$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft File: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft (raw, json) Hash identifier: ZkXX1rOfeuIyM384ZKOc7EP+risRi99ylbL4tPNB35I= Subject key identifier: AA:EF:7E:C1:76:49:95:8A:20:08:E9:A8:D1:1F:29:70:2F:00:0F:5E Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA Certificate issuer: /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Certificate serial: 6BDB2E8F747EACE90B812C931FC02BE459CE201D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft Manifest number: DA Signing time: Fri 09 May 2025 02:20:23 +0000 Manifest this update: Fri 09 May 2025 02:15:23 +0000 Manifest next update: Tue 13 May 2025 03:59:23 +0000 Files and hashes: 1: 3137392e302e39362e302f32322d3234203d3e20323731383736.roa (hash: Cw0vZv2Jgj2wqXBPQxsE5Dhkvc4LI4K/2JStcyGfQ/w=) 2: 323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (hash: QDGdpSjompnHuxfIn7sQ3auNFSevURCMD9/TvRt/Q38=) 3: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl (hash: ln23m6jeNrZElEnltLx9n1QZPY9Rzr5H40iCZSB0JBE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 03:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:db:2e:8f:74:7e:ac:e9:0b:81:2c:93:1f:c0:2b:e4:59:ce:20:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Validity Not Before: May 9 02:15:23 2025 GMT Not After : May 13 03:59:23 2025 GMT Subject: CN=AAEF7EC17649958A2008E9A8D11F29702F000F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:30:ab:4e:dc:c0:98:f0:97:c6:be:d4:7e: aa:c0:5c:58:80:92:9f:82:07:f8:44:d0:32:1f:d4: 78:59:38:31:af:29:32:56:1f:2f:e0:3c:67:2d:af: bd:85:41:24:d2:9e:10:f1:a5:df:32:f5:1d:d7:22: dc:ed:84:fc:2f:16:01:cb:01:35:8d:29:89:fc:db: 8b:ce:dd:73:2c:29:22:92:3a:0f:66:4d:99:9e:97: d8:3d:d5:27:1e:66:de:c2:c1:ca:00:54:26:1b:1e: 65:5a:f1:82:f8:d7:9d:a5:74:9d:3e:55:5d:31:37: 65:04:ea:bd:31:40:a2:f6:d0:1c:47:17:63:5f:74: 1b:05:d0:14:04:26:8d:67:29:13:6c:a4:d6:98:76: a3:d8:9a:fe:84:46:15:49:e9:05:3c:d6:34:a2:66: a3:89:d0:9f:9e:36:be:1b:87:b7:18:38:b1:dc:54: 2c:38:16:0d:80:54:6e:28:65:32:7b:20:a3:34:e8: 13:ce:61:ae:04:d1:2a:b4:13:4b:3d:7e:09:4a:95: ee:e1:32:c1:86:00:9c:97:2a:3e:67:01:eb:6f:84: de:d8:4c:88:d9:4a:69:a8:ae:fc:46:aa:72:cf:ee: 19:39:a3:a1:6e:ae:b6:b2:8b:6f:01:c6:1b:d5:f3: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EF:7E:C1:76:49:95:8A:20:08:E9:A8:D1:1F:29:70:2F:00:0F:5E X509v3 Authority Key Identifier: keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0f:47:7c:16:b2:c9:fc:24:76:4f:81:c6:43:91:17:8d:ef: 55:98:89:0f:91:4a:3d:4c:80:f4:e0:bf:14:b6:79:5a:8b:3b: d5:5f:81:4b:88:83:22:86:40:c1:3b:a7:56:98:04:ea:70:57: 51:4e:f8:a9:7a:e1:9b:06:6c:97:94:24:61:a7:b7:db:5e:c3: cf:2f:75:5b:35:9c:9f:d1:0b:5d:0b:0a:7c:bc:aa:10:57:1a: 2c:c6:ae:77:15:96:99:f2:fa:f3:5d:31:5e:e3:ee:8a:33:24: e1:04:c9:f3:d6:c6:ae:5f:56:67:e8:eb:2f:e6:97:2c:41:6b: 9b:60:82:40:e9:c0:29:fe:94:59:ed:a3:68:49:1d:e5:9a:6f: a9:83:75:65:41:18:75:13:33:9a:ea:a2:6e:fc:01:b4:1c:72: e5:8b:45:f3:97:45:6a:e2:e4:f3:fe:15:97:56:46:28:e0:07: b2:d8:50:90:40:78:cd:0f:99:6a:b4:96:e9:e9:ec:e7:35:3c: e0:34:c7:f2:ea:07:75:2b:34:5e:b9:c3:e0:73:b9:cb:ee:3c: 3e:78:d9:23:8a:b4:3a:0f:67:b0:1a:a8:8a:a6:78:ff:4e:ad: 3c:68:f4:16:9e:51:4a:77:af:a1:b0:50:72:13:88:fb:3a:7d: 3c:2a:c3:29 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa9suj3R+rOkLgSyTH8Ar5FnOIB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI4NjIwQUNFQTg4NDI0OTU2ODU1MDJDMkRENjU5QTQ0 QkRBQUFGQTAeFw0yNTA1MDkwMjE1MjNaFw0yNTA1MTMwMzU5MjNaMDMxMTAvBgNV BAMTKEFBRUY3RUMxNzY0OTk1OEEyMDA4RTlBOEQxMUYyOTcwMkYwMDBGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPzCrTtzAmPCXxr7UfqrAXFiA kp+CB/hE0DIf1HhZODGvKTJWHy/gPGctr72FQSTSnhDxpd8y9R3XItzthPwvFgHL ATWNKYn824vO3XMsKSKSOg9mTZmel9g91SceZt7CwcoAVCYbHmVa8YL4152ldJ0+ VV0xN2UE6r0xQKL20BxHF2NfdBsF0BQEJo1nKRNspNaYdqPYmv6ERhVJ6QU81jSi ZqOJ0J+eNr4bh7cYOLHcVCw4Fg2AVG4oZTJ7IKM06BPOYa4E0Sq0E0s9fglKle7h MsGGAJyXKj5nAetvhN7YTIjZSmmorvxGqnLP7hk5o6Furrayi28BxhvV898HAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqu9+wXZJlYogCOmo0R8pcC8AD14wHwYDVR0j BBgwFoAUK4YgrOqIQklWhVAsLdZZpEvaqvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRDExMjc2ODM1Mjk0RUFFNTMwQzc4QzQ3MTk2Q0ZGMzBD QTRCQjA0NTU3QzY4Rjg5RTQ0M0NGMzhGNUI2NjBDLzAvMkI4NjIwQUNFQTg4NDI0 OTU2ODU1MDJDMkRENjU5QTQ0QkRBQUFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjg2MjBBQ0VBODg0MjQ5NTY4 NTUwMkMyREQ2NTlBNDRCREFBQUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUQxMTI3NjgzNTI5NEVBRTUzMEM3OEM0NzE5NkNGRjMwQ0E0QkIwNDU1 N0M2OEY4OUU0NDNDRjM4RjVCNjYwQy8wLzJCODYyMEFDRUE4ODQyNDk1Njg1NTAy QzJERDY1OUE0NEJEQUFBRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFD0d8FrLJ/CR2T4HGQ5EXje9V mIkPkUo9TID04L8UtnlaizvVX4FLiIMihkDBO6dWmATqcFdRTvipeuGbBmyXlCRh p7fbXsPPL3VbNZyf0QtdCwp8vKoQVxosxq53FZaZ8vrzXTFe4+6KMyThBMnz1sau X1Zn6Osv5pcsQWubYIJA6cAp/pRZ7aNoSR3lmm+pg3VlQRh1EzOa6qJu/AG0HHLl i0Xzl0Vq4uTz/hWXVkYo4Aey2FCQQHjND5lqtJbp6eznNTzgNMfy6gd1KzReucPg c7nL7jw+eNkjirQ6D2ewGqiKpnj/Tq08aPQWnlFKd6+hsFByE4j7On08KsMp -----END CERTIFICATE-----Generated at Sat May 10 03:37:10 2025 by rpki-client