$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft File: 525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft (raw, json) Hash identifier: YaGaTrSWADqDToi52+doziTiuMq14pxvRlCcIyeL2o8= Subject key identifier: E7:AE:FB:B3:7E:E5:65:71:B2:10:8D:0E:00:46:DD:85:1B:65:71:E2 Authority key identifier: 52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB Certificate issuer: /CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB Certificate serial: 20B1C0FDACDD921B7464B48D6801DF584A3C4CC8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft Manifest number: D5 Signing time: Sun 27 Apr 2025 13:30:04 +0000 Manifest this update: Sun 27 Apr 2025 13:25:04 +0000 Manifest next update: Sat 03 May 2025 10:06:04 +0000 Files and hashes: 1: 34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa (hash: ku7Pegns5rb3/J+L9k67+lDukcl7gRSw3iomKYF8FW4=) 2: 525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl (hash: fHfKIioTS2YOqJTJvNgdAo9I7KjaoVirtc8Tj3+wBSM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 04:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b1:c0:fd:ac:dd:92:1b:74:64:b4:8d:68:01:df:58:4a:3c:4c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB Validity Not Before: Apr 27 13:25:04 2025 GMT Not After : May 3 10:06:04 2025 GMT Subject: CN=E7AEFBB37EE56571B2108D0E0046DD851B6571E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:04:fe:97:98:bf:1e:a5:65:a7:f2:d0:f9:61: 5f:e1:2b:1f:86:3d:b5:6c:7c:5a:be:00:16:92:69: 04:c6:56:8c:40:87:3f:23:4e:0d:93:09:64:80:fb: 8c:f5:0e:91:7e:9b:ef:9b:66:4f:25:b5:79:6f:80: 03:ce:23:53:0a:fd:97:cb:25:4d:a5:b9:fd:8a:d4: 47:93:64:9c:3f:8d:c5:16:f2:f8:60:a7:7e:4d:c9: 8d:67:c1:8b:78:0f:31:b7:36:d8:77:2a:6a:9d:02: 6f:ed:e0:a0:ea:67:56:e1:95:a0:fa:7e:8b:58:17: 59:b5:1e:ad:4a:79:6e:ea:91:81:b1:70:13:4e:68: 69:be:e0:f0:2e:6e:93:0b:0c:12:7b:25:6d:d4:ed: a9:32:96:dd:94:26:b2:b9:77:98:b9:93:ca:30:aa: c2:ec:96:fe:08:38:1b:f7:23:38:ab:12:36:02:60: 4f:3c:c7:ae:02:81:9f:17:bc:0d:d9:2d:86:d6:02: c7:f3:21:67:be:5c:a3:7c:a4:42:97:b2:76:c6:57: d2:62:7d:05:ec:dd:bb:e9:b1:ee:d6:29:68:4b:5c: 0b:00:44:5d:7e:08:62:32:fd:fc:94:3a:42:e3:2a: a5:b1:1f:bf:0a:6b:80:64:66:b8:d6:9a:12:e4:0f: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AE:FB:B3:7E:E5:65:71:B2:10:8D:0E:00:46:DD:85:1B:65:71:E2 X509v3 Authority Key Identifier: keyid:52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b6:02:8b:52:a1:83:88:e3:99:bc:47:2c:84:12:5c:e8:56: be:6e:be:69:e0:e7:29:d6:bf:7b:14:81:4b:87:58:18:0f:7f: ed:9a:b2:99:7d:9d:be:89:62:d1:13:d8:b7:ca:52:e2:8f:51: aa:29:88:05:fb:95:d4:44:5d:80:de:7a:c8:84:c8:7f:55:23: cb:5c:5e:d3:3e:4e:dd:0e:7d:cb:e2:49:9c:8e:2e:74:0a:3b: bb:39:7b:f7:6e:04:cb:b7:87:dd:35:8c:b1:5f:df:02:7b:a6: 98:01:99:09:7d:52:62:a8:99:46:4e:6f:bb:0f:0e:8a:20:6f: 9e:92:a2:c1:27:2a:f3:db:bf:9d:be:47:7d:2e:c4:06:7d:4d: fc:4b:28:26:45:ee:4b:f4:e7:4e:56:3e:56:8d:de:45:3a:a0: e7:09:6a:54:c0:1a:96:27:83:e8:05:8f:fe:f3:85:91:e1:01: ac:27:fc:68:4f:13:4f:22:00:a2:e8:e8:cb:d4:e0:a1:b3:06: 82:b7:83:02:e3:ea:93:6e:94:1d:24:76:7f:85:02:2d:d0:15: 16:48:5d:05:e4:83:6a:2a:7d:9c:4c:66:7f:c2:d9:c6:32:33: 40:a4:9f:9d:87:48:5d:28:f7:70:eb:7b:b7:8b:78:a0:6e:1f: 73:d4:bc:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUILHA/azdkht0ZLSNaAHfWEo8TMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1RTdGRUZBNzJCMkQyOEYzOTA3OEYxRUFENTE2NUZB NDM0QTNBQjAeFw0yNTA0MjcxMzI1MDRaFw0yNTA1MDMxMDA2MDRaMDMxMTAvBgNV BAMTKEU3QUVGQkIzN0VFNTY1NzFCMjEwOEQwRTAwNDZERDg1MUI2NTcxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBP6XmL8epWWn8tD5YV/hKx+G PbVsfFq+ABaSaQTGVoxAhz8jTg2TCWSA+4z1DpF+m++bZk8ltXlvgAPOI1MK/ZfL JU2luf2K1EeTZJw/jcUW8vhgp35NyY1nwYt4DzG3Nth3KmqdAm/t4KDqZ1bhlaD6 fotYF1m1Hq1KeW7qkYGxcBNOaGm+4PAubpMLDBJ7JW3U7akylt2UJrK5d5i5k8ow qsLslv4IOBv3IzirEjYCYE88x64CgZ8XvA3ZLYbWAsfzIWe+XKN8pEKXsnbGV9Ji fQXs3bvpse7WKWhLXAsARF1+CGIy/fyUOkLjKqWxH78Ka4BkZrjWmhLkDxr3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5677s37lZXGyEI0OAEbdhRtlceIwHwYDVR0j BBgwFoAUUl5/76crLSjzkHjx6tUWX6Q0o6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MzA3N0FFOUJEQTU2RkFGQ0Q5QjNEODVCQUY2MDdCRjM0 MEFCNDY0RTFFMUYyODQyQjA0MDBGRDU2MjU4MkRELzAvNTI1RTdGRUZBNzJCMkQy OEYzOTA3OEYxRUFENTE2NUZBNDM0QTNBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjVFN0ZFRkE3MkIyRDI4RjM5 MDc4RjFFQUQ1MTY1RkE0MzRBM0FCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzMwNzdBRTlCREE1NkZBRkNEOUIzRDg1QkFGNjA3QkYzNDBBQjQ2NEUx RTFGMjg0MkIwNDAwRkQ1NjI1ODJERC8wLzUyNUU3RkVGQTcyQjJEMjhGMzkwNzhG MUVBRDUxNjVGQTQzNEEzQUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCtgKLUqGDiOOZvEcshBJc6Fa+ br5p4Ocp1r97FIFLh1gYD3/tmrKZfZ2+iWLRE9i3ylLij1GqKYgF+5XURF2A3nrI hMh/VSPLXF7TPk7dDn3L4kmcji50Cju7OXv3bgTLt4fdNYyxX98Ce6aYAZkJfVJi qJlGTm+7Dw6KIG+ekqLBJyrz27+dvkd9LsQGfU38SygmRe5L9OdOVj5Wjd5FOqDn CWpUwBqWJ4PoBY/+84WR4QGsJ/xoTxNPIgCi6OjL1OChswaCt4MC4+qTbpQdJHZ/ hQIt0BUWSF0F5INqKn2cTGZ/wtnGMjNApJ+dh0hdKPdw63u3i3igbh9z1LyR -----END CERTIFICATE-----Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net