$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.mft File: 2FD825A27B2B347F806C2CACDF49209D17BBF654.mft (raw, json) Hash identifier: jdAZ9lYPoXeqpWPzWBCT3MN8sc19x9n08ymsGem/c/4= Subject key identifier: CA:B4:1D:89:31:6A:9D:FB:4C:1D:44:B8:45:10:4A:02:63:B2:E8:2D Authority key identifier: 2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54 Certificate issuer: /CN=2FD825A27B2B347F806C2CACDF49209D17BBF654 Certificate serial: 328AF635233551D8C865DFB3C8BE51186C317E49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.mft Manifest number: E0 Signing time: Mon 21 Apr 2025 08:40:08 +0000 Manifest this update: Mon 21 Apr 2025 08:35:08 +0000 Manifest next update: Sat 26 Apr 2025 17:28:08 +0000 Files and hashes: 1: 3137302e3235342e302e302f32322d3234203d3e20323639393830.roa (hash: XPbV7ofREeKHUjeoayKsDhdCdeBOCyZRnWDY5u72vTc=) 2: 3133382e3131372e34332e302f32342d3234203d3e20323639393830.roa (hash: KEQBP/I/3eKRZFMZGZGkFGj57LmL7hWygI8OEZC1H6E=) 3: 2FD825A27B2B347F806C2CACDF49209D17BBF654.crl (hash: y4l8JjQdN8l8Ij5Xi4WDiPRg4QtsfXNBMK3MTW+V0hU=) 4: 3133382e3131372e34312e302f32342d3234203d3e20323732383132.roa (hash: ejDy3VeUsuzz2dcFxPszDE04RdC/tY3dAzz9Cu36VU4=) 5: 323830333a663834303a3a2f33322d3438203d3e20323639393830.roa (hash: Q+YIO/m77IuhhqbAgD4iTeRvaq/Dm+xuBTNk74sNJ/c=) 6: 3133382e3131372e34322e302f32342d3234203d3e20323639393830.roa (hash: M6t8SBZZVGjVAcAJvxnrGZU6s2cBCLiIIojXT+mMLP8=) 7: 3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa (hash: OlT1MHOud0kRRuTNjpfAf41NLuWma15FhUgZeHjC440=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8a:f6:35:23:35:51:d8:c8:65:df:b3:c8:be:51:18:6c:31:7e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD825A27B2B347F806C2CACDF49209D17BBF654 Validity Not Before: Apr 21 08:35:08 2025 GMT Not After : Apr 26 17:28:08 2025 GMT Subject: CN=CAB41D89316A9DFB4C1D44B845104A0263B2E82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:be:e9:aa:14:00:60:41:e9:d2:82:84:4f: ee:c2:aa:b9:cd:fa:cb:72:b7:ab:7a:b7:a9:cc:c1: a7:df:5f:00:30:c8:7c:39:d6:bc:5e:58:f0:32:19: 48:4b:7d:25:63:da:e5:c2:cd:84:ee:fa:5e:ec:88: 68:4d:cb:28:f5:fd:b9:3b:66:92:bd:a7:5f:91:e8: 8a:9d:ec:c2:46:6e:ac:ab:52:ea:5c:d2:94:86:2f: 42:e4:8c:6b:1c:82:4b:89:ea:1a:2a:a9:fa:7b:1f: ca:bd:ca:1e:da:33:2a:f1:0d:37:06:41:d5:41:4e: 27:d4:fa:7f:0a:c5:06:b1:6f:41:fe:14:94:69:15: d2:06:0e:46:5d:1b:60:d2:57:4b:5d:8b:cd:07:50: b7:3b:12:04:f0:4f:37:62:fd:07:10:38:ab:d3:8e: 5e:9e:b4:c8:d3:2f:06:94:83:ae:fd:fb:16:dd:17: bf:05:cf:be:5e:13:30:89:2f:cd:2b:e5:12:c6:a5: dd:a5:04:dc:08:2d:5b:e4:c5:58:cb:49:89:25:39: 63:4c:ee:14:dc:88:98:fd:15:45:94:97:80:95:ce: 7c:95:c1:81:0a:f5:fa:64:fe:6a:71:ca:47:73:18: f2:e5:3d:15:0e:54:aa:c4:f0:ef:4e:a3:58:d2:69: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:1D:89:31:6A:9D:FB:4C:1D:44:B8:45:10:4A:02:63:B2:E8:2D X509v3 Authority Key Identifier: keyid:2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:33:86:ae:b2:a2:19:99:ac:83:b1:6f:ed:49:20:b8:a3:62: 15:57:d9:47:db:1d:74:32:68:9d:1f:e7:da:78:f4:dc:db:81: d0:bb:24:be:68:87:fa:86:30:67:c1:81:5f:c3:67:f4:5a:ba: ba:0e:30:94:07:07:23:8d:56:7c:6d:0e:9d:e3:6a:91:ff:af: 81:74:fc:a1:63:cb:5d:15:f7:eb:df:1b:cb:96:1a:76:2f:1e: f6:39:16:fd:98:77:b0:e4:d1:94:e6:84:a9:5f:f7:4e:92:b9: 67:53:c4:67:3f:50:5b:2b:a4:47:17:63:10:5f:8c:2a:8d:ec: fb:bd:d4:1f:08:86:a7:70:63:fa:37:a9:cc:46:6f:cd:79:7e: 45:65:e2:3b:81:14:b3:88:97:32:23:88:11:e8:a3:6d:c6:8a: 2f:03:80:7d:9b:94:18:fc:ca:8b:28:42:e7:f8:83:92:be:16: 85:19:00:62:ef:8b:c6:f2:cf:0c:3f:37:4b:09:82:52:90:94: 6d:06:36:e1:44:6f:46:7c:8e:25:d1:d7:6b:b0:18:91:e1:36: 0f:74:93:b3:19:14:5e:15:85:cf:ed:50:7d:0c:3d:b4:97:ba: dc:ae:7b:e3:c4:14:3c:b9:27:67:4e:fb:d3:e5:7e:87:cd:40: 30:2c:a3:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMor2NSM1UdjIZd+zyL5RGGwxfkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEODI1QTI3QjJCMzQ3RjgwNkMyQ0FDREY0OTIwOUQx N0JCRjY1NDAeFw0yNTA0MjEwODM1MDhaFw0yNTA0MjYxNzI4MDhaMDMxMTAvBgNV BAMTKENBQjQxRDg5MzE2QTlERkI0QzFENDRCODQ1MTA0QTAyNjNCMkU4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUr7pqhQAYEHp0oKET+7CqrnN +styt6t6t6nMwaffXwAwyHw51rxeWPAyGUhLfSVj2uXCzYTu+l7siGhNyyj1/bk7 ZpK9p1+R6Iqd7MJGbqyrUupc0pSGL0LkjGscgkuJ6hoqqfp7H8q9yh7aMyrxDTcG QdVBTifU+n8KxQaxb0H+FJRpFdIGDkZdG2DSV0tdi80HULc7EgTwTzdi/QcQOKvT jl6etMjTLwaUg679+xbdF78Fz75eEzCJL80r5RLGpd2lBNwILVvkxVjLSYklOWNM 7hTciJj9FUWUl4CVznyVwYEK9fpk/mpxykdzGPLlPRUOVKrE8O9Oo1jSaV75AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyrQdiTFqnftMHUS4RRBKAmOy6C0wHwYDVR0j BBgwFoAUL9glonsrNH+AbCys30kgnRe79lQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRTUyQUM5MEM1MEZEMjJGRTI1MjFFNUQ1NEJCQzZBNUIz MDc4MUYzMzQ1MEE2MkRFREREQUYzQUIzRjcwNUVELzAvMkZEODI1QTI3QjJCMzQ3 RjgwNkMyQ0FDREY0OTIwOUQxN0JCRjY1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkQ4MjVBMjdCMkIzNDdGODA2 QzJDQUNERjQ5MjA5RDE3QkJGNjU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkU1MkFDOTBDNTBGRDIyRkUyNTIxRTVENTRCQkM2QTVCMzA3ODFGMzM0 NTBBNjJERUREREFGM0FCM0Y3MDVFRC8wLzJGRDgyNUEyN0IyQjM0N0Y4MDZDMkNB Q0RGNDkyMDlEMTdCQkY2NTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMM4ausqIZmayDsW/tSSC4o2IV V9lH2x10MmidH+faePTc24HQuyS+aIf6hjBnwYFfw2f0Wrq6DjCUBwcjjVZ8bQ6d 42qR/6+BdPyhY8tdFffr3xvLlhp2Lx72ORb9mHew5NGU5oSpX/dOkrlnU8RnP1Bb K6RHF2MQX4wqjez7vdQfCIancGP6N6nMRm/NeX5FZeI7gRSziJcyI4gR6KNtxoov A4B9m5QY/MqLKELn+IOSvhaFGQBi74vG8s8MPzdLCYJSkJRtBjbhRG9GfI4l0ddr sBiR4TYPdJOzGRReFYXP7VB9DD20l7rcrnvjxBQ8uSdnTvvT5X6HzUAwLKOH -----END CERTIFICATE-----Generated at Tue Apr 22 20:10:13 2025 by rpki-client