$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft File: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft (raw, json) Hash identifier: PIqrS+N+1gpSvuD4leSmDJ/MVdED9Zv+uCWcGDJy8h4= Subject key identifier: 2A:8B:CD:83:A0:F5:87:A0:F5:CE:2D:AB:6D:FD:F8:D3:FC:C6:21:1B Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 Certificate issuer: /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Certificate serial: 4100237517728A96BBBB8CDF287748978BC73AAC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft Manifest number: DA Signing time: Wed 14 May 2025 22:17:40 +0000 Manifest this update: Wed 14 May 2025 22:12:40 +0000 Manifest next update: Tue 20 May 2025 13:27:40 +0000 Files and hashes: 1: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl (hash: cgegnjPC4PItXCzNQ18NRDUWIHMO03H15uNa7Zl8B7k=) 2: 3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa (hash: rihQQJVFtZKUDCwHDYSaMs0ULFC3fG8dHmriGQNp/VM=) 3: 323830333a623431303a3a2f33322d3332203d3e20323731383634.roa (hash: Q2PshefDUXGnhMVo308cN4VQhDiScT++G8OK9eTiar4=) 4: 3139302e3131332e33332e302f32342d3234203d3e20323731383634.roa (hash: azN9pRvg5DpbUa7YhuECMfpkA3UkUWDg8qQJHMhMr7A=) 5: 3139302e3131332e33322e302f32322d3234203d3e20323731383634.roa (hash: Ykcu8jC4UzsyZvhSzf6AMozsyx0Qjpsc4oSXGJYv0m4=) 6: 3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa (hash: lFSysIKlLWf7JB59Euh1O3A3OikH4P+rns7uXXpwjWg=) 7: 3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa (hash: whz10X8rtZzGp5KMzk05l4IUJVXM4z7n6YqJR8ewZes=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 May 2025 13:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:00:23:75:17:72:8a:96:bb:bb:8c:df:28:77:48:97:8b:c7:3a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Validity Not Before: May 14 22:12:40 2025 GMT Not After : May 20 13:27:40 2025 GMT Subject: CN=2A8BCD83A0F587A0F5CE2DAB6DFDF8D3FCC6211B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:ca:83:65:a2:3c:a4:de:de:da:76:e6:90: 5f:75:5c:ab:e7:60:48:44:33:67:82:af:cd:ee:67: 42:c9:01:37:7a:c9:b5:71:f0:2b:6c:9b:0c:98:c2: 42:c9:1e:de:c7:25:d1:65:b5:9e:cd:c8:a0:d9:34: 5e:1e:c3:85:6b:66:d9:20:a9:f8:d5:fe:c6:3d:40: bb:1f:38:6f:56:44:bd:bc:f7:bb:99:1c:5b:f1:1a: 47:48:d0:83:73:ff:5b:e1:9e:d1:bc:17:9b:b7:0d: 98:05:4d:77:c0:85:f8:ab:31:b0:b7:0b:35:cd:c8: 95:3c:e3:98:49:6a:43:10:01:46:a0:fe:4f:6e:95: 09:db:06:a3:8d:65:b1:1a:e1:55:0f:c3:a0:ec:46: 14:46:a0:10:b7:a9:56:a1:1e:05:17:3e:c6:6c:12: e4:47:36:0b:9e:fd:e0:28:aa:7a:09:0f:b8:22:c3: e9:ae:43:fe:1a:af:14:c7:e7:38:ce:55:ad:3b:5b: 4e:da:3f:6d:85:2b:a6:0f:83:d0:25:71:62:3d:80: e9:23:90:7d:fd:48:4f:47:2b:e6:84:43:aa:13:41: 90:31:d8:4a:29:8d:b1:65:4c:d6:68:36:c2:b1:3c: 62:76:c1:59:2f:42:a6:f6:6a:6d:d6:6d:d2:ff:7c: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:CD:83:A0:F5:87:A0:F5:CE:2D:AB:6D:FD:F8:D3:FC:C6:21:1B X509v3 Authority Key Identifier: keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:76:dd:8a:49:1c:c7:33:88:b1:87:01:dd:43:9a:91:68:23: 36:ea:43:c5:ae:a3:e6:7e:db:ab:ca:71:98:d9:dd:88:fe:43: fb:e7:da:d5:84:38:a6:ef:89:68:01:3a:b4:62:ef:28:5a:1f: 6b:d1:e4:8f:0f:fc:b2:75:bd:da:33:7a:64:38:d1:d5:70:4e: b4:8a:5b:a0:1f:88:9a:61:aa:d9:2e:25:44:79:74:36:22:82: e9:80:30:a7:85:7c:f6:7d:24:62:c2:e0:2c:94:22:61:d4:11: 26:da:07:88:e8:73:d9:40:f2:e0:0c:4c:f1:63:14:62:b6:da: e3:f8:ed:1c:24:bc:7b:ee:ba:86:1f:39:2b:0d:01:84:65:8e: b2:dc:be:6c:2c:46:23:09:ed:04:e5:2a:84:9a:c1:d2:37:74: 0c:ed:7e:8d:c8:e7:c3:2e:4d:b5:a5:2e:8d:20:23:da:20:7f: e7:0e:1b:e2:1d:91:d0:80:9f:31:f3:21:81:21:7c:7f:b3:63: 80:9e:98:48:11:d3:43:10:ca:1c:6e:d7:39:12:3e:85:96:fe: 18:ae:c2:83:c8:7a:81:a7:69:51:70:be:b6:83:8d:d4:ee:af: 35:b5:39:08:28:17:01:b5:c5:01:e5:e8:ec:33:c4:98:19:59: 6c:64:c4:a2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQQAjdRdyipa7u4zfKHdIl4vHOqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1MTdENEJBQUI4NUQzQzhGNTAwOEY0MEJDNDhCMjFD QkVBNzJCODAeFw0yNTA1MTQyMjEyNDBaFw0yNTA1MjAxMzI3NDBaMDMxMTAvBgNV BAMTKDJBOEJDRDgzQTBGNTg3QTBGNUNFMkRBQjZERkRGOEQzRkNDNjIxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWcqDZaI8pN7e2nbmkF91XKvn YEhEM2eCr83uZ0LJATd6ybVx8CtsmwyYwkLJHt7HJdFltZ7NyKDZNF4ew4VrZtkg qfjV/sY9QLsfOG9WRL2897uZHFvxGkdI0INz/1vhntG8F5u3DZgFTXfAhfirMbC3 CzXNyJU845hJakMQAUag/k9ulQnbBqONZbEa4VUPw6DsRhRGoBC3qVahHgUXPsZs EuRHNgue/eAoqnoJD7giw+muQ/4arxTH5zjOVa07W07aP22FK6YPg9AlcWI9gOkj kH39SE9HK+aEQ6oTQZAx2EopjbFlTNZoNsKxPGJ2wVkvQqb2am3WbdL/fGtdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKovNg6D1h6D1zi2rbf340/zGIRswHwYDVR0j BBgwFoAU6lF9S6q4XTyPUAj0C8SLIcvqcrgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QTNDNjVFMDExMzhBNzk3Q0MxQ0Q4OEI3QjMyQTgwRjE1 NjQyMzE2MDg3QzI5NTEzRDNEQUMyQjExMTdBMzY4LzAvRUE1MTdENEJBQUI4NUQz QzhGNTAwOEY0MEJDNDhCMjFDQkVBNzJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQTUxN0Q0QkFBQjg1RDNDOEY1 MDA4RjQwQkM0OEIyMUNCRUE3MkI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEEzQzY1RTAxMTM4QTc5N0NDMUNEODhCN0IzMkE4MEYxNTY0MjMxNjA4 N0MyOTUxM0QzREFDMkIxMTE3QTM2OC8wL0VBNTE3RDRCQUFCODVEM0M4RjUwMDhG NDBCQzQ4QjIxQ0JFQTcyQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEdt2KSRzHM4ixhwHdQ5qRaCM2 6kPFrqPmfturynGY2d2I/kP759rVhDim74loATq0Yu8oWh9r0eSPD/yydb3aM3pk ONHVcE60ilugH4iaYarZLiVEeXQ2IoLpgDCnhXz2fSRiwuAslCJh1BEm2geI6HPZ QPLgDEzxYxRittrj+O0cJLx77rqGHzkrDQGEZY6y3L5sLEYjCe0E5SqEmsHSN3QM 7X6NyOfDLk21pS6NICPaIH/nDhviHZHQgJ8x8yGBIXx/s2OAnphIEdNDEMocbtc5 Ej6Flv4YrsKDyHqBp2lRcL62g43U7q81tTkIKBcBtcUB5ejsM8SYGVlsZMSi -----END CERTIFICATE-----Generated at Fri May 16 19:19:54 2025 by rpki-client