$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.mft File: 2B795AADFBF75B8B247797B9A50549F729589CFE.mft (raw, json) Hash identifier: P8PLjL9l/AFq7coQ1cm8Odim/WJj1RRTITI3jAJjDLo= Subject key identifier: D6:AF:37:A1:09:D2:15:8E:AC:EF:ED:3F:33:4A:86:38:25:D3:EB:E9 Authority key identifier: 2B:79:5A:AD:FB:F7:5B:8B:24:77:97:B9:A5:05:49:F7:29:58:9C:FE Certificate issuer: /CN=2B795AADFBF75B8B247797B9A50549F729589CFE Certificate serial: 38F01B04EF7AD224ACEDC199A451E6D3F231542D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B795AADFBF75B8B247797B9A50549F729589CFE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.mft Manifest number: CA Signing time: Mon 07 Apr 2025 18:26:27 +0000 Manifest this update: Mon 07 Apr 2025 18:21:27 +0000 Manifest next update: Sun 13 Apr 2025 08:28:27 +0000 Files and hashes: 1: 2B795AADFBF75B8B247797B9A50549F729589CFE.crl (hash: 8k6obvLL37vveGMvRINYLS3BmXwad8Rqr0VvpHHK6IU=) 2: 3138362e322e3234342e302f32322d3234203d3e20323633313735.roa (hash: GR+dMtL++wtd+AN0MxSMJ1vThFWuAtKHt51TVqS0j68=) 3: 323830333a353930303a3a2f33322d3438203d3e20323633313735.roa (hash: fVfyGiHkd8k08/m4LqIr1hcN70XT8zQNNsND4BfHSl4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.crl rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B795AADFBF75B8B247797B9A50549F729589CFE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 08:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f0:1b:04:ef:7a:d2:24:ac:ed:c1:99:a4:51:e6:d3:f2:31:54:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B795AADFBF75B8B247797B9A50549F729589CFE Validity Not Before: Apr 7 18:21:27 2025 GMT Not After : Apr 13 08:28:27 2025 GMT Subject: CN=D6AF37A109D2158EACEFED3F334A863825D3EBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:91:f4:45:c3:53:18:d7:02:db:a0:49:59: 5d:49:59:5a:e3:ea:f9:54:a0:4d:e5:96:9d:0d:72: 85:d2:7f:50:c9:da:86:49:b0:3c:b4:17:15:47:fb: 9d:7e:4f:3f:06:26:c3:b7:8c:0a:8b:f1:7f:f6:ab: 4d:e2:e5:b9:5b:25:9d:20:a1:3e:30:37:9d:5c:b2: f3:7b:6e:72:dd:77:d4:35:5d:56:99:23:c7:e5:d7: 84:00:6e:b0:84:44:7f:45:74:57:ac:75:64:76:79: 02:3b:80:0f:21:1a:ee:ca:bf:a3:52:9e:18:d0:0d: eb:94:fb:64:9c:a7:a8:26:66:17:f6:07:97:bd:7e: b1:f5:8b:18:c9:67:0e:75:1e:c6:7e:51:13:a1:fe: 53:8a:f7:9d:64:f4:45:8c:20:9f:7b:56:4c:1e:13: 53:01:42:d0:0b:5e:d9:ca:f1:cd:e0:e3:4a:3d:07: bc:21:86:79:54:fb:f7:2b:b7:26:88:49:fa:41:74: 0c:d0:3b:8e:ea:b5:06:b3:f8:43:a4:73:64:ba:7c: 7d:04:0a:1c:59:70:9d:2f:83:13:62:c5:48:ed:c6: 48:78:09:71:0f:07:05:c0:92:b9:82:6d:c7:b1:f0: 6a:51:ef:a0:8f:0c:dc:f6:d4:0a:67:54:07:15:e2: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AF:37:A1:09:D2:15:8E:AC:EF:ED:3F:33:4A:86:38:25:D3:EB:E9 X509v3 Authority Key Identifier: keyid:2B:79:5A:AD:FB:F7:5B:8B:24:77:97:B9:A5:05:49:F7:29:58:9C:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B795AADFBF75B8B247797B9A50549F729589CFE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6b:d6:97:9c:2a:2c:76:b9:97:98:bf:44:3d:ef:59:d5:c6: b1:58:46:fe:db:1f:33:5b:d9:b9:0c:8b:ce:3a:a9:75:db:7b: dd:1f:5f:2d:83:8e:68:43:ab:4b:01:7b:b6:31:09:c0:37:f0: 07:e1:78:e7:4f:3b:cf:19:a0:f1:d9:d3:77:ee:b3:48:30:54: 82:fb:b5:af:62:0b:57:c7:01:0b:05:95:98:73:1a:6f:f4:f3: 13:70:1e:ee:8d:c3:8f:fe:70:03:9b:a4:79:47:f3:d8:55:17: 3a:c1:6c:8c:cc:8f:a6:22:24:ff:10:da:91:70:41:39:06:f2: 56:99:cb:7c:6d:af:22:2a:0b:6f:41:1a:b8:90:b8:a4:63:54: 47:42:48:57:b0:b9:0a:75:f4:58:c4:b9:13:ad:33:c5:27:9b: 42:2c:e0:a4:c6:aa:15:03:54:2e:f2:6c:03:c5:54:68:f2:ea: 07:ca:b8:1a:92:c3:1c:77:e7:12:ee:a0:e6:77:5f:43:9e:f9: 3e:a9:2e:ae:0d:08:13:0a:d1:18:6f:b7:63:ca:2b:14:26:a5: 6c:93:f2:27:f5:df:29:a0:89:31:05:a8:e3:c8:c7:51:80:3f: 92:f7:3a:5e:93:83:33:36:88:38:71:a7:8d:8f:38:d1:bf:be: d3:e4:6d:f7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOPAbBO960iSs7cGZpFHm0/IxVC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3OTVBQURGQkY3NUI4QjI0Nzc5N0I5QTUwNTQ5Rjcy OTU4OUNGRTAeFw0yNTA0MDcxODIxMjdaFw0yNTA0MTMwODI4MjdaMDMxMTAvBgNV BAMTKEQ2QUYzN0ExMDlEMjE1OEVBQ0VGRUQzRjMzNEE4NjM4MjVEM0VCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVZH0RcNTGNcC26BJWV1JWVrj 6vlUoE3llp0NcoXSf1DJ2oZJsDy0FxVH+51+Tz8GJsO3jAqL8X/2q03i5blbJZ0g oT4wN51csvN7bnLdd9Q1XVaZI8fl14QAbrCERH9FdFesdWR2eQI7gA8hGu7Kv6NS nhjQDeuU+2Scp6gmZhf2B5e9frH1ixjJZw51HsZ+UROh/lOK951k9EWMIJ97Vkwe E1MBQtALXtnK8c3g40o9B7whhnlU+/crtyaISfpBdAzQO47qtQaz+EOkc2S6fH0E ChxZcJ0vgxNixUjtxkh4CXEPBwXAkrmCbcex8GpR76CPDNz21ApnVAcV4u1lAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1q83oQnSFY6s7+0/M0qGOCXT6+kwHwYDVR0j BBgwFoAUK3larfv3W4skd5e5pQVJ9ylYnP4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81M0I1NDk0MTk5QzMyM0NGMDg1Q0UxNTkzNjQ0OTlGNDVC NDFCOEJGQUE3NDMyQzI4NEQ0RERFNTdGMzQwQ0YwLzAvMkI3OTVBQURGQkY3NUI4 QjI0Nzc5N0I5QTUwNTQ5RjcyOTU4OUNGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjc5NUFBREZCRjc1QjhCMjQ3 Nzk3QjlBNTA1NDlGNzI5NTg5Q0ZFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTNCNTQ5NDE5OUMzMjNDRjA4NUNFMTU5MzY0NDk5RjQ1QjQxQjhCRkFB NzQzMkMyODRENERERTU3RjM0MENGMC8wLzJCNzk1QUFERkJGNzVCOEIyNDc3OTdC OUE1MDU0OUY3Mjk1ODlDRkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9a9aXnCosdrmXmL9EPe9Z1cax WEb+2x8zW9m5DIvOOql123vdH18tg45oQ6tLAXu2MQnAN/AH4XjnTzvPGaDx2dN3 7rNIMFSC+7WvYgtXxwELBZWYcxpv9PMTcB7ujcOP/nADm6R5R/PYVRc6wWyMzI+m IiT/ENqRcEE5BvJWmct8ba8iKgtvQRq4kLikY1RHQkhXsLkKdfRYxLkTrTPFJ5tC LOCkxqoVA1Qu8mwDxVRo8uoHyrgaksMcd+cS7qDmd19Dnvk+qS6uDQgTCtEYb7dj yisUJqVsk/In9d8poIkxBajjyMdRgD+S9zpek4MzNog4caeNjzjRv77T5G33 -----END CERTIFICATE-----Generated at Wed Apr 9 10:42:42 2025 by rpki-client