$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft File: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft (raw, json) Hash identifier: BBxVFmZ/QV/qWoSontr0+6OCbfvg0L2fMeiuClHxwXo= Subject key identifier: B9:EA:52:BC:70:8D:0E:E3:AF:22:0B:30:03:84:2E:16:FC:A5:78:F1 Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 Certificate issuer: /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Certificate serial: 2D9157EECF4D9FEDFBE400A4A3DB11B382CD6147 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft Manifest number: D1 Signing time: Mon 28 Apr 2025 12:38:58 +0000 Manifest this update: Mon 28 Apr 2025 12:33:58 +0000 Manifest next update: Sat 03 May 2025 08:17:58 +0000 Files and hashes: 1: 323830333a333265303a3a2f33322d3332203d3e20323639393238.roa (hash: nB76hXAwUoryEDuU2ZQcyx6V4UUAq3evR1ObFKMBf0k=) 2: 3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa (hash: ojMvfXSAXgYg2HNtqEcUZn9oeO+XyPGGrQ5gFDlrsbM=) 3: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl (hash: lG9FpN6LqmTYQGmuoOOwkKiQ8YjL2cW7FQoB10xB3aA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:91:57:ee:cf:4d:9f:ed:fb:e4:00:a4:a3:db:11:b3:82:cd:61:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Validity Not Before: Apr 28 12:33:58 2025 GMT Not After : May 3 08:17:58 2025 GMT Subject: CN=B9EA52BC708D0EE3AF220B3003842E16FCA578F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:28:3f:f5:69:4c:98:e7:6e:94:6c:48:4f: 95:03:c4:50:e8:6b:0c:01:bd:04:2b:3d:cd:4b:dc: 65:28:38:f7:68:02:41:b7:5f:e2:84:83:f9:c4:b2: f3:16:5a:2d:98:a7:44:35:8c:0c:93:78:4d:88:c0: b0:a8:cb:d1:b2:f5:cb:7c:81:65:b5:69:d7:0c:82: 86:dc:79:8d:50:e5:ed:6a:c5:66:52:c2:3b:bf:2f: 02:e7:d8:9c:41:58:2a:50:6a:4c:c7:7a:7d:58:56: 4e:82:4e:41:be:0c:ad:2a:48:e4:4b:92:d0:38:32: 7c:e7:f0:88:b3:4b:9e:43:50:5a:bd:53:f3:5a:5c: 7b:fb:99:e7:8e:a4:85:da:ec:66:96:30:a8:3b:87: 63:7c:59:ed:07:f4:d6:dd:0f:98:c1:63:08:71:9d: d2:7b:5f:37:c6:b8:34:d1:43:92:13:d1:66:78:4b: 72:c2:b0:63:ae:ec:46:c2:7f:bf:5a:28:d2:74:54: a1:75:8f:7c:b7:43:6f:66:6f:9b:33:39:7d:3d:87: 98:e3:5b:2e:53:fa:e4:f3:0d:e6:83:77:f3:13:cf: 91:1c:92:94:69:53:09:d7:b9:0b:76:71:f3:30:2d: 67:33:c2:ed:3d:68:73:a1:66:86:94:e6:bf:21:ea: 21:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:52:BC:70:8D:0E:E3:AF:22:0B:30:03:84:2E:16:FC:A5:78:F1 X509v3 Authority Key Identifier: keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:38:24:b2:72:e0:ed:8b:f7:6c:e9:f2:f5:e4:26:1e:f5:b2: 2a:b8:ab:fe:b3:27:3a:c3:2a:2d:86:c3:31:1b:63:3e:56:02: 7c:45:b7:fd:5a:89:f4:28:a8:ee:25:e2:28:65:47:0c:67:ec: 4f:e0:11:53:49:66:e0:60:b4:3f:ff:0d:8d:73:92:42:ac:b0: cb:0a:73:f8:6e:44:5a:f8:46:ad:02:57:da:88:cc:60:ee:e2: 59:31:90:14:f2:a9:db:bc:e6:3c:9f:6a:c7:59:ab:4c:aa:27: ff:3e:4b:31:09:0c:48:44:06:de:b6:58:82:17:a3:05:ce:f2: 2d:41:10:2f:74:2c:b4:8f:26:d0:eb:e8:c9:48:db:49:17:0d: ec:c0:1d:6f:2e:73:05:ba:b0:b3:6b:f2:b9:a2:43:91:35:a8: c5:dd:84:59:b6:60:61:02:fd:6b:b4:c4:91:c8:01:30:76:ab: 64:92:b3:8a:68:b1:31:9a:a6:e7:96:40:6d:0a:61:a7:23:0c: d2:00:69:d1:2b:01:44:a2:0a:7a:5f:3f:6f:31:62:d7:08:ea: 6f:db:1d:67:a6:dc:f1:34:a7:fb:85:4f:de:be:26:2c:bd:ea: 04:38:de:35:28:39:1b:2f:c2:53:eb:c8:0a:7e:d1:4f:50:4e: a5:31:9a:2d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULZFX7s9Nn+375ACko9sRs4LNYUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIyQ0Q0RDZENDVFQUMyNUVFOTdENUU2NkJFOTM4RUYz MUE2MTY4NjAeFw0yNTA0MjgxMjMzNThaFw0yNTA1MDMwODE3NThaMDMxMTAvBgNV BAMTKEI5RUE1MkJDNzA4RDBFRTNBRjIyMEIzMDAzODQyRTE2RkNBNTc4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVUyg/9WlMmOdulGxIT5UDxFDo awwBvQQrPc1L3GUoOPdoAkG3X+KEg/nEsvMWWi2Yp0Q1jAyTeE2IwLCoy9Gy9ct8 gWW1adcMgobceY1Q5e1qxWZSwju/LwLn2JxBWCpQakzHen1YVk6CTkG+DK0qSORL ktA4Mnzn8IizS55DUFq9U/NaXHv7meeOpIXa7GaWMKg7h2N8We0H9NbdD5jBYwhx ndJ7XzfGuDTRQ5IT0WZ4S3LCsGOu7EbCf79aKNJ0VKF1j3y3Q29mb5szOX09h5jj Wy5T+uTzDeaDd/MTz5EckpRpUwnXuQt2cfMwLWczwu09aHOhZoaU5r8h6iFlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuepSvHCNDuOvIgswA4QuFvylePEwHwYDVR0j BBgwFoAUKyzU1tRerCXul9Xma+k47zGmFoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84Qjg4NEY1QTlGQTQ3MjhFODYwOEEzRERGODIxODA4NDkx M0I4QzE2QzdEMEZDOUZCMUUzODU3NEZERDE1NDU0LzAvMkIyQ0Q0RDZENDVFQUMy NUVFOTdENUU2NkJFOTM4RUYzMUE2MTY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjJDRDRENkQ0NUVBQzI1RUU5 N0Q1RTY2QkU5MzhFRjMxQTYxNjg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEI4ODRGNUE5RkE0NzI4RTg2MDhBM0RERjgyMTgwODQ5MTNCOEMxNkM3 RDBGQzlGQjFFMzg1NzRGREQxNTQ1NC8wLzJCMkNENEQ2RDQ1RUFDMjVFRTk3RDVF NjZCRTkzOEVGMzFBNjE2ODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgOCSycuDti/ds6fL15CYe9bIq uKv+syc6wyothsMxG2M+VgJ8Rbf9Won0KKjuJeIoZUcMZ+xP4BFTSWbgYLQ//w2N c5JCrLDLCnP4bkRa+EatAlfaiMxg7uJZMZAU8qnbvOY8n2rHWatMqif/PksxCQxI RAbetliCF6MFzvItQRAvdCy0jybQ6+jJSNtJFw3swB1vLnMFurCza/K5okORNajF 3YRZtmBhAv1rtMSRyAEwdqtkkrOKaLExmqbnlkBtCmGnIwzSAGnRKwFEogp6Xz9v MWLXCOpv2x1nptzxNKf7hU/eviYsveoEON41KDkbL8JT68gKftFPUE6lMZot -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:56 2025 by rpki-client on console.sobornost.net