$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft File: AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft (raw, json) Hash identifier: 7kAeIJk1nvmUZNq5L21WF2STEGnLAMkbbDWjK44Qt9M= Subject key identifier: EF:6B:05:BC:DC:11:53:7E:3A:69:80:42:E0:49:20:B3:0D:03:B4:41 Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D Certificate issuer: /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D Certificate serial: 1729EF33BEDBF111D086EBE45A9308E78485BC48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft Manifest number: D2 Signing time: Sat 26 Apr 2025 12:37:04 +0000 Manifest this update: Sat 26 Apr 2025 12:32:04 +0000 Manifest next update: Fri 02 May 2025 11:19:04 +0000 Files and hashes: 1: 34352e3138312e34312e302f32342d3234203d3e20323635353936.roa (hash: s8yQ/QgUIAqa25dgGeYtbxFFxdmE0jZHErLW8CLLt5U=) 2: 323830363a3334353a3a2f33322d3332203d3e20323635353936.roa (hash: gJ2KE+hhCnBlKNK4IXm1DBQhXwWRHEEVfQKtsDSjF60=) 3: 34352e3138312e34302e302f32342d3234203d3e20323635353936.roa (hash: SvkXsMv55PSYZqXEFuqtC+A52E6JploJKAslELlq4Tg=) 4: 34352e3138312e34302e302f32332d3233203d3e20323635353936.roa (hash: utTDuCeDQ9y7DdWOw6eKSHmHCX93JDTJCDaEfjqE2FI=) 5: AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl (hash: +Gcy5K44HB9EbFTdu/+rKPu3f6q8dbPZPH7nb+Qd5xw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:29:ef:33:be:db:f1:11:d0:86:eb:e4:5a:93:08:e7:84:85:bc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D Validity Not Before: Apr 26 12:32:04 2025 GMT Not After : May 2 11:19:04 2025 GMT Subject: CN=EF6B05BCDC11537E3A698042E04920B30D03B441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:5c:3f:ce:e0:9f:bd:62:93:31:64:b6:b2: 5c:9d:06:be:e9:62:74:49:da:36:bf:1c:ec:df:07: 3f:98:f5:c4:26:9b:0a:e3:14:de:39:2d:62:d4:b1: 8a:b5:9e:4d:5c:94:ac:f4:85:75:23:76:8a:63:7f: 40:a8:53:c0:71:e7:4e:1b:32:d9:c7:a0:93:05:c4: 18:92:c1:a6:52:76:a8:83:00:49:ce:e0:83:e0:28: a4:50:f7:2f:33:c5:b8:d2:96:1a:06:4a:a4:c5:47: 5d:9f:3f:ea:f1:8f:a6:ad:47:93:fc:bc:7e:96:84: de:aa:58:ac:1b:b1:7f:eb:d1:5e:ba:c1:e9:a4:e4: af:18:e2:9f:a2:b9:8d:25:a5:7e:96:ff:87:2d:0c: 6f:45:82:e2:e3:66:e5:7f:24:e9:27:6c:7a:37:55: c3:24:41:8f:cc:c1:b1:d9:6b:cc:3c:46:1f:36:9f: 6a:7d:01:36:79:ea:e4:67:9e:16:ac:70:25:46:4b: 3c:1a:c7:16:73:1a:fb:67:df:7d:3c:19:9d:0c:3f: 81:c0:1c:60:63:69:4c:91:dd:71:0c:2a:24:25:01: 85:4b:f8:4a:2f:70:72:51:2f:96:76:dc:c6:de:b9: ac:6a:a2:40:f5:1a:51:21:cf:c9:8b:8f:bd:58:5f: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6B:05:BC:DC:11:53:7E:3A:69:80:42:E0:49:20:B3:0D:03:B4:41 X509v3 Authority Key Identifier: keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cd:03:38:29:a8:ce:10:c1:62:ac:a9:3e:c7:24:51:d7:0e: 2a:2d:37:6e:84:ae:80:29:b4:71:25:5d:b1:c9:54:a6:18:29: 18:bf:8b:4f:1b:43:a8:80:4b:99:b8:7a:a3:a2:c1:ca:5d:e3: 53:3b:8d:0d:14:6e:60:7f:3c:b5:12:37:47:51:49:ea:2a:2d: 59:2a:3d:c2:2c:4b:02:c2:32:21:43:99:93:48:b7:bf:69:49: 61:ec:59:36:10:25:07:b9:28:c8:bc:a7:46:69:d4:26:ee:37: d2:93:ce:18:fd:ef:32:12:73:ca:7e:96:7e:0f:f0:72:24:a8: d6:36:b7:8e:7b:d7:c0:5b:00:58:86:ce:6e:5f:2a:04:a1:5c: fb:3c:fc:d3:d8:2f:1c:b9:e8:2b:38:ae:97:e4:da:0a:1c:64: 41:07:76:30:d3:14:82:ff:f9:b2:bf:e8:e2:61:c0:c5:05:6e: 51:d6:92:5c:5d:aa:fc:b9:aa:de:15:49:fb:70:fd:4d:3b:a8: 8f:25:0c:4c:cc:81:0a:a3:4d:19:91:52:11:82:71:6b:bd:f5: 86:d7:a4:24:3d:a9:fe:73:13:c4:2b:38:dc:d5:ad:1d:e4:ec: ca:49:18:02:70:d5:00:ea:28:74:b3:5f:3d:d2:3f:9f:f6:95: 7b:bd:3f:31 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFynvM77b8RHQhuvkWpMI54SFvEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5QTBBMEM0MTExQkEwMjc4MkEyRTk3NjkxRjlGQzZD MDhGRUY0RDAeFw0yNTA0MjYxMjMyMDRaFw0yNTA1MDIxMTE5MDRaMDMxMTAvBgNV BAMTKEVGNkIwNUJDREMxMTUzN0UzQTY5ODA0MkUwNDkyMEIzMEQwM0I0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtlw/zuCfvWKTMWS2slydBr7p YnRJ2ja/HOzfBz+Y9cQmmwrjFN45LWLUsYq1nk1clKz0hXUjdopjf0CoU8Bx504b MtnHoJMFxBiSwaZSdqiDAEnO4IPgKKRQ9y8zxbjSlhoGSqTFR12fP+rxj6atR5P8 vH6WhN6qWKwbsX/r0V66wemk5K8Y4p+iuY0lpX6W/4ctDG9FguLjZuV/JOknbHo3 VcMkQY/MwbHZa8w8Rh82n2p9ATZ56uRnnhascCVGSzwaxxZzGvtn3308GZ0MP4HA HGBjaUyR3XEMKiQlAYVL+EovcHJRL5Z23MbeuaxqokD1GlEhz8mLj71YX4ZjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU72sFvNwRU346aYBC4Ekgsw0DtEEwHwYDVR0j BBgwFoAUqpoKDEERugJ4Ki6XaR+fxsCP700wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RTIxQjlCRkEwQzIzNzQzNDZGMzNFNkNFMUFFQzc5NDEy QjJERkI1ODY2QzVGQzBDMUMwQzY1QzQ2NjVDNTg4LzAvQUE5QTBBMEM0MTExQkEw Mjc4MkEyRTk3NjkxRjlGQzZDMDhGRUY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTlBMEEwQzQxMTFCQTAyNzgy QTJFOTc2OTFGOUZDNkMwOEZFRjRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUUyMUI5QkZBMEMyMzc0MzQ2RjMzRTZDRTFBRUM3OTQxMkIyREZCNTg2 NkM1RkMwQzFDMEM2NUM0NjY1QzU4OC8wL0FBOUEwQTBDNDExMUJBMDI3ODJBMkU5 NzY5MUY5RkM2QzA4RkVGNEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVzQM4KajOEMFirKk+xyRR1w4q LTduhK6AKbRxJV2xyVSmGCkYv4tPG0OogEuZuHqjosHKXeNTO40NFG5gfzy1EjdH UUnqKi1ZKj3CLEsCwjIhQ5mTSLe/aUlh7Fk2ECUHuSjIvKdGadQm7jfSk84Y/e8y EnPKfpZ+D/ByJKjWNreOe9fAWwBYhs5uXyoEoVz7PPzT2C8cuegrOK6X5NoKHGRB B3Yw0xSC//myv+jiYcDFBW5R1pJcXar8uareFUn7cP1NO6iPJQxMzIEKo00ZkVIR gnFrvfWG16QkPan+cxPEKzjc1a0d5OzKSRgCcNUA6ih0s1890j+f9pV7vT8x -----END CERTIFICATE-----Generated at Sat Apr 26 18:18:04 2025 by rpki-client on console.sobornost.net