$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.mft File: 883603453C53D19DB8B0F2A85DC397504758D2C4.mft (raw, json) Hash identifier: 4pgEQvNEW8KaUhEVU7zweOSINleCeXrWOxu9SRce6tk= Subject key identifier: 35:C9:0C:A5:3C:28:F4:E7:C7:EF:B8:EF:D4:A9:98:47:3E:0F:3B:0C Authority key identifier: 88:36:03:45:3C:53:D1:9D:B8:B0:F2:A8:5D:C3:97:50:47:58:D2:C4 Certificate issuer: /CN=883603453C53D19DB8B0F2A85DC397504758D2C4 Certificate serial: 27FF4EEB67392BFCDF1DB746814AB1E7DF4145C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/883603453C53D19DB8B0F2A85DC397504758D2C4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.mft Manifest number: CA Signing time: Sun 27 Apr 2025 14:55:54 +0000 Manifest this update: Sun 27 Apr 2025 14:50:54 +0000 Manifest next update: Fri 02 May 2025 20:27:54 +0000 Files and hashes: 1: 883603453C53D19DB8B0F2A85DC397504758D2C4.crl (hash: gMev20TOhjGHK6lcfnQxOTE11vgRW6fQVRNB/3eg+PY=) 2: 34352e3137332e35322e302f32332d3234203d3e20323637383235.roa (hash: qmczXx+TyClMZhHSrBmCkJtjyu3pPsdSsmPe1JePILQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.crl rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/883603453C53D19DB8B0F2A85DC397504758D2C4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 04:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ff:4e:eb:67:39:2b:fc:df:1d:b7:46:81:4a:b1:e7:df:41:45:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883603453C53D19DB8B0F2A85DC397504758D2C4 Validity Not Before: Apr 27 14:50:54 2025 GMT Not After : May 2 20:27:54 2025 GMT Subject: CN=35C90CA53C28F4E7C7EFB8EFD4A998473E0F3B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:53:64:87:25:bc:31:76:14:8f:fd:a0:9f: 3f:5e:29:7f:d4:d6:3c:f0:57:05:28:cb:38:4a:fe: 55:e9:0a:db:ce:c9:9a:26:53:69:cb:1b:b7:11:b4: f7:e5:3c:89:38:42:1f:f3:84:70:d2:bf:36:7b:ae: 66:79:53:93:a8:d5:dc:24:4c:66:dd:7c:67:71:84: 53:e2:28:55:da:ef:ef:7e:77:12:a1:2f:ee:4d:16: 50:9b:86:20:75:22:d3:e7:59:61:a3:31:c8:15:13: 9c:8f:6b:24:e7:31:56:1a:86:99:b5:d9:37:9b:0e: 14:ac:8a:f0:b6:bc:d8:9f:25:4b:70:14:5f:e7:d3: 64:98:05:ba:e9:9c:d6:db:c2:e8:07:1b:82:79:9d: 05:ae:2c:7b:64:c0:52:b6:5b:cd:61:14:d9:ae:e0: 61:8a:77:6a:c5:56:8e:91:c9:18:09:95:22:dd:e6: c8:4c:1a:08:00:15:d4:fc:3a:18:c1:48:23:03:9e: c6:3c:b9:64:80:44:84:db:21:2a:11:d6:22:2a:d2: 5f:4d:58:df:7b:84:9a:62:c8:fd:53:93:f7:75:01: 95:76:3d:81:46:43:cd:7a:92:dc:59:0c:bc:32:8c: f4:3f:00:25:62:c1:f1:22:b2:7a:e5:f8:1b:93:fa: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:0C:A5:3C:28:F4:E7:C7:EF:B8:EF:D4:A9:98:47:3E:0F:3B:0C X509v3 Authority Key Identifier: keyid:88:36:03:45:3C:53:D1:9D:B8:B0:F2:A8:5D:C3:97:50:47:58:D2:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/883603453C53D19DB8B0F2A85DC397504758D2C4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867B82A2F10C441C988917BA9F28AF89DE457BEBE92F680E09D50E0484FFCD18/0/883603453C53D19DB8B0F2A85DC397504758D2C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:8d:10:62:c5:fd:ec:f8:51:b6:c3:4f:16:bb:95:52:64:64: 36:89:c9:6f:4e:0c:a0:74:4a:a3:71:19:35:80:c5:76:3c:6e: 1b:c0:18:45:7e:56:53:81:d0:53:f9:55:2e:d0:ac:50:2a:43: 29:f8:c3:96:93:fd:8a:f3:f6:f3:84:1b:fa:1f:8f:7d:f1:c0: a3:a1:c5:f8:81:d6:bd:c4:25:33:a3:fa:ff:ec:d1:e2:a7:29: d1:3d:d8:4b:f2:76:a9:13:9f:f3:87:f0:6b:70:07:69:11:f2: 0c:70:6c:51:fd:cb:7a:3d:70:21:de:e9:42:74:c3:e8:98:e4: 60:a2:ea:ea:27:97:7c:35:48:b7:cc:6d:eb:79:73:56:f6:75: 40:38:a9:33:cc:98:4c:3b:f7:ab:fb:51:9f:58:a2:e4:ca:a4: ae:a3:99:12:b6:6b:24:29:17:7b:83:08:ee:60:0f:6d:dd:22: 6d:fa:b1:86:fd:52:31:f4:69:9b:4a:3f:56:0e:4a:5d:b6:2d: 88:4a:85:4e:67:d0:d8:3e:f5:bd:4f:70:94:28:b5:c3:4a:d9: 8d:63:94:f4:68:01:30:b7:5e:2e:a3:ad:a6:cd:3c:57:de:30: 4c:8a:f4:1d:b1:dd:d6:60:da:2f:10:90:85:d7:e4:81:4a:ea: 9e:30:f9:24 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJ/9O62c5K/zfHbdGgUqx599BRcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzNjAzNDUzQzUzRDE5REI4QjBGMkE4NURDMzk3NTA0 NzU4RDJDNDAeFw0yNTA0MjcxNDUwNTRaFw0yNTA1MDIyMDI3NTRaMDMxMTAvBgNV BAMTKDM1QzkwQ0E1M0MyOEY0RTdDN0VGQjhFRkQ0QTk5ODQ3M0UwRjNCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/FNkhyW8MXYUj/2gnz9eKX/U 1jzwVwUoyzhK/lXpCtvOyZomU2nLG7cRtPflPIk4Qh/zhHDSvzZ7rmZ5U5Oo1dwk TGbdfGdxhFPiKFXa7+9+dxKhL+5NFlCbhiB1ItPnWWGjMcgVE5yPayTnMVYahpm1 2TebDhSsivC2vNifJUtwFF/n02SYBbrpnNbbwugHG4J5nQWuLHtkwFK2W81hFNmu 4GGKd2rFVo6RyRgJlSLd5shMGggAFdT8OhjBSCMDnsY8uWSARITbISoR1iIq0l9N WN97hJpiyP1Tk/d1AZV2PYFGQ816ktxZDLwyjPQ/ACViwfEisnrl+BuT+iypAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNckMpTwo9OfH77jv1KmYRz4POwwwHwYDVR0j BBgwFoAUiDYDRTxT0Z24sPKoXcOXUEdY0sQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NjdCODJBMkYxMEM0NDFDOTg4OTE3QkE5RjI4QUY4OURF NDU3QkVCRTkyRjY4MEUwOUQ1MEUwNDg0RkZDRDE4LzAvODgzNjAzNDUzQzUzRDE5 REI4QjBGMkE4NURDMzk3NTA0NzU4RDJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODM2MDM0NTNDNTNEMTlEQjhC MEYyQTg1REMzOTc1MDQ3NThEMkM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODY3QjgyQTJGMTBDNDQxQzk4ODkxN0JBOUYyOEFGODlERTQ1N0JFQkU5 MkY2ODBFMDlENTBFMDQ4NEZGQ0QxOC8wLzg4MzYwMzQ1M0M1M0QxOURCOEIwRjJB ODVEQzM5NzUwNDc1OEQyQzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3jRBixf3s+FG2w08Wu5VSZGQ2 iclvTgygdEqjcRk1gMV2PG4bwBhFflZTgdBT+VUu0KxQKkMp+MOWk/2K8/bzhBv6 H4998cCjocX4gda9xCUzo/r/7NHipynRPdhL8napE5/zh/BrcAdpEfIMcGxR/ct6 PXAh3ulCdMPomORgourqJ5d8NUi3zG3reXNW9nVAOKkzzJhMO/er+1GfWKLkyqSu o5kStmskKRd7gwjuYA9t3SJt+rGG/VIx9GmbSj9WDkpdti2ISoVOZ9DYPvW9T3CU KLXDStmNY5T0aAEwt14uo62mzTxX3jBMivQdsd3WYNovEJCF1+SBSuqeMPkk -----END CERTIFICATE-----Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net