$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft File: 2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft (raw, json) Hash identifier: JjSdPAgKUO+h2ZjcRWx1cSThPGZZUkrJnHjonjjF6y4= Subject key identifier: 57:52:D6:AA:AA:F1:31:17:2C:B3:1D:39:DE:51:1E:4D:0E:D2:D0:27 Authority key identifier: 2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E Certificate issuer: /CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E Certificate serial: 0909F41D455AEA206C6A64C0BAD99E38A20C6652 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft Manifest number: D2 Signing time: Mon 21 Apr 2025 13:02:38 +0000 Manifest this update: Mon 21 Apr 2025 12:57:38 +0000 Manifest next update: Sun 27 Apr 2025 08:32:38 +0000 Files and hashes: 1: 2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl (hash: Je/h8laVCcGwwIEFrO4xcgH8zHt2HfAMY8QeGV3fu1E=) 2: 323830313a31373a633030303a3a2f34342d3634203d3e20323732303337.roa (hash: gT7W4LIZ9d/QEhQQWyx0lvNoG8i9pGxNgt3t5mqHR4M=) 3: 3137392e302e3230302e302f32332d3234203d3e20323732303337.roa (hash: PKNaFKeg+XA0R8pPsaE0XNWjkab4G/BL7Kc8XqWa3UI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:09:f4:1d:45:5a:ea:20:6c:6a:64:c0:ba:d9:9e:38:a2:0c:66:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E Validity Not Before: Apr 21 12:57:38 2025 GMT Not After : Apr 27 08:32:38 2025 GMT Subject: CN=5752D6AAAAF131172CB31D39DE511E4D0ED2D027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:bb:cd:83:42:46:91:c9:bf:44:8c:a6:cb: 0c:66:d5:e9:f3:17:43:f9:d3:5a:b3:e2:8b:8d:d4: 39:a8:a8:18:87:13:ef:3c:49:4e:76:81:92:eb:4e: 1a:e1:98:05:0a:ab:92:e0:81:36:82:f0:38:9d:d6: 4e:4c:34:7f:53:bf:67:dc:a8:15:6b:ef:a6:52:3d: 92:89:ff:00:59:c2:fa:73:0c:e6:53:bd:b3:4d:c3: 1e:ef:91:f2:c0:f4:6e:7c:93:ab:d4:59:7a:1b:2c: 85:73:b4:1d:fc:54:ce:42:35:3b:75:c1:d4:57:60: 05:48:33:71:c8:86:1a:62:b7:80:9a:f2:0e:4d:42: 42:c6:81:46:c3:c4:81:e7:3a:ae:3a:32:1f:c1:ec: 74:fe:c5:00:72:c0:13:7e:82:47:88:75:b0:e5:18: d9:70:c8:be:34:e6:23:46:de:02:a1:55:69:9b:02: a6:56:95:1f:af:7a:b4:29:a6:e3:83:2b:99:07:bd: 66:c1:59:38:e8:fa:d5:bb:da:a7:6a:b1:10:cb:35: 88:a3:56:65:4a:64:e5:92:91:e8:97:fa:05:a0:e6: 80:dd:54:13:fa:43:3f:94:11:24:fb:3b:5b:44:84: 19:d9:db:27:31:d5:4f:f5:9d:46:a3:6c:54:60:1a: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:D6:AA:AA:F1:31:17:2C:B3:1D:39:DE:51:1E:4D:0E:D2:D0:27 X509v3 Authority Key Identifier: keyid:2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f5:30:4d:59:c6:58:be:5e:e4:65:40:ac:af:b2:3f:f1:77: bf:25:5c:81:13:ff:08:57:82:02:c0:21:59:5f:d5:1d:52:05: 83:1f:6f:ba:cf:6f:f4:a7:94:b1:f0:86:02:f9:01:b5:ec:88: da:b0:75:d9:17:14:dc:c9:f1:a0:03:4d:c7:e0:51:fa:62:ed: f1:f3:b6:cb:13:ab:c5:d1:67:e8:4d:e0:14:11:34:2c:71:93: cc:d8:f5:4d:56:9b:d9:2a:10:2e:d0:88:6d:87:57:fa:4c:a3: ba:06:60:35:c1:72:94:83:12:25:74:98:d5:68:e3:4b:1b:08: 72:72:a7:05:35:00:6c:66:35:0f:9a:ee:83:48:09:02:f9:a0: a9:de:d2:9b:c1:26:d0:3f:ee:dc:ff:94:97:c8:5d:14:4b:bb: a4:6b:74:e9:51:b8:bd:f5:dc:2c:42:06:cb:1c:01:f7:3f:0f: 17:3a:1f:77:8b:4c:d4:a6:5c:06:84:3c:6f:db:ca:30:5f:1c: a1:21:05:ce:e0:d3:08:91:e2:24:2b:b6:bb:a7:e3:1c:92:9b: 80:e1:12:4c:ef:0f:b7:3b:99:26:66:92:ff:e0:e9:ec:82:e5: 0e:35:e2:c6:61:57:37:32:e2:42:fc:3c:ab:1f:d3:21:19:f4: 0c:56:22:5b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCQn0HUVa6iBsamTAutmeOKIMZlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBMTBFNkQ3QzAzMjhFNTM2NEJGNDA0MTEwNEQ1MjYy NEZGMkMyRTAeFw0yNTA0MjExMjU3MzhaFw0yNTA0MjcwODMyMzhaMDMxMTAvBgNV BAMTKDU3NTJENkFBQUFGMTMxMTcyQ0IzMUQzOURFNTExRTREMEVEMkQwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPlbvNg0JGkcm/RIymywxm1enz F0P501qz4ouN1DmoqBiHE+88SU52gZLrThrhmAUKq5LggTaC8Did1k5MNH9Tv2fc qBVr76ZSPZKJ/wBZwvpzDOZTvbNNwx7vkfLA9G58k6vUWXobLIVztB38VM5CNTt1 wdRXYAVIM3HIhhpit4Ca8g5NQkLGgUbDxIHnOq46Mh/B7HT+xQBywBN+gkeIdbDl GNlwyL405iNG3gKhVWmbAqZWlR+verQppuODK5kHvWbBWTjo+tW72qdqsRDLNYij VmVKZOWSkeiX+gWg5oDdVBP6Qz+UEST7O1tEhBnZ2ycx1U/1nUajbFRgGr7dAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUV1LWqqrxMRcssx053lEeTQ7S0CcwHwYDVR0j BBgwFoAUK6EObXwDKOU2S/QEEQTVJiT/LC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QzBDODQzM0U3NzBCMUJEMjJGRkE0QTc2NjE1NTZCNEM3 OTU2MTE2QjA3MjBBMjc2RTA2RDFDODFEODlBNTg4LzAvMkJBMTBFNkQ3QzAzMjhF NTM2NEJGNDA0MTEwNEQ1MjYyNEZGMkMyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQkExMEU2RDdDMDMyOEU1MzY0 QkY0MDQxMTA0RDUyNjI0RkYyQzJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEMwQzg0MzNFNzcwQjFCRDIyRkZBNEE3NjYxNTU2QjRDNzk1NjExNkIw NzIwQTI3NkUwNkQxQzgxRDg5QTU4OC8wLzJCQTEwRTZEN0MwMzI4RTUzNjRCRjQw NDExMDRENTI2MjRGRjJDMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX9TBNWcZYvl7kZUCsr7I/8Xe/ JVyBE/8IV4ICwCFZX9UdUgWDH2+6z2/0p5Sx8IYC+QG17IjasHXZFxTcyfGgA03H 4FH6Yu3x87bLE6vF0WfoTeAUETQscZPM2PVNVpvZKhAu0Ihth1f6TKO6BmA1wXKU gxIldJjVaONLGwhycqcFNQBsZjUPmu6DSAkC+aCp3tKbwSbQP+7c/5SXyF0US7uk a3TpUbi99dwsQgbLHAH3Pw8XOh93i0zUplwGhDxv28owXxyhIQXO4NMIkeIkK7a7 p+MckpuA4RJM7w+3O5kmZpL/4OnsguUONeLGYVc3MuJC/DyrH9MhGfQMViJb -----END CERTIFICATE-----Generated at Wed Apr 23 08:51:56 2025 by rpki-client