$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft File: 21711620AC4F377630443FF5BDD3C78255256F48.mft (raw, json) Hash identifier: d0efeLC16d92fe6fMn5oMawiq7xCFmRlFZnLD/y0xz4= Subject key identifier: F6:67:49:EE:32:03:04:58:A0:15:4B:42:36:E3:29:BF:FA:E7:90:67 Authority key identifier: 21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48 Certificate issuer: /CN=21711620AC4F377630443FF5BDD3C78255256F48 Certificate serial: 17FBD0919E26CD45731F3B0C1EE8C47BC1C2BE6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft Manifest number: DD Signing time: Fri 16 May 2025 15:58:11 +0000 Manifest this update: Fri 16 May 2025 15:53:11 +0000 Manifest next update: Thu 22 May 2025 05:03:11 +0000 Files and hashes: 1: 323830333a633438303a3a2f33322d3634203d3e20323633313934.roa (hash: Yp4gDVnO3OwG/In2sf5lV/vU/OXPQ67QnAPNDL/ySO0=) 2: 3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa (hash: scAoKsLBSoCi8yX9v8A273F4Oet0EIbJYC5yBKPFXkQ=) 3: 21711620AC4F377630443FF5BDD3C78255256F48.crl (hash: eWHirALUVvCXkjf5oiLoteh/F6sDkret0KhmxSGVl8E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fb:d0:91:9e:26:cd:45:73:1f:3b:0c:1e:e8:c4:7b:c1:c2:be:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21711620AC4F377630443FF5BDD3C78255256F48 Validity Not Before: May 16 15:53:11 2025 GMT Not After : May 22 05:03:11 2025 GMT Subject: CN=F66749EE32030458A0154B4236E329BFFAE79067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:e4:72:50:71:3a:b9:61:57:dc:e8:9c:89: 1a:7c:89:d5:c2:03:58:e4:dc:b6:71:37:43:8e:63: b6:2d:6c:f4:70:c8:92:4e:6d:70:13:d6:03:b9:ca: 73:fb:59:8e:54:47:5b:b5:3c:4d:5c:28:2a:f4:a7: 08:9e:f6:2f:be:4f:b6:08:42:98:5b:de:2a:ad:14: 93:3e:aa:c7:bd:ac:c5:73:b6:56:71:25:c9:68:25: d5:fd:f9:0c:b1:99:10:62:06:1f:a4:3f:54:20:46: 36:ce:2b:be:ad:e4:28:dc:1b:6f:f9:29:18:78:f8: e7:03:f3:2f:70:7b:5b:88:37:1b:b6:3b:3b:38:f2: 2a:db:bc:21:7c:de:90:8f:87:a5:29:51:12:1a:a4: 2c:92:0a:c7:be:cf:73:2b:f3:18:2b:5c:ab:bf:bd: bf:ff:c4:37:05:ef:43:63:7f:5a:da:4b:f8:d9:0d: 38:41:06:59:e9:f7:f7:76:fe:bd:87:86:99:fd:17: ab:54:52:b0:bf:4f:51:b5:fc:31:75:88:99:cc:8f: 19:89:94:e5:14:eb:b8:b2:37:b2:e8:ff:4c:bf:1a: 61:ad:70:b6:fc:95:93:a9:1a:ab:50:e3:33:cd:73: a2:30:0c:52:fd:9b:b0:d2:90:d3:f5:3d:37:30:e2: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:67:49:EE:32:03:04:58:A0:15:4B:42:36:E3:29:BF:FA:E7:90:67 X509v3 Authority Key Identifier: keyid:21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:83:89:b6:80:f4:43:c4:d9:c1:b5:8d:d6:7f:3d:89:50:4f: be:89:8f:20:df:27:ec:36:9b:20:ca:02:53:f8:93:0e:a2:d3: da:4c:88:92:31:e3:b6:6b:7b:da:de:ab:de:65:bb:ab:75:b5: 14:e9:11:52:82:fd:03:1b:db:a4:ce:d9:6c:74:bc:fa:45:32: ee:55:16:a7:38:9f:04:7b:c8:b6:15:aa:f0:f5:d6:0e:e9:e8: 2f:29:99:67:ff:15:d9:89:f3:9a:80:5b:f6:4e:72:36:09:5c: cb:56:0d:05:5a:82:06:1a:2d:ab:ab:3e:c2:87:5e:f4:a5:42: 49:e5:d7:c3:21:47:2e:d7:9c:66:ba:7c:33:92:c4:e7:32:0f: c4:3f:07:17:20:d0:86:b6:dc:11:88:05:a9:78:ac:c9:f7:7f: 96:a4:31:9a:22:4c:e9:4e:4b:f1:cf:bc:cc:43:16:36:6a:6e: 9f:70:3c:2f:99:80:be:d1:29:65:42:d7:2e:3d:91:18:43:f5: 4c:d2:7f:ea:5a:e2:55:90:d1:8e:e6:6d:b2:7e:97:9f:c1:b9: 50:d3:fa:da:31:75:4b:1d:84:0b:23:63:40:4c:ac:88:6d:ab: a1:31:45:79:8f:82:e1:d0:3d:25:31:14:a7:5c:42:a0:7d:55: 20:a2:4e:a4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUF/vQkZ4mzUVzHzsMHujEe8HCvmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE3MTE2MjBBQzRGMzc3NjMwNDQzRkY1QkREM0M3ODI1 NTI1NkY0ODAeFw0yNTA1MTYxNTUzMTFaFw0yNTA1MjIwNTAzMTFaMDMxMTAvBgNV BAMTKEY2Njc0OUVFMzIwMzA0NThBMDE1NEI0MjM2RTMyOUJGRkFFNzkwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKuRyUHE6uWFX3OiciRp8idXC A1jk3LZxN0OOY7YtbPRwyJJObXAT1gO5ynP7WY5UR1u1PE1cKCr0pwie9i++T7YI Qphb3iqtFJM+qse9rMVztlZxJcloJdX9+QyxmRBiBh+kP1QgRjbOK76t5CjcG2/5 KRh4+OcD8y9we1uINxu2Ozs48irbvCF83pCPh6UpURIapCySCse+z3Mr8xgrXKu/ vb//xDcF70Njf1raS/jZDThBBlnp9/d2/r2Hhpn9F6tUUrC/T1G1/DF1iJnMjxmJ lOUU67iyN7Lo/0y/GmGtcLb8lZOpGqtQ4zPNc6IwDFL9m7DSkNP1PTcw4oT9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU9mdJ7jIDBFigFUtCNuMpv/rnkGcwHwYDVR0j BBgwFoAUIXEWIKxPN3YwRD/1vdPHglUlb0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FMDJCMEM2ODk1ODk0QjZCQ0EyMUQzRTdFMDlBOUQ3RDMw NDg4Njk5OEEzRTMzMEY3RkNEMTY2NTU1MENERjIxLzAvMjE3MTE2MjBBQzRGMzc3 NjMwNDQzRkY1QkREM0M3ODI1NTI1NkY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTcxMTYyMEFDNEYzNzc2MzA0 NDNGRjVCREQzQzc4MjU1MjU2RjQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTAyQjBDNjg5NTg5NEI2QkNBMjFEM0U3RTA5QTlEN0QzMDQ4ODY5OThB M0UzMzBGN0ZDRDE2NjU1NTBDREYyMS8wLzIxNzExNjIwQUM0RjM3NzYzMDQ0M0ZG NUJERDNDNzgyNTUyNTZGNDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3g4m2gPRDxNnBtY3Wfz2JUE++ iY8g3yfsNpsgygJT+JMOotPaTIiSMeO2a3va3qveZburdbUU6RFSgv0DG9ukztls dLz6RTLuVRanOJ8Ee8i2Farw9dYO6egvKZln/xXZifOagFv2TnI2CVzLVg0FWoIG Gi2rqz7Ch170pUJJ5dfDIUcu15xmunwzksTnMg/EPwcXINCGttwRiAWpeKzJ93+W pDGaIkzpTkvxz7zMQxY2am6fcDwvmYC+0SllQtcuPZEYQ/VM0n/qWuJVkNGO5m2y fpefwblQ0/raMXVLHYQLI2NATKyIbauhMUV5j4Lh0D0lMRSnXEKgfVUgok6k -----END CERTIFICATE-----Generated at Sat May 17 14:06:08 2025 by rpki-client