$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: YY6ChW0mroPUXd590ZsLS7IOk83aruU8B6/0WyvPgYs= Subject key identifier: BB:DC:23:2E:9F:50:38:66:56:22:7E:8A:DA:0D:CB:49:04:CB:3C:BA Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 0521A9C52FC30FDA5177B9F9A20B594027D2A095 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: D1 Signing time: Mon 28 Apr 2025 19:17:57 +0000 Manifest this update: Mon 28 Apr 2025 19:12:57 +0000 Manifest next update: Sun 04 May 2025 05:54:57 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: ItjXaKOwb+QHZwLhWYBWCIH0VcsHfuLK9e+dIUcT39E=) 2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: zw1BDm534QjAbr1mOUS3w571lKZl/zuXq8EMH6jTBvo=) 3: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:21:a9:c5:2f:c3:0f:da:51:77:b9:f9:a2:0b:59:40:27:d2:a0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Apr 28 19:12:57 2025 GMT Not After : May 4 05:54:57 2025 GMT Subject: CN=BBDC232E9F50386656227E8ADA0DCB4904CB3CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:b3:d5:2d:c0:54:4e:40:84:b7:e7:da:4a: 55:e4:3c:c6:fe:4c:fa:ba:8e:5b:70:59:a6:01:d5: 7a:76:4e:82:f6:57:5b:26:09:fe:89:13:1c:c4:bb: 29:5d:1e:b4:6a:2c:ba:9f:ac:35:1d:55:63:e0:47: 09:9c:45:ab:37:6a:a1:0b:b6:c3:f5:18:15:76:ab: 11:a6:cd:fc:8c:57:ac:f2:8b:8c:95:14:eb:47:bf: f2:c3:9c:0d:a3:e3:b3:0f:5e:d9:df:64:78:81:8c: 68:fd:a9:01:90:aa:9a:96:61:06:52:b2:22:43:c6: f5:71:7b:f1:4a:64:e4:0a:47:b6:6f:7a:6c:85:dd: d1:9c:f5:29:64:e3:68:3c:b4:51:01:96:2c:9e:9f: 86:95:61:4c:c7:10:0a:3b:24:be:5e:c7:b0:d1:c7: c1:4b:b5:34:a0:0b:15:bf:8f:ad:0b:11:a4:74:9b: 81:92:68:1b:b7:53:28:c6:d3:c0:f5:34:de:7a:e1: b1:47:9e:e4:2f:f6:53:87:4b:27:40:1f:95:6c:41: 72:8f:88:5e:97:4b:7e:a3:84:19:f3:e6:33:d4:f7: af:29:26:5b:c9:5b:1d:87:f0:90:f4:bc:3c:45:16: 7f:d8:5f:e7:f1:ad:42:51:d5:cd:78:d9:15:ce:cd: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DC:23:2E:9F:50:38:66:56:22:7E:8A:DA:0D:CB:49:04:CB:3C:BA X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:17:ca:93:80:75:ba:62:82:ce:7c:70:be:69:81:47:64:5b: c9:33:27:c5:d8:3a:f7:f5:f2:2b:49:88:9f:04:3e:08:24:e4: 16:61:5c:74:bd:da:04:e8:49:55:a9:b0:4f:5e:45:5a:77:68: cd:01:1a:78:66:3a:4e:92:7a:be:e8:49:76:8f:28:e1:bf:32: 4d:a4:d8:64:92:d9:f8:fe:b6:ac:b9:14:a0:90:b7:d1:3b:81: 47:42:1c:75:c2:be:07:7e:b5:07:2a:88:75:2e:6f:76:bf:fc: cd:23:57:ed:5d:b3:cf:2f:b0:18:35:98:74:d5:df:48:57:e3: 92:d4:2e:97:74:2b:64:6b:79:9a:d4:d8:82:59:3b:7b:2d:08: e3:1e:4f:b6:1e:03:84:a4:4c:ce:62:98:3b:aa:e3:a1:01:33: 27:61:2a:e3:cd:e9:14:ce:d1:31:59:e3:c0:ff:bc:f2:3e:60: 77:9e:c8:40:c5:ea:d8:5e:f4:12:df:1c:40:a0:4f:c1:1d:17: b1:d5:de:ba:ca:5f:28:56:6d:0c:8b:fd:70:fe:23:ff:bd:9d: d5:fc:67:07:12:88:5f:e1:6c:8b:56:eb:66:0c:ef:9f:4f:a5: 09:92:2d:7d:51:8e:db:eb:22:9f:87:bc:bc:cb:6f:1e:f3:29: 04:68:64:5b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBSGpxS/DD9pRd7n5ogtZQCfSoJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNTA0MjgxOTEyNTdaFw0yNTA1MDQwNTU0NTdaMDMxMTAvBgNV BAMTKEJCREMyMzJFOUY1MDM4NjY1NjIyN0U4QURBMERDQjQ5MDRDQjNDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPW7PVLcBUTkCEt+faSlXkPMb+ TPq6jltwWaYB1Xp2ToL2V1smCf6JExzEuyldHrRqLLqfrDUdVWPgRwmcRas3aqEL tsP1GBV2qxGmzfyMV6zyi4yVFOtHv/LDnA2j47MPXtnfZHiBjGj9qQGQqpqWYQZS siJDxvVxe/FKZOQKR7ZvemyF3dGc9Slk42g8tFEBliyen4aVYUzHEAo7JL5ex7DR x8FLtTSgCxW/j60LEaR0m4GSaBu3UyjG08D1NN564bFHnuQv9lOHSydAH5VsQXKP iF6XS36jhBnz5jPU968pJlvJWx2H8JD0vDxFFn/YX+fxrUJR1c142RXOzShdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUu9wjLp9QOGZWIn6K2g3LSQTLPLowHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwF8qTgHW6YoLOfHC+aYFHZFvJ MyfF2Dr39fIrSYifBD4IJOQWYVx0vdoE6ElVqbBPXkVad2jNARp4ZjpOknq+6El2 jyjhvzJNpNhkktn4/rasuRSgkLfRO4FHQhx1wr4HfrUHKoh1Lm92v/zNI1ftXbPP L7AYNZh01d9IV+OS1C6XdCtka3ma1NiCWTt7LQjjHk+2HgOEpEzOYpg7quOhATMn YSrjzekUztExWePA/7zyPmB3nshAxerYXvQS3xxAoE/BHRex1d66yl8oVm0Mi/1w /iP/vZ3V/GcHEohf4WyLVutmDO+fT6UJki19UY7b6yKfh7y8y28e8ykEaGRb -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:37 2025 by rpki-client on console.sobornost.net