$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft File: 215EF3A6C3425B383CEB59CE45AC9A7826229223.mft (raw, json) Hash identifier: hx9rs+PEPHvNHpHONf9j88kDkOL2zAyZVuSN8rAaeg8= Subject key identifier: 49:47:AA:CF:43:08:49:EC:7F:8E:56:B5:1C:7B:50:F9:F5:EA:55:F7 Authority key identifier: 21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 Certificate issuer: /CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Certificate serial: 22093EAE69EAB789ED3CECA4FC2C08AD28A8D9A7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft Manifest number: DB Signing time: Thu 15 May 2025 01:04:19 +0000 Manifest this update: Thu 15 May 2025 00:59:19 +0000 Manifest next update: Mon 19 May 2025 17:48:19 +0000 Files and hashes: 1: 3230302e302e31382e302f32342d3234203d3e203238303536.roa (hash: /R6TNDHkC7qrc3ejA5Ozx8e7s7rp/3h3zNI5TVz6S0w=) 2: 323030313a313363373a363030333a3a2f34382d3438203d3e203238303536.roa (hash: nawzzhum8MQWj7TXuzlCWw+jKq70TVRot/Zw7CNYRsE=) 3: 215EF3A6C3425B383CEB59CE45AC9A7826229223.crl (hash: p+2BrkBx3i4JLWxKdevxnHEHYxuM2zMRpTdpWnGjeUA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 May 2025 20:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:09:3e:ae:69:ea:b7:89:ed:3c:ec:a4:fc:2c:08:ad:28:a8:d9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Validity Not Before: May 15 00:59:19 2025 GMT Not After : May 19 17:48:19 2025 GMT Subject: CN=4947AACF430849EC7F8E56B51C7B50F9F5EA55F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:c6:77:7c:df:88:59:9c:e5:b0:ea:45:ac: 14:eb:71:8f:49:dd:41:47:b8:bd:28:17:94:dd:23: d8:ee:fd:91:32:c4:e1:69:04:3d:a8:d8:33:98:bd: 2c:63:3f:8f:26:0e:0f:4d:21:8d:79:87:31:33:ad: 42:92:d7:c8:9c:ae:0f:47:b7:49:54:2a:bc:a8:42: 68:71:4d:ed:3f:c9:86:2d:10:0f:36:0e:60:b8:46: d7:32:91:9b:82:ce:7f:86:56:e7:0a:d4:98:0e:e9: 63:e4:a4:92:fb:f6:7d:54:e7:be:a4:99:7d:c4:65: fa:14:02:a8:ae:14:9b:80:0a:b5:20:dc:b8:74:89: 42:b4:8e:21:4f:55:e1:18:13:1a:b0:4a:bb:e7:1a: dc:08:00:95:b5:ec:ec:e1:19:99:f6:ec:ec:f1:b1: dc:1a:d3:a6:f2:2c:8d:4d:95:9b:e7:89:3c:d2:c0: 17:29:b7:c5:fa:0a:33:70:d1:9e:83:4e:d3:50:7d: 46:5f:ca:ac:54:af:6e:99:c1:77:47:23:b0:1f:c1: c8:81:18:ea:da:bd:9f:df:f4:be:3b:a9:7e:a5:8b: 48:19:6a:89:09:a7:9e:23:25:6e:fc:2c:1d:97:ed: 9e:67:ee:28:4f:c7:b8:67:75:33:76:af:d5:2a:52: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:AA:CF:43:08:49:EC:7F:8E:56:B5:1C:7B:50:F9:F5:EA:55:F7 X509v3 Authority Key Identifier: keyid:21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5b:9d:0b:4c:a8:7c:36:ae:73:61:bb:dd:41:55:04:87:b4: ef:ce:6f:2a:5b:77:c3:2a:42:08:81:d5:0f:e8:ab:12:2a:6f: 6f:99:d6:28:22:da:66:03:b2:68:6e:e6:b3:85:47:ad:ad:f2: 2e:05:57:ab:1c:79:ff:8a:3d:ab:17:e1:82:a6:3a:73:53:df: 9b:b9:cb:6c:97:94:c4:4b:85:8d:34:6a:a9:b8:5b:96:fb:e8: d3:7b:46:99:f5:3b:e8:51:00:bc:df:c0:0b:0a:73:cd:f5:56: 69:a7:0d:f1:f7:df:4f:c8:2b:60:0b:90:ea:63:27:73:81:c1: 45:14:3d:7f:fc:e6:72:ca:4b:71:d6:f1:a1:56:2a:f8:76:29: 47:82:75:1e:26:55:2a:62:5c:6c:8b:cb:ae:70:ac:b0:ae:ee: 99:d6:fa:51:22:d3:77:ed:be:f5:a5:d0:84:09:59:80:fc:da: f9:e7:dc:75:56:54:51:90:c7:d8:fa:36:20:9f:e2:75:ec:88: 54:c8:15:ef:b6:3b:c0:b4:29:0e:4d:69:7f:aa:8b:bb:56:3d: 03:2a:e8:c1:6c:2e:94:6d:8a:01:3d:e2:8c:49:cf:dd:83:e0: af:97:3b:26:4f:eb:ea:91:7d:55:06:f0:a4:a6:bf:20:2d:c1: 95:17:73:a8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIgk+rmnqt4ntPOyk/CwIrSio2acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RUYzQTZDMzQyNUIzODNDRUI1OUNFNDVBQzlBNzgy NjIyOTIyMzAeFw0yNTA1MTUwMDU5MTlaFw0yNTA1MTkxNzQ4MTlaMDMxMTAvBgNV BAMTKDQ5NDdBQUNGNDMwODQ5RUM3RjhFNTZCNTFDN0I1MEY5RjVFQTU1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRM8Z3fN+IWZzlsOpFrBTrcY9J 3UFHuL0oF5TdI9ju/ZEyxOFpBD2o2DOYvSxjP48mDg9NIY15hzEzrUKS18icrg9H t0lUKryoQmhxTe0/yYYtEA82DmC4RtcykZuCzn+GVucK1JgO6WPkpJL79n1U576k mX3EZfoUAqiuFJuACrUg3Lh0iUK0jiFPVeEYExqwSrvnGtwIAJW17OzhGZn27Ozx sdwa06byLI1NlZvniTzSwBcpt8X6CjNw0Z6DTtNQfUZfyqxUr26ZwXdHI7AfwciB GOravZ/f9L47qX6li0gZaokJp54jJW78LB2X7Z5n7ihPx7hndTN2r9UqUmjVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSUeqz0MISex/jla1HHtQ+fXqVfcwHwYDVR0j BBgwFoAUIV7zpsNCWzg861nORayaeCYikiMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUZBMzJFNEE3MEZBNkQyODhGQjI2RDIwQ0VGN0E4RDAy ODdGMDA4RDY0RkI4MjY2QkY5OUEwOTRGMEI5QkM5LzAvMjE1RUYzQTZDMzQyNUIz ODNDRUI1OUNFNDVBQzlBNzgyNjIyOTIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTVFRjNBNkMzNDI1QjM4M0NF QjU5Q0U0NUFDOUE3ODI2MjI5MjIzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFGQTMyRTRBNzBGQTZEMjg4RkIyNkQyMENFRjdBOEQwMjg3RjAwOEQ2 NEZCODI2NkJGOTlBMDk0RjBCOUJDOS8wLzIxNUVGM0E2QzM0MjVCMzgzQ0VCNTlD RTQ1QUM5QTc4MjYyMjkyMjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgW50LTKh8Nq5zYbvdQVUEh7Tv zm8qW3fDKkIIgdUP6KsSKm9vmdYoItpmA7JobuazhUetrfIuBVerHHn/ij2rF+GC pjpzU9+buctsl5TES4WNNGqpuFuW++jTe0aZ9TvoUQC838ALCnPN9VZppw3x999P yCtgC5DqYydzgcFFFD1//OZyyktx1vGhVir4dilHgnUeJlUqYlxsi8uucKywru6Z 1vpRItN37b71pdCECVmA/Nr559x1VlRRkMfY+jYgn+J17IhUyBXvtjvAtCkOTWl/ qou7Vj0DKujBbC6UbYoBPeKMSc/dg+CvlzsmT+vqkX1VBvCkpr8gLcGVF3Oo -----END CERTIFICATE-----Generated at Thu May 15 12:38:54 2025 by rpki-client