$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft File: F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft (raw, json) Hash identifier: SZ/X8O0fpM92rjNA00MasMrbj3PGeZ9cxo4iLVAfwfk= Subject key identifier: 66:3A:E8:4D:DB:55:AF:C0:39:77:C0:C4:4D:F2:AE:EF:25:B1:5F:01 Authority key identifier: F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2 Certificate issuer: /CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2 Certificate serial: 3C0EBC7439DCA1172071C935FFA40AFFDE6B65FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft Manifest number: D4 Signing time: Mon 28 Apr 2025 10:22:37 +0000 Manifest this update: Mon 28 Apr 2025 10:17:37 +0000 Manifest next update: Fri 02 May 2025 23:55:37 +0000 Files and hashes: 1: 3136382e3139362e312e302f32342d3234203d3e20323634373537.roa (hash: zqLP81LcocVYSevgzB6oj17rxkzJdaIcCmuCMzsBJnE=) 2: F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl (hash: 7Q96hK6XwM83Wv8d1vz+RD59bOCbvOHgpVbezuUXGX0=) 3: 323830333a383063303a3a2f33322d3438203d3e20323634373537.roa (hash: i3vAhEz/Y8BRRRIj4tKNOF5v00dZM/sQCGkhvqXjgAs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0e:bc:74:39:dc:a1:17:20:71:c9:35:ff:a4:0a:ff:de:6b:65:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2 Validity Not Before: Apr 28 10:17:37 2025 GMT Not After : May 2 23:55:37 2025 GMT Subject: CN=663AE84DDB55AFC03977C0C44DF2AEEF25B15F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:82:fd:4b:bf:a0:b9:59:12:c1:e2:2a:87: 8b:95:ca:f1:c6:29:29:9c:7f:ad:47:ec:c1:0d:31: 7a:3e:c7:3d:7e:94:c6:8d:58:1c:f1:d5:e7:f0:82: 6b:bb:52:bc:73:de:88:5b:a3:05:82:87:be:30:75: d3:46:0c:18:3d:30:9b:f7:a9:d4:c0:c9:f4:cc:80: 2a:1e:7a:80:33:21:65:f0:95:e4:49:0b:16:82:8f: 97:54:f8:de:cd:f4:71:56:1a:ce:de:5a:08:ab:59: fe:51:3a:a9:95:0f:ac:ca:76:df:af:58:d5:80:dd: 00:f1:d8:6b:e6:25:93:4b:5a:a8:da:82:92:02:4a: 3a:46:da:37:80:a0:0e:85:59:3c:6c:fd:f4:58:e1: 42:6c:94:14:f8:af:84:bc:37:31:23:70:a8:1e:80: 22:cb:c4:09:52:41:fb:5b:48:e9:af:f6:a8:72:41: 4f:c7:ca:77:c1:73:51:66:26:af:0a:a7:fe:69:d8: bb:9f:7b:91:fe:6e:ef:41:77:b4:5d:24:e0:24:dd: 0d:aa:32:35:35:63:8f:5d:07:db:ea:4b:2e:cc:a2: b7:77:e5:60:04:c6:05:32:9b:ab:38:99:17:77:95: ac:6e:fa:50:74:bd:b6:02:30:99:91:6e:3c:33:37: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:E8:4D:DB:55:AF:C0:39:77:C0:C4:4D:F2:AE:EF:25:B1:5F:01 X509v3 Authority Key Identifier: keyid:F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:82:e5:17:4c:40:2f:5a:97:59:2f:51:5d:6c:e8:4c:ab:ea: 3e:3c:e1:59:cb:09:5a:04:ba:66:92:f9:5e:06:e6:1e:6a:58: b5:8f:1e:cd:08:f4:37:b6:a9:72:fa:f3:d3:6f:65:53:f6:d4: 28:aa:8e:93:05:1a:4c:44:3d:5c:c8:49:18:06:05:66:8f:a7: df:95:d4:c5:16:4b:e4:16:06:1a:ec:98:67:2e:67:f1:b6:09: af:00:74:8c:c1:d3:aa:4f:f5:d8:a2:69:23:ac:00:64:a1:b4: e7:52:4f:59:e7:57:4a:3c:9f:69:14:65:de:5f:9d:2e:21:90: c9:9f:28:82:bd:0d:f2:40:26:34:f5:17:73:ce:63:4b:37:59: f5:78:8b:57:86:48:a1:7c:40:18:0f:5f:a9:88:97:32:bd:fb: 82:70:eb:6f:a4:bb:f8:64:01:e4:e6:2f:e5:77:f5:5c:9f:2a: 28:ea:dd:55:85:f9:6b:02:7a:fa:3e:9e:c0:b7:f5:d6:d1:ef: c2:51:f3:03:e3:d2:ab:8d:aa:f1:44:ec:e9:9b:80:87:4c:94: b3:6d:fa:7e:34:28:bd:ab:c7:19:b4:42:b6:16:a1:a8:e0:bf: 0e:c3:76:ae:a9:60:8a:1c:1f:17:df:fb:ee:35:e2:a9:4c:08: d7:e4:69:37 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPA68dDncoRcgcck1/6QK/95rZfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0NkVEMDM2ODA3ODFENkYxNTEyMUFBODlGQUE3NDQ3 QTNEQUZDMjAeFw0yNTA0MjgxMDE3MzdaFw0yNTA1MDIyMzU1MzdaMDMxMTAvBgNV BAMTKDY2M0FFODREREI1NUFGQzAzOTc3QzBDNDRERjJBRUVGMjVCMTVGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZoL9S7+guVkSweIqh4uVyvHG KSmcf61H7MENMXo+xz1+lMaNWBzx1efwgmu7Urxz3ohbowWCh74wddNGDBg9MJv3 qdTAyfTMgCoeeoAzIWXwleRJCxaCj5dU+N7N9HFWGs7eWgirWf5ROqmVD6zKdt+v WNWA3QDx2GvmJZNLWqjagpICSjpG2jeAoA6FWTxs/fRY4UJslBT4r4S8NzEjcKge gCLLxAlSQftbSOmv9qhyQU/HynfBc1FmJq8Kp/5p2Lufe5H+bu9Bd7RdJOAk3Q2q MjU1Y49dB9vqSy7Mord35WAExgUym6s4mRd3laxu+lB0vbYCMJmRbjwzNyhvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZjroTdtVr8A5d8DETfKu7yWxXwEwHwYDVR0j BBgwFoAU8EbtA2gHgdbxUSGqifqnRHo9r8IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQkFBMzQyRjAwMTM4RDI5RDA3MzRCN0NERDdENTMwMjYz RDI3MkJEOUE2OUQ5RkVCQTE0QTA4MDg5QkQ0NDA2LzAvRjA0NkVEMDM2ODA3ODFE NkYxNTEyMUFBODlGQUE3NDQ3QTNEQUZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDQ2RUQwMzY4MDc4MUQ2RjE1 MTIxQUE4OUZBQTc0NDdBM0RBRkMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkJBQTM0MkYwMDEzOEQyOUQwNzM0QjdDREQ3RDUzMDI2M0QyNzJCRDlB NjlEOUZFQkExNEEwODA4OUJENDQwNi8wL0YwNDZFRDAzNjgwNzgxRDZGMTUxMjFB QTg5RkFBNzQ0N0EzREFGQzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIguUXTEAvWpdZL1FdbOhMq+o+ POFZywlaBLpmkvleBuYeali1jx7NCPQ3tqly+vPTb2VT9tQoqo6TBRpMRD1cyEkY BgVmj6ffldTFFkvkFgYa7JhnLmfxtgmvAHSMwdOqT/XYomkjrABkobTnUk9Z51dK PJ9pFGXeX50uIZDJnyiCvQ3yQCY09RdzzmNLN1n1eItXhkihfEAYD1+piJcyvfuC cOtvpLv4ZAHk5i/ld/Vcnyoo6t1VhflrAnr6Pp7At/XW0e/CUfMD49KrjarxROzp m4CHTJSzbfp+NCi9q8cZtEK2FqGo4L8Ow3auqWCKHB8X3/vuNeKpTAjX5Gk3 -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:49 2025 by rpki-client on console.sobornost.net