$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json) Hash identifier: c0veig4qMuxzlYOVg1ybaRYigjyo7ZGRZDWDrs1epBU= Subject key identifier: E0:C2:3F:9F:8A:4E:E0:13:8A:72:C8:F3:41:65:67:29:F4:59:6E:72 Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Certificate serial: 1025AD5302B3DC2E601725D1B13F8DE97D7AC46C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft Manifest number: D3 Signing time: Mon 28 Apr 2025 14:24:58 +0000 Manifest this update: Mon 28 Apr 2025 14:19:58 +0000 Manifest next update: Sun 04 May 2025 05:19:58 +0000 Files and hashes: 1: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: 36MFiYsj/rbrvvVvLeus9cYnV2iKLxGfalFiHHn+w8M=) 2: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=) 3: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: oYoNoVwD7BVXrGnMItrGgYUxIIqMdYxu2pGj5rprnEg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:25:ad:53:02:b3:dc:2e:60:17:25:d1:b1:3f:8d:e9:7d:7a:c4:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Validity Not Before: Apr 28 14:19:58 2025 GMT Not After : May 4 05:19:58 2025 GMT Subject: CN=E0C23F9F8A4EE0138A72C8F341656729F4596E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:85:e6:82:3f:50:88:7d:b4:59:68:35:8b: 72:83:21:92:c0:58:a9:ce:70:3f:62:22:78:8d:58: 56:76:b0:cd:12:0a:84:f1:42:e5:4e:80:7a:d2:76: 63:81:1c:c2:85:de:84:89:ba:23:07:a4:ef:4a:d9: 0d:40:f9:6f:5c:63:69:5c:e1:ac:1f:dd:7c:13:83: 06:d4:7f:a4:f5:ad:6d:f8:15:6c:85:d3:cc:f6:76: 45:65:8e:31:79:c4:13:e3:48:77:a8:a2:e0:56:f8: 86:f8:6d:1d:70:2f:e6:d9:1c:e3:14:85:a5:89:40: 62:d1:bb:b7:0d:3b:14:a6:02:7c:fe:66:4e:4f:06: 1f:28:8e:65:d9:21:d8:a2:5e:23:05:ce:d4:80:15: c2:3d:ce:a2:c6:cb:c9:86:ea:07:de:fa:74:54:10: 21:cd:4a:a9:23:16:93:dc:33:fe:ad:f1:04:02:cd: 7f:f6:a6:a4:f5:95:d3:63:72:94:d3:96:16:8c:98: cf:b7:3b:b8:e0:98:2b:86:84:d0:9e:ba:fa:26:01: 12:0c:8e:df:14:7a:f9:5d:b7:37:4f:1a:c6:b3:ca: 6a:64:16:3a:f3:0c:90:de:df:fd:64:36:0c:85:00: 31:c3:13:e9:78:00:9c:f6:23:85:5a:02:06:f7:42: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C2:3F:9F:8A:4E:E0:13:8A:72:C8:F3:41:65:67:29:F4:59:6E:72 X509v3 Authority Key Identifier: keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:55:ba:bc:32:f1:49:b2:85:26:f1:9a:c7:67:a6:80:f7:b9: 6f:58:28:a6:e8:3b:74:f4:65:fa:d0:d9:7c:07:c2:77:fa:30: f5:e4:eb:c2:a1:08:91:90:4d:48:93:22:90:d3:b8:5c:c2:f3: 40:f4:2d:c2:dc:8b:c5:45:64:ad:14:89:57:39:62:ae:17:13: fd:74:66:ab:44:4e:b2:1f:a6:7b:bd:b5:ad:21:21:3c:7b:74: 49:b7:8f:7e:80:5c:c7:12:55:e6:28:e1:21:51:6d:51:59:5e: 7c:59:fd:e3:d5:41:b7:26:0c:82:dc:b3:62:95:d4:a4:00:73: 80:c9:47:b3:9f:54:8c:90:85:40:0e:95:61:72:b6:93:c9:d8: 52:e4:47:15:df:de:73:5d:84:29:b7:3e:9c:85:b0:b9:d9:1a: 77:f9:ee:47:13:b1:a9:26:e5:eb:ff:23:ff:f4:75:11:c7:c7: 90:6d:77:41:0a:b0:e6:75:29:21:d8:d9:67:1c:5b:85:5c:a7: 10:79:c3:ec:96:4e:41:3e:27:43:a7:ca:75:a1:37:45:12:c9: 05:52:e3:dc:16:78:1a:c7:d0:28:a4:40:76:8e:7e:ff:54:2a: 53:f8:d0:10:6a:02:bc:2b:29:ca:ba:26:f5:6c:b5:76:3d:af: ad:bc:7a:34 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUECWtUwKz3C5gFyXRsT+N6X16xGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4RjBCQjE2NkQxNEU3REQyNUZBNzhDNzg2QjkxN0Qy NjQyQThFNjAeFw0yNTA0MjgxNDE5NThaFw0yNTA1MDQwNTE5NThaMDMxMTAvBgNV BAMTKEUwQzIzRjlGOEE0RUUwMTM4QTcyQzhGMzQxNjU2NzI5RjQ1OTZFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jIXmgj9QiH20WWg1i3KDIZLA WKnOcD9iIniNWFZ2sM0SCoTxQuVOgHrSdmOBHMKF3oSJuiMHpO9K2Q1A+W9cY2lc 4awf3XwTgwbUf6T1rW34FWyF08z2dkVljjF5xBPjSHeoouBW+Ib4bR1wL+bZHOMU haWJQGLRu7cNOxSmAnz+Zk5PBh8ojmXZIdiiXiMFztSAFcI9zqLGy8mG6gfe+nRU ECHNSqkjFpPcM/6t8QQCzX/2pqT1ldNjcpTTlhaMmM+3O7jgmCuGhNCeuvomARIM jt8UevldtzdPGsazympkFjrzDJDe3/1kNgyFADHDE+l4AJz2I4VaAgb3Qis1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4MI/n4pO4BOKcsjzQWVnKfRZbnIwHwYDVR0j BBgwFoAUaI8LsWbRTn3SX6eMeGuRfSZCqOYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQTdFNjlGNzk2MTY5RTY5QzA2NDU4RDAyMzk4MjY1QUND NkEzMjRCMDNBMTkwQ0ZCRTJDN0NCNzJCRDAyNjA5LzAvNjg4RjBCQjE2NkQxNEU3 REQyNUZBNzhDNzg2QjkxN0QyNjQyQThFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODhGMEJCMTY2RDE0RTdERDI1 RkE3OEM3ODZCOTE3RDI2NDJBOEU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0E3RTY5Rjc5NjE2OUU2OUMwNjQ1OEQwMjM5ODI2NUFDQzZBMzI0QjAz QTE5MENGQkUyQzdDQjcyQkQwMjYwOS8wLzY4OEYwQkIxNjZEMTRFN0REMjVGQTc4 Qzc4NkI5MTdEMjY0MkE4RTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANVbq8MvFJsoUm8ZrHZ6aA97lv WCim6Dt09GX60Nl8B8J3+jD15OvCoQiRkE1IkyKQ07hcwvNA9C3C3IvFRWStFIlX OWKuFxP9dGarRE6yH6Z7vbWtISE8e3RJt49+gFzHElXmKOEhUW1RWV58Wf3j1UG3 JgyC3LNildSkAHOAyUezn1SMkIVADpVhcraTydhS5EcV395zXYQptz6chbC52Rp3 +e5HE7GpJuXr/yP/9HURx8eQbXdBCrDmdSkh2NlnHFuFXKcQecPslk5BPidDp8p1 oTdFEskFUuPcFngax9AopEB2jn7/VCpT+NAQagK8KynKuib1bLV2Pa+tvHo0 -----END CERTIFICATE-----Generated at Mon Apr 28 17:37:48 2025 by rpki-client on console.sobornost.net