$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.mft File: 88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.mft (raw, json) Hash identifier: OFbybmrlxYbJrNT2Go2zlluSWCANe4nAkcK+gGQA7c0= Subject key identifier: 71:5F:69:D9:C7:02:9B:C1:F5:53:C6:BB:57:24:B7:60:0B:B2:0E:EA Authority key identifier: 88:ED:9F:EC:72:E4:DE:7B:BA:CC:A9:96:D9:28:A1:3A:27:AF:7C:58 Certificate issuer: /CN=88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58 Certificate serial: 4070825A5D88B060966FCC42B0E28888431DBE54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.mft Manifest number: D7 Signing time: Sun 27 Apr 2025 13:50:14 +0000 Manifest this update: Sun 27 Apr 2025 13:45:14 +0000 Manifest next update: Fri 02 May 2025 19:04:14 +0000 Files and hashes: 1: 88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.crl (hash: o55C44GHx8hkv5Q8Bv5/83YRhDlTk/xKoopp4/nfmHs=) 2: 323830333a626363303a3a2f33322d3438203d3e20323634383232.roa (hash: xqb0OK9Ul8K6badX4YmNWGWdH4tA23iqbP1M0sszhYo=) 3: 3137302e38302e3133362e302f32322d3234203d3e20323634383232.roa (hash: jGdl3i/ya9MpMAkp2Cqa4s7LOgVeq1e0fHRTTFtR4eU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.crl rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 04:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:70:82:5a:5d:88:b0:60:96:6f:cc:42:b0:e2:88:88:43:1d:be:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58 Validity Not Before: Apr 27 13:45:14 2025 GMT Not After : May 2 19:04:14 2025 GMT Subject: CN=715F69D9C7029BC1F553C6BB5724B7600BB20EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:c3:90:03:57:cc:cb:56:45:37:7c:9d:1f: 4e:62:e6:09:51:eb:56:7c:1f:9d:e5:d8:d1:af:13: bb:5c:19:2c:a2:31:61:7e:95:f9:1b:83:0d:de:9f: 5f:9c:e0:cf:54:59:40:c1:19:cb:16:bf:70:cb:05: f9:03:a0:d4:5e:f8:ed:85:7a:51:05:38:92:ea:22: 56:c8:02:f9:f5:34:61:80:db:a3:c8:76:ca:b5:96: 86:f9:7d:6c:28:c3:60:1c:cb:fb:31:42:cf:d8:08: 52:9e:4d:0a:b4:b7:da:83:59:d2:7e:08:f9:2b:9d: 5d:e6:df:8a:43:8d:88:98:ee:0e:d1:6b:19:b2:50: 13:60:9c:fb:28:27:22:74:dd:5a:5a:f3:92:66:d2: 1e:0e:94:05:71:aa:cc:86:96:ec:63:ae:02:7d:97: 16:77:3e:a4:f6:ff:f2:b8:0e:0c:d0:ae:42:4d:53: 2a:0f:62:56:15:ab:35:20:27:c7:6a:5c:62:5b:95: 2a:17:41:b4:0d:2f:0d:4d:fd:50:0f:c6:e7:26:27: 86:6a:26:5d:f1:eb:70:38:3d:e6:00:84:bf:47:09: 4c:15:ca:24:e3:9d:38:2d:42:03:42:a7:5a:02:05: 48:9d:a6:08:74:a5:d2:d0:aa:33:16:2e:4e:24:1c: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:69:D9:C7:02:9B:C1:F5:53:C6:BB:57:24:B7:60:0B:B2:0E:EA X509v3 Authority Key Identifier: keyid:88:ED:9F:EC:72:E4:DE:7B:BA:CC:A9:96:D9:28:A1:3A:27:AF:7C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:68:a2:6c:cb:6e:f8:45:b3:4a:da:e8:e6:90:4c:59:01:42: a3:8f:3c:49:cf:2d:21:d9:aa:c6:63:c5:c7:a9:90:11:90:3c: b8:ce:7d:b5:ec:ef:13:a9:d7:21:a3:e9:0a:26:50:77:c7:8b: f0:32:c2:d5:58:0a:59:c9:0b:0a:d7:26:8f:6d:83:f2:0c:32: d7:f4:6a:44:b7:23:e6:8c:93:5a:63:39:99:3b:ad:b4:f2:66: 4b:6a:ac:24:d3:69:1c:13:bb:c8:72:bc:cd:aa:62:cd:7e:56: 26:19:f0:ea:34:74:6a:35:9c:56:aa:37:0f:cf:c3:9c:0f:6c: 61:08:8a:bc:47:32:f9:e5:ff:36:04:c6:ca:4b:4c:25:b9:33: 72:8c:9a:93:27:3d:ca:45:34:12:97:9d:10:fa:47:d0:2f:8a: a8:3a:fa:0e:35:79:a0:3c:1d:5d:33:49:4c:eb:0f:5d:02:b0: 71:c3:0d:83:86:74:02:c4:92:24:f0:60:e8:94:da:d0:f1:0b: 7b:1c:6c:89:d8:99:82:24:9d:47:31:4c:ea:12:4c:3d:62:7f: b1:e3:b1:86:c3:b4:85:1e:48:22:91:55:fe:35:0d:ae:4b:4b: 5a:f7:eb:f7:c0:bc:f7:c0:d7:bc:6f:3f:f7:88:27:f7:3d:08: 9d:d7:80:36 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQHCCWl2IsGCWb8xCsOKIiEMdvlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFRDlGRUM3MkU0REU3QkJBQ0NBOTk2RDkyOEExM0Ey N0FGN0M1ODAeFw0yNTA0MjcxMzQ1MTRaFw0yNTA1MDIxOTA0MTRaMDMxMTAvBgNV BAMTKDcxNUY2OUQ5QzcwMjlCQzFGNTUzQzZCQjU3MjRCNzYwMEJCMjBFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpMOQA1fMy1ZFN3ydH05i5glR 61Z8H53l2NGvE7tcGSyiMWF+lfkbgw3en1+c4M9UWUDBGcsWv3DLBfkDoNRe+O2F elEFOJLqIlbIAvn1NGGA26PIdsq1lob5fWwow2Acy/sxQs/YCFKeTQq0t9qDWdJ+ CPkrnV3m34pDjYiY7g7RaxmyUBNgnPsoJyJ03Vpa85Jm0h4OlAVxqsyGluxjrgJ9 lxZ3PqT2//K4DgzQrkJNUyoPYlYVqzUgJ8dqXGJblSoXQbQNLw1N/VAPxucmJ4Zq Jl3x63A4PeYAhL9HCUwVyiTjnTgtQgNCp1oCBUidpgh0pdLQqjMWLk4kHEj7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcV9p2ccCm8H1U8a7VyS3YAuyDuowHwYDVR0j BBgwFoAUiO2f7HLk3nu6zKmW2SihOievfFgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NDA1MUIyOURBODJDQjlFNDM4QThBMUZFNUVBQ0NGQUQ4 N0YxNjUxNjY1NTYxQTNCNDk1RjI2QTkwRDlFNjk0LzAvODhFRDlGRUM3MkU0REU3 QkJBQ0NBOTk2RDkyOEExM0EyN0FGN0M1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OEVEOUZFQzcyRTRERTdCQkFD Q0E5OTZEOTI4QTEzQTI3QUY3QzU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjQwNTFCMjlEQTgyQ0I5RTQzOEE4QTFGRTVFQUNDRkFEODdGMTY1MTY2 NTU2MUEzQjQ5NUYyNkE5MEQ5RTY5NC8wLzg4RUQ5RkVDNzJFNERFN0JCQUNDQTk5 NkQ5MjhBMTNBMjdBRjdDNTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJaKJsy274RbNK2ujmkExZAUKj jzxJzy0h2arGY8XHqZARkDy4zn217O8Tqdcho+kKJlB3x4vwMsLVWApZyQsK1yaP bYPyDDLX9GpEtyPmjJNaYzmZO6208mZLaqwk02kcE7vIcrzNqmLNflYmGfDqNHRq NZxWqjcPz8OcD2xhCIq8RzL55f82BMbKS0wluTNyjJqTJz3KRTQSl50Q+kfQL4qo OvoONXmgPB1dM0lM6w9dArBxww2DhnQCxJIk8GDolNrQ8Qt7HGyJ2JmCJJ1HMUzq Ekw9Yn+x47GGw7SFHkgikVX+NQ2uS0ta9+v3wLz3wNe8bz/3iCf3PQid14A2 -----END CERTIFICATE-----Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net