$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft File: D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft (raw, json) Hash identifier: 7QuOALZejuo3L+hOTOYEM1G8Q3U7XqMBExYlTtNGtcQ= Subject key identifier: 65:7E:7E:EE:DE:9F:8C:F8:22:A3:D8:3D:8D:74:09:18:A9:DF:8E:2C Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 Certificate issuer: /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Certificate serial: 43E1F02A08F63E653563191AD73875C14EC787D7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft Manifest number: D2 Signing time: Mon 28 Apr 2025 16:16:10 +0000 Manifest this update: Mon 28 Apr 2025 16:11:10 +0000 Manifest next update: Sun 04 May 2025 11:36:10 +0000 Files and hashes: 1: 323830333a653538303a3a2f33322d3332203d3e203631343637.roa (hash: VPdQcvxY+Djypk/d3zIynnwjkLRuN2kmRMjzxd8Khgg=) 2: 3133312e302e3133362e302f32322d3232203d3e203631343637.roa (hash: hIcGTsTzrbpPkkDFPHDJ/vJiVZDkozy3mhBw4FInUkg=) 3: D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl (hash: 7420uV7g3cdC5rRRILAfLYvJWkI+ILA2CafHCYAsjVs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e1:f0:2a:08:f6:3e:65:35:63:19:1a:d7:38:75:c1:4e:c7:87:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Validity Not Before: Apr 28 16:11:10 2025 GMT Not After : May 4 11:36:10 2025 GMT Subject: CN=657E7EEEDE9F8CF822A3D83D8D740918A9DF8E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:d7:c8:d5:cf:8a:20:49:52:90:8a:b7:b2: 42:bf:9a:34:03:f5:45:a8:0a:e4:46:83:e1:31:7e: aa:6a:55:97:48:d0:9a:58:a0:9a:f9:c0:32:58:2c: 33:b2:00:7a:30:02:f8:78:a7:2f:0e:f8:4e:f8:ae: bd:cc:2a:49:bd:60:be:84:f8:cc:82:88:40:8b:fd: 25:c0:d0:e2:4f:53:3e:37:95:04:43:a0:fb:8c:65: d6:0f:47:1a:fd:73:65:65:c6:11:b6:34:e9:bc:f6: 89:ed:d1:4d:1d:55:a8:c6:a0:25:d4:52:b0:b2:c8: c5:80:39:45:d9:87:18:81:d7:9a:16:3e:91:cc:2b: 4a:82:73:a1:09:d4:61:a6:05:9c:46:9d:72:30:e8: a2:6f:db:e6:3e:25:44:d7:de:80:6b:46:71:fd:2d: b7:c2:b5:4c:1e:38:03:40:57:74:d7:33:bf:85:b8: 67:8d:07:80:68:33:15:23:94:3b:45:57:af:f9:4f: 6b:62:45:23:80:d9:e0:ee:97:69:73:59:0b:e5:80: 14:6d:99:1d:26:4e:5c:ef:2d:36:a3:9e:d3:1b:d7: 9b:4a:b5:28:b7:6f:6a:c0:46:02:64:be:88:e9:18: 0c:d9:4e:e4:7d:29:1d:dd:c0:14:7d:2f:d6:25:cd: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7E:7E:EE:DE:9F:8C:F8:22:A3:D8:3D:8D:74:09:18:A9:DF:8E:2C X509v3 Authority Key Identifier: keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8a:b5:61:a4:22:f1:48:b2:63:ea:b4:bd:6d:fb:62:06:2c: 9d:20:9f:46:83:e0:37:51:9e:bd:f5:86:17:e2:e4:1b:db:6b: 20:a6:59:14:cd:b6:8b:9b:5a:79:f2:24:90:3e:cc:82:74:db: c6:1f:47:c0:8f:28:02:a1:be:72:31:13:af:e9:69:f6:0e:18: a6:84:0c:8b:47:83:15:6f:8d:ee:bb:f0:cd:fa:92:6b:12:f6: de:14:da:79:7c:c5:7b:d7:a3:62:e9:32:62:a7:7d:1f:0f:61: 0f:81:25:2c:5e:0f:fa:21:26:e0:06:3e:cf:3b:be:fa:f4:40: a6:b4:c8:96:b7:6d:14:74:5b:19:ad:d1:9d:fd:29:64:c9:b4: 2e:c9:e5:c5:c9:7f:44:c6:99:fb:be:74:59:4e:d1:18:5c:06: 6e:91:df:af:6e:44:b8:37:be:aa:62:51:b6:26:e0:ba:88:84: 95:31:8d:9e:1f:9e:5c:e3:b5:88:98:9a:e2:ba:09:7a:23:19: 42:a0:6c:5a:79:7a:93:22:5b:de:c3:54:72:ee:ca:a4:96:d4: f0:03:3c:63:6e:3d:1c:0f:bb:74:dc:be:d0:4c:0b:18:c4:bd: d5:64:05:66:c5:be:3f:ce:81:47:5b:74:07:92:a4:7d:51:2e: bf:b5:eb:97 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQ+HwKgj2PmU1Yxka1zh1wU7Hh9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwODczNURDRkJENDQzOUYxRjYxQTYxNzlEQkU5MjBE ODZCMUUyODAeFw0yNTA0MjgxNjExMTBaFw0yNTA1MDQxMTM2MTBaMDMxMTAvBgNV BAMTKDY1N0U3RUVFREU5RjhDRjgyMkEzRDgzRDhENzQwOTE4QTlERjhFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11NfI1c+KIElSkIq3skK/mjQD 9UWoCuRGg+ExfqpqVZdI0JpYoJr5wDJYLDOyAHowAvh4py8O+E74rr3MKkm9YL6E +MyCiECL/SXA0OJPUz43lQRDoPuMZdYPRxr9c2VlxhG2NOm89ont0U0dVajGoCXU UrCyyMWAOUXZhxiB15oWPpHMK0qCc6EJ1GGmBZxGnXIw6KJv2+Y+JUTX3oBrRnH9 LbfCtUweOANAV3TXM7+FuGeNB4BoMxUjlDtFV6/5T2tiRSOA2eDul2lzWQvlgBRt mR0mTlzvLTajntMb15tKtSi3b2rARgJkvojpGAzZTuR9KR3dwBR9L9YlzSttAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZX5+7t6fjPgio9g9jXQJGKnfjiwwHwYDVR0j BBgwFoAU0whzXc+9RDnx9hphedvpINhrHigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUY0MzdERDdEMTFGMjhDNTgzMjk1RjkzQjlDNTRDRkU5 ODAyNUNBREQyNzdBNTM2NEJDMDU2NzQ5NjE4ODY5LzAvRDMwODczNURDRkJENDQz OUYxRjYxQTYxNzlEQkU5MjBEODZCMUUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzA4NzM1RENGQkQ0NDM5RjFG NjFBNjE3OURCRTkyMEQ4NkIxRTI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFGNDM3REQ3RDExRjI4QzU4MzI5NUY5M0I5QzU0Q0ZFOTgwMjVDQURE Mjc3QTUzNjRCQzA1Njc0OTYxODg2OS8wL0QzMDg3MzVEQ0ZCRDQ0MzlGMUY2MUE2 MTc5REJFOTIwRDg2QjFFMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9irVhpCLxSLJj6rS9bftiBiyd IJ9Gg+A3UZ699YYX4uQb22sgplkUzbaLm1p58iSQPsyCdNvGH0fAjygCob5yMROv 6Wn2DhimhAyLR4MVb43uu/DN+pJrEvbeFNp5fMV716Ni6TJip30fD2EPgSUsXg/6 ISbgBj7PO7769ECmtMiWt20UdFsZrdGd/SlkybQuyeXFyX9Expn7vnRZTtEYXAZu kd+vbkS4N76qYlG2JuC6iISVMY2eH55c47WImJriugl6IxlCoGxaeXqTIlvew1Ry 7sqkltTwAzxjbj0cD7t03L7QTAsYxL3VZAVmxb4/zoFHW3QHkqR9US6/teuX -----END CERTIFICATE-----Generated at Mon Apr 28 20:06:31 2025 by rpki-client on console.sobornost.net