$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft File: 2AC489AA343746243A2A3A97A473CEE27756EAA1.mft (raw, json) Hash identifier: PfvpA+/1nOom7+Xvo6w2Uv8I81FzgG5uBuCxG6LA4BA= Subject key identifier: 00:3E:6A:BA:A4:68:5E:17:F3:CF:92:37:6A:4F:A0:7D:A9:C3:BD:1D Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 Certificate issuer: /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Certificate serial: 09E498E1D7A295C980131981E26F609E4E0CA50F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft Manifest number: EA Signing time: Mon 02 Jun 2025 22:12:19 +0000 Manifest this update: Mon 02 Jun 2025 22:07:19 +0000 Manifest next update: Sat 07 Jun 2025 21:34:19 +0000 Files and hashes: 1: 2AC489AA343746243A2A3A97A473CEE27756EAA1.crl (hash: A5ID9VJ9Dk0XmBaj0Z2vgtuFWAtjvrzmskHWmO8IRSI=) 2: 323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa (hash: Aq19bHGezD8Uw7TFu4tX5et4obxnS6jNdf+zmERjlBI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 21:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e4:98:e1:d7:a2:95:c9:80:13:19:81:e2:6f:60:9e:4e:0c:a5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Validity Not Before: Jun 2 22:07:19 2025 GMT Not After : Jun 7 21:34:19 2025 GMT Subject: CN=003E6ABAA4685E17F3CF92376A4FA07DA9C3BD1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:21:80:33:e0:3a:7b:0a:6b:29:0b:f8:bf: 55:9e:4d:5a:ef:ec:86:78:f1:4c:2e:23:a8:2a:dc: bd:67:36:80:85:fa:4f:0f:fa:96:b8:63:5d:e3:78: ed:67:dc:38:47:2c:31:12:d9:57:2d:4b:c8:39:d9: 8a:2c:80:2a:1f:71:a0:52:4b:8e:f1:cf:b1:e2:f1: fe:64:94:1c:2c:ac:81:9c:9b:14:85:b8:c9:66:cc: 9d:89:ee:58:80:a0:b5:64:e1:cd:04:d6:25:1a:aa: bd:ce:2c:ff:22:03:c3:ed:2a:f7:e0:68:bc:10:03: fd:88:46:48:12:ca:1b:cd:dc:fc:36:8d:bc:cd:b0: 9a:40:21:95:7e:a9:d7:25:b6:cd:69:a3:bd:d4:d9: 17:3e:61:3a:93:22:0f:5f:36:01:1a:f7:fd:b3:2c: d2:4f:6a:8a:8d:59:f3:df:42:17:06:98:1d:5a:f2: 9e:9e:0f:79:ed:29:c0:ca:f0:2a:ca:2a:99:4f:78: 34:2d:e0:04:bd:a8:5f:d1:72:b8:fb:7d:62:af:c9: 93:d2:58:20:47:43:06:3f:20:83:72:b9:66:6b:b5: e1:c5:ac:d3:2d:18:d4:96:94:c5:c4:6e:bc:42:26: 18:2a:6f:b6:0d:d1:d2:37:a5:3b:81:c3:a3:0a:30: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3E:6A:BA:A4:68:5E:17:F3:CF:92:37:6A:4F:A0:7D:A9:C3:BD:1D X509v3 Authority Key Identifier: keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a5:02:68:70:22:c2:8a:ad:82:06:46:69:74:c7:1a:b1:9c: af:16:87:2e:65:10:88:4b:c4:e4:68:e8:0f:c6:24:0e:40:14: bf:5c:40:ed:91:20:0f:7c:56:ed:51:3c:09:b7:a8:20:8a:02: 42:87:c1:55:89:c0:33:0f:3f:31:c2:f2:09:62:d2:59:55:5c: 16:71:fd:88:3c:6f:15:19:72:7e:f0:4f:04:d1:4b:9e:e8:35: ee:33:59:68:f6:d0:17:8e:1e:0e:d2:14:13:9c:2c:2d:17:85: 55:0b:3b:e0:eb:bc:a3:67:11:98:34:54:16:62:bd:a7:a4:ec: d5:ba:be:5a:0d:21:d5:a1:5f:dc:47:21:28:36:e0:bf:56:22: fd:1c:dc:c1:af:66:c0:0a:ca:cf:86:09:e3:f5:8c:ed:de:c3: a5:ef:60:5b:f4:cc:e2:40:26:47:9f:32:e5:63:6d:81:0f:e6: 11:07:ba:b6:03:68:19:47:71:e5:4f:d0:8c:87:3a:ef:28:55: af:73:39:6b:bd:ec:ec:ad:af:38:b8:21:10:71:fc:72:a1:ce: 28:c8:a9:5f:cc:54:ae:21:cc:34:91:48:86:1d:db:e9:ce:fe: a6:e9:84:dd:0d:7a:f9:c2:a6:a6:71:97:fb:62:c1:26:1e:53: c7:2d:e3:cb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCeSY4deilcmAExmB4m9gnk4MpQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNDg5QUEzNDM3NDYyNDNBMkEzQTk3QTQ3M0NFRTI3 NzU2RUFBMTAeFw0yNTA2MDIyMjA3MTlaFw0yNTA2MDcyMTM0MTlaMDMxMTAvBgNV BAMTKDAwM0U2QUJBQTQ2ODVFMTdGM0NGOTIzNzZBNEZBMDdEQTlDM0JEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5iGAM+A6ewprKQv4v1WeTVrv 7IZ48UwuI6gq3L1nNoCF+k8P+pa4Y13jeO1n3DhHLDES2VctS8g52YosgCofcaBS S47xz7Hi8f5klBwsrIGcmxSFuMlmzJ2J7liAoLVk4c0E1iUaqr3OLP8iA8PtKvfg aLwQA/2IRkgSyhvN3Pw2jbzNsJpAIZV+qdclts1po73U2Rc+YTqTIg9fNgEa9/2z LNJPaoqNWfPfQhcGmB1a8p6eD3ntKcDK8CrKKplPeDQt4AS9qF/Rcrj7fWKvyZPS WCBHQwY/IINyuWZrteHFrNMtGNSWlMXEbrxCJhgqb7YN0dI3pTuBw6MKMKoxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAD5quqRoXhfzz5I3ak+gfanDvR0wHwYDVR0j BBgwFoAUKsSJqjQ3RiQ6KjqXpHPO4ndW6qEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NzU2MDI3QzAyMUQyRDY1RDkyNzNBNDAzOEVBNDIzRDc2 MDhDMDUyMTFFMzY0ODE0NjBCOEQyNzYyQkM3MEY3LzAvMkFDNDg5QUEzNDM3NDYy NDNBMkEzQTk3QTQ3M0NFRTI3NzU2RUFBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUM0ODlBQTM0Mzc0NjI0M0Ey QTNBOTdBNDczQ0VFMjc3NTZFQUExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDc1NjAyN0MwMjFEMkQ2NUQ5MjczQTQwMzhFQTQyM0Q3NjA4QzA1MjEx RTM2NDgxNDYwQjhEMjc2MkJDNzBGNy8wLzJBQzQ4OUFBMzQzNzQ2MjQzQTJBM0E5 N0E0NzNDRUUyNzc1NkVBQTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkpQJocCLCiq2CBkZpdMcasZyv FocuZRCIS8TkaOgPxiQOQBS/XEDtkSAPfFbtUTwJt6ggigJCh8FVicAzDz8xwvIJ YtJZVVwWcf2IPG8VGXJ+8E8E0Uue6DXuM1lo9tAXjh4O0hQTnCwtF4VVCzvg67yj ZxGYNFQWYr2npOzVur5aDSHVoV/cRyEoNuC/ViL9HNzBr2bACsrPhgnj9Yzt3sOl 72Bb9MziQCZHnzLlY22BD+YRB7q2A2gZR3HlT9CMhzrvKFWvczlrvezsra84uCEQ cfxyoc4oyKlfzFSuIcw0kUiGHdvpzv6m6YTdDXr5wqamcZf7YsEmHlPHLePL -----END CERTIFICATE-----Generated at Wed Jun 4 11:33:18 2025 by rpki-client