$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: 93gKZePYIY2hkhdZD65Ff08fw1QYrFob/mmKHyOXY2w= Subject key identifier: 70:0F:6B:8B:83:03:86:AF:A0:45:FE:5D:80:36:40:85:7A:7E:01:52 Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 3432F7F425AC9E80DF542ED7571552BEB170EAE1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: 03 Signing time: Sun 27 Apr 2025 14:10:28 +0000 Manifest this update: Sun 27 Apr 2025 14:05:28 +0000 Manifest next update: Fri 02 May 2025 10:50:28 +0000 Files and hashes: 1: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: sQl+Jdk75TC8rTilvhDyi/LCaGx2bc4XbEcdHfeET5k=) 2: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: thEPwiArK3TsQ/dQnkYHJ4u9ceV03PLElIG9YtbZdKU=) 3: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: Uo7iEx9OUmn4u+kY34qPNxEmMd57z0sQgroMYTDAMn4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 04:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:32:f7:f4:25:ac:9e:80:df:54:2e:d7:57:15:52:be:b1:70:ea:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: Apr 27 14:05:28 2025 GMT Not After : May 2 10:50:28 2025 GMT Subject: CN=700F6B8B830386AFA045FE5D803640857A7E0152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:16:e4:55:52:b4:f5:1c:2d:fd:9f:96:59:f1: da:91:82:ad:97:a2:6f:20:2b:78:c8:73:a9:58:a0: f7:97:d6:50:1e:25:38:e6:08:2b:bc:df:17:34:3d: b5:e1:9f:45:de:30:9d:a0:65:50:e2:2e:11:19:f1: 70:37:1f:9f:38:74:24:0f:a7:c6:a5:d0:e0:44:fd: db:15:72:51:3f:af:79:f3:26:4b:c8:ba:f2:f9:a2: b5:88:a3:cc:20:38:a7:cc:4f:ce:1d:f0:97:f3:fe: e5:2b:b6:c9:2d:a7:c9:87:cd:2e:bf:93:ab:0c:d0: a9:ae:b7:6d:ad:38:82:60:7c:8f:18:f5:60:c6:bc: 0c:6f:86:e6:bc:f1:11:41:95:53:08:bc:d4:91:4a: 84:80:8e:ef:70:84:3d:5f:be:0b:58:93:e3:a8:68: 67:d7:d2:bb:8f:42:b0:57:0f:4f:3a:7d:2a:37:c1: f6:c1:18:ff:7b:dc:86:a6:15:37:a2:e4:c5:02:a1: c5:a1:d9:f0:55:23:03:ec:4e:ca:03:2c:e9:1e:19: 16:29:0e:ad:61:71:70:63:01:e6:b7:6f:9c:ad:27: 2f:90:64:63:ca:62:21:3c:6a:63:d5:c9:37:3a:0f: 72:e1:6e:4c:d2:82:0a:ba:da:93:dd:50:2e:d7:8d: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0F:6B:8B:83:03:86:AF:A0:45:FE:5D:80:36:40:85:7A:7E:01:52 X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:f3:f3:e1:a0:b4:34:ed:07:85:d8:b3:6f:ec:0f:49:a0: ce:4b:87:7c:4c:cd:a1:ff:ca:55:a8:6f:13:19:00:3a:09:a9: bf:30:51:fc:51:ef:9c:44:58:c0:44:e6:1b:e3:a9:ac:16:ba: c8:68:c2:a6:88:c1:84:14:e6:0b:e1:d8:98:4c:98:90:66:98: 68:dc:99:b0:fd:81:8c:20:83:fe:a9:c3:29:c3:f4:b4:07:a0: 12:2c:e8:93:31:f8:f3:84:65:e2:1d:e4:69:84:06:de:35:af: 82:62:54:fe:42:04:39:fa:11:0d:ad:0f:f5:27:c7:71:c0:16: 45:4f:37:0c:2b:f8:ae:3b:e5:06:53:ef:62:76:d9:60:91:47: 88:89:9f:84:ff:2a:71:ac:82:6b:00:f2:50:de:b4:03:6e:d3: 3f:21:7e:9a:cf:52:e1:59:23:e1:16:58:bc:4b:e4:5e:fa:00: 7e:12:02:70:7b:3c:60:32:52:2c:3d:ff:00:e0:92:69:27:f6: 22:64:60:24:ec:1e:f1:f7:31:11:dc:bb:7e:8d:e0:ca:c3:78: a4:df:a2:79:49:10:50:68:d1:6d:5d:00:21:da:9b:fa:0b:4b: 05:c3:5a:ec:02:50:87:fd:9b:cb:56:1f:70:85:97:3a:f0:c0: 09:ab:f9:ac -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNDL39CWsnoDfVC7XVxVSvrFw6uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNTA0MjcxNDA1MjhaFw0yNTA1MDIxMDUwMjhaMDMxMTAvBgNV BAMTKDcwMEY2QjhCODMwMzg2QUZBMDQ1RkU1RDgwMzY0MDg1N0E3RTAxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyFuRVUrT1HC39n5ZZ8dqRgq2X om8gK3jIc6lYoPeX1lAeJTjmCCu83xc0PbXhn0XeMJ2gZVDiLhEZ8XA3H584dCQP p8al0OBE/dsVclE/r3nzJkvIuvL5orWIo8wgOKfMT84d8Jfz/uUrtsktp8mHzS6/ k6sM0Kmut22tOIJgfI8Y9WDGvAxvhua88RFBlVMIvNSRSoSAju9whD1fvgtYk+Oo aGfX0ruPQrBXD086fSo3wfbBGP973IamFTei5MUCocWh2fBVIwPsTsoDLOkeGRYp Dq1hcXBjAea3b5ytJy+QZGPKYiE8amPVyTc6D3LhbkzSggq62pPdUC7XjQ0pAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcA9ri4MDhq+gRf5dgDZAhXp+AVIwHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlIvPz4aC0NO0Hhdizb+wPSaDO S4d8TM2h/8pVqG8TGQA6Cam/MFH8Ue+cRFjAROYb46msFrrIaMKmiMGEFOYL4diY TJiQZpho3Jmw/YGMIIP+qcMpw/S0B6ASLOiTMfjzhGXiHeRphAbeNa+CYlT+QgQ5 +hENrQ/1J8dxwBZFTzcMK/iuO+UGU+9idtlgkUeIiZ+E/ypxrIJrAPJQ3rQDbtM/ IX6az1LhWSPhFli8S+Re+gB+EgJwezxgMlIsPf8A4JJpJ/YiZGAk7B7x9zER3Lt+ jeDKw3ik36J5SRBQaNFtXQAh2pv6C0sFw1rsAlCH/ZvLVh9whZc68MAJq/ms -----END CERTIFICATE-----Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net