$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft File: 336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft (raw, json) Hash identifier: 54184z5vhlIZEp2C5ZxQzvNPFy0//uhe2azribYtT9s= Subject key identifier: 0A:15:4B:94:12:79:26:13:24:3F:3C:1F:4D:5B:D6:87:DC:21:CF:99 Authority key identifier: 33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A Certificate issuer: /CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A Certificate serial: 7394F1B89B00634E1FFECA7BAF3D964428614F02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft Manifest number: D4 Signing time: Mon 28 Apr 2025 09:42:14 +0000 Manifest this update: Mon 28 Apr 2025 09:37:14 +0000 Manifest next update: Sat 03 May 2025 09:36:14 +0000 Files and hashes: 1: 3230302e38352e3138342e302f32312d3234203d3e203238303337.roa (hash: QnTgwo3Rj5x845w23Fgpr67Im+ZaDHhuxy4e4+qFsGY=) 2: 336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl (hash: yKCktYGuskuSe/i7w78uxQ1MpqqfYoLGh/dy6IEDpMY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:94:f1:b8:9b:00:63:4e:1f:fe:ca:7b:af:3d:96:44:28:61:4f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A Validity Not Before: Apr 28 09:37:14 2025 GMT Not After : May 3 09:36:14 2025 GMT Subject: CN=0A154B9412792613243F3C1F4D5BD687DC21CF99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:71:2d:fc:3c:17:5a:cf:03:b8:13:86:8b: 93:2e:86:08:af:52:ea:12:a8:b4:ef:ea:ae:11:95: 4d:cc:63:3e:59:fc:f2:e9:ad:16:27:7c:2e:f7:33: 0b:de:e0:e3:00:9d:af:0a:bc:6b:94:01:94:a3:f8: 2f:70:28:70:39:0a:f4:e7:b0:96:84:26:5a:d0:01: ba:04:89:36:e3:a8:87:e1:ca:b9:fc:6d:4c:11:5e: db:61:b3:91:54:72:a0:99:4a:b8:1f:b5:a5:a5:f3: 76:62:95:eb:7b:72:b1:92:7d:69:1e:7f:6b:59:d8: dc:c8:d7:3f:a2:26:c2:a1:ec:2e:60:59:ef:a0:e7: 47:bb:56:e2:4c:19:13:38:8f:55:17:bb:02:f4:c5: b1:ff:b8:23:89:db:21:ef:15:7f:86:58:34:8f:55: 5b:05:e0:99:b9:c0:c2:1a:de:f4:61:82:9e:a9:39: fd:9e:fb:76:c3:02:b5:ac:c9:2e:92:af:29:f5:11: f8:84:15:83:c8:54:13:79:0e:91:74:13:20:c5:fa: d7:19:6f:41:6e:22:16:18:15:ee:de:1d:6a:1a:57: 6f:de:9f:5e:6e:d6:b0:3f:ec:67:79:38:ab:d2:8b: c0:d1:cc:92:27:41:6b:e6:e2:b7:20:1f:2c:93:4f: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:15:4B:94:12:79:26:13:24:3F:3C:1F:4D:5B:D6:87:DC:21:CF:99 X509v3 Authority Key Identifier: keyid:33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0d:04:ed:31:1e:61:ea:af:f7:79:7a:6f:2f:86:7b:b0:91: 0d:55:05:32:9f:cd:27:57:20:60:72:bd:46:f5:1a:26:fc:a0: 49:9c:e1:21:37:a2:91:d7:7d:1e:9d:60:e1:0a:c4:7f:e9:5d: 03:5c:dd:f5:76:fa:14:d0:9f:20:e7:e8:81:9d:54:5a:fb:21: 5b:ee:8c:92:c5:73:f3:92:dd:be:52:9d:bc:16:94:85:c2:88: 2d:73:9a:70:c3:39:df:5a:f1:a6:ef:d3:28:7b:ce:4c:9a:3b: 62:1d:4d:53:0f:66:97:c2:9b:5a:5b:42:22:80:97:0a:2a:1e: da:d7:b4:15:b1:ff:10:81:15:a6:45:35:dd:01:f4:c7:8b:09: b0:4e:50:8d:cd:97:28:d9:9c:7f:ac:9d:8a:a8:cf:2a:be:79: 52:5b:52:47:3f:8c:83:2e:d3:9c:e9:1e:b4:44:4d:7a:ac:f3: 1f:d5:39:fc:37:bf:ef:c4:ef:7d:9d:9d:55:7a:07:44:93:b5: 8e:13:73:b8:ef:3d:81:b1:bb:c0:76:44:40:ae:99:06:4f:c1: 1f:e6:a6:4c:62:ce:54:6f:c0:44:03:29:dc:c9:df:e4:47:db: d5:ab:2e:73:5a:bc:bd:2c:34:19:4a:37:c4:f7:25:0d:f6:32: 8c:0f:8c:b9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUc5TxuJsAY04f/sp7rz2WRChhTwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2REZDNTdBQkQ5MzJDMkFCRDM3QTg4REExRTFCQkNE REVDNDA3QTAeFw0yNTA0MjgwOTM3MTRaFw0yNTA1MDMwOTM2MTRaMDMxMTAvBgNV BAMTKDBBMTU0Qjk0MTI3OTI2MTMyNDNGM0MxRjRENUJENjg3REMyMUNGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJXEt/DwXWs8DuBOGi5Muhgiv UuoSqLTv6q4RlU3MYz5Z/PLprRYnfC73Mwve4OMAna8KvGuUAZSj+C9wKHA5CvTn sJaEJlrQAboEiTbjqIfhyrn8bUwRXtths5FUcqCZSrgftaWl83Zilet7crGSfWke f2tZ2NzI1z+iJsKh7C5gWe+g50e7VuJMGRM4j1UXuwL0xbH/uCOJ2yHvFX+GWDSP VVsF4Jm5wMIa3vRhgp6pOf2e+3bDArWsyS6Sryn1EfiEFYPIVBN5DpF0EyDF+tcZ b0FuIhYYFe7eHWoaV2/en15u1rA/7Gd5OKvSi8DRzJInQWvm4rcgHyyTT1ClAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUChVLlBJ5JhMkPzwfTVvWh9whz5kwHwYDVR0j BBgwFoAUM238V6vZMsKr03qI2h4bvN3sQHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81OUQzQUQ4MTE1NkFBMkRCNzI2QTk1QTQ2QjNFREFGOTdE RTQ2NDExOUM3NTg4RTBDQUJDNjI2NzZBRDFCOUFELzAvMzM2REZDNTdBQkQ5MzJD MkFCRDM3QTg4REExRTFCQkNEREVDNDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzZERkM1N0FCRDkzMkMyQUJE MzdBODhEQTFFMUJCQ0RERUM0MDdBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTlEM0FEODExNTZBQTJEQjcyNkE5NUE0NkIzRURBRjk3REU0NjQxMTlD NzU4OEUwQ0FCQzYyNjc2QUQxQjlBRC8wLzMzNkRGQzU3QUJEOTMyQzJBQkQzN0E4 OERBMUUxQkJDRERFQzQwN0EubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgDQTtMR5h6q/3eXpvL4Z7sJEN VQUyn80nVyBgcr1G9Rom/KBJnOEhN6KR130enWDhCsR/6V0DXN31dvoU0J8g5+iB nVRa+yFb7oySxXPzkt2+Up28FpSFwogtc5pwwznfWvGm79Moe85MmjtiHU1TD2aX wptaW0IigJcKKh7a17QVsf8QgRWmRTXdAfTHiwmwTlCNzZco2Zx/rJ2KqM8qvnlS W1JHP4yDLtOc6R60RE16rPMf1Tn8N7/vxO99nZ1VegdEk7WOE3O47z2BsbvAdkRA rpkGT8Ef5qZMYs5Ub8BEAyncyd/kR9vVqy5zWry9LDQZSjfE9yUN9jKMD4y5 -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:49 2025 by rpki-client on console.sobornost.net