$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft File: 12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft (raw, json) Hash identifier: 8yQ3w7kHqKMjNvv9xeVzfET4+qf+V++I562cg+Bop1Q= Subject key identifier: AC:28:D4:1A:87:2B:5B:8C:1A:EA:57:63:D5:FD:21:6C:79:58:B2:57 Authority key identifier: 12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3 Certificate issuer: /CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3 Certificate serial: 403545A82E32C536C7BF16E4094F8BCE23A1CAE3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft Manifest number: D2 Signing time: Sun 27 Apr 2025 08:01:49 +0000 Manifest this update: Sun 27 Apr 2025 07:56:49 +0000 Manifest next update: Sat 03 May 2025 02:53:49 +0000 Files and hashes: 1: 323830333a613936303a3a2f33322d3332203d3e203631343636.roa (hash: vPOfi2Pzg/UZhvifiK6Q6pHdD1DqPi0lrEyLLD+AURY=) 2: 12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl (hash: HitpT2meXFBWkjyN2A1MAZC3199+e1whUhVG5Xp0nzs=) 3: 34352e3138302e36382e302f32322d3234203d3e203631343636.roa (hash: uNTn0C44Lsxb2i3RmD0lcYI78OY7nH+F9mHsfvZw+fE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 04:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:35:45:a8:2e:32:c5:36:c7:bf:16:e4:09:4f:8b:ce:23:a1:ca:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3 Validity Not Before: Apr 27 07:56:49 2025 GMT Not After : May 3 02:53:49 2025 GMT Subject: CN=AC28D41A872B5B8C1AEA5763D5FD216C7958B257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:72:44:7c:08:7d:9d:17:1c:88:8e:dd:34:62: d7:97:0f:62:24:9c:71:b4:5c:b8:bb:ed:e7:c1:5e: 8d:15:3f:22:7b:bc:2b:ba:65:d9:87:85:e2:4c:31: 03:c9:f8:2f:ba:a2:94:32:8f:38:35:0e:e5:04:94: 5e:3c:fc:59:94:82:81:48:ea:49:df:d7:df:96:4f: fd:0d:d7:57:37:67:a7:46:b4:db:49:e1:8f:b9:e7: b2:eb:c0:06:68:72:2a:5a:d1:99:17:60:7c:d7:d6: b5:aa:36:f8:de:2e:d0:84:b9:b8:07:d7:f0:f9:ce: 18:ef:8e:25:56:27:66:2f:a0:85:7b:59:e3:0e:40: 7a:dc:fe:87:bd:41:2e:dd:24:1b:88:ed:7a:ea:3f: f6:12:13:0d:ca:8d:d8:57:d8:ee:47:c7:27:8e:28: f6:21:fb:ff:cd:d7:c5:94:fb:b0:4a:7e:10:a3:25: 52:a0:ec:6d:b9:6c:05:c3:c8:e0:b5:9b:ca:6d:56: 6f:70:0c:6c:64:f0:36:88:77:bb:94:52:a9:ce:a8: bb:24:84:35:37:d1:a9:c4:eb:ac:dc:44:79:4e:de: 07:79:0a:ee:21:f0:51:62:51:5e:30:22:6a:41:4e: 4b:d2:20:d8:2a:7f:5b:32:12:82:3b:0c:5a:0a:56: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:D4:1A:87:2B:5B:8C:1A:EA:57:63:D5:FD:21:6C:79:58:B2:57 X509v3 Authority Key Identifier: keyid:12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f2:23:a6:5c:62:48:e6:38:dd:07:d9:1d:48:3c:08:b7:cd: bf:ad:5a:c8:f3:8b:58:05:f8:39:b0:93:c0:fa:3a:20:b3:9c: b1:b2:da:a6:48:90:86:71:84:84:27:6f:b8:26:c0:67:ad:42: f5:1b:8d:41:d2:31:52:1f:11:be:81:6b:6f:f8:1a:78:c4:00: ee:3f:28:c3:20:ba:2b:f0:01:cd:7b:dd:fb:3f:98:e3:58:eb: a0:41:14:e1:27:a3:c3:53:3d:d7:78:04:6a:ce:08:e1:27:95: 97:96:65:a8:16:24:8c:68:cf:19:3e:6f:00:64:42:40:7c:35: 39:e2:6c:30:00:b6:32:96:10:d5:72:f9:52:1b:92:18:7c:c7: e0:05:11:5e:4c:96:41:a3:de:e1:2d:29:cc:8d:48:9d:b6:3b: 3e:7c:f2:c1:bd:31:8d:11:2f:86:dc:20:53:93:ad:c3:4d:fb: 75:14:97:65:a6:47:95:77:3f:63:70:f5:bd:e6:33:3e:bb:a8: 7f:4f:48:e9:f2:ed:d6:62:73:b3:31:c7:75:6a:fe:28:6b:be: 61:27:3f:e3:72:fd:78:61:fc:53:9d:fe:31:96:66:81:df:3d: dd:df:2d:eb:a1:77:01:44:53:2f:92:54:34:9b:b3:0a:8e:fa: 33:05:b7:84 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQDVFqC4yxTbHvxbkCU+LziOhyuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJDRTg0NDdFRDJDOUU3RUJGMUREMjA0MTZGNEU5QjFG RENGMEVBMzAeFw0yNTA0MjcwNzU2NDlaFw0yNTA1MDMwMjUzNDlaMDMxMTAvBgNV BAMTKEFDMjhENDFBODcyQjVCOEMxQUVBNTc2M0Q1RkQyMTZDNzk1OEIyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDockR8CH2dFxyIjt00YteXD2Ik nHG0XLi77efBXo0VPyJ7vCu6ZdmHheJMMQPJ+C+6opQyjzg1DuUElF48/FmUgoFI 6knf19+WT/0N11c3Z6dGtNtJ4Y+557LrwAZocipa0ZkXYHzX1rWqNvjeLtCEubgH 1/D5zhjvjiVWJ2YvoIV7WeMOQHrc/oe9QS7dJBuI7XrqP/YSEw3KjdhX2O5HxyeO KPYh+//N18WU+7BKfhCjJVKg7G25bAXDyOC1m8ptVm9wDGxk8DaId7uUUqnOqLsk hDU30anE66zcRHlO3gd5Cu4h8FFiUV4wImpBTkvSINgqf1syEoI7DFoKVtNbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrCjUGocrW4wa6ldj1f0hbHlYslcwHwYDVR0j BBgwFoAUEs6ER+0snn6/HdIEFvTpsf3PDqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNEU3QjdEOUU0MDBBRTFBREYzQzAzMjEyMzZCNDM3RDcz MzhFMjZFQzI1Njc3NEY1OEU0MDEzQTI2NDFERjQ2LzAvMTJDRTg0NDdFRDJDOUU3 RUJGMUREMjA0MTZGNEU5QjFGRENGMEVBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMkNFODQ0N0VEMkM5RTdFQkYx REQyMDQxNkY0RTlCMUZEQ0YwRUEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzRFN0I3RDlFNDAwQUUxQURGM0MwMzIxMjM2QjQzN0Q3MzM4RTI2RUMy NTY3NzRGNThFNDAxM0EyNjQxREY0Ni8wLzEyQ0U4NDQ3RUQyQzlFN0VCRjFERDIw NDE2RjRFOUIxRkRDRjBFQTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCd8iOmXGJI5jjdB9kdSDwIt82/ rVrI84tYBfg5sJPA+jogs5yxstqmSJCGcYSEJ2+4JsBnrUL1G41B0jFSHxG+gWtv +Bp4xADuPyjDILor8AHNe937P5jjWOugQRThJ6PDUz3XeARqzgjhJ5WXlmWoFiSM aM8ZPm8AZEJAfDU54mwwALYylhDVcvlSG5IYfMfgBRFeTJZBo97hLSnMjUidtjs+ fPLBvTGNES+G3CBTk63DTft1FJdlpkeVdz9jcPW95jM+u6h/T0jp8u3WYnOzMcd1 av4oa75hJz/jcv14YfxTnf4xlmaB3z3d3y3roXcBRFMvklQ0m7MKjvozBbeE -----END CERTIFICATE-----Generated at Sun Apr 27 12:40:23 2025 by rpki-client on console.sobornost.net