$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: etWQEswfMKKS7SR27V1reFzN2sECIifrYu3zFHURbZs= Subject key identifier: B9:18:1C:13:4C:E7:8C:BF:DA:41:68:DC:EE:19:6B:03:36:57:68:03 Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 502DB498BE2E896AB8D8274DFA2A463BF73B8ACB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: CE Signing time: Sat 26 Apr 2025 15:13:36 +0000 Manifest this update: Sat 26 Apr 2025 15:08:36 +0000 Manifest next update: Fri 02 May 2025 15:01:36 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=) 2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: 9TA35CTQiJUNd6YG04NTEHT91lfN8a6IqtnXb7VM7w4=) 3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2d:b4:98:be:2e:89:6a:b8:d8:27:4d:fa:2a:46:3b:f7:3b:8a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Apr 26 15:08:36 2025 GMT Not After : May 2 15:01:36 2025 GMT Subject: CN=B9181C134CE78CBFDA4168DCEE196B0336576803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:eb:70:58:85:d7:4d:4f:3d:07:3f:bd:5a: 0e:16:5e:85:75:22:d3:02:d3:bd:26:77:76:b4:cb: 4b:25:cd:51:9f:11:a1:f0:cc:e9:c7:6c:4f:a2:88: 28:56:19:81:73:12:22:0a:1a:7a:eb:81:45:e4:df: b2:b4:36:ad:64:c9:ad:14:34:38:4b:b1:7d:ae:0f: 93:bc:58:56:19:a5:84:1d:7d:fc:24:75:1e:47:52: 25:45:a6:5a:91:30:61:2c:20:74:aa:0f:20:06:fe: ca:37:34:36:d4:92:4f:a1:52:23:30:62:18:f9:89: 2d:7b:84:74:ac:6f:c7:5a:51:22:c3:06:77:0e:96: 35:ba:d9:c1:d6:87:d4:fb:92:53:f0:b6:34:35:91: a3:82:36:41:a7:58:f4:5d:2f:ba:2e:1a:b6:11:90: cf:33:33:29:4e:fb:d8:6d:a0:3c:fa:a3:59:04:6d: 06:a0:26:91:b6:8b:15:be:8b:5b:e0:92:8c:09:ba: 62:cd:c6:12:fe:dc:41:e5:ac:80:f7:49:b1:87:e8: e6:37:7c:7d:e6:c5:4a:a4:64:d0:ab:00:b1:d2:6c: ea:13:af:39:7c:fc:00:33:5b:db:84:d9:ac:dd:d5: 40:83:67:20:8d:fb:bf:a9:88:0c:d5:24:4f:68:fa: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:1C:13:4C:E7:8C:BF:DA:41:68:DC:EE:19:6B:03:36:57:68:03 X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5e:52:eb:2c:ab:23:4a:4e:3b:9d:4f:f6:7c:fe:97:b8:87: a8:02:b1:51:7c:e2:36:ce:31:04:92:d7:37:73:78:79:76:94: aa:9b:35:84:f9:ec:00:65:6c:e2:85:4e:7c:c2:c8:df:11:96: e3:e1:e1:e2:e4:f8:ca:0e:45:2a:af:19:33:7a:9d:f9:46:64: 80:a7:52:ea:17:89:3d:f2:2c:29:73:eb:31:44:a4:40:a2:f8: b3:d0:e6:b6:a3:86:9b:0e:52:a9:f7:ad:81:e8:3c:1a:7b:bb: 7c:ed:50:b8:d1:4e:b0:40:d7:68:44:2f:c5:6c:6c:37:89:06: cd:ce:b0:40:ec:42:ce:fb:66:70:16:60:a6:21:67:cb:90:18: 31:9e:ec:9f:10:92:e6:ad:08:4f:70:0e:64:61:4a:a3:84:1d: a0:ea:27:70:23:ec:e2:2b:c4:82:b7:1d:65:f0:ad:6c:56:e6: 1d:98:b2:58:41:f4:ab:52:2b:7a:21:f8:c8:11:a6:5f:f2:84: f5:c6:99:6c:53:ee:db:0c:7c:54:8d:23:4f:60:f7:96:b7:55: a7:de:5f:2f:18:9e:b9:0c:ce:6c:3a:5c:3f:c7:16:9d:da:01: aa:07:95:14:8d:43:6b:49:3d:38:0d:1c:80:65:2c:6b:62:83: f7:ec:4f:09 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUC20mL4uiWq42CdN+ipGO/c7isswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNTA0MjYxNTA4MzZaFw0yNTA1MDIxNTAxMzZaMDMxMTAvBgNV BAMTKEI5MTgxQzEzNENFNzhDQkZEQTQxNjhEQ0VFMTk2QjAzMzY1NzY4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQgOtwWIXXTU89Bz+9Wg4WXoV1 ItMC070md3a0y0slzVGfEaHwzOnHbE+iiChWGYFzEiIKGnrrgUXk37K0Nq1kya0U NDhLsX2uD5O8WFYZpYQdffwkdR5HUiVFplqRMGEsIHSqDyAG/so3NDbUkk+hUiMw Yhj5iS17hHSsb8daUSLDBncOljW62cHWh9T7klPwtjQ1kaOCNkGnWPRdL7ouGrYR kM8zMylO+9htoDz6o1kEbQagJpG2ixW+i1vgkowJumLNxhL+3EHlrID3SbGH6OY3 fH3mxUqkZNCrALHSbOoTrzl8/AAzW9uE2azd1UCDZyCN+7+piAzVJE9o+iQ9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuRgcE0znjL/aQWjc7hlrAzZXaAMwHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdXlLrLKsjSk47nU/2fP6XuIeo ArFRfOI2zjEEktc3c3h5dpSqmzWE+ewAZWzihU58wsjfEZbj4eHi5PjKDkUqrxkz ep35RmSAp1LqF4k98iwpc+sxRKRAoviz0Oa2o4abDlKp962B6Dwae7t87VC40U6w QNdoRC/FbGw3iQbNzrBA7ELO+2ZwFmCmIWfLkBgxnuyfEJLmrQhPcA5kYUqjhB2g 6idwI+ziK8SCtx1l8K1sVuYdmLJYQfSrUit6IfjIEaZf8oT1xplsU+7bDHxUjSNP YPeWt1Wn3l8vGJ65DM5sOlw/xxad2gGqB5UUjUNrST04DRyAZSxrYoP37E8J -----END CERTIFICATE-----Generated at Sat Apr 26 18:18:02 2025 by rpki-client on console.sobornost.net