$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json) Hash identifier: EkjBJu0rtsSCm3SfHQm38s42d1VHuI+DA4d3IZ4dWXY= Subject key identifier: DD:AB:05:11:43:A5:26:C0:48:31:E3:83:9A:30:B3:00:9F:B1:74:22 Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 1B6BE9166426A8C143A13B84CD11095CE97F97F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft Manifest number: CB Signing time: Fri 04 Apr 2025 15:16:29 +0000 Manifest this update: Fri 04 Apr 2025 15:11:29 +0000 Manifest next update: Wed 09 Apr 2025 06:29:29 +0000 Files and hashes: 1: 323830333a346132303a3a2f33322d3332203d3e20323635383438.roa (hash: /INlcJc/KcMRifLcDdqXWwIVAexjHFg4O5X7DME1EmM=) 2: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: l0LWu22qOaLDlCthMeY/CvKaI4uUOaZIcvupuCI9a04=) 3: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: gjvcu7Z7ADpcs7WZjy59JXJrWiktijI1p9kIpYD2/hQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:e9:16:64:26:a8:c1:43:a1:3b:84:cd:11:09:5c:e9:7f:97:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: Apr 4 15:11:29 2025 GMT Not After : Apr 9 06:29:29 2025 GMT Subject: CN=DDAB051143A526C04831E3839A30B3009FB17422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:f7:7f:7f:c0:0f:b4:10:52:ce:15:c5:a8: d6:d7:71:e3:22:a1:d3:80:a9:3b:81:2d:54:e1:8a: 28:30:fc:52:ed:ae:11:d7:bb:08:2c:70:88:a0:1f: 3e:44:d1:2c:49:b3:74:a4:51:06:d0:a6:09:a3:93: e9:aa:d8:0a:6d:31:29:79:53:f7:9c:e8:16:54:3c: 43:2c:22:c5:ba:f5:82:77:f4:01:05:e1:5c:e3:cf: 8f:8a:38:d1:79:eb:1e:7e:9e:6e:5b:c2:d1:3c:4d: d3:b4:62:38:22:22:3c:56:30:7c:ec:4b:de:36:78: 9f:72:1f:3c:c5:4c:0a:2f:c1:08:5e:39:52:51:7c: 8c:1c:dc:53:74:8e:03:37:b2:ce:a5:b9:e7:5e:f6: 6c:51:b9:e8:6b:c7:5d:c5:56:7f:c5:77:8b:7c:a8: e3:72:24:3d:73:be:37:b9:d4:a8:e8:91:72:92:48: 68:46:60:a9:f3:0b:37:a0:06:69:71:6b:96:3f:3a: d6:a7:89:9d:83:3e:f2:c9:ed:05:48:ea:6a:28:1b: 46:44:2e:52:2b:68:11:37:39:32:ab:50:6f:7b:f9: 94:ca:b3:13:e4:5b:eb:c1:0a:85:14:59:a3:de:1a: 48:95:5c:7e:bc:2f:2f:67:94:3c:58:09:06:19:cb: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AB:05:11:43:A5:26:C0:48:31:E3:83:9A:30:B3:00:9F:B1:74:22 X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:53:7e:9d:37:f8:4a:c8:11:03:a7:39:de:8e:af:6d:1e:d8: 45:53:42:2b:ba:b8:e7:fa:10:e0:b7:bf:c0:49:0b:17:85:5d: f3:d0:31:29:90:da:e0:63:a6:c6:26:7a:9b:31:3c:40:a5:9a: 39:10:c6:bc:36:67:c7:da:29:10:17:d4:e1:60:3a:28:1a:7a: 1c:5e:7f:cc:6b:f6:2c:09:f4:08:83:58:3e:fb:9d:8d:c6:03: 63:cb:26:c0:10:2b:16:a5:49:5c:2a:df:69:5c:ed:7f:3e:c1: 08:ef:75:bf:ae:b6:51:46:5f:84:0a:48:d4:4f:0a:ae:2f:7d: be:ef:ad:70:75:49:97:b1:20:27:ea:e4:71:89:cc:9b:10:5b: 3e:00:22:c2:9c:56:b9:02:5f:70:35:e1:bc:ad:79:2b:0f:bc: 93:3b:fa:9d:6f:48:ef:e5:95:8f:45:09:62:a6:77:88:ae:9c: 3b:7a:cc:0a:15:88:25:47:d0:08:8e:4f:e1:d3:5b:e2:cb:54: 3e:29:3d:72:2e:34:2d:33:43:8d:81:21:da:fb:a1:8d:2d:d3: ea:85:d7:9e:75:25:8d:73:6a:89:aa:1f:63:b5:f8:92:4d:f0: 89:02:59:58:5d:a4:ae:cd:31:60:e1:e8:4c:06:1a:3f:d3:97: e7:16:54:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG2vpFmQmqMFDoTuEzREJXOl/l/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNTA0MDQxNTExMjlaFw0yNTA0MDkwNjI5MjlaMDMxMTAvBgNV BAMTKEREQUIwNTExNDNBNTI2QzA0ODMxRTM4MzlBMzBCMzAwOUZCMTc0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWn/d/f8APtBBSzhXFqNbXceMi odOAqTuBLVThiigw/FLtrhHXuwgscIigHz5E0SxJs3SkUQbQpgmjk+mq2AptMSl5 U/ec6BZUPEMsIsW69YJ39AEF4Vzjz4+KONF56x5+nm5bwtE8TdO0YjgiIjxWMHzs S942eJ9yHzzFTAovwQheOVJRfIwc3FN0jgM3ss6luede9mxRuehrx13FVn/Fd4t8 qONyJD1zvje51KjokXKSSGhGYKnzCzegBmlxa5Y/OtaniZ2DPvLJ7QVI6mooG0ZE LlIraBE3OTKrUG97+ZTKsxPkW+vBCoUUWaPeGkiVXH68Ly9nlDxYCQYZy2d/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3asFEUOlJsBIMeODmjCzAJ+xdCIwHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzI4QTdENTNCQUM1MzEwNUNBOEEwQjNB MUM5NUMyRTZBNzE5ODE2NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzU36dN/hKyBEDpznejq9tHthF U0Irurjn+hDgt7/ASQsXhV3z0DEpkNrgY6bGJnqbMTxApZo5EMa8NmfH2ikQF9Th YDooGnocXn/Ma/YsCfQIg1g++52NxgNjyybAECsWpUlcKt9pXO1/PsEI73W/rrZR Rl+ECkjUTwquL32+761wdUmXsSAn6uRxicybEFs+ACLCnFa5Al9wNeG8rXkrD7yT O/qdb0jv5ZWPRQlipneIrpw7eswKFYglR9AIjk/h01viy1Q+KT1yLjQtM0ONgSHa +6GNLdPqhdeedSWNc2qJqh9jtfiSTfCJAllYXaSuzTFg4ehMBho/05fnFlSj -----END CERTIFICATE-----Generated at Sat Apr 5 14:08:53 2025 by rpki-client