$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft File: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft (raw, json) Hash identifier: To8JHK/0STU9lVs3e7w5qnrJqlBLKhbwYQcvwaZM3r8= Subject key identifier: B8:76:0B:DD:A7:8F:68:D0:07:BC:90:E2:68:96:CA:29:3C:1B:5E:86 Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 Certificate issuer: /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Certificate serial: 25C10D3DB059F1ADF315560E2EEA914A6A6FCA25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft Manifest number: D4 Signing time: Sat 03 May 2025 06:12:03 +0000 Manifest this update: Sat 03 May 2025 06:07:03 +0000 Manifest next update: Thu 08 May 2025 17:38:03 +0000 Files and hashes: 1: 3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa (hash: ojMvfXSAXgYg2HNtqEcUZn9oeO+XyPGGrQ5gFDlrsbM=) 2: 323830333a333265303a3a2f33322d3332203d3e20323639393238.roa (hash: nB76hXAwUoryEDuU2ZQcyx6V4UUAq3evR1ObFKMBf0k=) 3: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl (hash: m3wQONYICe8OshNdwqVFhzW4y6YImarVs4ua5YWfAIA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c1:0d:3d:b0:59:f1:ad:f3:15:56:0e:2e:ea:91:4a:6a:6f:ca:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Validity Not Before: May 3 06:07:03 2025 GMT Not After : May 8 17:38:03 2025 GMT Subject: CN=B8760BDDA78F68D007BC90E26896CA293C1B5E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:bf:d2:f7:1e:95:ad:89:83:05:d0:2f:bb: a1:81:04:1c:49:88:b5:eb:7e:1b:8d:fb:7b:fc:21: e1:47:ba:c2:fa:0b:4e:e6:67:a4:88:71:0d:02:04: bd:54:52:90:31:05:d3:8e:c9:6a:62:6b:1d:ed:24: 9a:2f:fd:eb:7e:4d:76:c3:fb:83:be:7b:c5:df:6b: 84:b1:c4:19:0c:d6:41:01:31:2c:48:ed:7c:ac:2b: 96:d8:fa:ff:13:a7:79:7f:d0:14:f5:d0:5d:04:cb: a1:d4:ea:19:a5:1f:a3:e2:62:46:33:1e:f7:ed:c2: 43:46:a9:3f:3d:16:79:a5:70:8e:fd:c2:f0:37:2b: 16:53:43:62:1b:26:f7:82:6b:20:e9:16:c0:66:ec: 6b:5b:e7:f5:41:4c:11:f6:39:03:f4:01:b2:2c:56: 14:e3:93:28:96:c2:6e:3d:ae:0c:b9:8a:e6:7e:1b: b9:84:42:24:80:04:0a:2b:65:b1:7f:75:9e:49:90: 4c:13:63:26:39:71:1f:b4:47:25:00:5c:87:ab:fe: 48:f1:a8:22:71:23:2a:79:64:32:4f:c7:7d:5c:58: ec:a5:13:27:a4:b1:79:4a:97:d6:ae:ea:fa:e0:50: e9:4f:8c:bb:4b:c5:54:a9:39:10:83:3f:4e:3d:62: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:76:0B:DD:A7:8F:68:D0:07:BC:90:E2:68:96:CA:29:3C:1B:5E:86 X509v3 Authority Key Identifier: keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5e:45:13:76:e6:09:ea:dd:87:1e:08:95:0e:d4:50:46:d8: ba:22:4d:c8:77:fa:8f:be:85:7b:31:29:89:dc:55:8a:d2:66: f3:d8:a4:36:5f:90:9b:e7:29:7e:d9:28:9b:c4:b6:69:c3:83: 8c:b8:13:79:86:02:fe:70:49:59:4f:91:38:91:40:98:e1:f8: 91:9c:32:3c:7a:ab:4f:32:3c:99:1f:1c:ab:e8:41:df:9d:9f: dd:93:c6:19:ac:f6:67:c3:97:8d:da:4e:9d:92:09:7e:a4:40: 91:8e:a8:ca:68:c5:39:30:06:c8:b9:2d:65:ce:58:f6:c3:21: 9f:d6:5e:96:87:10:1f:e4:35:22:3b:6d:99:ab:f5:fd:cf:9f: 05:c3:66:71:19:c7:8f:34:d2:c0:be:31:96:0a:20:32:8a:bc: fc:2d:10:65:2c:99:0e:cb:df:32:b5:80:ec:88:fe:7f:2f:50: 97:aa:02:7b:08:cf:11:e4:f8:3d:12:67:9c:b0:c3:a0:aa:26: cf:78:9e:3d:40:97:ba:4e:34:dd:ef:f4:ec:65:e1:25:e5:94: 45:e1:b0:19:19:81:e6:00:2c:a8:a6:a9:2a:a3:e9:64:5d:f6: 60:b8:44:ae:9e:dd:37:67:cd:2e:2d:6c:ba:06:97:cf:eb:e4: f1:a8:5c:d3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJcENPbBZ8a3zFVYOLuqRSmpvyiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIyQ0Q0RDZENDVFQUMyNUVFOTdENUU2NkJFOTM4RUYz MUE2MTY4NjAeFw0yNTA1MDMwNjA3MDNaFw0yNTA1MDgxNzM4MDNaMDMxMTAvBgNV BAMTKEI4NzYwQkREQTc4RjY4RDAwN0JDOTBFMjY4OTZDQTI5M0MxQjVFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMb/S9x6VrYmDBdAvu6GBBBxJ iLXrfhuN+3v8IeFHusL6C07mZ6SIcQ0CBL1UUpAxBdOOyWpiax3tJJov/et+TXbD +4O+e8Xfa4SxxBkM1kEBMSxI7XysK5bY+v8Tp3l/0BT10F0Ey6HU6hmlH6PiYkYz HvftwkNGqT89FnmlcI79wvA3KxZTQ2IbJveCayDpFsBm7Gtb5/VBTBH2OQP0AbIs VhTjkyiWwm49rgy5iuZ+G7mEQiSABAorZbF/dZ5JkEwTYyY5cR+0RyUAXIer/kjx qCJxIyp5ZDJPx31cWOylEyeksXlKl9au6vrgUOlPjLtLxVSpORCDP049YlSRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuHYL3aePaNAHvJDiaJbKKTwbXoYwHwYDVR0j BBgwFoAUKyzU1tRerCXul9Xma+k47zGmFoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84Qjg4NEY1QTlGQTQ3MjhFODYwOEEzRERGODIxODA4NDkx M0I4QzE2QzdEMEZDOUZCMUUzODU3NEZERDE1NDU0LzAvMkIyQ0Q0RDZENDVFQUMy NUVFOTdENUU2NkJFOTM4RUYzMUE2MTY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjJDRDRENkQ0NUVBQzI1RUU5 N0Q1RTY2QkU5MzhFRjMxQTYxNjg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEI4ODRGNUE5RkE0NzI4RTg2MDhBM0RERjgyMTgwODQ5MTNCOEMxNkM3 RDBGQzlGQjFFMzg1NzRGREQxNTQ1NC8wLzJCMkNENEQ2RDQ1RUFDMjVFRTk3RDVF NjZCRTkzOEVGMzFBNjE2ODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlXkUTduYJ6t2HHgiVDtRQRti6 Ik3Id/qPvoV7MSmJ3FWK0mbz2KQ2X5Cb5yl+2SibxLZpw4OMuBN5hgL+cElZT5E4 kUCY4fiRnDI8eqtPMjyZHxyr6EHfnZ/dk8YZrPZnw5eN2k6dkgl+pECRjqjKaMU5 MAbIuS1lzlj2wyGf1l6WhxAf5DUiO22Zq/X9z58Fw2ZxGcePNNLAvjGWCiAyirz8 LRBlLJkOy98ytYDsiP5/L1CXqgJ7CM8R5Pg9EmecsMOgqibPeJ49QJe6TjTd7/Ts ZeEl5ZRF4bAZGYHmACyopqkqo+lkXfZguESunt03Z80uLWy6BpfP6+TxqFzT -----END CERTIFICATE-----Generated at Sun May 4 10:32:25 2025 by rpki-client