$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft File: DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft (raw, json) Hash identifier: wzrMLJLXUUnUEUgnkfnCZuXYdHqI8BqrgrBv89Sm1U0= Subject key identifier: 28:51:34:5E:C0:00:FE:80:B0:4E:50:8B:3D:CD:84:5C:EC:84:5A:4F Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D Certificate issuer: /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D Certificate serial: 202C9205DF8D6C83B4C5E2E3D2B62E6B26152F00 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft Manifest number: E1 Signing time: Tue 06 May 2025 06:20:06 +0000 Manifest this update: Tue 06 May 2025 06:15:06 +0000 Manifest next update: Mon 12 May 2025 04:12:06 +0000 Files and hashes: 1: DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl (hash: O2SIKGVOjGOBsq4Ux61Rr6HffuWEGUPiqlhI3NNVca8=) 2: 34352e3233342e36332e302f32342d3234203d3e20323732383635.roa (hash: uzbDHsUlb67ifslgmjznrxSKQIV5sA4tgulnSHGBPto=) 3: 323830333a333732303a3a2f33322d3438203d3e20323636373636.roa (hash: OLjkSY9EQtiWlJ3rdXCCzjxZLSRb8qOBm07kFmFjg40=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2c:92:05:df:8d:6c:83:b4:c5:e2:e3:d2:b6:2e:6b:26:15:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D Validity Not Before: May 6 06:15:06 2025 GMT Not After : May 12 04:12:06 2025 GMT Subject: CN=2851345EC000FE80B04E508B3DCD845CEC845A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3d:aa:e1:7f:76:4c:ac:b0:8f:96:e1:22:b5: 03:90:b0:55:32:2b:cc:c7:6f:e9:ab:0c:58:ee:15: bc:7b:78:91:38:87:c6:82:5f:fe:44:59:9f:2c:af: ca:3b:26:47:40:22:f8:ec:51:3a:4d:ef:e8:88:cd: 6e:4c:98:b7:d5:45:e3:1d:c4:54:5e:23:80:f2:cf: cd:69:46:37:35:33:33:fa:23:18:f0:cc:cd:47:4b: e1:2a:02:55:f1:66:51:c7:c6:74:90:f0:da:68:14: a7:3e:a7:4b:08:5f:db:25:ac:35:aa:42:2c:fd:f4: a6:d4:fa:6f:8b:83:29:fd:c3:fc:f4:1a:54:e5:6e: d6:af:3d:d4:90:3b:e7:44:17:2d:ba:31:cc:75:16: f5:52:8e:f8:46:18:a1:f9:56:e0:fd:b9:53:7f:c9: b3:de:1a:02:a4:80:a1:82:be:97:02:42:de:c1:06: 3e:8d:b1:6e:8e:d6:63:b9:4a:b5:e8:74:80:f3:34: 8c:0d:ba:89:95:89:1c:88:90:0c:b8:80:61:ec:fb: ce:c6:05:9e:91:29:24:95:30:b0:e5:27:7f:42:95: c1:d0:45:33:65:92:dc:0f:39:38:63:53:c5:f5:a9: df:26:1e:dc:4c:44:d2:1a:53:d7:89:7d:a0:5f:93: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:34:5E:C0:00:FE:80:B0:4E:50:8B:3D:CD:84:5C:EC:84:5A:4F X509v3 Authority Key Identifier: keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c4:22:7c:cb:fd:ad:10:c4:a6:a8:96:c7:09:52:fc:02:3e: b9:2e:a9:77:e5:c0:ea:12:16:ff:7f:a0:62:5a:38:d2:a5:2a: b3:11:01:af:c7:bc:63:89:fa:c7:26:91:ab:4d:18:71:0d:b6: 16:bc:7d:58:92:4c:62:80:fc:33:4a:ce:55:67:f5:32:da:e1: 5e:81:bf:07:8c:37:63:a4:66:94:d2:bb:c0:08:07:2c:72:b5: ac:a8:a6:9a:bd:04:ae:49:bb:44:46:c6:19:00:0e:cd:1c:7a: a6:2c:83:0c:14:77:e2:24:6a:e4:f7:41:67:81:ea:93:1d:c4: bd:00:6d:4d:e2:40:60:cb:6c:05:f8:94:a1:d9:27:ed:77:25: cb:a1:c4:18:b3:98:2c:01:35:64:3b:8c:f5:29:f1:13:af:f8: 6c:5f:10:f7:69:ff:65:5a:82:95:ac:5c:d2:65:03:df:f3:de: 72:19:e0:bd:02:5e:34:eb:69:87:c5:c1:d9:89:12:ca:af:f4: 97:b8:ae:48:9b:37:e9:c5:7b:e7:13:33:30:4b:d3:06:ab:a4: 9e:3a:f6:7e:46:65:4f:74:3e:7c:ea:6e:c5:6d:b1:a8:c0:76: 94:f1:79:ea:07:40:52:be:67:c6:b1:41:28:bf:81:9f:fb:c1: e8:52:66:70 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUICySBd+NbIO0xeLj0rYuayYVLwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyODZBODNCRTc3QzQyQkEyRDJCQkM4RTVBNENDQUYx OTYwMjY0RDAeFw0yNTA1MDYwNjE1MDZaFw0yNTA1MTIwNDEyMDZaMDMxMTAvBgNV BAMTKDI4NTEzNDVFQzAwMEZFODBCMDRFNTA4QjNEQ0Q4NDVDRUM4NDVBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Parhf3ZMrLCPluEitQOQsFUy K8zHb+mrDFjuFbx7eJE4h8aCX/5EWZ8sr8o7JkdAIvjsUTpN7+iIzW5MmLfVReMd xFReI4Dyz81pRjc1MzP6IxjwzM1HS+EqAlXxZlHHxnSQ8NpoFKc+p0sIX9slrDWq Qiz99KbU+m+Lgyn9w/z0GlTlbtavPdSQO+dEFy26Mcx1FvVSjvhGGKH5VuD9uVN/ ybPeGgKkgKGCvpcCQt7BBj6NsW6O1mO5SrXodIDzNIwNuomViRyIkAy4gGHs+87G BZ6RKSSVMLDlJ39ClcHQRTNlktwPOThjU8X1qd8mHtxMRNIaU9eJfaBfk9hlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKFE0XsAA/oCwTlCLPc2EXOyEWk8wHwYDVR0j BBgwFoAU3Shqg753xCui0rvI5aTMrxlgJk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERTQ3RERFQkQxOEM4MzQ5M0QxQTExQUVEQjU0MUE1RTMw RTE4M0RGMjRFQUNGN0YyNTRCMkU2MUEzNjM4N0EwLzAvREQyODZBODNCRTc3QzQy QkEyRDJCQkM4RTVBNENDQUYxOTYwMjY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDI4NkE4M0JFNzdDNDJCQTJE MkJCQzhFNUE0Q0NBRjE5NjAyNjRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREU0N0RERUJEMThDODM0OTNEMUExMUFFREI1NDFBNUUzMEUxODNERjI0 RUFDRjdGMjU0QjJFNjFBMzYzODdBMC8wL0REMjg2QTgzQkU3N0M0MkJBMkQyQkJD OEU1QTRDQ0FGMTk2MDI2NEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxxCJ8y/2tEMSmqJbHCVL8Aj65 Lql35cDqEhb/f6BiWjjSpSqzEQGvx7xjifrHJpGrTRhxDbYWvH1YkkxigPwzSs5V Z/Uy2uFegb8HjDdjpGaU0rvACAcscrWsqKaavQSuSbtERsYZAA7NHHqmLIMMFHfi JGrk90FngeqTHcS9AG1N4kBgy2wF+JSh2SftdyXLocQYs5gsATVkO4z1KfETr/hs XxD3af9lWoKVrFzSZQPf895yGeC9Al4062mHxcHZiRLKr/SXuK5ImzfpxXvnEzMw S9MGq6SeOvZ+RmVPdD586m7FbbGowHaU8XnqB0BSvmfGsUEov4Gf+8HoUmZw -----END CERTIFICATE-----Generated at Wed May 7 22:59:44 2025 by rpki-client