$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json) Hash identifier: 2c5lsL9wBARFa8Ak3j4rgpL3YhcliD/lLUiZ67WMLtM= Subject key identifier: B9:84:D1:39:1B:BA:7F:63:6B:27:52:1F:10:26:51:FD:FA:10:0B:24 Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 311FD26D4D78770BF04371CDF3BFE4DBCE9E0FD4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft Manifest number: DB Signing time: Thu 08 May 2025 20:57:13 +0000 Manifest this update: Thu 08 May 2025 20:52:13 +0000 Manifest next update: Wed 14 May 2025 07:22:13 +0000 Files and hashes: 1: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: l0LWu22qOaLDlCthMeY/CvKaI4uUOaZIcvupuCI9a04=) 2: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: nbUod7sI5UKgoTCeIv03QRsGf1O/wj5PqmSJO56DXnc=) 3: 323830333a346132303a3a2f33322d3332203d3e20323635383438.roa (hash: /INlcJc/KcMRifLcDdqXWwIVAexjHFg4O5X7DME1EmM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 00:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1f:d2:6d:4d:78:77:0b:f0:43:71:cd:f3:bf:e4:db:ce:9e:0f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: May 8 20:52:13 2025 GMT Not After : May 14 07:22:13 2025 GMT Subject: CN=B984D1391BBA7F636B27521F102651FDFA100B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2b:57:cf:6b:cb:a0:c0:36:9f:6e:3d:24:39: 69:16:11:52:6f:83:cf:96:e2:2a:d3:00:8d:32:95: dc:de:e7:3c:96:9e:41:80:4d:a0:88:58:63:4a:d8: 2e:f7:7d:44:4c:65:a6:34:76:73:77:8d:6b:63:b3: 5a:a5:e3:3c:5e:7f:4a:c8:9d:df:b7:06:a7:2c:b8: bd:74:8e:9c:74:ca:44:68:c2:77:42:04:69:68:46: 6d:ff:61:b7:19:05:e7:e0:e5:05:21:41:66:28:f2: c0:8b:dc:7e:9e:ae:40:a9:4f:48:4c:a4:68:1d:f7: 19:74:7a:7d:77:d2:d3:e2:5f:82:f5:3f:1d:94:fb: 55:5a:3f:d0:21:e9:05:cd:51:67:92:df:49:2a:93: 9b:cd:69:a5:7b:a6:6f:fe:40:75:66:f6:23:e8:81: 69:bc:bb:2c:13:26:92:90:31:f5:ea:bf:8e:0c:f3: 9a:21:07:20:72:3f:d8:d5:c6:ac:7d:68:13:fb:1c: 5f:eb:7c:a4:83:2c:fa:87:d6:bc:ca:83:fb:e5:dc: ec:d1:ff:06:24:7e:80:c7:d8:6c:f5:3b:4c:71:a5: 4d:8c:6c:c6:13:aa:21:95:15:b2:24:5c:36:39:7f: d7:91:f5:f4:20:3a:97:ee:bf:18:74:e0:8f:56:20: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:84:D1:39:1B:BA:7F:63:6B:27:52:1F:10:26:51:FD:FA:10:0B:24 X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0c:1c:d1:af:35:80:85:ff:19:ec:03:7a:7e:c8:12:9b:74: 8f:8f:62:fd:58:e5:ee:72:45:67:2a:96:85:f4:20:32:dc:33: 0a:7d:69:1c:69:32:9b:40:1f:15:21:d3:31:92:d0:ee:68:c8: 4d:dd:59:c1:11:72:c2:aa:a1:a0:b1:ab:10:8f:e3:15:47:4a: 6b:fd:4c:37:63:ac:98:8f:59:0d:74:73:8b:ea:a8:a9:09:22: ae:ca:b8:eb:f1:7b:63:76:c6:14:fe:6b:46:4c:6b:d6:8f:dd: 86:a5:bd:fa:96:c6:b3:7a:db:88:f0:09:a1:ad:9a:2e:ba:c2: 0c:f4:86:78:2f:4e:48:81:ec:74:4a:d1:7f:bb:a9:3b:3d:a0: 01:78:93:99:d2:39:c9:06:88:39:21:ee:f5:27:44:60:0e:8b: 6b:65:ac:23:6f:cf:5a:7a:1c:92:87:23:80:a2:a8:33:f4:c2: 80:0c:d8:56:19:df:c8:32:a1:d0:6f:79:8b:ee:26:05:c2:7b: 13:f1:6d:8c:ed:9f:7d:a8:ed:45:f5:0e:c5:a8:7a:24:86:31: bf:51:7b:d8:30:83:72:b4:f7:7f:42:3b:cf:e3:d7:df:12:3f: 9a:0a:08:f3:00:c3:00:1c:3a:4f:7b:a8:5e:d1:c7:20:6e:34: ba:2e:df:82 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMR/SbU14dwvwQ3HN87/k286eD9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNTA1MDgyMDUyMTNaFw0yNTA1MTQwNzIyMTNaMDMxMTAvBgNV BAMTKEI5ODREMTM5MUJCQTdGNjM2QjI3NTIxRjEwMjY1MUZERkExMDBCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoK1fPa8ugwDafbj0kOWkWEVJv g8+W4irTAI0yldze5zyWnkGATaCIWGNK2C73fURMZaY0dnN3jWtjs1ql4zxef0rI nd+3BqcsuL10jpx0ykRowndCBGloRm3/YbcZBefg5QUhQWYo8sCL3H6erkCpT0hM pGgd9xl0en130tPiX4L1Px2U+1VaP9Ah6QXNUWeS30kqk5vNaaV7pm/+QHVm9iPo gWm8uywTJpKQMfXqv44M85ohByByP9jVxqx9aBP7HF/rfKSDLPqH1rzKg/vl3OzR /wYkfoDH2Gz1O0xxpU2MbMYTqiGVFbIkXDY5f9eR9fQgOpfuvxh04I9WIBHpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuYTRORu6f2NrJ1IfECZR/foQCyQwHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzI4QTdENTNCQUM1MzEwNUNBOEEwQjNB MUM5NUMyRTZBNzE5ODE2NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSDBzRrzWAhf8Z7AN6fsgSm3SP j2L9WOXuckVnKpaF9CAy3DMKfWkcaTKbQB8VIdMxktDuaMhN3VnBEXLCqqGgsasQ j+MVR0pr/Uw3Y6yYj1kNdHOL6qipCSKuyrjr8XtjdsYU/mtGTGvWj92Gpb36lsaz etuI8AmhrZouusIM9IZ4L05Igex0StF/u6k7PaABeJOZ0jnJBog5Ie71J0RgDotr Zawjb89aehyShyOAoqgz9MKADNhWGd/IMqHQb3mL7iYFwnsT8W2M7Z99qO1F9Q7F qHokhjG/UXvYMINytPd/QjvP49ffEj+aCgjzAMMAHDpPe6he0ccgbjS6Lt+C -----END CERTIFICATE-----Generated at Sat May 10 04:02:23 2025 by rpki-client