$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft File: A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft (raw, json) Hash identifier: MZjCwZKYk3oA9VbyUQudmLLoRNugcUvYPEXpn8/6yWY= Subject key identifier: 2F:C4:C8:9A:0B:3D:3C:79:66:79:D9:7D:B0:B3:A9:00:C5:E8:1C:CB Authority key identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B Certificate issuer: /CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B Certificate serial: 1AA93C5C5E20E7FBC8050C8D24FE544A878F2165 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft Manifest number: D2 Signing time: Mon 28 Apr 2025 07:10:42 +0000 Manifest this update: Mon 28 Apr 2025 07:05:42 +0000 Manifest next update: Fri 02 May 2025 22:30:42 +0000 Files and hashes: 1: A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl (hash: JvTpL6l/xp6orE0dkWqJn7A6sDqAtegOir8UoJym9pQ=) 2: 323830313a3131613a3a2f34382d3438203d3e20323639393534.roa (hash: 5YWmpRJNThdeoP1c2rXgstXcNKrcwghnRUNmlLWXYsQ=) 3: 3139302e38332e37382e302f32332d3234203d3e20323639393534.roa (hash: 6AhZWixzGBkjR0Hf407t+K70YYPyuXI93fD70/ufhwc=) 4: 323830313a3131613a3a2f34302d3430203d3e20323639393534.roa (hash: ov/YcoE+Pl5ZeOViK/d1j1p6oPx6u+Abytaiu13HuG0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a9:3c:5c:5e:20:e7:fb:c8:05:0c:8d:24:fe:54:4a:87:8f:21:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B Validity Not Before: Apr 28 07:05:42 2025 GMT Not After : May 2 22:30:42 2025 GMT Subject: CN=2FC4C89A0B3D3C796679D97DB0B3A900C5E81CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0e:0f:82:38:8a:de:4f:d6:8c:58:18:25:5a: 0e:6d:de:3e:28:1a:f9:fa:9e:b9:e5:57:a0:0f:51: 67:70:88:75:45:71:3b:b7:b6:b3:a0:5a:6b:01:3f: 48:36:16:0a:51:40:db:2b:a7:8e:15:08:82:b1:27: 80:96:a7:85:a9:a1:03:ae:44:5e:0b:0d:bf:a9:de: 72:ea:e3:f5:ad:34:21:5f:9d:1e:b6:b8:d2:cf:13: b5:10:86:72:ae:dc:bc:9a:8b:6f:49:17:15:7d:80: 88:48:a1:6f:44:c0:22:1a:d0:33:7a:be:7f:aa:6e: 39:3f:25:8a:0d:76:da:c9:f0:f6:05:54:27:ff:34: be:95:1c:d5:76:d0:c0:90:f1:61:e4:1a:73:1f:ac: ac:21:4c:a9:8b:ff:94:62:93:8d:8e:06:79:6b:f7: f1:4e:62:1d:23:a7:ad:65:71:d6:75:3e:7c:e1:7c: 02:74:f5:17:19:9a:1b:e9:4b:00:12:1b:bd:3d:81: 13:fb:77:31:5a:f8:cb:cb:68:3e:73:e1:2f:7c:04: a9:38:fc:37:f9:7d:3c:ed:71:9b:12:7f:5f:e0:94: 55:8d:6d:9d:cc:58:bd:e5:0c:bf:d0:3c:69:02:2e: 7d:f5:a6:16:9e:ee:86:1e:e1:7a:b3:6b:e6:93:de: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C4:C8:9A:0B:3D:3C:79:66:79:D9:7D:B0:B3:A9:00:C5:E8:1C:CB X509v3 Authority Key Identifier: keyid:A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b9:63:23:9e:07:7d:04:d4:1e:e4:f6:45:d3:a8:da:d9:3b: c8:01:0e:cd:db:d6:0e:50:84:0f:db:7b:2e:e2:c8:66:b2:28: 74:6c:56:32:ed:b6:7a:93:a6:0f:e1:ee:bc:05:e4:88:9f:79: 04:9e:2f:75:c0:64:99:b3:3b:80:3e:01:5a:f4:9a:e8:d6:41: c3:ab:de:40:23:a6:ff:66:cf:59:2e:47:7c:55:0b:06:41:6c: 2d:9b:f1:be:8a:1f:09:db:30:75:0c:b0:be:a1:b3:9a:10:9d: 9c:cc:b3:38:c7:93:32:fe:36:bb:9d:fa:89:d7:8e:6b:ab:5c: 17:c5:a6:1b:92:fb:e7:35:de:6b:f7:51:74:0b:06:7e:8f:15: 1d:59:de:09:9e:03:a8:ca:ca:6b:27:cb:4a:00:bc:8b:bd:a5: 32:36:88:32:4e:7f:3c:42:82:f3:66:0e:7e:81:9a:f0:89:e7: 66:49:dd:97:b3:92:18:d8:76:e6:c2:b6:a9:71:8e:22:80:ce: 1d:e9:ff:ec:f8:e5:0d:b3:aa:0c:3b:44:99:96:24:93:53:86: 33:ac:1b:30:07:44:5c:be:14:ce:d5:85:5f:a3:71:21:4c:c2: 89:ce:8b:b4:67:2e:f2:cd:fd:6b:32:a6:de:d0:0c:d3:3a:c6: ce:90:30:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGqk8XF4g5/vIBQyNJP5USoePIWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NzQ0MkJFMjUyOTQ5QzE5RjlENjlGN0JGNkE5Q0RE QjU0MTM0QjAeFw0yNTA0MjgwNzA1NDJaFw0yNTA1MDIyMjMwNDJaMDMxMTAvBgNV BAMTKDJGQzRDODlBMEIzRDNDNzk2Njc5RDk3REIwQjNBOTAwQzVFODFDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVDg+COIreT9aMWBglWg5t3j4o Gvn6nrnlV6APUWdwiHVFcTu3trOgWmsBP0g2FgpRQNsrp44VCIKxJ4CWp4WpoQOu RF4LDb+p3nLq4/WtNCFfnR62uNLPE7UQhnKu3Lyai29JFxV9gIhIoW9EwCIa0DN6 vn+qbjk/JYoNdtrJ8PYFVCf/NL6VHNV20MCQ8WHkGnMfrKwhTKmL/5Rik42OBnlr 9/FOYh0jp61lcdZ1PnzhfAJ09RcZmhvpSwASG709gRP7dzFa+MvLaD5z4S98BKk4 /Df5fTztcZsSf1/glFWNbZ3MWL3lDL/QPGkCLn31phae7oYe4Xqza+aT3gfbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUL8TImgs9PHlmedl9sLOpAMXoHMswHwYDVR0j BBgwFoAUpZdEK+JSlJwZ+dafe/apzdtUE0swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMjAzOTEwMzk3MDFDNzkzNDZCNzZGQjEwRUFCNkY0NzE3 RUE3MUVEMTI1Q0NGRTlCOTU3NDRDRjAzNDBDOTE5LzAvQTU5NzQ0MkJFMjUyOTQ5 QzE5RjlENjlGN0JGNkE5Q0REQjU0MTM0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTk3NDQyQkUyNTI5NDlDMTlG OUQ2OUY3QkY2QTlDRERCNTQxMzRCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjIwMzkxMDM5NzAxQzc5MzQ2Qjc2RkIxMEVBQjZGNDcxN0VBNzFFRDEy NUNDRkU5Qjk1NzQ0Q0YwMzQwQzkxOS8wL0E1OTc0NDJCRTI1Mjk0OUMxOUY5RDY5 RjdCRjZBOUNEREI1NDEzNEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2uWMjngd9BNQe5PZF06ja2TvI AQ7N29YOUIQP23su4shmsih0bFYy7bZ6k6YP4e68BeSIn3kEni91wGSZszuAPgFa 9Jro1kHDq95AI6b/Zs9ZLkd8VQsGQWwtm/G+ih8J2zB1DLC+obOaEJ2czLM4x5My /ja7nfqJ145rq1wXxaYbkvvnNd5r91F0CwZ+jxUdWd4JngOoysprJ8tKALyLvaUy NogyTn88QoLzZg5+gZrwiedmSd2Xs5IY2HbmwrapcY4igM4d6f/s+OUNs6oMO0SZ liSTU4YzrBswB0RcvhTO1YVfo3EhTMKJzou0Zy7yzf1rMqbe0AzTOsbOkDAC -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:12 2025 by rpki-client on console.sobornost.net