$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json) Hash identifier: q894v7HlmFkd1ojeDC2/CNLoBGATpv1OAfwVh+J7SB0= Subject key identifier: 1B:31:02:4D:E5:15:C3:25:2B:85:DD:C6:E1:AC:D7:81:2B:F7:54:D6 Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Certificate serial: 1C3FEE687788B1826ABAC0878A53C886F3123895 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft Manifest number: CA Signing time: Mon 14 Apr 2025 13:23:27 +0000 Manifest this update: Mon 14 Apr 2025 13:18:27 +0000 Manifest next update: Sun 20 Apr 2025 07:12:27 +0000 Files and hashes: 1: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=) 2: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: oc9N58Tm+aCZxDsvqVyuS9J+yzP0vQdaCNmu68x+3ow=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3f:ee:68:77:88:b1:82:6a:ba:c0:87:8a:53:c8:86:f3:12:38:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Validity Not Before: Apr 14 13:18:27 2025 GMT Not After : Apr 20 07:12:27 2025 GMT Subject: CN=1B31024DE515C3252B85DDC6E1ACD7812BF754D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:42:b3:8a:f7:6d:d5:cc:a7:ad:0c:44:95: 7f:a7:dc:2d:dc:96:81:13:45:90:6d:95:8d:6c:38: 43:0a:57:76:d6:57:7d:33:a1:d6:91:4d:83:89:f2: 26:71:af:1f:8f:2b:39:c1:f9:e3:79:2b:e8:bb:71: 91:87:48:d2:cd:cd:3f:e5:a7:92:ad:52:db:f3:aa: 35:b0:56:de:3e:25:b4:5f:72:5d:96:01:93:14:33: 3b:7e:9e:2b:b7:9a:90:d5:ce:f9:3d:d8:66:4f:cc: b2:de:aa:35:d3:ab:98:47:9e:04:7f:2d:1a:a8:ec: c8:5b:e0:be:74:37:a2:b6:96:3b:36:94:c6:fd:4e: 5c:0c:d8:80:79:f2:b4:99:c6:99:3b:31:de:6c:60: 1a:f7:a8:bc:6c:3c:d5:4c:b7:e4:cc:aa:e7:cc:64: 40:00:e8:a6:ab:43:8e:05:19:2b:8b:f8:d4:4a:8b: 68:a4:53:a8:da:17:17:af:46:42:1d:0c:5b:35:07: 26:15:af:89:6f:95:72:25:0e:ac:9a:e1:13:e4:86: 13:c4:2d:b2:16:7e:e9:b3:ac:d9:8d:1e:d5:22:b7: 0a:48:45:bb:61:ea:84:c3:d5:9e:71:57:32:2b:e7: a4:58:bc:bf:23:46:85:5f:d6:25:d8:8a:d2:2a:68: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:02:4D:E5:15:C3:25:2B:85:DD:C6:E1:AC:D7:81:2B:F7:54:D6 X509v3 Authority Key Identifier: keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8f:25:a5:02:c4:a8:52:35:b1:fb:e0:21:66:24:86:03:23: 8a:4a:a5:69:bd:55:1f:d8:dd:e6:30:8a:65:f3:a6:c5:95:2a: ea:c9:4c:a0:67:55:2e:95:b8:b4:89:df:e0:6c:ca:96:ce:38: 25:f1:34:b1:b6:b2:b1:55:f3:cd:dd:22:23:cd:a7:a6:1a:58: 66:a9:1a:eb:f1:dc:e9:99:bb:a9:c4:63:81:38:5d:56:5f:37: 92:3b:54:c7:67:2e:c7:21:ba:57:59:d0:b9:4c:d5:66:70:7b: dd:8a:3e:71:e9:d5:99:e2:7b:8e:62:16:46:0f:1c:c9:7e:86: 2a:6d:4e:f4:00:3f:18:4d:c4:50:0e:b2:06:c6:db:0e:5f:93: 6f:2f:f4:f9:17:d8:7a:ee:48:76:9b:09:ec:fa:d1:11:ce:79: 07:5f:bd:90:c7:11:0f:23:9d:2a:aa:95:0e:e8:df:ca:5e:6a: 4a:72:85:b3:78:a1:ec:ae:62:34:ec:9d:e6:38:63:07:c9:11: bd:e1:47:22:ec:24:f7:34:eb:d7:3b:3d:c6:68:fb:28:60:53: 2d:f4:43:d0:8b:6c:98:db:1d:a6:5e:a7:9b:2c:74:3c:47:c3: d4:a7:54:12:be:3b:6d:60:40:40:e0:1d:eb:6c:ba:5e:a3:16: 57:0a:36:55 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHD/uaHeIsYJqusCHilPIhvMSOJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy Q0NBMTU4OTAeFw0yNTA0MTQxMzE4MjdaFw0yNTA0MjAwNzEyMjdaMDMxMTAvBgNV BAMTKDFCMzEwMjRERTUxNUMzMjUyQjg1RERDNkUxQUNENzgxMkJGNzU0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//UKzivdt1cynrQxElX+n3C3c loETRZBtlY1sOEMKV3bWV30zodaRTYOJ8iZxrx+PKznB+eN5K+i7cZGHSNLNzT/l p5KtUtvzqjWwVt4+JbRfcl2WAZMUMzt+niu3mpDVzvk92GZPzLLeqjXTq5hHngR/ LRqo7Mhb4L50N6K2ljs2lMb9TlwM2IB58rSZxpk7Md5sYBr3qLxsPNVMt+TMqufM ZEAA6KarQ44FGSuL+NRKi2ikU6jaFxevRkIdDFs1ByYVr4lvlXIlDqya4RPkhhPE LbIWfumzrNmNHtUitwpIRbth6oTD1Z5xVzIr56RYvL8jRoVf1iXYitIqaAKPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGzECTeUVwyUrhd3G4azXgSv3VNYwHwYDVR0j BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5 Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4 QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEjyWlAsSoUjWx++AhZiSGAyOK SqVpvVUf2N3mMIpl86bFlSrqyUygZ1Uulbi0id/gbMqWzjgl8TSxtrKxVfPN3SIj zaemGlhmqRrr8dzpmbupxGOBOF1WXzeSO1THZy7HIbpXWdC5TNVmcHvdij5x6dWZ 4nuOYhZGDxzJfoYqbU70AD8YTcRQDrIGxtsOX5NvL/T5F9h67kh2mwns+tERznkH X72QxxEPI50qqpUO6N/KXmpKcoWzeKHsrmI07J3mOGMHyRG94Uci7CT3NOvXOz3G aPsoYFMt9EPQi2yY2x2mXqebLHQ8R8PUp1QSvjttYEBA4B3rbLpeoxZXCjZV -----END CERTIFICATE-----Generated at Tue Apr 15 14:18:01 2025 by rpki-client