$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft File: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft (raw, json) Hash identifier: fJc7g3kl7Ms+qc/FAhIkP6hUZRwMVrQf9ImdPE8BfQ8= Subject key identifier: DB:0A:3A:5A:68:AE:B4:7B:2A:FD:5A:81:E1:C0:D7:E9:58:D5:F4:A4 Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE Certificate issuer: /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE Certificate serial: 7F951D0684AE7C7EBAEDD31757A46B42A378DBF8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft Manifest number: D8 Signing time: Thu 15 May 2025 13:31:50 +0000 Manifest this update: Thu 15 May 2025 13:26:50 +0000 Manifest next update: Tue 20 May 2025 04:49:50 +0000 Files and hashes: 1: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl (hash: Gl2ciC68iBaDotfTJMDsTC5PdCBgtlyoHb0vK68wvSg=) 2: 323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (hash: xyhIbBm1Scl4Ie2YrMseYRUKB+amZy8InWEd6XSWnhU=) 3: 34352e3137392e39322e302f32322d3234203d3e20323637393133.roa (hash: 3Sp05B4/LDMcFHMXbdW2rA0qIl4XRF2VO8sOuqM0SYc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 May 2025 04:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:95:1d:06:84:ae:7c:7e:ba:ed:d3:17:57:a4:6b:42:a3:78:db:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE Validity Not Before: May 15 13:26:50 2025 GMT Not After : May 20 04:49:50 2025 GMT Subject: CN=DB0A3A5A68AEB47B2AFD5A81E1C0D7E958D5F4A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:29:70:c3:7f:62:52:ac:c0:12:e5:9d:4a: 65:39:ce:16:bb:1f:90:c2:ab:8f:18:ab:33:04:9e: 05:02:21:9b:9b:c8:f2:ac:f7:80:92:18:8c:9e:55: 34:a3:1b:49:ab:f1:e2:91:66:4d:87:a2:8d:ad:fe: 7f:bf:29:bb:b0:70:f7:07:f5:ef:1d:4c:dd:3b:a8: d3:93:0f:c3:6b:50:5c:d1:17:c2:75:50:02:94:77: 91:ed:f1:64:35:26:96:d0:d7:f6:47:f3:55:86:74: 1c:22:61:5f:09:44:ef:ea:e4:ce:04:4c:6a:74:c3: 20:6a:c6:ad:25:94:4f:b5:3f:ae:35:a5:c0:b4:ee: 78:30:69:9c:78:05:33:e0:89:53:d4:42:9f:90:db: c0:f3:01:f9:fa:15:eb:96:c7:25:33:8e:17:e8:12: b5:b4:86:bd:63:df:f6:a1:aa:5f:3e:24:a6:88:24: 98:da:42:b1:a7:9f:7a:94:cd:55:f9:10:03:a6:6d: 64:91:6e:a4:db:db:a9:2e:94:32:00:76:e1:f0:1d: 9a:58:58:1d:64:d8:ea:f4:85:a4:be:d6:57:e1:b9: 31:24:84:18:6f:a4:17:6d:8b:30:87:85:8f:e6:12: 8e:0c:bb:a6:30:de:cd:9d:8a:a7:12:05:80:b4:9b: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0A:3A:5A:68:AE:B4:7B:2A:FD:5A:81:E1:C0:D7:E9:58:D5:F4:A4 X509v3 Authority Key Identifier: keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:44:f9:56:1f:1c:5e:18:23:6d:36:c1:c5:a4:86:77:53:a3: 49:04:90:6a:48:24:e1:1c:46:33:c3:0b:e7:04:a3:9d:8f:c1: 0d:83:5f:46:58:09:48:26:79:ce:d4:c0:45:46:1c:93:b7:2f: e3:99:17:4e:89:ac:91:08:de:df:ae:3a:c4:51:e2:1f:83:f4: f9:1b:f8:bd:b0:b3:e9:a1:b7:d2:f3:34:f5:ee:00:ee:60:84: 2b:e0:35:7a:a9:a9:27:47:b0:41:01:a2:90:f0:43:bb:71:88: de:8d:c3:85:43:a8:b3:9a:cc:5d:17:77:bc:90:e6:0d:b3:c4: 76:7c:0e:5f:ad:2e:43:e3:f6:05:52:38:af:c8:b6:b0:86:2e: 1d:ae:13:61:04:67:8c:71:9f:81:26:de:26:0c:dd:ed:4a:2b: 73:24:48:1c:f5:b4:81:af:24:48:23:77:3d:f5:67:7b:37:a4: ef:af:fe:47:64:a3:c5:94:a9:ef:40:b3:58:f5:5e:73:1c:a9: 3d:57:88:3d:e4:27:50:19:bf:e9:4e:93:4a:7f:98:05:7b:b3: a2:ae:8d:f2:77:8e:e3:52:3b:9b:4c:b7:bb:55:06:40:d0:dc: 9a:3a:8a:17:fb:48:b2:2f:d6:33:27:0b:1b:8c:ac:95:fa:cc: e6:40:22:2d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUf5UdBoSufH667dMXV6RrQqN42/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQzMwQzJEQkMzMUFDREMyRTI0NTU1RjUwMzFDM0NG NkJBMERFRTAeFw0yNTA1MTUxMzI2NTBaFw0yNTA1MjAwNDQ5NTBaMDMxMTAvBgNV BAMTKERCMEEzQTVBNjhBRUI0N0IyQUZENUE4MUUxQzBEN0U5NThENUY0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGylww39iUqzAEuWdSmU5zha7 H5DCq48YqzMEngUCIZubyPKs94CSGIyeVTSjG0mr8eKRZk2Hoo2t/n+/KbuwcPcH 9e8dTN07qNOTD8NrUFzRF8J1UAKUd5Ht8WQ1JpbQ1/ZH81WGdBwiYV8JRO/q5M4E TGp0wyBqxq0llE+1P641pcC07ngwaZx4BTPgiVPUQp+Q28DzAfn6FeuWxyUzjhfo ErW0hr1j3/ahql8+JKaIJJjaQrGnn3qUzVX5EAOmbWSRbqTb26kulDIAduHwHZpY WB1k2Or0haS+1lfhuTEkhBhvpBdtizCHhY/mEo4Mu6Yw3s2diqcSBYC0mwWPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2wo6WmiutHsq/VqB4cDX6VjV9KQwHwYDVR0j BBgwFoAUSqwwwtvDGs3C4kVV9QMcPPa6De4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDY2MDAxRTdERTg4NDRBRUQwQUI0MjBDNUUwOUU2OUM1 NDdDODZBQjNBRDY5QURCMjQzMjZBNTM2MzE1RUEzLzAvNEFBQzMwQzJEQkMzMUFD REMyRTI0NTU1RjUwMzFDM0NGNkJBMERFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QUFDMzBDMkRCQzMxQUNEQzJF MjQ1NTVGNTAzMUMzQ0Y2QkEwREVFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQ2NjAwMUU3REU4ODQ0QUVEMEFCNDIwQzVFMDlFNjlDNTQ3Qzg2QUIz QUQ2OUFEQjI0MzI2QTUzNjMxNUVBMy8wLzRBQUMzMEMyREJDMzFBQ0RDMkUyNDU1 NUY1MDMxQzNDRjZCQTBERUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqRPlWHxxeGCNtNsHFpIZ3U6NJ BJBqSCThHEYzwwvnBKOdj8ENg19GWAlIJnnO1MBFRhyTty/jmRdOiayRCN7frjrE UeIfg/T5G/i9sLPpobfS8zT17gDuYIQr4DV6qaknR7BBAaKQ8EO7cYjejcOFQ6iz msxdF3e8kOYNs8R2fA5frS5D4/YFUjivyLawhi4drhNhBGeMcZ+BJt4mDN3tSitz JEgc9bSBryRII3c99Wd7N6Tvr/5HZKPFlKnvQLNY9V5zHKk9V4g95CdQGb/pTpNK f5gFe7Oiro3yd47jUjubTLe7VQZA0NyaOooX+0iyL9YzJwsbjKyV+szmQCIt -----END CERTIFICATE-----Generated at Sat May 17 05:48:35 2025 by rpki-client