$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft File: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft (raw, json) Hash identifier: I/Er8qaHedRsMPZfiJL5MYqHidNgDrROG6lQ02xqcWk= Subject key identifier: 1B:7C:9F:A7:36:25:F2:3D:63:A8:34:0C:43:A5:33:C2:D7:32:58:66 Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA Certificate issuer: /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Certificate serial: 7363A08230AB73A04730D374A6724B628DE24C58 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft Manifest number: D4 Signing time: Sat 26 Apr 2025 18:53:52 +0000 Manifest this update: Sat 26 Apr 2025 18:48:52 +0000 Manifest next update: Fri 02 May 2025 06:18:52 +0000 Files and hashes: 1: 3137392e302e39362e302f32322d3234203d3e20323731383736.roa (hash: Cw0vZv2Jgj2wqXBPQxsE5Dhkvc4LI4K/2JStcyGfQ/w=) 2: 323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (hash: QDGdpSjompnHuxfIn7sQ3auNFSevURCMD9/TvRt/Q38=) 3: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl (hash: Xg9IvYLtdeZvzivT0tovnTJOiKuWWWqtBaCYqIePIsc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:63:a0:82:30:ab:73:a0:47:30:d3:74:a6:72:4b:62:8d:e2:4c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Validity Not Before: Apr 26 18:48:52 2025 GMT Not After : May 2 06:18:52 2025 GMT Subject: CN=1B7C9FA73625F23D63A8340C43A533C2D7325866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:de:23:a7:07:e7:22:90:c1:62:30:fe:b9: 15:20:ba:04:45:c0:6d:f4:17:47:79:f9:78:ff:f5: 17:3c:0e:e6:55:e9:4f:07:b6:4b:c3:dd:3a:ef:79: e5:71:5c:11:19:0c:49:0a:e3:93:9d:9a:16:2f:b6: e7:3e:ea:f7:c0:3c:30:00:30:24:c8:f5:06:bb:5e: 5b:d2:67:23:30:2b:4f:e6:ed:8d:d3:c5:51:be:39: 5a:49:5a:27:00:29:46:25:1f:3d:33:28:48:5c:53: 34:d4:0c:1c:10:a7:e2:fa:2a:1b:6e:49:69:42:5a: f8:e8:fc:3f:64:6f:9b:e4:b5:8e:e4:d9:8d:89:33: db:f1:77:b0:55:84:26:62:cc:d0:5e:9e:88:a5:09: b2:58:fa:27:78:40:91:fc:84:96:ae:4e:35:ef:e8: 6a:9a:ab:2a:61:bc:44:0d:5f:8c:6e:9d:85:20:e5: 4a:0c:ec:c3:09:e3:e5:33:cc:d1:1b:cd:48:20:bd: 7a:1f:71:a2:89:ac:9f:6a:6a:07:52:8c:40:44:e7: aa:2e:81:c5:44:35:44:ff:f3:9f:d4:06:57:a7:57: 8f:3b:5f:21:f1:63:3a:0b:3e:d3:98:55:2f:95:70: 94:40:55:4c:56:cb:7c:7b:a4:c1:36:b3:dd:fe:65: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7C:9F:A7:36:25:F2:3D:63:A8:34:0C:43:A5:33:C2:D7:32:58:66 X509v3 Authority Key Identifier: keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5d:f8:27:50:b1:8a:8a:70:c0:e7:fe:6e:35:65:14:c1:e6: da:18:8a:15:f9:2f:17:e3:d2:27:71:12:7f:89:87:58:4e:d7: ed:de:08:36:3a:26:29:07:f1:29:0c:e4:42:9d:d9:25:a9:48: 14:97:1c:71:9c:14:de:ed:06:92:65:d6:2b:f7:09:6f:7d:f1: 3b:ab:9d:d5:23:e1:1e:51:4f:02:91:da:91:79:d4:02:2d:5b: 80:39:ab:41:2b:2f:69:14:06:b0:9b:42:d9:01:39:b4:9a:30: 6a:3b:04:18:a0:ad:b8:54:92:f5:e3:e7:03:f1:89:36:e3:d1: 77:a0:23:4c:0b:de:95:44:16:48:75:ce:73:a4:99:f3:fc:bb: 71:db:cc:94:0c:f8:83:7e:06:73:ed:2f:09:c5:be:a5:69:b4: 74:34:25:03:e3:8b:2c:cc:34:89:9e:c8:6e:e8:38:05:4c:d1: 0a:89:80:fe:88:cd:25:7e:c2:81:05:fe:79:da:b8:d1:0b:fb: d1:0c:71:b3:1b:6f:34:3a:12:a7:64:11:1d:bf:c9:60:5b:3c: 3d:79:e2:34:6e:f7:c5:64:32:01:e4:7b:8c:95:e4:7c:95:9f: d4:fd:e0:1d:e4:4f:e2:34:af:e4:af:94:e6:aa:a3:4c:bc:0d: 35:2b:67:5a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUc2OggjCrc6BHMNN0pnJLYo3iTFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI4NjIwQUNFQTg4NDI0OTU2ODU1MDJDMkRENjU5QTQ0 QkRBQUFGQTAeFw0yNTA0MjYxODQ4NTJaFw0yNTA1MDIwNjE4NTJaMDMxMTAvBgNV BAMTKDFCN0M5RkE3MzYyNUYyM0Q2M0E4MzQwQzQzQTUzM0MyRDczMjU4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqx94jpwfnIpDBYjD+uRUgugRF wG30F0d5+Xj/9Rc8DuZV6U8HtkvD3TrveeVxXBEZDEkK45OdmhYvtuc+6vfAPDAA MCTI9Qa7XlvSZyMwK0/m7Y3TxVG+OVpJWicAKUYlHz0zKEhcUzTUDBwQp+L6Khtu SWlCWvjo/D9kb5vktY7k2Y2JM9vxd7BVhCZizNBenoilCbJY+id4QJH8hJauTjXv 6GqaqyphvEQNX4xunYUg5UoM7MMJ4+UzzNEbzUggvXofcaKJrJ9qagdSjEBE56ou gcVENUT/85/UBlenV487XyHxYzoLPtOYVS+VcJRAVUxWy3x7pME2s93+ZaVpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUG3yfpzYl8j1jqDQMQ6UzwtcyWGYwHwYDVR0j BBgwFoAUK4YgrOqIQklWhVAsLdZZpEvaqvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRDExMjc2ODM1Mjk0RUFFNTMwQzc4QzQ3MTk2Q0ZGMzBD QTRCQjA0NTU3QzY4Rjg5RTQ0M0NGMzhGNUI2NjBDLzAvMkI4NjIwQUNFQTg4NDI0 OTU2ODU1MDJDMkRENjU5QTQ0QkRBQUFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjg2MjBBQ0VBODg0MjQ5NTY4 NTUwMkMyREQ2NTlBNDRCREFBQUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUQxMTI3NjgzNTI5NEVBRTUzMEM3OEM0NzE5NkNGRjMwQ0E0QkIwNDU1 N0M2OEY4OUU0NDNDRjM4RjVCNjYwQy8wLzJCODYyMEFDRUE4ODQyNDk1Njg1NTAy QzJERDY1OUE0NEJEQUFBRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEXfgnULGKinDA5/5uNWUUweba GIoV+S8X49IncRJ/iYdYTtft3gg2OiYpB/EpDORCndklqUgUlxxxnBTe7QaSZdYr 9wlvffE7q53VI+EeUU8CkdqRedQCLVuAOatBKy9pFAawm0LZATm0mjBqOwQYoK24 VJL14+cD8Yk249F3oCNMC96VRBZIdc5zpJnz/Ltx28yUDPiDfgZz7S8Jxb6labR0 NCUD44sszDSJnshu6DgFTNEKiYD+iM0lfsKBBf552rjRC/vRDHGzG280OhKnZBEd v8lgWzw9eeI0bvfFZDIB5HuMleR8lZ/U/eAd5E/iNK/kr5TmqqNMvA01K2da -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:56 2025 by rpki-client on console.sobornost.net