$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: F5NgNyFyJgTzpZK6vcYMZ71lB+YywMpBWzzn23EdH0A= Subject key identifier: B9:5D:45:DE:6F:D1:3C:C4:FE:F0:D4:6C:07:FF:81:FE:FA:D1:DD:2F Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 0D8766FF8A20499FDB73AAFEEE1E2D5645C790E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: D1 Signing time: Sun 27 Apr 2025 23:35:53 +0000 Manifest this update: Sun 27 Apr 2025 23:30:53 +0000 Manifest next update: Sat 03 May 2025 17:56:53 +0000 Files and hashes: 1: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: 0u1JwyaghRdRs86ITSd9fQ0p2nE9sCaDMHfTloIRDQY=) 2: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: Mu1aiZbTuKob4P/uHzlI5H1bWCj0RfxIyLfLzn5wSP0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:87:66:ff:8a:20:49:9f:db:73:aa:fe:ee:1e:2d:56:45:c7:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Apr 27 23:30:53 2025 GMT Not After : May 3 17:56:53 2025 GMT Subject: CN=B95D45DE6FD13CC4FEF0D46C07FF81FEFAD1DD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:05:bc:25:e9:15:1f:00:b3:d6:57:cf:82: ae:5d:b8:ce:09:3b:5e:59:6b:39:42:0a:4e:19:78: 47:3a:a1:39:e6:65:d7:29:64:a2:a2:82:e2:1d:96: ab:bf:94:c2:16:a8:bf:0d:c1:8e:a8:89:0f:c8:55: fe:64:07:02:d7:66:2f:97:80:c8:cc:9f:4d:be:f5: 68:47:ce:01:bb:48:89:20:ee:48:30:fe:53:7f:6f: 61:56:86:58:f9:c5:ef:1a:e2:da:81:32:6b:6f:96: 22:47:a5:50:63:0d:8f:9d:81:f4:1b:04:bf:cb:10: 99:39:22:37:b6:25:f3:5e:16:7a:71:ac:c3:23:e9: 84:e4:f7:6b:ae:f9:b6:c2:bf:06:0d:16:30:59:bb: dd:8c:4b:a6:6d:5e:96:bd:13:0d:c9:bb:f6:6a:29: 36:09:e0:c1:f3:28:2a:ea:0f:ce:29:71:20:7b:dc: ed:b7:19:f9:a1:4e:5b:86:39:ed:b5:8e:5a:bf:84: 66:c2:00:3a:24:f8:22:0b:f1:34:66:5a:28:cc:d9: 7b:74:77:f2:ed:4e:85:8e:8d:5e:c1:68:39:a1:98: b8:e5:04:35:2c:51:c6:82:f2:e8:70:7a:e7:0a:56: a2:f4:75:22:30:14:91:3a:1a:93:85:bb:57:c0:0b: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5D:45:DE:6F:D1:3C:C4:FE:F0:D4:6C:07:FF:81:FE:FA:D1:DD:2F X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:76:0f:6e:0b:33:17:52:91:c0:8a:25:32:03:39:7a:65:52: 6d:b9:cd:93:2d:cb:44:6b:bb:79:24:de:23:6a:23:37:50:08: 8a:66:df:c4:27:93:d3:62:44:c2:f5:d6:3b:84:1c:aa:b4:d1: dc:3a:ec:dd:1a:04:a1:74:1e:d0:f1:08:0b:74:63:84:af:84: f5:0c:47:49:c0:09:19:82:d1:e4:0e:8c:ea:bd:e7:96:f5:38: 0c:b9:d0:8b:a6:25:50:00:8b:bd:f8:89:84:47:b1:79:02:c2: 1f:17:62:0a:34:03:c3:76:c6:ec:0c:9c:31:46:07:00:93:ea: e0:41:54:da:d4:b1:78:74:c1:1f:3d:7d:1f:dc:c7:3a:18:ab: 29:f2:c1:1c:cf:d3:c3:7d:ee:5a:09:01:b6:20:72:18:ae:f8: b2:6b:23:e7:95:74:97:e8:3f:fa:ea:8f:aa:e6:5a:fa:61:c0: 46:3d:8e:cd:49:22:c7:cd:39:c1:4f:2f:f8:cb:ee:16:e3:a6: 8e:6e:e0:0b:95:4d:38:34:a7:0a:f1:31:71:78:61:e3:b7:a4: bb:c1:8d:24:73:cb:dc:be:37:06:8d:83:c6:14:b8:ce:c4:6c: 15:b2:08:27:6f:61:10:29:34:c0:85:7d:0f:65:d4:24:7e:13: 3b:7a:da:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDYdm/4ogSZ/bc6r+7h4tVkXHkOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNTA0MjcyMzMwNTNaFw0yNTA1MDMxNzU2NTNaMDMxMTAvBgNV BAMTKEI5NUQ0NURFNkZEMTNDQzRGRUYwRDQ2QzA3RkY4MUZFRkFEMUREMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvAW8JekVHwCz1lfPgq5duM4J O15ZazlCCk4ZeEc6oTnmZdcpZKKiguIdlqu/lMIWqL8NwY6oiQ/IVf5kBwLXZi+X gMjMn02+9WhHzgG7SIkg7kgw/lN/b2FWhlj5xe8a4tqBMmtvliJHpVBjDY+dgfQb BL/LEJk5Ije2JfNeFnpxrMMj6YTk92uu+bbCvwYNFjBZu92MS6ZtXpa9Ew3Ju/Zq KTYJ4MHzKCrqD84pcSB73O23GfmhTluGOe21jlq/hGbCADok+CIL8TRmWijM2Xt0 d/LtToWOjV7BaDmhmLjlBDUsUcaC8uhweucKVqL0dSIwFJE6GpOFu1fAC+JTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuV1F3m/RPMT+8NRsB/+B/vrR3S8wHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCodg9uCzMXUpHAiiUyAzl6ZVJt uc2TLctEa7t5JN4jaiM3UAiKZt/EJ5PTYkTC9dY7hByqtNHcOuzdGgShdB7Q8QgL dGOEr4T1DEdJwAkZgtHkDozqveeW9TgMudCLpiVQAIu9+ImER7F5AsIfF2IKNAPD dsbsDJwxRgcAk+rgQVTa1LF4dMEfPX0f3Mc6GKsp8sEcz9PDfe5aCQG2IHIYrviy ayPnlXSX6D/66o+q5lr6YcBGPY7NSSLHzTnBTy/4y+4W46aObuALlU04NKcK8TFx eGHjt6S7wY0kc8vcvjcGjYPGFLjOxGwVsggnb2EQKTTAhX0PZdQkfhM7etp+ -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:03 2025 by rpki-client on console.sobornost.net