$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft File: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft (raw, json) Hash identifier: qk/hqN1uIvHD/FdUOPoXzbmEQm6qiOfa8sILOC9vdGY= Subject key identifier: 32:33:72:3B:8F:4B:41:96:D0:E0:B0:5B:BE:38:4F:A4:0E:98:59:74 Authority key identifier: D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5 Certificate issuer: /CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5 Certificate serial: 64E086BB5B732620761AA87208553A2B96110C22 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft Manifest number: D2 Signing time: Thu 15 May 2025 02:30:02 +0000 Manifest this update: Thu 15 May 2025 02:25:02 +0000 Manifest next update: Tue 20 May 2025 22:55:02 +0000 Files and hashes: 1: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl (hash: 8EbFAgeWh3Ry57EysjZpFH3/yGf3XGrwVsDVLyq+4F8=) 2: 34352e3138392e3131392e302f32342d3234203d3e20323639383637.roa (hash: vY+MQl3uNJuLOfblqtskseOQr2WJVp4QQCG30RccBB4=) 3: 323830313a31353a373030303a3a2f34382d3438203d3e20323639383637.roa (hash: 0wS+mvLE2Nv0YFVR+HZgUIyvob6LC2FurHqmQHnQRLo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 May 2025 22:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e0:86:bb:5b:73:26:20:76:1a:a8:72:08:55:3a:2b:96:11:0c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5 Validity Not Before: May 15 02:25:02 2025 GMT Not After : May 20 22:55:02 2025 GMT Subject: CN=3233723B8F4B4196D0E0B05BBE384FA40E985974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:41:53:68:98:0f:8d:b1:b1:07:6c:09:75: 86:9d:03:39:bf:2b:01:ec:8e:d8:5c:8e:19:2e:d9: 29:f5:3d:b5:ea:86:f9:f5:a1:81:79:0e:13:ac:9e: 96:f4:09:09:43:b6:49:be:da:c8:d4:c7:4b:29:02: 1d:84:5a:64:70:9b:3c:3a:2c:cc:8d:f9:30:19:98: 1a:d3:a9:01:5a:0f:cf:e8:77:dd:47:9e:dd:9a:51: db:c9:af:5c:38:64:57:4a:8f:ac:47:6f:6b:79:2a: d5:76:55:7f:d8:35:28:5b:3e:99:a0:f9:6c:a6:f6: 7b:e1:4c:fe:41:c6:2c:90:71:ed:ab:11:6e:f3:2f: 59:dd:0a:24:10:ef:85:89:0d:13:2b:2d:88:2f:be: b8:3b:9d:53:fb:70:36:e7:7f:84:47:39:b4:54:3c: 71:a7:05:4e:7f:24:c4:3e:4f:26:cd:3f:ac:fc:7e: 82:27:74:53:6e:b3:85:3b:81:db:07:cc:f2:47:31: bf:ff:96:b0:3b:73:c7:86:4c:4c:a8:c9:19:96:8c: 6c:a7:36:32:89:59:10:5b:aa:1b:4f:1d:4b:75:35: 09:50:35:f1:88:3e:6b:f9:e8:3a:c2:5b:b1:17:25: 02:4a:25:21:f8:fe:79:40:3d:41:c3:23:a7:19:cc: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:72:3B:8F:4B:41:96:D0:E0:B0:5B:BE:38:4F:A4:0E:98:59:74 X509v3 Authority Key Identifier: keyid:D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0b:81:80:ee:a3:7e:18:31:85:2d:19:51:40:2f:4b:94:88: 6f:fb:45:8f:af:ed:ca:c6:cc:08:35:60:1c:fa:95:4a:be:72: 19:6a:7a:59:4b:06:fc:c8:49:42:c4:4d:8e:59:5c:10:47:2c: bc:23:c5:4d:3b:b0:74:28:19:d6:92:d2:a7:13:51:58:88:2d: f3:41:9c:d9:88:9f:e5:4b:82:86:34:40:45:e1:fb:46:ab:8e: 51:6e:87:51:e1:90:c6:bb:6c:6f:05:c2:9e:03:49:81:09:75: ff:a3:c6:96:43:f4:5d:ad:35:88:4a:80:b6:74:6e:21:c3:b5: 80:9f:eb:ab:7c:30:b3:2b:4f:35:33:13:22:5e:bc:98:0c:17: 00:11:f2:96:2c:ee:a0:61:11:36:03:a8:b9:f2:1f:84:14:40: 5e:7d:58:cd:9e:ef:07:c9:03:f9:35:11:26:92:92:c4:56:36: ea:17:d8:50:c1:b0:35:52:b1:9d:63:82:9a:cb:3b:76:8b:05: 69:6e:10:51:95:ca:41:5c:47:d5:95:95:b5:82:be:f3:d0:21: 00:6c:ba:4c:12:50:94:94:9b:ca:4c:f5:fe:c4:85:ab:d0:35: 04:71:43:b1:de:5b:bc:9b:60:c4:93:80:eb:9b:cf:cf:e0:0d: 53:12:43:e9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZOCGu1tzJiB2GqhyCFU6K5YRDCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwNDM5QTUzQTJFM0JDOTBEQjAxQkVDRTI2RTdDMDg4 OEU0N0VGNTAeFw0yNTA1MTUwMjI1MDJaFw0yNTA1MjAyMjU1MDJaMDMxMTAvBgNV BAMTKDMyMzM3MjNCOEY0QjQxOTZEMEUwQjA1QkJFMzg0RkE0MEU5ODU5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMUFTaJgPjbGxB2wJdYadAzm/ KwHsjthcjhku2Sn1PbXqhvn1oYF5DhOsnpb0CQlDtkm+2sjUx0spAh2EWmRwmzw6 LMyN+TAZmBrTqQFaD8/od91Hnt2aUdvJr1w4ZFdKj6xHb2t5KtV2VX/YNShbPpmg +Wym9nvhTP5BxiyQce2rEW7zL1ndCiQQ74WJDRMrLYgvvrg7nVP7cDbnf4RHObRU PHGnBU5/JMQ+TybNP6z8foIndFNus4U7gdsHzPJHMb//lrA7c8eGTEyoyRmWjGyn NjKJWRBbqhtPHUt1NQlQNfGIPmv56DrCW7EXJQJKJSH4/nlAPUHDI6cZzCBZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMjNyO49LQZbQ4LBbvjhPpA6YWXQwHwYDVR0j BBgwFoAU2QQ5pTouO8kNsBvs4m58CIjkfvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRUE3RDc0RkU3NjEwNzA5MTBGREJGOUJCQzcyRkVGNkFD NDc3NkNGRTIzNjYzM0Y0RjMzQzI0MUU4MTNCRUQ2LzAvRDkwNDM5QTUzQTJFM0JD OTBEQjAxQkVDRTI2RTdDMDg4OEU0N0VGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOTA0MzlBNTNBMkUzQkM5MERC MDFCRUNFMjZFN0MwODg4RTQ3RUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0VBN0Q3NEZFNzYxMDcwOTEwRkRCRjlCQkM3MkZFRjZBQzQ3NzZDRkUy MzY2MzNGNEYzM0MyNDFFODEzQkVENi8wL0Q5MDQzOUE1M0EyRTNCQzkwREIwMUJF Q0UyNkU3QzA4ODhFNDdFRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJC4GA7qN+GDGFLRlRQC9LlIhv +0WPr+3KxswINWAc+pVKvnIZanpZSwb8yElCxE2OWVwQRyy8I8VNO7B0KBnWktKn E1FYiC3zQZzZiJ/lS4KGNEBF4ftGq45RbodR4ZDGu2xvBcKeA0mBCXX/o8aWQ/Rd rTWISoC2dG4hw7WAn+urfDCzK081MxMiXryYDBcAEfKWLO6gYRE2A6i58h+EFEBe fVjNnu8HyQP5NREmkpLEVjbqF9hQwbA1UrGdY4Kayzt2iwVpbhBRlcpBXEfVlZW1 gr7z0CEAbLpMElCUlJvKTPX+xIWr0DUEcUOx3lu8m2DEk4Drm8/P4A1TEkPp -----END CERTIFICATE-----Generated at Sat May 17 14:06:14 2025 by rpki-client