$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.mft File: 17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.mft (raw, json) Hash identifier: PA0Qu2Axk587u9iRSzE93ohshL8wTOLBiu85Q1pv7cg= Subject key identifier: 01:3B:83:F6:CB:00:4A:A4:9C:4B:0F:EF:BC:E8:EA:3E:55:1F:41:F1 Authority key identifier: 17:D3:DC:5F:F7:FF:3C:C6:F2:C6:84:61:B3:5D:CB:37:05:6D:09:21 Certificate issuer: /CN=17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921 Certificate serial: 1BB5A8405CE0CA00F0E79A87A9DEEEB618CAF360 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.mft Manifest number: D7 Signing time: Mon 28 Apr 2025 13:24:19 +0000 Manifest this update: Mon 28 Apr 2025 13:19:19 +0000 Manifest next update: Fri 02 May 2025 19:24:19 +0000 Files and hashes: 1: 323830333a613630303a3a2f33322d3438203d3e203532333838.roa (hash: kw567sLQ5sMxACTcTUKniNVO4KWiL36yy8i8vclGJOE=) 2: 3139302e3131332e3233322e302f32322d3234203d3e203532333838.roa (hash: IrJwxqfA9bYYcM6AfzCWh93Z6Xc0C7e3XXh4Y4MA1zs=) 3: 17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.crl (hash: Y6roZlzlnz/CKmXFR/dATPRgD93CTRNVeyASbrRUXJM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.crl rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b5:a8:40:5c:e0:ca:00:f0:e7:9a:87:a9:de:ee:b6:18:ca:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921 Validity Not Before: Apr 28 13:19:19 2025 GMT Not After : May 2 19:24:19 2025 GMT Subject: CN=013B83F6CB004AA49C4B0FEFBCE8EA3E551F41F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ad:7d:01:b1:45:a8:b7:01:33:7d:fe:06:a1: 95:2c:8f:7d:9a:2f:e5:0c:c3:5f:c3:6d:6b:67:c0: 26:ca:92:94:98:47:67:a7:64:3f:53:67:d0:86:cf: e0:8d:5d:13:37:85:c3:e9:bc:17:1e:fb:fd:41:19: 1f:48:28:53:44:0d:9a:60:d3:e6:00:99:20:40:e4: cc:33:62:4f:a7:ef:bc:aa:6e:16:c9:22:d4:ca:63: 25:54:22:08:22:c4:26:41:c7:42:b0:b6:ac:ba:20: dc:cb:7c:a5:47:c7:b5:23:aa:ac:04:3e:10:a7:6d: f4:35:a9:d7:b9:d2:3c:a6:4c:8b:44:cf:a4:ec:ce: 46:90:07:22:3d:2a:97:8b:34:8f:fa:a8:53:aa:6b: e1:96:82:01:27:da:7e:22:2c:c9:b1:0e:41:d8:38: 2b:20:f6:c6:a2:b6:64:ca:aa:12:39:37:56:3f:50: 35:f7:b3:e2:41:48:bf:68:39:ec:19:8e:b6:9e:d7: b4:07:34:bc:71:70:58:cb:fa:08:e1:ca:a9:ab:8c: f0:a7:c8:3b:19:3a:af:18:1c:31:81:e3:7c:4f:34: 01:d6:8d:93:2b:66:6f:71:9c:f9:ed:86:47:4f:66: 58:d9:10:de:ac:12:86:96:e4:4e:2e:0a:d4:89:37: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3B:83:F6:CB:00:4A:A4:9C:4B:0F:EF:BC:E8:EA:3E:55:1F:41:F1 X509v3 Authority Key Identifier: keyid:17:D3:DC:5F:F7:FF:3C:C6:F2:C6:84:61:B3:5D:CB:37:05:6D:09:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9e:41:fd:d6:75:f2:d9:86:1a:9c:dd:5a:f2:d8:eb:d2:5c: 12:74:e7:82:5c:54:b0:90:33:6e:13:6e:a5:4d:25:c6:c8:4b: f1:d9:d2:c4:eb:5e:17:8b:6a:9c:f3:f4:1a:90:dd:7c:b9:df: 7f:b4:fe:bd:ff:f3:90:c6:f3:32:89:8c:c2:b5:a1:f8:9f:6e: a9:9e:59:06:ea:08:fb:f0:35:0e:be:a1:2d:cd:5d:07:9d:0a: 42:42:d2:b8:53:4d:34:24:8b:d4:a3:6b:35:36:0e:30:cc:5c: 66:cf:53:7d:f5:94:86:15:66:96:98:aa:ff:66:8e:d3:57:5a: 33:80:1b:51:84:25:28:4e:4a:d6:f3:7c:a1:cc:d7:9d:1e:15: ad:08:08:de:87:4f:89:3c:f0:8c:c1:c4:42:e1:88:ed:12:7d: 91:63:9c:13:15:99:2f:a0:3c:03:f7:6f:9d:54:a3:0f:bf:4a: ea:11:a0:5e:2f:0c:84:a6:04:34:b9:08:e3:f0:a8:15:8b:57: d1:ab:e2:37:66:ce:c2:4c:86:c2:0c:6d:6c:64:27:f5:58:88: e7:2e:c8:1d:33:a5:cb:d1:5d:da:a1:46:5c:51:cc:ea:f2:ff: 47:bf:eb:d7:43:c0:ac:b2:1d:fc:67:1f:3b:2c:bd:8f:a3:52: 6e:d0:ee:65 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG7WoQFzgygDw55qHqd7uthjK82AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEM0RDNUZGN0ZGM0NDNkYyQzY4NDYxQjM1RENCMzcw NTZEMDkyMTAeFw0yNTA0MjgxMzE5MTlaFw0yNTA1MDIxOTI0MTlaMDMxMTAvBgNV BAMTKDAxM0I4M0Y2Q0IwMDRBQTQ5QzRCMEZFRkJDRThFQTNFNTUxRjQxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrX0BsUWotwEzff4GoZUsj32a L+UMw1/DbWtnwCbKkpSYR2enZD9TZ9CGz+CNXRM3hcPpvBce+/1BGR9IKFNEDZpg 0+YAmSBA5MwzYk+n77yqbhbJItTKYyVUIggixCZBx0Kwtqy6INzLfKVHx7UjqqwE PhCnbfQ1qde50jymTItEz6TszkaQByI9KpeLNI/6qFOqa+GWggEn2n4iLMmxDkHY OCsg9saitmTKqhI5N1Y/UDX3s+JBSL9oOewZjrae17QHNLxxcFjL+gjhyqmrjPCn yDsZOq8YHDGB43xPNAHWjZMrZm9xnPnthkdPZljZEN6sEoaW5E4uCtSJNwLVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUATuD9ssASqScSw/vvOjqPlUfQfEwHwYDVR0j BBgwFoAUF9PcX/f/PMbyxoRhs13LNwVtCSEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjI2N0IyRjY4ODA4QzQ4NUZFQjE0REJBRTA3RjVCM0U3 MjcxRjIyQ0M1MTBFQTMxNUI5NERCN0FCRERBREIyLzAvMTdEM0RDNUZGN0ZGM0ND NkYyQzY4NDYxQjM1RENCMzcwNTZEMDkyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xN0QzREM1RkY3RkYzQ0M2RjJD Njg0NjFCMzVEQ0IzNzA1NkQwOTIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkIyNjdCMkY2ODgwOEM0ODVGRUIxNERCQUUwN0Y1QjNFNzI3MUYyMkND NTEwRUEzMTVCOTREQjdBQkREQURCMi8wLzE3RDNEQzVGRjdGRjNDQzZGMkM2ODQ2 MUIzNURDQjM3MDU2RDA5MjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZnkH91nXy2YYanN1a8tjr0lwS dOeCXFSwkDNuE26lTSXGyEvx2dLE614Xi2qc8/QakN18ud9/tP69//OQxvMyiYzC taH4n26pnlkG6gj78DUOvqEtzV0HnQpCQtK4U000JIvUo2s1Ng4wzFxmz1N99ZSG FWaWmKr/Zo7TV1ozgBtRhCUoTkrW83yhzNedHhWtCAjeh0+JPPCMwcRC4YjtEn2R Y5wTFZkvoDwD92+dVKMPv0rqEaBeLwyEpgQ0uQjj8KgVi1fRq+I3Zs7CTIbCDG1s ZCf1WIjnLsgdM6XL0V3aoUZcUczq8v9Hv+vXQ8Cssh38Zx87LL2Po1Ju0O5l -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:56 2025 by rpki-client on console.sobornost.net