$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft File: 2949913DC6C3E739C74D8B456424411BD4668DD8.mft (raw, json) Hash identifier: i7vumvAvEZxV4TVhOALecA194ja3Hr4W4jVrpp4yhzI= Subject key identifier: 6E:05:30:B5:CE:53:21:E5:9C:3B:9C:0F:EF:9D:DD:D3:7F:01:48:C9 Authority key identifier: 29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8 Certificate issuer: /CN=2949913DC6C3E739C74D8B456424411BD4668DD8 Certificate serial: 0D07137F66DB29D27D0E1A322AE932D6E276C8B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft Manifest number: D7 Signing time: Mon 28 Apr 2025 00:36:30 +0000 Manifest this update: Mon 28 Apr 2025 00:31:30 +0000 Manifest next update: Sat 03 May 2025 09:08:30 +0000 Files and hashes: 1: 2949913DC6C3E739C74D8B456424411BD4668DD8.crl (hash: 5i6EsHSJ5q/E7R76v7OZFteat3/YdKdwKyGBxRU6wLc=) 2: 3136312e32322e36342e302f31382d3234203d3e203231333531.roa (hash: cqvCyY3Y3a5KSmUyvivlfwbUzJw2+QfkgT2rUIi9sEE=) 3: 323830333a313638303a333030303a3a2f33362d3438203d3e203231333531.roa (hash: Ro8JeeE81Yz64cuzhmkmrELbACSzpiNowoTv2vkGTSo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:07:13:7f:66:db:29:d2:7d:0e:1a:32:2a:e9:32:d6:e2:76:c8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949913DC6C3E739C74D8B456424411BD4668DD8 Validity Not Before: Apr 28 00:31:30 2025 GMT Not After : May 3 09:08:30 2025 GMT Subject: CN=6E0530B5CE5321E59C3B9C0FEF9DDDD37F0148C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:39:29:cc:66:7a:46:50:b0:10:28:04:32: 95:db:36:3f:0f:bf:28:30:e5:65:d0:92:1a:99:0f: cb:7a:13:a5:44:f1:ca:2a:73:3b:ca:da:6a:40:05: d2:33:72:60:8e:7e:a7:43:84:34:53:77:1d:c6:ac: 27:61:c5:e6:af:1e:31:44:a8:ea:fb:a3:3c:86:c2: f0:22:0f:b8:2e:d1:27:1f:58:e4:1d:3c:29:3d:84: 60:37:4a:2c:de:59:e7:a4:34:ef:09:20:ee:d9:fc: 76:f7:58:0c:a4:32:2c:cd:6b:3b:f0:68:4c:19:f1: 4b:a8:62:f6:8f:96:e8:31:d3:37:26:8e:d0:2e:2e: 6c:8d:0d:6e:35:af:93:89:50:53:3e:dd:cf:4f:94: d5:29:8b:5b:d3:7a:90:c8:13:3a:cd:c8:c2:c7:c5: 88:0d:1f:b8:1f:d8:20:d5:7f:20:76:a0:b5:44:06: c8:43:6d:3b:68:62:86:59:ab:60:04:54:08:ba:19: 9c:98:b0:ad:85:c1:f7:74:d2:36:9f:9b:78:04:3a: 61:07:01:5e:e4:14:b4:72:ac:fb:cd:4b:c2:4d:e3: 17:5b:5d:fc:ae:80:8e:05:03:5b:41:90:bf:cd:89: dd:df:ea:28:f4:79:a8:9a:83:1a:bb:fc:a1:ea:7f: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:05:30:B5:CE:53:21:E5:9C:3B:9C:0F:EF:9D:DD:D3:7F:01:48:C9 X509v3 Authority Key Identifier: keyid:29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6c:cb:12:0a:d7:d2:20:b9:dc:90:4c:4f:03:62:90:e3:b2: 42:c0:25:ab:01:51:93:15:f6:44:26:f2:c3:c4:89:91:d9:a2: d9:08:00:92:9e:92:9c:0d:c0:e0:91:1f:96:65:be:bd:b5:de: 98:05:55:85:7a:ce:f7:d3:f0:7a:53:01:b3:ac:4a:ea:65:23: 2c:35:2d:88:0f:5a:fb:32:7c:e6:7f:af:7b:1d:6d:a1:2d:b0: 24:13:7b:38:48:40:95:99:a3:14:0d:87:31:60:48:6d:5c:5e: 0a:6a:86:92:2c:48:d4:d9:60:d2:9d:05:b4:43:3f:0a:35:7f: 1c:1b:ac:a5:1e:53:41:92:71:99:f8:20:2e:60:91:6a:ac:3b: ff:aa:20:2f:0b:4c:8b:1f:6e:e5:08:91:fe:5d:0b:3e:d7:bf: 55:5b:ee:7e:49:2b:64:53:66:3a:8c:5c:b4:64:d9:11:01:d6: e7:7f:06:3c:91:f9:a9:c7:ee:28:59:d9:79:d0:35:24:0d:bc: 06:39:48:b1:70:1c:6f:f3:71:0d:e4:67:8d:62:bf:83:84:95: 69:33:8f:95:f1:9e:75:0a:ed:b3:14:43:2d:a9:3d:cd:23:72: c2:f2:bb:df:3c:61:5d:6d:09:a2:31:d2:a4:75:03:4a:67:3f: 44:d2:fb:d4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDQcTf2bbKdJ9DhoyKuky1uJ2yLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OTkxM0RDNkMzRTczOUM3NEQ4QjQ1NjQyNDQxMUJE NDY2OEREODAeFw0yNTA0MjgwMDMxMzBaFw0yNTA1MDMwOTA4MzBaMDMxMTAvBgNV BAMTKDZFMDUzMEI1Q0U1MzIxRTU5QzNCOUMwRkVGOUREREQzN0YwMTQ4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJzkpzGZ6RlCwECgEMpXbNj8P vygw5WXQkhqZD8t6E6VE8coqczvK2mpABdIzcmCOfqdDhDRTdx3GrCdhxeavHjFE qOr7ozyGwvAiD7gu0ScfWOQdPCk9hGA3SizeWeekNO8JIO7Z/Hb3WAykMizNazvw aEwZ8UuoYvaPlugx0zcmjtAuLmyNDW41r5OJUFM+3c9PlNUpi1vTepDIEzrNyMLH xYgNH7gf2CDVfyB2oLVEBshDbTtoYoZZq2AEVAi6GZyYsK2Fwfd00jafm3gEOmEH AV7kFLRyrPvNS8JN4xdbXfyugI4FA1tBkL/Nid3f6ij0eaiagxq7/KHqf8iJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbgUwtc5TIeWcO5wP753d038BSMkwHwYDVR0j BBgwFoAUKUmRPcbD5znHTYtFZCRBG9RmjdgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MzdFOTQwREQ5QzVEMzgxOTE5RDhBOTdEMzVENzU2NjEw RkYyMjEzN0IxN0IxNjgyMDYxQ0FGRDUzOTI1QzBFLzAvMjk0OTkxM0RDNkMzRTcz OUM3NEQ4QjQ1NjQyNDQxMUJENDY2OEREOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTQ5OTEzREM2QzNFNzM5Qzc0 RDhCNDU2NDI0NDExQkQ0NjY4REQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDM3RTk0MEREOUM1RDM4MTkxOUQ4QTk3RDM1RDc1NjYxMEZGMjIxMzdC MTdCMTY4MjA2MUNBRkQ1MzkyNUMwRS8wLzI5NDk5MTNEQzZDM0U3MzlDNzREOEI0 NTY0MjQ0MTFCRDQ2NjhERDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClbMsSCtfSILnckExPA2KQ47JC wCWrAVGTFfZEJvLDxImR2aLZCACSnpKcDcDgkR+WZb69td6YBVWFes730/B6UwGz rErqZSMsNS2ID1r7Mnzmf697HW2hLbAkE3s4SECVmaMUDYcxYEhtXF4KaoaSLEjU 2WDSnQW0Qz8KNX8cG6ylHlNBknGZ+CAuYJFqrDv/qiAvC0yLH27lCJH+XQs+179V W+5+SStkU2Y6jFy0ZNkRAdbnfwY8kfmpx+4oWdl50DUkDbwGOUixcBxv83EN5GeN Yr+DhJVpM4+V8Z51Cu2zFEMtqT3NI3LC8rvfPGFdbQmiMdKkdQNKZz9E0vvU -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:11 2025 by rpki-client on console.sobornost.net