$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft File: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft (raw, json) Hash identifier: gbTkiU1dv4AJmr8xx2fh77SlukJxAWjP6U/AXEidcq0= Subject key identifier: FB:EF:DD:71:A2:6A:D1:9C:6F:0F:F5:89:0D:E7:D1:A2:0E:CD:CB:86 Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 Certificate issuer: /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Certificate serial: 3CBD389E8669B60854D9FC11EAC9DAFECD66E6DE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft Manifest number: D1 Signing time: Thu 17 Apr 2025 15:17:16 +0000 Manifest this update: Thu 17 Apr 2025 15:12:16 +0000 Manifest next update: Wed 23 Apr 2025 09:20:16 +0000 Files and hashes: 1: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl (hash: +n1QYrUjGnq1JzyO750hZ1KTwvyiYtnzhBMOZv9BcQU=) 2: 323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (hash: 0oKhwsbvlRw+epUBcLEJDUcYeM+rU2io5fVuH6LDEi4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bd:38:9e:86:69:b6:08:54:d9:fc:11:ea:c9:da:fe:cd:66:e6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Validity Not Before: Apr 17 15:12:16 2025 GMT Not After : Apr 23 09:20:16 2025 GMT Subject: CN=FBEFDD71A26AD19C6F0FF5890DE7D1A20ECDCB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:7f:ee:b3:48:d4:98:20:45:16:94:29:cf: 91:54:db:5e:56:b8:4e:e9:71:a2:2d:bb:4d:bd:3e: fc:a8:72:5c:41:8c:f6:c9:f7:c0:45:64:da:ef:e8: f4:f8:34:c3:ce:6f:0d:8c:23:c1:55:e9:58:7c:78: 3f:1a:6a:da:56:fe:4e:4f:f9:8a:30:30:0f:b9:ae: a2:f1:22:86:d6:19:7a:7a:cd:d3:ea:35:0e:dc:8b: 8a:a0:b0:5b:fb:ef:d8:38:51:b3:5f:b6:fb:bc:d8: 53:eb:4a:b1:dc:91:11:80:a7:73:38:f8:e2:11:c4: 52:cf:8c:27:e0:d7:ed:41:12:30:2e:c1:15:8a:6a: a2:52:4c:9c:5d:ac:00:94:21:df:a7:f2:7a:78:85: f5:6d:37:35:5a:23:ae:41:e8:07:0e:16:37:75:28: 4d:22:8d:25:eb:40:76:36:1d:2c:59:cd:e2:5b:21: ce:0b:a0:d2:38:36:cd:21:a3:0a:87:58:c2:b7:c7: 27:93:20:8d:51:e6:c9:48:77:6d:50:ab:bf:56:c8: 4b:b0:8f:67:1e:92:27:fe:05:95:b6:df:db:0f:0c: cb:09:bc:40:ce:8d:57:7c:d1:96:51:2f:28:b5:eb: f1:e2:86:03:35:24:b3:98:d8:f6:56:90:41:6e:7f: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EF:DD:71:A2:6A:D1:9C:6F:0F:F5:89:0D:E7:D1:A2:0E:CD:CB:86 X509v3 Authority Key Identifier: keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:11:fc:cb:9c:b3:e7:f8:84:88:46:41:9e:be:71:e1:78:78: 03:00:55:c5:d7:e5:9e:67:18:20:4d:01:56:7c:f8:7f:5e:48: e4:f6:98:13:5e:27:be:28:8c:43:8b:d6:ef:cc:3e:91:54:9f: ce:f6:c3:09:87:c1:3b:77:5d:92:99:31:f2:d8:fb:f7:9e:0e: b8:c3:1e:b6:d0:0f:88:71:17:be:d4:55:1e:8d:fe:00:14:b6: 0c:92:e8:df:d7:81:f5:44:76:01:d4:b7:cc:6a:3a:7d:3d:df: fd:8f:7a:8c:b2:74:93:3c:0f:d6:d7:78:6b:b1:84:a3:b8:2b: 93:61:48:a6:79:f9:8f:20:f0:f3:01:6c:15:89:5f:3d:7c:1d: af:c3:72:c7:dd:3f:5c:3f:d4:72:e6:cf:2e:a5:c6:4a:e9:d8: 27:ac:48:31:64:14:09:66:64:87:b4:de:52:32:72:3f:bb:c3: 2f:0a:27:9c:21:e3:16:f5:5e:ed:c6:af:74:a3:23:d8:10:f1: e5:f7:f8:c4:f5:10:42:0b:cb:f0:8a:ca:ab:41:07:3d:ec:ad: ed:db:9b:4d:0a:ca:f4:fa:8f:e3:0c:70:c0:97:0b:5b:57:2d: e5:8d:95:3d:7c:cb:62:da:56:7b:1e:e5:24:a5:bd:54:e1:dd: 42:e0:a9:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPL04noZptghU2fwR6sna/s1m5t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGRjE0MkFFNzhBN0Q5NjVGOEUyMjdERkFBNjU5RTJG RUJERTA3ODAeFw0yNTA0MTcxNTEyMTZaFw0yNTA0MjMwOTIwMTZaMDMxMTAvBgNV BAMTKEZCRUZERDcxQTI2QUQxOUM2RjBGRjU4OTBERTdEMUEyMEVDRENCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeX/us0jUmCBFFpQpz5FU215W uE7pcaItu029PvyoclxBjPbJ98BFZNrv6PT4NMPObw2MI8FV6Vh8eD8aatpW/k5P +YowMA+5rqLxIobWGXp6zdPqNQ7ci4qgsFv779g4UbNftvu82FPrSrHckRGAp3M4 +OIRxFLPjCfg1+1BEjAuwRWKaqJSTJxdrACUId+n8np4hfVtNzVaI65B6AcOFjd1 KE0ijSXrQHY2HSxZzeJbIc4LoNI4Ns0howqHWMK3xyeTII1R5slId21Qq79WyEuw j2cekif+BZW239sPDMsJvEDOjVd80ZZRLyi16/HihgM1JLOY2PZWkEFuf/olAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU++/dcaJq0ZxvD/WJDefRog7Ny4YwHwYDVR0j BBgwFoAUKv8UKueKfZZfjiJ9+qZZ4v694HgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MjQ0RjY4MzVFMjJCQTI2OTk5MjgyMDNCRkI4M0FEQjVE MjQ0QTA5OUY1MzUyOEI1Rjc4RDIyOEQ2OTU5MzczLzAvMkFGRjE0MkFFNzhBN0Q5 NjVGOEUyMjdERkFBNjU5RTJGRUJERTA3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUZGMTQyQUU3OEE3RDk2NUY4 RTIyN0RGQUE2NTlFMkZFQkRFMDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDI0NEY2ODM1RTIyQkEyNjk5OTI4MjAzQkZCODNBREI1RDI0NEEwOTlG NTM1MjhCNUY3OEQyMjhENjk1OTM3My8wLzJBRkYxNDJBRTc4QTdEOTY1RjhFMjI3 REZBQTY1OUUyRkVCREUwNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFEfzLnLPn+ISIRkGevnHheHgD AFXF1+WeZxggTQFWfPh/Xkjk9pgTXie+KIxDi9bvzD6RVJ/O9sMJh8E7d12SmTHy 2Pv3ng64wx620A+IcRe+1FUejf4AFLYMkujf14H1RHYB1LfMajp9Pd/9j3qMsnST PA/W13hrsYSjuCuTYUimefmPIPDzAWwViV89fB2vw3LH3T9cP9Ry5s8upcZK6dgn rEgxZBQJZmSHtN5SMnI/u8MvCiecIeMW9V7txq90oyPYEPHl9/jE9RBCC8vwisqr QQc97K3t25tNCsr0+o/jDHDAlwtbVy3ljZU9fMti2lZ7HuUkpb1U4d1C4Kmj -----END CERTIFICATE-----Generated at Fri Apr 18 21:52:32 2025 by rpki-client