$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft File: 2D9B47B31B2096B35C9794693DF659896A6B49CE.mft (raw, json) Hash identifier: vXR0WQ7aeoDbOVKNUxJz/8g1PyzUzthRX5iIYEq968E= Subject key identifier: C7:84:35:50:26:8D:26:18:88:2D:21:15:38:B1:09:AB:0A:03:1A:5E Authority key identifier: 2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE Certificate issuer: /CN=2D9B47B31B2096B35C9794693DF659896A6B49CE Certificate serial: 04CD4B8D349E15F3636D2FF7E04FD23F1C8F111A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft Manifest number: C2 Signing time: Sat 05 Apr 2025 14:04:55 +0000 Manifest this update: Sat 05 Apr 2025 13:59:55 +0000 Manifest next update: Thu 10 Apr 2025 21:48:55 +0000 Files and hashes: 1: 323830333a646463303a3a2f33322d3332203d3e203237383535.roa (hash: JIdhrCxU/jxShZGjPwbYJiXutQR8KaA35oYTCEmvY+A=) 2: 2D9B47B31B2096B35C9794693DF659896A6B49CE.crl (hash: 91I2xpSIgZBJFSyox4ToY8pGFUoLmafKCIHBW4VVeCU=) 3: 34352e36352e3234382e302f32322d3234203d3e203237383535.roa (hash: eGFXlAPltd8ChzpqsrMjMGomBr1ZrqonX89O6NRSHZ0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cd:4b:8d:34:9e:15:f3:63:6d:2f:f7:e0:4f:d2:3f:1c:8f:11:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9B47B31B2096B35C9794693DF659896A6B49CE Validity Not Before: Apr 5 13:59:55 2025 GMT Not After : Apr 10 21:48:55 2025 GMT Subject: CN=C7843550268D2618882D211538B109AB0A031A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:2e:f9:7d:37:27:8d:7b:c2:c8:c5:30:0e: b7:af:cd:b6:c0:16:5e:2c:b2:e6:df:73:54:ba:a8: 75:a7:80:79:aa:cf:bf:bd:34:d1:19:ad:d8:79:83: 3e:9f:bc:70:e7:84:a1:5c:5a:4d:3c:21:c3:df:45: 24:99:bc:3f:d8:54:1a:cd:3e:8c:06:6d:47:f4:13: 2c:58:d8:f6:3e:46:22:3f:bb:f6:7b:0c:20:d5:24: 14:58:a9:ea:9f:26:05:b9:02:97:98:31:6d:b2:a6: 73:d8:c0:29:ab:13:e2:34:d6:15:2e:9d:33:a9:5f: e9:97:f8:2d:27:8d:57:96:75:ef:85:eb:f3:5c:74: 5b:ba:0d:1a:95:d6:cb:6d:2b:ea:3a:ea:2a:77:b0: 0e:62:ce:e6:31:c0:58:27:b3:6d:51:da:ed:ba:56: 62:8a:9a:5d:f9:5b:95:c1:9e:34:7a:67:b3:47:c2: bd:6f:e5:6d:86:53:a3:e7:29:58:7d:24:49:00:c7: e8:97:7b:ef:86:41:7e:e5:99:cc:3c:78:d4:c1:3f: c5:e2:77:05:31:d3:15:96:a5:ee:11:ac:7c:b3:8d: 76:ef:2b:36:e0:59:03:9f:8c:ff:8c:68:6b:aa:63: 24:09:ff:11:e0:8c:01:ae:7f:f0:92:fd:08:ce:de: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:84:35:50:26:8D:26:18:88:2D:21:15:38:B1:09:AB:0A:03:1A:5E X509v3 Authority Key Identifier: keyid:2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:51:eb:55:35:78:56:57:52:5d:50:ec:5b:a5:eb:57:06:66: 89:12:58:00:ea:56:83:56:e1:ac:12:67:ff:9d:29:67:80:2e: 44:83:7b:8b:ac:34:0f:c9:af:9e:22:ad:d2:dd:7e:d4:9f:4c: 79:97:2a:3e:91:83:fa:d2:be:b9:c3:ea:5e:6a:2c:6b:20:13: c1:29:f8:78:ed:86:be:a7:69:47:e9:4a:91:dc:f8:40:31:0a: 85:f6:60:24:da:47:b1:d0:b9:bf:c1:0f:77:f2:a6:64:7c:c0: 0e:54:50:31:9a:23:ec:b6:1d:51:5b:f8:19:41:a1:a0:a4:c7: a5:c6:2d:8d:b6:d7:92:07:a1:04:71:a6:32:bc:e0:16:eb:90: c1:79:a6:9b:b5:3c:78:1f:b2:a6:de:62:35:75:a7:2d:51:1f: cb:f9:38:bd:01:1e:f0:55:1f:26:1e:2b:8e:48:59:29:8f:6b: 23:cd:14:6d:47:4e:58:7d:a2:fb:a0:8b:f1:e4:a7:08:c2:44: 45:22:73:7d:24:fa:e3:32:9b:1b:2c:2e:b4:34:29:a8:21:5a: 16:af:1b:2f:13:39:39:da:f2:58:c8:73:f7:56:d5:a6:f9:f6: d3:bc:ba:33:1e:60:db:a8:1a:59:0e:8f:89:f8:91:3a:09:2f: a0:d7:79:13 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBM1LjTSeFfNjbS/34E/SPxyPERowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5QjQ3QjMxQjIwOTZCMzVDOTc5NDY5M0RGNjU5ODk2 QTZCNDlDRTAeFw0yNTA0MDUxMzU5NTVaFw0yNTA0MTAyMTQ4NTVaMDMxMTAvBgNV BAMTKEM3ODQzNTUwMjY4RDI2MTg4ODJEMjExNTM4QjEwOUFCMEEwMzFBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOC75fTcnjXvCyMUwDrevzbbA Fl4ssubfc1S6qHWngHmqz7+9NNEZrdh5gz6fvHDnhKFcWk08IcPfRSSZvD/YVBrN PowGbUf0EyxY2PY+RiI/u/Z7DCDVJBRYqeqfJgW5ApeYMW2ypnPYwCmrE+I01hUu nTOpX+mX+C0njVeWde+F6/NcdFu6DRqV1sttK+o66ip3sA5izuYxwFgns21R2u26 VmKKml35W5XBnjR6Z7NHwr1v5W2GU6PnKVh9JEkAx+iXe++GQX7lmcw8eNTBP8Xi dwUx0xWWpe4RrHyzjXbvKzbgWQOfjP+MaGuqYyQJ/xHgjAGuf/CS/QjO3uMrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUx4Q1UCaNJhiILSEVOLEJqwoDGl4wHwYDVR0j BBgwFoAULZtHsxsglrNcl5RpPfZZiWprSc4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CODgyMUE1RjA2RTgwMzZFOUUxQUUwREZFMDI3RUU2MDc2 RDcyRENDNkJDMjY1NUVBM0JGREQ2Mjc0RkFEN0U0LzAvMkQ5QjQ3QjMxQjIwOTZC MzVDOTc5NDY5M0RGNjU5ODk2QTZCNDlDRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDlCNDdCMzFCMjA5NkIzNUM5 Nzk0NjkzREY2NTk4OTZBNkI0OUNFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjg4MjFBNUYwNkU4MDM2RTlFMUFFMERGRTAyN0VFNjA3NkQ3MkRDQzZC QzI2NTVFQTNCRkRENjI3NEZBRDdFNC8wLzJEOUI0N0IzMUIyMDk2QjM1Qzk3OTQ2 OTNERjY1OTg5NkE2QjQ5Q0UubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXUetVNXhWV1JdUOxbpetXBmaJ ElgA6laDVuGsEmf/nSlngC5Eg3uLrDQPya+eIq3S3X7Un0x5lyo+kYP60r65w+pe aixrIBPBKfh47Ya+p2lH6UqR3PhAMQqF9mAk2kex0Lm/wQ938qZkfMAOVFAxmiPs th1RW/gZQaGgpMelxi2NtteSB6EEcaYyvOAW65DBeaabtTx4H7Km3mI1dactUR/L +Ti9AR7wVR8mHiuOSFkpj2sjzRRtR05YfaL7oIvx5KcIwkRFInN9JPrjMpsbLC60 NCmoIVoWrxsvEzk52vJYyHP3VtWm+fbTvLozHmDbqBpZDo+J+JE6CS+g13kT -----END CERTIFICATE-----Generated at Sun Apr 6 22:12:19 2025 by rpki-client