$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft File: C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft (raw, json) Hash identifier: CEOlTI8sfeMvJWZWuiR1I8G7IpMCLBQiJsv63FEWq34= Subject key identifier: 94:45:9A:BD:32:3D:9E:73:71:96:B0:CC:B5:41:30:51:19:85:05:C9 Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA Certificate issuer: /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA Certificate serial: 66C61E0C65D396F57256EC8BC4282F504EDEA495 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft Manifest number: 91 Signing time: Sat 17 May 2025 20:00:24 +0000 Manifest this update: Sat 17 May 2025 19:55:24 +0000 Manifest next update: Wed 21 May 2025 21:24:24 +0000 Files and hashes: 1: 323030313a313233303a3a2f33322d3332203d3e203133353739.roa (hash: ohvKuQN2Fqrmwei0yZ87u/sqIaUSWGompnGd1mJit+A=) 2: 3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa (hash: sOz5kGEsHqOpfD1A1TtGBmKA2wVPmdPltvt7VotP0lw=) 3: 3230302e33382e3136302e302f31392d3234203d3e203133353739.roa (hash: jsrCujlfH/wC+HHMZHorSWGJlPoi5PctdrA3MuRzLqk=) 4: 3230372e3234392e39362e302f31392d3234203d3e203133353739.roa (hash: pMAYsDzEMzzY2W8W5jluH1g2BIIWoox4d3DlF0HhIQs=) 5: 3230302e33342e3133342e302f32342d3234203d3e203133353739.roa (hash: G6D7F17+HvM5Ug0RdarnfMKhqgZRnJRJWNMdidwF5uE=) 6: 3230372e3234392e302e302f31392d3234203d3e203133353739.roa (hash: tYmRGQ770NTROgO82fYwDu/A4PEiJILMilmfDCqbPPk=) 7: C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl (hash: iPdI7gsbLXHIlyfTxWnZ3mLWdgtSThsKPAhm2RZtjyI=) 8: 3230302e32332e3130372e302f32342d3234203d3e203133353739.roa (hash: v33cul8tGnssrOUJuVrrvM2RpbumU3KU/rm97R2IfX8=) 9: 3230342e3135332e32342e302f32332d3234203d3e203133353739.roa (hash: q6KoRVLviE7H/BflL1q+QRtl974/rnCx0mc5W0N3vZY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 21:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:1e:0c:65:d3:96:f5:72:56:ec:8b:c4:28:2f:50:4e:de:a4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA Validity Not Before: May 17 19:55:24 2025 GMT Not After : May 21 21:24:24 2025 GMT Subject: CN=94459ABD323D9E737196B0CCB5413051198505C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:a9:4a:b0:b9:27:0f:2f:4d:35:00:d7:44: d0:47:f4:40:d7:41:ef:95:63:80:42:38:ef:02:23: bc:70:c5:15:b5:ee:67:41:21:74:41:c4:c2:9a:61: 78:41:89:e7:b9:f4:76:73:8c:ca:07:da:10:dd:88: aa:cf:95:68:5e:22:7f:78:0d:4d:47:5e:e2:50:1a: b8:14:86:7c:80:e8:d1:16:16:61:37:0c:e9:8f:a7: ad:ec:f6:93:79:2c:9a:45:5d:10:20:3c:d5:09:00: 11:eb:9d:ae:37:5a:00:bf:b3:9d:20:5a:87:fc:f0: 3e:d9:e4:ea:c0:e6:96:69:cf:7c:58:d4:7e:37:09: 86:f2:df:24:7e:22:ca:25:9f:27:f8:9c:d6:3b:e7: bb:bb:3f:2c:5a:5e:47:5d:fc:ec:a3:c1:6d:6f:dd: f4:8a:19:6a:fc:86:36:42:ad:fa:3b:fd:e7:89:10: 6d:22:f3:f2:5e:70:82:4a:e6:57:1d:be:b6:35:ff: 20:d1:87:f8:2c:ef:a1:b6:a9:e4:42:a6:93:3e:b4: e3:8d:0d:60:9f:d1:79:de:2c:bb:e6:7f:a0:78:71: a1:2b:5e:41:7b:97:08:c1:e5:5e:92:c1:80:bb:3f: eb:e3:2d:6d:8f:69:d2:b4:e3:9c:e2:d9:d2:67:9f: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:45:9A:BD:32:3D:9E:73:71:96:B0:CC:B5:41:30:51:19:85:05:C9 X509v3 Authority Key Identifier: keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c1:a3:d3:50:fe:cd:11:1b:c2:45:49:81:0b:0a:5f:53:f3: d3:03:92:d2:fb:40:e3:2d:95:aa:f9:da:fc:f8:a7:89:ce:92: 41:9e:fc:bc:1f:b3:ab:2c:a2:e3:50:3f:96:1c:31:7f:df:43: a9:69:50:7f:b5:50:07:9b:b2:cb:37:53:ef:87:c6:cf:19:87: 71:21:67:4d:b0:f9:ed:4f:89:0c:b3:10:34:0e:0d:f4:dd:92: 23:82:8d:25:ab:1e:0b:0c:b8:4a:18:c6:f4:72:69:38:ca:66: 60:c9:57:d3:d5:8c:7f:1b:be:95:2c:1f:1c:dc:e6:d9:a4:c3: d1:1f:15:24:98:0c:ed:3b:b2:9d:7a:5a:c8:c3:fb:12:f5:9d: b3:22:41:88:00:20:d3:39:c9:cd:eb:95:f4:d2:ad:03:1d:2d: b9:0a:49:a1:81:85:88:6a:bc:d9:e3:0c:fc:59:c3:54:23:9a: 76:29:a6:bc:c4:d1:00:f7:ec:0d:34:2f:3c:99:ac:1a:10:38: 19:e8:77:a4:23:da:75:76:30:6b:69:ec:37:20:67:0e:14:12: a9:8c:4b:05:bc:6e:d4:e6:12:26:20:8f:20:9c:55:65:02:5d: ec:d4:46:a1:02:7c:c1:2d:f6:55:bf:aa:79:a7:9c:a3:3f:b7: 46:ca:82:f4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZsYeDGXTlvVyVuyLxCgvUE7epJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGRUM3OTJGMzVBQTI0RDFDQ0MxNkM4NDMyRjRCRDQ0 QkRGQ0VGQTAeFw0yNTA1MTcxOTU1MjRaFw0yNTA1MjEyMTI0MjRaMDMxMTAvBgNV BAMTKDk0NDU5QUJEMzIzRDlFNzM3MTk2QjBDQ0I1NDEzMDUxMTk4NTA1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7KlKsLknDy9NNQDXRNBH9EDX Qe+VY4BCOO8CI7xwxRW17mdBIXRBxMKaYXhBiee59HZzjMoH2hDdiKrPlWheIn94 DU1HXuJQGrgUhnyA6NEWFmE3DOmPp63s9pN5LJpFXRAgPNUJABHrna43WgC/s50g Wof88D7Z5OrA5pZpz3xY1H43CYby3yR+Isolnyf4nNY757u7PyxaXkdd/OyjwW1v 3fSKGWr8hjZCrfo7/eeJEG0i8/JecIJK5lcdvrY1/yDRh/gs76G2qeRCppM+tOON DWCf0XneLLvmf6B4caErXkF7lwjB5V6SwYC7P+vjLW2PadK045zi2dJnn06VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlEWavTI9nnNxlrDMtUEwURmFBckwHwYDVR0j BBgwFoAUwv7HkvNaok0czBbIQy9L1EvfzvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xOEQ0NkZCMzhGQ0VBNUU3RTg4MDUxREFFQzNGMEU3QTU4 ODRBNkE4NzJEM0FBNDhERTY2NEY4MUE3RDY0RERBLzAvQzJGRUM3OTJGMzVBQTI0 RDFDQ0MxNkM4NDMyRjRCRDQ0QkRGQ0VGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkZFQzc5MkYzNUFBMjREMUND QzE2Qzg0MzJGNEJENDRCREZDRUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMThENDZGQjM4RkNFQTVFN0U4ODA1MURBRUMzRjBFN0E1ODg0QTZBODcy RDNBQTQ4REU2NjRGODFBN0Q2NEREQS8wL0MyRkVDNzkyRjM1QUEyNEQxQ0NDMTZD ODQzMkY0QkQ0NEJERkNFRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQwaPTUP7NERvCRUmBCwpfU/PT A5LS+0DjLZWq+dr8+KeJzpJBnvy8H7OrLKLjUD+WHDF/30OpaVB/tVAHm7LLN1Pv h8bPGYdxIWdNsPntT4kMsxA0Dg303ZIjgo0lqx4LDLhKGMb0cmk4ymZgyVfT1Yx/ G76VLB8c3ObZpMPRHxUkmAztO7KdelrIw/sS9Z2zIkGIACDTOcnN65X00q0DHS25 CkmhgYWIarzZ4wz8WcNUI5p2Kaa8xNEA9+wNNC88mawaEDgZ6HekI9p1djBraew3 IGcOFBKpjEsFvG7U5hImII8gnFVlAl3s1EahAnzBLfZVv6p5p5yjP7dGyoL0 -----END CERTIFICATE-----Generated at Sun May 18 07:45:14 2025 by rpki-client