$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft File: D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft (raw, json) Hash identifier: 8FYI8tdIjtoa6+EmGGAq7s/5m+tUrTzI11iVHHpMN/s= Subject key identifier: DC:92:17:DE:71:41:5A:8F:B6:F2:97:3F:41:F1:E0:43:C6:69:01:DE Authority key identifier: D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7 Certificate issuer: /CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7 Certificate serial: 3E53172913BC858D30A55BE74F3A2642F5CEF714 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft Manifest number: D1 Signing time: Sat 26 Apr 2025 23:26:38 +0000 Manifest this update: Sat 26 Apr 2025 23:21:38 +0000 Manifest next update: Fri 02 May 2025 08:20:38 +0000 Files and hashes: 1: 3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa (hash: CY/4o43mWbxyy3HP0vnDJzlsc2gukqKumA4fjaWKPX4=) 2: 3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa (hash: Fc2VPsSmAVhPgrYX6kgUlrwHnPeOBxGdh5r2jZrAFho=) 3: D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl (hash: xna1kYDgf6O8IVxexVwsf18zQv4O33Kli5YPQ8NSRsg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:53:17:29:13:bc:85:8d:30:a5:5b:e7:4f:3a:26:42:f5:ce:f7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7 Validity Not Before: Apr 26 23:21:38 2025 GMT Not After : May 2 08:20:38 2025 GMT Subject: CN=DC9217DE71415A8FB6F2973F41F1E043C66901DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:34:d0:cf:bb:ad:f9:d6:00:d6:8e:d8:e5:74: 39:67:68:aa:89:87:c5:49:07:5b:0b:95:06:bc:8f: 96:0b:08:f0:eb:9a:ba:67:e3:e9:4b:52:e6:55:75: 65:e9:55:7e:98:8f:1e:e8:c3:82:0e:51:00:b5:8a: 98:d7:3b:34:da:18:c6:14:96:40:27:fa:5a:8c:d6: 32:21:da:91:90:03:f7:f8:a0:66:0f:ec:57:4d:d4: c1:bc:bd:70:93:39:d8:16:94:f7:4e:08:cb:61:24: 22:80:15:de:77:63:ac:6f:c2:9a:d6:00:2e:d1:ed: 45:c2:ba:12:30:b5:f7:55:ec:2a:fa:aa:c6:72:60: 80:0c:de:15:31:35:51:a6:cb:87:b9:52:6b:31:13: c1:24:7b:16:20:c4:eb:66:f2:e4:24:57:00:74:eb: 24:ef:6d:f2:87:17:dd:aa:6d:29:b0:d4:ea:bc:c1: 7a:6f:0b:ea:17:52:98:51:06:db:24:1d:dc:7d:6e: db:a5:5f:ef:bf:ac:fa:c9:24:67:a6:69:06:ab:1e: a7:7f:39:5a:c0:0a:5b:91:17:17:4c:15:02:48:9e: 06:20:31:b6:d4:53:c4:91:a2:92:83:a8:84:67:2b: 06:c4:e7:c5:90:a8:b0:ab:0f:67:a9:ed:eb:7d:e1: 53:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:92:17:DE:71:41:5A:8F:B6:F2:97:3F:41:F1:E0:43:C6:69:01:DE X509v3 Authority Key Identifier: keyid:D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9f:55:ed:d4:3a:58:04:17:08:40:b6:f3:29:83:d1:68:a6: 04:25:25:d8:92:91:55:87:68:21:bc:09:f5:05:b8:67:13:8c: 82:e3:2a:0c:78:e4:87:c2:00:72:96:32:5e:e7:9e:65:05:9c: 1c:61:1b:d7:a2:f9:b9:b0:f1:96:f8:fd:ea:0b:14:a4:34:9f: a0:e0:7c:79:0c:39:88:17:bf:5f:2d:5b:6f:eb:62:2a:fc:ec: e0:e0:3b:1f:80:b6:42:b6:72:29:7e:fa:1d:88:55:e1:f2:05: 85:46:fa:c1:ab:81:28:dd:45:17:df:96:61:ad:4b:a5:e5:1b: 76:e3:14:fb:2a:9d:6d:66:cd:b5:77:b6:e1:86:3e:1c:ad:45: 17:e3:30:cb:26:e7:ed:4e:76:ac:85:d7:d9:eb:5b:3d:22:27: 5c:f8:80:be:e2:d1:58:a1:9a:e1:a1:22:ca:fb:68:4d:e2:fb: 97:98:59:a3:a0:51:10:40:c4:57:e3:42:15:32:ab:fd:e4:fe: 1a:1e:c8:8f:54:33:a6:91:1c:2a:79:21:d1:80:86:44:f4:20: 11:ea:27:2a:36:91:be:2b:0f:fe:2b:d8:e4:30:ce:78:c4:cc: fe:ce:db:57:64:59:91:49:23:de:f1:57:12:84:7d:b3:43:fa: e1:11:85:64 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPlMXKRO8hY0wpVvnTzomQvXO9xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5REIwNjRFQThEN0ZFQkNBRjdBMjEyREFEM0NDN0Qz NDFGOTVCNzAeFw0yNTA0MjYyMzIxMzhaFw0yNTA1MDIwODIwMzhaMDMxMTAvBgNV BAMTKERDOTIxN0RFNzE0MTVBOEZCNkYyOTczRjQxRjFFMDQzQzY2OTAxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNNDPu6351gDWjtjldDlnaKqJ h8VJB1sLlQa8j5YLCPDrmrpn4+lLUuZVdWXpVX6Yjx7ow4IOUQC1ipjXOzTaGMYU lkAn+lqM1jIh2pGQA/f4oGYP7FdN1MG8vXCTOdgWlPdOCMthJCKAFd53Y6xvwprW AC7R7UXCuhIwtfdV7Cr6qsZyYIAM3hUxNVGmy4e5UmsxE8EkexYgxOtm8uQkVwB0 6yTvbfKHF92qbSmw1Oq8wXpvC+oXUphRBtskHdx9btulX++/rPrJJGemaQarHqd/ OVrACluRFxdMFQJIngYgMbbUU8SRopKDqIRnKwbE58WQqLCrD2ep7et94VMfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3JIX3nFBWo+28pc/QfHgQ8ZpAd4wHwYDVR0j BBgwFoAU1Z2wZOqNf+vK96IS2tPMfTQflbcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RUZDMzQyNzRBM0Y4OUIzOTA4OTUxOThBNTZERUI1Q0Yx QTBCRDI2QUMwM0M0MjhBMDU5MzEzNEQxMDEwMTk3LzAvRDU5REIwNjRFQThEN0ZF QkNBRjdBMjEyREFEM0NDN0QzNDFGOTVCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENTlEQjA2NEVBOEQ3RkVCQ0FG N0EyMTJEQUQzQ0M3RDM0MUY5NUI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUVGQzM0Mjc0QTNGODlCMzkwODk1MTk4QTU2REVCNUNGMUEwQkQyNkFD MDNDNDI4QTA1OTMxMzREMTAxMDE5Ny8wL0Q1OURCMDY0RUE4RDdGRUJDQUY3QTIx MkRBRDNDQzdEMzQxRjk1QjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8n1Xt1DpYBBcIQLbzKYPRaKYE JSXYkpFVh2ghvAn1BbhnE4yC4yoMeOSHwgByljJe555lBZwcYRvXovm5sPGW+P3q CxSkNJ+g4Hx5DDmIF79fLVtv62Iq/Ozg4DsfgLZCtnIpfvodiFXh8gWFRvrBq4Eo 3UUX35ZhrUul5Rt24xT7Kp1tZs21d7bhhj4crUUX4zDLJuftTnashdfZ61s9Iidc +IC+4tFYoZrhoSLK+2hN4vuXmFmjoFEQQMRX40IVMqv95P4aHsiPVDOmkRwqeSHR gIZE9CAR6icqNpG+Kw/+K9jkMM54xMz+zttXZFmRSSPe8VcShH2zQ/rhEYVk -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:22 2025 by rpki-client on console.sobornost.net