$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: y2oO9hzpTC9X6GzSuseJjrjtWvt3/LOWH7QVwECDyRo= Subject key identifier: C4:09:58:BC:1D:5E:F9:1C:B1:46:99:09:32:32:A5:E6:36:87:66:2E Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 03BCC555F2A4DF98C0CADBB035B3B45FD14EC478 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: DC Signing time: Fri 16 May 2025 12:41:05 +0000 Manifest this update: Fri 16 May 2025 12:36:05 +0000 Manifest next update: Wed 21 May 2025 14:53:05 +0000 Files and hashes: 1: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: xte0TiegpTsTgxOOKKPlnLlrd3F2kZtHXH9Mw0hN98M=) 2: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=) 3: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bc:c5:55:f2:a4:df:98:c0:ca:db:b0:35:b3:b4:5f:d1:4e:c4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: May 16 12:36:05 2025 GMT Not After : May 21 14:53:05 2025 GMT Subject: CN=C40958BC1D5EF91CB14699093232A5E63687662E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cf:c8:33:97:18:5d:de:f9:96:13:a2:6f:3a: 91:6f:b0:88:16:4d:64:da:f1:80:ea:98:c8:2b:63: a7:a1:7a:6e:b2:a8:ca:39:7e:8f:6e:99:84:65:a2: 92:e4:81:61:c0:31:f1:d6:b0:f2:62:4d:d1:4c:a4: c8:eb:65:a4:6f:1c:e9:00:67:a1:ca:e0:69:23:ef: 03:e3:52:e8:9f:65:21:f3:f1:e6:13:fb:03:80:14: f1:5c:3a:8a:22:92:c7:04:78:55:57:68:78:87:27: ee:00:df:29:9b:eb:15:53:54:34:3d:1e:92:85:d2: f0:cc:ea:c9:81:69:c5:2e:96:ee:03:b2:f2:f2:22: 14:0a:ed:b9:49:43:2a:ce:45:e3:ea:db:d7:be:04: 28:15:6a:87:dd:fb:dc:e9:98:f1:1e:81:31:2e:b8: 1f:55:b4:20:d9:18:ab:ac:69:42:e8:42:01:a0:71: dd:5b:f6:6c:ff:a2:64:25:be:ab:0d:f3:be:10:9e: 63:47:e7:59:53:ba:4f:1b:03:b2:5b:59:30:a1:bd: f1:ff:7b:40:44:35:6c:35:89:4f:ca:86:b6:cd:dd: 0f:e8:ce:58:d0:53:89:e2:ee:4b:64:7f:b7:bb:00: b4:20:0f:71:d0:5f:2b:3f:53:27:ae:8a:47:89:7f: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:09:58:BC:1D:5E:F9:1C:B1:46:99:09:32:32:A5:E6:36:87:66:2E X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:be:b5:24:52:6e:95:c9:09:69:fb:0a:ee:96:7c:0a:36:ec: d8:b7:c3:45:c7:da:7b:8f:bc:76:7c:98:33:ca:c9:3b:78:82: bf:00:1a:9c:70:b8:77:5d:47:ac:d5:9e:10:f7:75:16:a8:fd: 28:a1:76:67:97:26:ad:c5:1d:1f:31:97:42:37:55:dd:bf:59: a6:ae:ed:3c:42:6d:0e:4c:f9:3e:74:ef:f1:06:f6:3a:ec:03: 26:80:8c:da:44:10:33:46:1b:92:3f:e7:91:f1:ce:72:07:7d: 1e:23:11:75:5f:59:78:d9:c1:b2:b9:ac:59:85:8c:4c:11:0a: 15:04:bb:b9:3a:f2:78:ad:f7:0f:d7:c0:27:06:22:aa:ad:ec: fc:32:b6:7a:6e:7d:93:08:88:39:14:01:c1:bb:e8:4d:b9:9d: 30:b7:e5:1c:47:26:39:eb:8f:fe:25:01:5c:7e:54:cd:25:5a: 1e:ac:3d:72:7e:96:67:15:ab:bf:63:68:68:b9:76:10:22:30: 61:b1:5d:42:fa:b6:f5:19:6d:f4:7f:d9:e3:1b:51:3b:6d:1d: 32:87:6d:55:20:ce:de:f6:98:ad:86:4f:d1:87:a4:ca:29:fd: 3c:49:fa:a0:85:0e:84:9c:a4:d2:da:27:dd:f4:1a:4d:6b:0b: 74:1d:10:ff -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUA7zFVfKk35jAytuwNbO0X9FOxHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNTA1MTYxMjM2MDVaFw0yNTA1MjExNDUzMDVaMDMxMTAvBgNV BAMTKEM0MDk1OEJDMUQ1RUY5MUNCMTQ2OTkwOTMyMzJBNUU2MzY4NzY2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyz8gzlxhd3vmWE6JvOpFvsIgW TWTa8YDqmMgrY6ehem6yqMo5fo9umYRlopLkgWHAMfHWsPJiTdFMpMjrZaRvHOkA Z6HK4Gkj7wPjUuifZSHz8eYT+wOAFPFcOooikscEeFVXaHiHJ+4A3ymb6xVTVDQ9 HpKF0vDM6smBacUulu4DsvLyIhQK7blJQyrORePq29e+BCgVaofd+9zpmPEegTEu uB9VtCDZGKusaULoQgGgcd1b9mz/omQlvqsN874QnmNH51lTuk8bA7JbWTChvfH/ e0BENWw1iU/KhrbN3Q/ozljQU4ni7ktkf7e7ALQgD3HQXys/UyeuikeJfy1jAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxAlYvB1e+RyxRpkJMjKl5jaHZi4wHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZvrUkUm6VyQlp+wrulnwKNuzY t8NFx9p7j7x2fJgzysk7eIK/ABqccLh3XUes1Z4Q93UWqP0ooXZnlyatxR0fMZdC N1Xdv1mmru08Qm0OTPk+dO/xBvY67AMmgIzaRBAzRhuSP+eR8c5yB30eIxF1X1l4 2cGyuaxZhYxMEQoVBLu5OvJ4rfcP18AnBiKqrez8MrZ6bn2TCIg5FAHBu+hNuZ0w t+UcRyY564/+JQFcflTNJVoerD1yfpZnFau/Y2houXYQIjBhsV1C+rb1GW30f9nj G1E7bR0yh21VIM7e9pithk/Rh6TKKf08SfqghQ6EnKTS2ifd9BpNawt0HRD/ -----END CERTIFICATE-----Generated at Sat May 17 21:59:03 2025 by rpki-client