2e: 82:e0:9c:49:cc:6c:17:c1:70:6f:41:c7:f1:a9:8c: 27:36:41:c0:b8:c3:b2:fc:da:a9:da:60:bd:33:00: 23:a4:e4:fc:31:36:18:f5:4d:a7:af:3d:4b:c4:e1: 99:2d:8e:49:40:e8:3a:ad:1c:40:fd:d5:0f:de:75: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:09:64:E5:42:00:CA:3F:85:D1:50:D6:C6:62:5A:61:11:F6:91:4E X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:60:1a:af:f2:fd:24:f5:64:2b:d0:65:ad:0e:5e:75:c5:6b: 77:f1:69:f5:b3:0d:c7:44:61:04:52:a2:72:d3:4a:6c:aa:cd: c3:8f:69:bb:ac:5f:ee:18:ef:f5:50:35:c8:8c:d6:b4:c6:94: 93:8d:12:27:31:00:b1:34:93:9f:67:df:96:11:61:23:38:c8: c9:ff:f0:05:b0:0e:e9:af:24:cb:00:c0:1f:de:95:f7:df:1c: ea:84:9e:94:4b:b0:42:be:c0:05:26:0c:1a:01:fc:07:bf:78: 1d:74:7b:dd:59:e3:15:00:38:11:e8:09:24:a0:a6:9d:d7:ac: 43:0a:f1:3b:55:4b:8a:93:96:95:4c:6f:b1:5a:29:70:27:38: 5b:c3:25:ad:f2:77:ea:74:49:5b:96:17:f0:cd:3f:d2:9c:1a: ff:73:85:32:b1:7d:f4:00:da:39:6c:d4:b1:56:e6:c2:cc:4d: c7:b2:ab:d0:ba:88:20:a2:9c:d9:4c:8f:6d:51:cc:32:19:7a: ff:d4:33:82:2a:0f:0e:fb:0d:25:7b:19:90:6b:64:11:20:21: 59:bb:c4:2a:cc:cd:9a:27:6e:ad:0f:33:08:56:be:48:20:96: eb:17:8c:05:22:f8:6d:00:26:45:15:1e:1d:c7:e5:31:75:0a: f4:7b:ce:7f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZo+cH5krJGpjLdeGeQEMAlBuVAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTA1MDYwNDI5MDJaFw0yNTA1MTIwMzI1MDJaMDMxMTAvBgNV BAMTKDVGMDk2NEU1NDIwMENBM0Y4NUQxNTBENkM2NjI1QTYxMTFGNjkxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4E5O9ErAkv+d3a3uK5rWqg/QW J/17Faezf4pDt/HjWWkJwoX4xRX4AdrftdWtYHnoDBL1c80mdTAYMw+pZaz6ogPP zF+/2PDMo0G5uUgEii+XjsuU7suPL4JXgHnK1kMC1HiERD35iSFAPN34oviF1pjn qiXLUd2AYYUjiSzfhPyaHszaQnEEyPUp5my7Vhl58OloMcLjVU6Xj/3aP9dqjM89 +VoXFWZcb5L0Vae7eeTBdjv2dPjiJcrfzCGZeIQKLoLgnEnMbBfBcG9Bx/GpjCc2 QcC4w7L82qnaYL0zACOk5PwxNhj1TaevPUvE4ZktjklA6DqtHED91Q/edepxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXwlk5UIAyj+F0VDWxmJaYRH2kU4wHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJYBqv8v0k9WQr0GWtDl51xWt3 8Wn1sw3HRGEEUqJy00psqs3Dj2m7rF/uGO/1UDXIjNa0xpSTjRInMQCxNJOfZ9+W EWEjOMjJ//AFsA7pryTLAMAf3pX33xzqhJ6US7BCvsAFJgwaAfwHv3gddHvdWeMV ADgR6AkkoKad16xDCvE7VUuKk5aVTG+xWilwJzhbwyWt8nfqdElblhfwzT/SnBr/ c4UysX30ANo5bNSxVubCzE3HsqvQuoggopzZTI9tUcwyGXr/1DOCKg8O+w0lexmQ a2QRICFZu8QqzM2aJ26tDzMIVr5IIJbrF4wFIvhtACZFFR4dx+UxdQr0e85/ -----END CERTIFICATE-----Generated at Thu May 8 17:22:02 2025 by rpki-client