$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft File: 3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft (raw, json) Hash identifier: uNf2om4uPI4hnVMcylRazbjpfAj0/NLWpDDmz2NGXVQ= Subject key identifier: AE:9C:8E:C3:A3:E0:77:16:A6:F3:45:B4:B3:FB:9D:FA:47:50:9A:8F Authority key identifier: 3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25 Certificate issuer: /CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125 Certificate serial: 32D8977C0705F093D68856D865F668F0874816CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft Manifest number: D3 Signing time: Tue 06 May 2025 14:19:36 +0000 Manifest this update: Tue 06 May 2025 14:14:36 +0000 Manifest next update: Mon 12 May 2025 06:27:36 +0000 Files and hashes: 1: 323830333a623530303a3a2f33322d3634203d3e20323634373738.roa (hash: +i698AfVx6DWMMcK5GpNnFiCpIbFYK2iegD/naMoXZ0=) 2: 3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl (hash: rJW5Y5frhcsbqlOC6VM50EeBOVffH9ygHcHU/yOGilo=) 3: 3230302e35392e3138342e302f32312d3234203d3e20323634373738.roa (hash: qpFPLhRvT/6TF+QIX+j3i6nRwbq3qMC5Vv9fZdPq3nA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d8:97:7c:07:05:f0:93:d6:88:56:d8:65:f6:68:f0:87:48:16:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125 Validity Not Before: May 6 14:14:36 2025 GMT Not After : May 12 06:27:36 2025 GMT Subject: CN=AE9C8EC3A3E07716A6F345B4B3FB9DFA47509A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:8e:21:4f:ea:28:83:a4:5b:f0:73:c9:4b: 4a:9e:62:56:4d:07:6d:1c:aa:38:91:c4:90:c9:ff: f1:0e:7e:32:9a:c7:72:5b:51:f1:57:ad:d5:eb:15: 85:a6:83:f7:00:4c:6e:45:86:f4:ad:33:fb:5c:27: 1b:1f:1a:d3:87:5e:df:9c:9b:70:df:a6:14:4b:00: ce:b8:b6:f6:9d:6d:42:3a:9b:0d:09:ef:01:fb:22: c5:6a:76:ed:ee:3f:c5:11:c7:ec:42:72:f0:8c:dc: a1:c0:a5:df:6e:89:18:57:f4:b2:b1:2b:f5:65:42: 0a:5f:08:6b:36:15:60:65:62:c4:d1:ab:f0:18:4d: 6f:8a:89:14:05:ac:a8:08:50:49:b9:40:99:fa:03: e5:8b:e3:51:3b:97:8e:26:2e:f2:3a:db:5d:a9:93: cc:23:99:bb:97:ff:1a:06:80:38:40:33:6e:88:bc: ee:e5:8c:ef:26:f0:58:40:17:d8:43:c9:eb:1e:32: e5:e0:40:a7:46:30:aa:22:fe:4f:a6:d3:48:64:d1: 0a:63:37:4f:ed:f8:e5:9a:38:b5:1d:a2:66:1d:c4: 19:d0:12:7b:87:cf:9b:36:53:56:19:dc:df:f6:d5: f5:91:56:d6:68:a4:a0:10:be:ea:28:fe:97:1b:1a: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:8E:C3:A3:E0:77:16:A6:F3:45:B4:B3:FB:9D:FA:47:50:9A:8F X509v3 Authority Key Identifier: keyid:3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:eb:78:7d:6c:4b:ad:08:55:b5:c7:fe:d9:04:a0:3d:85:c7: 61:08:cd:fb:c1:9f:8e:d6:da:e1:dc:0c:bf:3a:7e:e3:46:ef: a4:bc:2d:35:41:92:0c:cc:bb:e3:a6:1f:bc:4a:7f:b5:86:22: 31:28:f5:6c:6d:78:09:7e:e3:ec:52:b8:60:29:71:75:2e:67: ff:ba:a3:27:43:3b:36:e5:12:8b:59:26:60:4b:df:2d:7e:b7: 6d:5f:d5:f4:7d:1d:2b:13:a5:98:82:4b:c1:8e:0e:2a:46:1e: 65:44:57:20:55:87:d6:d5:59:ab:2b:53:34:ac:99:67:8e:f7: 6f:8e:96:3b:c9:a7:e6:f9:d1:db:03:cb:41:b9:eb:6e:a8:50: f5:1b:ab:85:67:33:04:ea:c4:ed:04:02:00:ab:1f:d0:47:43: d0:ad:a9:a3:44:ff:57:95:d1:47:12:0e:31:79:65:30:dc:8c: aa:63:73:7f:d8:2a:77:72:f5:d7:e9:0c:75:9e:04:06:ad:52: 63:a9:f6:46:be:58:5b:19:9f:de:30:be:96:c4:99:49:fc:2a: 18:c0:3b:1d:45:14:4c:13:e7:30:07:7f:ef:2c:4f:38:5c:20: a3:6a:a4:0f:34:29:70:f3:f6:6b:76:99:58:82:27:ec:10:9b: 30:a7:f8:3a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMtiXfAcF8JPWiFbYZfZo8IdIFsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDQUI5QkVCMUVBOUVGQkU4MDAwNzgxRjcyQjk1ODlG RkRBMjEyNTAeFw0yNTA1MDYxNDE0MzZaFw0yNTA1MTIwNjI3MzZaMDMxMTAvBgNV BAMTKEFFOUM4RUMzQTNFMDc3MTZBNkYzNDVCNEIzRkI5REZBNDc1MDlBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuY4hT+oog6Rb8HPJS0qeYlZN B20cqjiRxJDJ//EOfjKax3JbUfFXrdXrFYWmg/cATG5FhvStM/tcJxsfGtOHXt+c m3DfphRLAM64tvadbUI6mw0J7wH7IsVqdu3uP8URx+xCcvCM3KHApd9uiRhX9LKx K/VlQgpfCGs2FWBlYsTRq/AYTW+KiRQFrKgIUEm5QJn6A+WL41E7l44mLvI6212p k8wjmbuX/xoGgDhAM26IvO7ljO8m8FhAF9hDyeseMuXgQKdGMKoi/k+m00hk0Qpj N0/t+OWaOLUdomYdxBnQEnuHz5s2U1YZ3N/21fWRVtZopKAQvuoo/pcbGqX/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrpyOw6Pgdxam80W0s/ud+kdQmo8wHwYDVR0j BBgwFoAUPsq5vrHqnvvoAAeB9yuVif/aISUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GODQzNTdERTIwQzFBMUIzRTZCNkJCRUY1NEQyQUM1RjU1 ODg3NDU2QTk2NDFEM0VGQzUxQUI3QkI4MUE5NjM0LzAvM0VDQUI5QkVCMUVBOUVG QkU4MDAwNzgxRjcyQjk1ODlGRkRBMjEyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRUNBQjlCRUIxRUE5RUZCRTgw MDA3ODFGNzJCOTU4OUZGREEyMTI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjg0MzU3REUyMEMxQTFCM0U2QjZCQkVGNTREMkFDNUY1NTg4NzQ1NkE5 NjQxRDNFRkM1MUFCN0JCODFBOTYzNC8wLzNFQ0FCOUJFQjFFQTlFRkJFODAwMDc4 MUY3MkI5NTg5RkZEQTIxMjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAO63h9bEutCFW1x/7ZBKA9hcdh CM37wZ+O1trh3Ay/On7jRu+kvC01QZIMzLvjph+8Sn+1hiIxKPVsbXgJfuPsUrhg KXF1Lmf/uqMnQzs25RKLWSZgS98tfrdtX9X0fR0rE6WYgkvBjg4qRh5lRFcgVYfW 1VmrK1M0rJlnjvdvjpY7yafm+dHbA8tBuetuqFD1G6uFZzME6sTtBAIAqx/QR0PQ ramjRP9XldFHEg4xeWUw3IyqY3N/2Cp3cvXX6Qx1ngQGrVJjqfZGvlhbGZ/eML6W xJlJ/CoYwDsdRRRME+cwB3/vLE84XCCjaqQPNClw8/ZrdplYgifsEJswp/g6 -----END CERTIFICATE-----Generated at Tue May 6 23:05:45 2025 by rpki-client