$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft File: 1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft (raw, json) Hash identifier: QYLl1Nfmv0uU13nA7FLYpQlplJ4z3bHU4MhMNFeCS/M= Subject key identifier: CD:7A:D7:37:1E:5C:90:CF:7D:DF:A8:0A:B6:CA:ED:B8:B5:C8:D3:09 Authority key identifier: 11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5 Certificate issuer: /CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5 Certificate serial: 69E8ED9BF99A7D96F3E2C46379C1F7C6C1D19AAD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft Manifest number: D8 Signing time: Mon 28 Apr 2025 18:57:45 +0000 Manifest this update: Mon 28 Apr 2025 18:52:45 +0000 Manifest next update: Sun 04 May 2025 05:00:45 +0000 Files and hashes: 1: 323830313a3137653a3a2f34342d3438203d3e20323632353839.roa (hash: kOba30uez7JcF4rBJvYdeGG5YCGHjZz3aAy1lifaRuc=) 2: 1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl (hash: xNCmLWfZYPjyKRqP9H/puX3ELoBOZrdCVaHJ67ZnIDs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e8:ed:9b:f9:9a:7d:96:f3:e2:c4:63:79:c1:f7:c6:c1:d1:9a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5 Validity Not Before: Apr 28 18:52:45 2025 GMT Not After : May 4 05:00:45 2025 GMT Subject: CN=CD7AD7371E5C90CF7DDFA80AB6CAEDB8B5C8D309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:2d:85:c7:07:44:a5:a7:9d:d8:71:fe:05: 03:ea:2e:7f:14:f6:8d:6b:fc:ea:0e:93:1d:bd:d5: b0:5c:bb:bf:8a:61:67:22:f6:d4:58:64:08:48:2f: 17:b5:9e:28:31:cc:8d:f0:85:c9:57:51:07:19:2c: 30:52:45:6e:d7:f4:e8:0b:b1:e1:71:5e:c1:50:c1: ca:36:e6:1f:ea:09:39:a1:53:f6:26:9d:1b:eb:2a: 9b:59:53:69:7a:d5:54:36:1f:40:f1:9e:11:de:d7: 90:98:9f:04:51:0b:5a:9c:7c:09:16:c6:cf:b8:18: 39:9e:45:a5:d4:46:09:36:d7:67:eb:64:d9:31:f0: bb:fb:d3:77:79:77:6f:ae:b0:75:73:50:48:e0:56: a5:d9:8d:8c:b5:f7:e0:db:84:53:6f:f1:be:45:01: 28:ed:48:1a:01:33:38:2a:72:5a:3f:03:39:f2:d4: 98:1c:18:d3:69:80:b2:44:8c:ae:e2:30:bb:b3:34: 35:5b:23:2e:da:e2:fe:2c:4f:5b:59:6b:a9:53:30: 43:49:bf:7e:9d:92:dc:bf:dd:2c:5c:a6:8d:25:67: f9:a7:9b:e4:17:0c:67:5c:e2:8f:ec:8b:d0:a3:bd: 67:d9:9c:3e:c8:7e:4c:ff:98:18:ac:c7:36:d3:dd: fb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7A:D7:37:1E:5C:90:CF:7D:DF:A8:0A:B6:CA:ED:B8:B5:C8:D3:09 X509v3 Authority Key Identifier: keyid:11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b1:5b:5f:d4:29:89:f4:c5:df:e6:1c:b6:80:91:eb:c4:b6: 30:dd:23:ff:ba:9f:66:d5:87:97:7b:10:88:e8:5d:61:da:16: c5:33:84:7a:9a:87:9d:5f:8d:ce:f5:b5:9b:81:59:ae:03:c7: f6:d8:24:29:29:02:33:40:01:f2:fb:76:a5:08:64:fe:cc:f2: 0d:4a:27:08:b7:0d:8e:33:2b:7a:76:6e:f5:68:2e:30:b9:d5: 99:5d:3b:8e:56:35:ab:08:f2:9d:bd:47:5f:7a:73:0a:84:ff: 10:a6:69:f1:37:78:55:d8:37:3b:3e:65:18:db:1c:72:96:d6: a3:a5:46:6c:03:9b:14:e8:e8:06:e3:81:fd:a5:23:0e:37:9d: fc:0b:61:93:68:ec:c2:f3:11:90:d0:8a:b6:5f:11:c3:24:b5: 1d:7d:67:99:f9:11:6b:78:dc:2c:8f:7f:41:6e:dd:f1:d3:7a: d6:7e:74:65:ce:f7:fe:95:5f:77:4e:c7:81:32:03:f5:34:6a: 6e:40:b0:aa:79:04:b9:31:8e:3b:54:7c:f9:d0:b2:ce:1d:fe: a8:9a:b3:00:e8:02:66:09:e2:1e:e5:23:4a:26:99:6b:18:71: 61:89:4b:60:a2:dc:f6:96:93:d5:b7:b4:a9:82:a1:15:66:a6: 9f:a6:eb:b1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaejtm/mafZbz4sRjecH3xsHRmq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEwOTAxMUNBMDA4QkFBMkY1MUUyNjRDNzNDMzFDQzNF OTBEMUNDNTAeFw0yNTA0MjgxODUyNDVaFw0yNTA1MDQwNTAwNDVaMDMxMTAvBgNV BAMTKENEN0FENzM3MUU1QzkwQ0Y3RERGQTgwQUI2Q0FFREI4QjVDOEQzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFby2FxwdEpaed2HH+BQPqLn8U 9o1r/OoOkx291bBcu7+KYWci9tRYZAhILxe1nigxzI3whclXUQcZLDBSRW7X9OgL seFxXsFQwco25h/qCTmhU/YmnRvrKptZU2l61VQ2H0DxnhHe15CYnwRRC1qcfAkW xs+4GDmeRaXURgk212frZNkx8Lv703d5d2+usHVzUEjgVqXZjYy19+DbhFNv8b5F ASjtSBoBMzgqclo/Azny1JgcGNNpgLJEjK7iMLuzNDVbIy7a4v4sT1tZa6lTMENJ v36dkty/3Sxcpo0lZ/mnm+QXDGdc4o/si9CjvWfZnD7Ifkz/mBisxzbT3fuJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzXrXNx5ckM9936gKtsrtuLXI0wkwHwYDVR0j BBgwFoAUEQkBHKAIuqL1HiZMc8Mcw+kNHMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MkY0QTdBMjg0QjRGNzdGQzE3NzlBRjJDOEEwREIwODk0 MTY5OUY4Njg4MDkxMUFBNzk2RDE5RTAxOEQ0NDU1LzAvMTEwOTAxMUNBMDA4QkFB MkY1MUUyNjRDNzNDMzFDQzNFOTBEMUNDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTA5MDExQ0EwMDhCQUEyRjUx RTI2NEM3M0MzMUNDM0U5MEQxQ0M1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDJGNEE3QTI4NEI0Rjc3RkMxNzc5QUYyQzhBMERCMDg5NDE2OTlGODY4 ODA5MTFBQTc5NkQxOUUwMThENDQ1NS8wLzExMDkwMTFDQTAwOEJBQTJGNTFFMjY0 QzczQzMxQ0MzRTkwRDFDQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRsVtf1CmJ9MXf5hy2gJHrxLYw 3SP/up9m1YeXexCI6F1h2hbFM4R6moedX43O9bWbgVmuA8f22CQpKQIzQAHy+3al CGT+zPINSicItw2OMyt6dm71aC4wudWZXTuOVjWrCPKdvUdfenMKhP8QpmnxN3hV 2Dc7PmUY2xxyltajpUZsA5sU6OgG44H9pSMON538C2GTaOzC8xGQ0Iq2XxHDJLUd fWeZ+RFreNwsj39Bbt3x03rWfnRlzvf+lV93TseBMgP1NGpuQLCqeQS5MY47VHz5 0LLOHf6omrMA6AJmCeIe5SNKJplrGHFhiUtgotz2lpPVt7SpgqEVZqafpuux -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:36 2025 by rpki-client on console.sobornost.net