$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json) Hash identifier: FEruwxBafbHx6QCsmfy/7fIAkfOtyusOfOqp97Wxkuo= Subject key identifier: A6:F6:40:FF:E5:AD:8A:48:B6:70:C8:17:DD:9D:5C:C9:70:2E:E0:BE Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 2829E680429F17BAFE3CDF57016FF0928C687FD2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft Manifest number: DE Signing time: Fri 16 May 2025 11:25:17 +0000 Manifest this update: Fri 16 May 2025 11:20:17 +0000 Manifest next update: Thu 22 May 2025 01:29:17 +0000 Files and hashes: 1: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: tJNiguii6JSCa7DSX2rpEIeGk012/N1xq+39NRjpZQs=) 2: 323830333a346132303a3a2f33322d3332203d3e20323635383438.roa (hash: /INlcJc/KcMRifLcDdqXWwIVAexjHFg4O5X7DME1EmM=) 3: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: l0LWu22qOaLDlCthMeY/CvKaI4uUOaZIcvupuCI9a04=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:29:e6:80:42:9f:17:ba:fe:3c:df:57:01:6f:f0:92:8c:68:7f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: May 16 11:20:17 2025 GMT Not After : May 22 01:29:17 2025 GMT Subject: CN=A6F640FFE5AD8A48B670C817DD9D5CC9702EE0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:b5:fc:9b:cb:47:e8:c8:e6:e5:82:03:aa: d7:de:89:0b:a1:25:c2:55:04:0f:a9:65:32:b9:28: f3:f1:9d:32:83:1f:e3:86:50:c4:73:66:c9:50:77: 2b:a3:67:76:b0:c0:a0:ca:62:f3:12:8b:48:1c:44: 8e:6e:ce:08:a3:ec:40:6c:fe:ef:c3:9d:be:a9:10: 6e:bc:0f:cd:1b:35:04:ff:35:10:ba:b6:fb:81:e0: 45:ba:90:7d:96:d2:e9:7e:05:e5:4a:aa:8b:7e:66: cd:51:d3:64:44:dd:4c:78:25:95:07:ad:e2:c5:11: 55:9d:70:71:5e:66:b1:2c:81:e8:a7:21:c9:4b:c1: fb:c0:49:dc:71:d4:ba:97:b4:34:f3:92:27:b2:46: 8a:45:07:39:ca:44:88:e7:33:88:d4:20:be:26:cc: 6e:b3:15:1b:51:a6:cd:95:51:2f:4e:1f:40:2e:6c: 68:ca:07:a4:7c:c7:83:7a:ef:fc:3e:24:ce:73:81: 42:c3:54:af:be:9a:f6:d7:f9:07:1a:ba:64:8d:6e: 71:34:ca:e2:8e:62:d4:59:7d:25:10:81:eb:41:9c: 9c:53:c1:74:1e:56:b4:d5:67:fa:d7:a3:6f:3c:ec: 2b:1a:52:e6:98:6c:cd:61:95:59:f1:a3:76:6c:4b: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F6:40:FF:E5:AD:8A:48:B6:70:C8:17:DD:9D:5C:C9:70:2E:E0:BE X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:83:3c:a7:3f:63:01:15:2f:e2:3d:e3:24:b2:3b:96:44:bf: 78:56:23:24:dd:ab:b5:9d:eb:90:40:5f:3a:38:05:df:e4:c7: 34:73:72:f9:0e:05:de:28:72:e4:ca:fe:07:7e:93:2d:5b:d1: 48:92:bc:c1:3c:ed:3f:56:85:19:59:2d:1f:4b:42:fb:a0:72: fa:d6:b2:a5:23:ef:bd:a1:3e:a2:cf:c9:84:a5:ee:a1:a1:f8: c5:55:b9:99:4b:44:bf:68:e9:0d:92:9f:5a:86:db:b2:0c:9f: 71:16:eb:52:45:5c:68:75:d9:b7:74:1a:37:40:0d:a3:91:69: b0:56:b4:cf:72:a0:0a:4b:f7:9e:59:c2:c0:34:df:98:9a:80: 82:e7:fe:5a:40:ea:65:8c:51:f0:17:2c:97:b1:6f:bd:65:19: 6f:61:2c:b5:70:32:b9:b1:26:af:b7:82:2c:d9:4d:03:2a:fd: 4e:53:bb:ff:06:0a:97:51:8f:f1:35:49:b1:92:d8:be:bc:3f: e4:95:33:60:7a:4e:6f:fc:29:d3:b3:9d:5b:6b:c0:04:31:f4: 87:a1:ff:52:12:2f:3e:99:2d:72:70:ba:d1:48:17:b7:71:d4: ab:ae:f3:4e:9c:a2:7c:7e:a4:e4:cf:16:56:83:72:c8:75:c9: 06:10:41:57 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKCnmgEKfF7r+PN9XAW/wkoxof9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNTA1MTYxMTIwMTdaFw0yNTA1MjIwMTI5MTdaMDMxMTAvBgNV BAMTKEE2RjY0MEZGRTVBRDhBNDhCNjcwQzgxN0REOUQ1Q0M5NzAyRUUwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2rX8m8tH6Mjm5YIDqtfeiQuh JcJVBA+pZTK5KPPxnTKDH+OGUMRzZslQdyujZ3awwKDKYvMSi0gcRI5uzgij7EBs /u/Dnb6pEG68D80bNQT/NRC6tvuB4EW6kH2W0ul+BeVKqot+Zs1R02RE3Ux4JZUH reLFEVWdcHFeZrEsgeinIclLwfvASdxx1LqXtDTzkieyRopFBznKRIjnM4jUIL4m zG6zFRtRps2VUS9OH0AubGjKB6R8x4N67/w+JM5zgULDVK++mvbX+QcaumSNbnE0 yuKOYtRZfSUQgetBnJxTwXQeVrTVZ/rXo2887CsaUuaYbM1hlVnxo3ZsS2E3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpvZA/+Wtiki2cMgX3Z1cyXAu4L4wHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzI4QTdENTNCQUM1MzEwNUNBOEEwQjNB MUM5NUMyRTZBNzE5ODE2NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+gzynP2MBFS/iPeMksjuWRL94 ViMk3au1neuQQF86OAXf5Mc0c3L5DgXeKHLkyv4HfpMtW9FIkrzBPO0/VoUZWS0f S0L7oHL61rKlI++9oT6iz8mEpe6hofjFVbmZS0S/aOkNkp9ahtuyDJ9xFutSRVxo ddm3dBo3QA2jkWmwVrTPcqAKS/eeWcLANN+YmoCC5/5aQOpljFHwFyyXsW+9ZRlv YSy1cDK5sSavt4Is2U0DKv1OU7v/BgqXUY/xNUmxkti+vD/klTNgek5v/CnTs51b a8AEMfSHof9SEi8+mS1ycLrRSBe3cdSrrvNOnKJ8fqTkzxZWg3LIdckGEEFX -----END CERTIFICATE-----Generated at Sun May 18 15:41:59 2025 by rpki-client