$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json) Hash identifier: uo8MR3YWvm18wxsVbKfAiWeQzNeeKtrl0t9CoLMXlrA= Subject key identifier: 28:EA:AC:4B:C8:0D:CD:14:B3:FD:38:AF:34:71:25:BA:AD:3E:3C:25 Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Certificate serial: 52A91DE74602E8F850EA0A36B3B9E56C79CD22AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft Manifest number: D2 Signing time: Sun 04 May 2025 05:20:35 +0000 Manifest this update: Sun 04 May 2025 05:15:35 +0000 Manifest next update: Fri 09 May 2025 09:27:35 +0000 Files and hashes: 1: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=) 2: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: 5Pxr+wJnMaKeEv/06wHfHxyLexz5FvthxiIct5IEWcA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a9:1d:e7:46:02:e8:f8:50:ea:0a:36:b3:b9:e5:6c:79:cd:22:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589 Validity Not Before: May 4 05:15:35 2025 GMT Not After : May 9 09:27:35 2025 GMT Subject: CN=28EAAC4BC80DCD14B3FD38AF347125BAAD3E3C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:d3:5e:1e:e0:82:e6:2f:01:b0:0d:01:31: 6f:f0:72:11:ea:bf:06:99:be:cd:2b:64:dd:d2:64: cd:86:28:6c:6a:7f:6c:46:4d:08:e3:85:12:ae:8e: ef:9c:5b:a0:c2:91:c5:f3:37:9b:10:96:9c:b2:e7: 50:1c:6b:4f:4e:19:31:d0:e2:fa:67:36:1d:39:7d: ee:a5:77:40:82:e5:2b:22:4a:03:e3:c6:bc:53:fc: 22:c8:06:ac:16:b6:c3:34:fc:cc:a4:6b:27:8b:53: 8e:f0:d2:85:3c:db:d1:41:7e:7c:6d:5f:e6:3b:95: 51:95:bc:05:25:50:ee:05:8f:b9:24:e0:a3:46:b5: c5:ba:94:55:bf:e5:70:e8:7f:1c:c1:cd:3f:7f:04: fa:c0:e3:6b:03:5b:07:75:e5:16:e2:39:ea:c5:ea: c0:56:25:2e:8e:71:cc:e8:75:08:4c:99:7d:2c:83: 82:f8:5f:f6:29:8b:00:a4:6e:52:ae:5f:f8:e1:b5: 09:99:db:ff:76:6f:7b:71:bc:de:6e:c9:ad:71:e6: 61:6f:4b:2d:0b:ec:8b:f9:d4:8b:9b:86:5d:cf:75: cd:9f:72:b0:62:69:e8:83:84:af:2a:eb:30:9a:a1: be:43:7a:fa:a2:42:a9:9f:ea:bc:58:b6:94:a0:0d: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EA:AC:4B:C8:0D:CD:14:B3:FD:38:AF:34:71:25:BA:AD:3E:3C:25 X509v3 Authority Key Identifier: keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fc:bf:e6:11:6f:d1:e6:68:c8:26:81:a4:2a:37:a0:a9:87: 23:1c:89:e3:2a:11:88:d3:4d:fa:b8:27:4e:df:96:8e:dc:66: b3:bd:a3:7f:85:b7:a4:b5:07:6d:ef:17:87:76:43:00:c2:29: c8:4e:08:fa:5d:49:14:dd:af:c5:3d:6e:ff:51:8c:bb:24:24: e0:45:2c:5b:41:6a:0e:91:e1:62:fb:60:f9:d5:96:59:5b:2e: 40:05:df:12:dc:b5:6e:f4:c3:89:98:59:b1:78:7f:d3:e3:7e: c7:aa:bc:4b:a8:57:b3:bd:fc:05:09:3d:20:62:cf:b7:cb:4b: 73:29:a6:40:11:be:4b:4d:c7:b6:c8:04:4f:4a:86:e1:4e:d3: dd:13:a0:15:3e:22:d4:f8:d0:bd:94:93:18:49:d4:2d:c0:fc: 87:ab:06:cd:e8:8b:9b:bf:b4:74:ca:11:8e:05:27:04:9f:e3: 09:ea:5a:a4:04:80:ea:7c:43:bf:59:c2:56:22:49:83:0b:7d: 58:4f:14:d7:65:dc:64:87:5d:91:14:74:6f:5f:4b:a4:34:e1: e4:9e:7b:b8:55:41:88:74:4b:95:bc:3b:97:39:c7:4d:68:08: 72:80:9a:c5:5c:a4:55:2a:13:69:6e:65:8f:6a:08:b2:04:97: 1c:8f:5a:1e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUqkd50YC6PhQ6go2s7nlbHnNIq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy Q0NBMTU4OTAeFw0yNTA1MDQwNTE1MzVaFw0yNTA1MDkwOTI3MzVaMDMxMTAvBgNV BAMTKDI4RUFBQzRCQzgwRENEMTRCM0ZEMzhBRjM0NzEyNUJBQUQzRTNDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBENNeHuCC5i8BsA0BMW/wchHq vwaZvs0rZN3SZM2GKGxqf2xGTQjjhRKuju+cW6DCkcXzN5sQlpyy51Aca09OGTHQ 4vpnNh05fe6ld0CC5SsiSgPjxrxT/CLIBqwWtsM0/MykayeLU47w0oU829FBfnxt X+Y7lVGVvAUlUO4Fj7kk4KNGtcW6lFW/5XDofxzBzT9/BPrA42sDWwd15RbiOerF 6sBWJS6OcczodQhMmX0sg4L4X/YpiwCkblKuX/jhtQmZ2/92b3txvN5uya1x5mFv Sy0L7Iv51Iubhl3Pdc2fcrBiaeiDhK8q6zCaob5DevqiQqmf6rxYtpSgDcrzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKOqsS8gNzRSz/TivNHEluq0+PCUwHwYDVR0j BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5 Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4 QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5/L/mEW/R5mjIJoGkKjegqYcj HInjKhGI0036uCdO35aO3GazvaN/hbektQdt7xeHdkMAwinITgj6XUkU3a/FPW7/ UYy7JCTgRSxbQWoOkeFi+2D51ZZZWy5ABd8S3LVu9MOJmFmxeH/T437HqrxLqFez vfwFCT0gYs+3y0tzKaZAEb5LTce2yARPSobhTtPdE6AVPiLU+NC9lJMYSdQtwPyH qwbN6Iubv7R0yhGOBScEn+MJ6lqkBIDqfEO/WcJWIkmDC31YTxTXZdxkh12RFHRv X0ukNOHknnu4VUGIdEuVvDuXOcdNaAhygJrFXKRVKhNpbmWPagiyBJccj1oe -----END CERTIFICATE-----Generated at Sun May 4 14:46:10 2025 by rpki-client