$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json) Hash identifier: K1llnD5qDepO6rJjR0E6jtZ8NstuW/JKQ1EHsqEjiy0= Subject key identifier: 67:70:CA:84:0C:EF:FE:6C:61:57:B7:0A:F5:3A:5F:FD:AC:34:05:AA Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 785F55E9B48D09205F02066D0EB23472A8509539 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft Manifest number: E1 Signing time: Fri 16 May 2025 17:49:15 +0000 Manifest this update: Fri 16 May 2025 17:44:15 +0000 Manifest next update: Wed 21 May 2025 05:00:15 +0000 Files and hashes: 1: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: 0u08Cid5xh0s+ifK8ZpB7h+HuLO4xH8CFKw8rUTG+LU=) 2: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: /D7cnLnJXa5ipFVdP+IaE3sgufXRlHkmM6F8ATrITQk=) 3: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: gfviGrTFnzyeLB88khtlrnlCTNwPw5ULi+OBoE5f+t4=) 4: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: 6nyGfvD6t5iKzWPawb9iprKlvLNehgwrlAVas45YifQ=) 5: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: vZjAfk2z5Z6b+6GTrUBJdEEDa8DBAoi/pI9ehH+AnYk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5f:55:e9:b4:8d:09:20:5f:02:06:6d:0e:b2:34:72:a8:50:95:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: May 16 17:44:15 2025 GMT Not After : May 21 05:00:15 2025 GMT Subject: CN=6770CA840CEFFE6C6157B70AF53A5FFDAC3405AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:83:49:25:57:a2:8e:09:97:de:65:28:76: 9b:36:2e:a4:c1:b4:bc:30:19:1b:3e:ca:cf:a6:a0: 43:d9:6a:1f:6f:39:d4:7b:2d:ad:78:ef:9f:b0:7e: fd:02:98:01:5f:eb:5c:0a:25:2f:b0:23:4b:7c:c6: 68:c8:a5:7e:1a:39:06:35:94:31:07:4e:90:42:72: c6:dd:0c:25:32:08:c9:51:5f:7d:6f:1a:e0:dd:62: ff:f1:78:ca:b6:35:ed:f9:30:8b:81:0a:f9:ff:4e: c5:df:46:55:64:f1:ff:c3:f7:4b:77:46:89:12:f9: b5:b6:e3:a9:dc:fb:a9:e2:ee:b6:61:9c:ec:d1:76: 9e:4b:ba:28:6e:c7:3f:d6:ba:ad:86:a1:db:e3:23: fc:cc:87:4d:72:9b:49:dc:35:19:39:47:d1:06:a9: 6d:5c:78:b3:36:eb:ab:0f:9b:25:e8:42:8e:59:5c: ee:f9:3c:03:36:dd:bc:7e:c9:4e:a2:32:63:a9:99: 35:7c:67:de:86:d3:d1:3f:6f:36:94:d7:82:77:4b: 18:75:e5:f8:cd:37:df:4c:ac:98:f8:2a:36:07:a8: c2:23:b9:de:51:c6:a0:bc:00:5a:2b:c8:ef:2d:83: 66:f6:ca:40:fb:52:16:69:d5:8c:f7:69:53:2f:ac: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:70:CA:84:0C:EF:FE:6C:61:57:B7:0A:F5:3A:5F:FD:AC:34:05:AA X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c5:8a:b6:96:c5:18:89:7d:00:9b:d0:cd:b3:e4:5a:d8:3b: 53:de:cf:24:1d:79:ae:3a:e7:70:2a:cb:0b:b0:7d:74:7a:b1: 65:1f:f6:92:0b:2b:43:ad:7d:ea:92:a6:2d:32:11:d6:23:79: b4:fc:26:e2:7e:84:2a:d1:4a:d8:01:cb:fd:6b:d4:14:a9:a7: e2:d4:01:8a:c1:76:3e:60:c6:f1:62:36:6a:2f:26:57:7a:fc: f7:52:52:5b:c8:56:34:6a:c7:5e:40:9f:eb:09:67:4b:85:b2: 28:22:df:98:75:87:cb:ca:41:80:ca:68:f2:43:dc:2f:2a:e9: df:f5:43:e9:f5:f9:0a:78:62:95:df:f0:07:68:86:81:13:a2: e0:b8:29:52:af:5b:b5:e1:5b:80:f2:f6:40:dd:7f:c1:cb:00: ab:46:86:6b:68:96:a2:97:66:84:52:24:d8:c8:32:f8:b6:0c: cb:8a:c4:2e:a4:cc:45:41:9b:8b:74:a7:2e:1b:3b:bc:19:01: 01:10:c5:1f:35:b2:79:3b:0a:58:16:47:a3:70:02:e2:20:9a: d1:99:cd:40:db:fa:92:6c:4f:eb:9b:43:d1:20:1d:0d:85:3c: af:a7:dc:f2:cd:bb:d8:3e:e5:6d:30:b9:bc:78:71:15:0c:ef: 14:5b:cc:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeF9V6bSNCSBfAgZtDrI0cqhQlTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNTA1MTYxNzQ0MTVaFw0yNTA1MjEwNTAwMTVaMDMxMTAvBgNV BAMTKDY3NzBDQTg0MENFRkZFNkM2MTU3QjcwQUY1M0E1RkZEQUMzNDA1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hINJJVeijgmX3mUodps2LqTB tLwwGRs+ys+moEPZah9vOdR7La1475+wfv0CmAFf61wKJS+wI0t8xmjIpX4aOQY1 lDEHTpBCcsbdDCUyCMlRX31vGuDdYv/xeMq2Ne35MIuBCvn/TsXfRlVk8f/D90t3 RokS+bW246nc+6ni7rZhnOzRdp5Luihuxz/Wuq2GodvjI/zMh01ym0ncNRk5R9EG qW1ceLM266sPmyXoQo5ZXO75PAM23bx+yU6iMmOpmTV8Z96G09E/bzaU14J3Sxh1 5fjNN99MrJj4KjYHqMIjud5RxqC8AForyO8tg2b2ykD7UhZp1Yz3aVMvrHrLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZ3DKhAzv/mxhV7cK9Tpf/aw0BaowHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPxYq2lsUYiX0Am9DNs+Ra2DtT 3s8kHXmuOudwKssLsH10erFlH/aSCytDrX3qkqYtMhHWI3m0/CbifoQq0UrYAcv9 a9QUqafi1AGKwXY+YMbxYjZqLyZXevz3UlJbyFY0asdeQJ/rCWdLhbIoIt+YdYfL ykGAymjyQ9wvKunf9UPp9fkKeGKV3/AHaIaBE6LguClSr1u14VuA8vZA3X/BywCr RoZraJail2aEUiTYyDL4tgzLisQupMxFQZuLdKcuGzu8GQEBEMUfNbJ5OwpYFkej cALiIJrRmc1A2/qSbE/rm0PRIB0NhTyvp9zyzbvYPuVtMLm8eHEVDO8UW8wC -----END CERTIFICATE-----Generated at Sun May 18 05:41:39 2025 by rpki-client