$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft File: B4FABCBFF83288B64BE540323B458825C54A4663.mft (raw, json) Hash identifier: CSS0T17VEBRR1b3qeghvQbvOovaG0nzxQb3bviKa/p4= Subject key identifier: 42:8D:A8:B9:0B:79:A1:94:8B:93:0F:36:7B:67:73:57:14:9D:9F:72 Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63 Certificate issuer: /CN=B4FABCBFF83288B64BE540323B458825C54A4663 Certificate serial: 5D4D53803CC8D0300B11A40F179F9236F13CAB19 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft Manifest number: 3C Signing time: Mon 28 Apr 2025 12:49:05 +0000 Manifest this update: Mon 28 Apr 2025 12:44:05 +0000 Manifest next update: Fri 02 May 2025 22:20:05 +0000 Files and hashes: 1: B4FABCBFF83288B64BE540323B458825C54A4663.crl (hash: ugqj3Wfubw2lF3aQzQuyK4P8AcliIeiNq3UHvCElX50=) 2: 34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa (hash: F6bsnRTCs627fuNyoRTlesCcezkPMMnlWqt9UKcbXIQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4d:53:80:3c:c8:d0:30:0b:11:a4:0f:17:9f:92:36:f1:3c:ab:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663 Validity Not Before: Apr 28 12:44:05 2025 GMT Not After : May 2 22:20:05 2025 GMT Subject: CN=428DA8B90B79A1948B930F367B677357149D9F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:32:38:57:49:af:c2:f6:bb:68:69:cf:b0: e8:a6:f6:8c:71:b5:71:97:1c:c2:a5:20:08:bf:3f: 4b:2f:6c:4d:35:99:8f:b0:69:88:3a:15:10:c6:fb: e1:61:cd:03:85:ab:20:03:a9:6e:62:1e:c5:7d:01: fd:d3:cb:e8:76:f6:18:7e:33:10:c3:c7:ff:29:c6: 12:ef:4e:89:68:60:97:95:cf:af:67:2b:99:cf:26: b5:15:11:22:fc:17:6f:cb:ed:b9:16:67:9c:ee:99: c0:ef:38:d4:b4:ad:8a:a8:97:29:44:20:d0:b3:6b: 7b:a1:99:ad:22:a8:13:9f:ad:6b:70:87:ab:f4:c8: 15:dc:e7:a7:70:39:18:97:ed:f3:ab:59:e8:68:1d: 5f:23:84:73:51:81:b7:30:17:ac:69:9e:ac:3e:2e: c1:ee:a5:ac:7e:8f:61:85:f6:dd:fc:d4:74:de:45: 55:57:a5:5d:e8:b3:e7:93:49:4b:6f:1f:e9:dd:46: 89:df:47:82:12:46:e1:45:e5:fe:4f:e6:45:cf:46: 37:a0:ae:8a:85:d8:93:74:64:20:d9:c3:6e:9c:26: ad:f0:63:30:4a:b7:b6:3e:64:e9:27:b0:78:bd:ce: b0:31:1e:e5:f2:9a:e3:8f:de:db:6c:ff:09:64:72: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:A8:B9:0B:79:A1:94:8B:93:0F:36:7B:67:73:57:14:9D:9F:72 X509v3 Authority Key Identifier: keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:df:10:a9:db:17:ab:35:61:8e:cd:0b:9b:ec:44:67:a7:0b: 89:cb:8a:24:db:61:3b:fd:2e:86:c7:b6:e8:d9:f3:18:7b:d7: 72:55:83:90:45:00:9b:ea:63:82:67:c8:98:b1:f4:36:ce:0a: 7c:76:92:e6:e3:5f:a0:6f:30:05:b3:b1:09:bd:33:6e:cc:4a: 66:8f:46:d7:a4:b2:40:a6:2e:11:41:b4:24:b2:b9:47:00:be: a9:1c:08:12:60:9b:51:21:18:94:17:04:01:52:f1:72:d8:36: a9:00:6e:9a:1d:0c:0b:d4:e5:37:c0:fb:e6:13:eb:0e:50:d0: 33:fa:5f:d7:e1:7a:57:67:ce:11:8e:47:b6:2b:a8:a9:df:5f: f8:80:33:1d:30:d4:37:7e:24:34:80:6c:4f:b0:a3:be:1c:7f: 08:ad:e0:9e:99:78:2c:10:f1:d9:e9:cc:28:2b:9a:89:11:6b: 1d:c6:b1:e6:fd:e2:36:a4:d1:f2:7e:ee:c3:aa:bb:9b:c5:41: c7:78:56:97:a2:58:a8:14:73:0e:ae:35:8c:d6:2b:b5:52:3c: a8:83:d5:ac:f0:46:0d:f1:b1:9e:b6:75:6a:3b:9d:1d:32:c1: b7:84:c6:f3:be:e7:76:19:c2:9b:58:ce:18:fb:07:40:ba:ba: a7:34:85:04 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXU1TgDzI0DALEaQPF5+SNvE8qxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRGQUJDQkZGODMyODhCNjRCRTU0MDMyM0I0NTg4MjVD NTRBNDY2MzAeFw0yNTA0MjgxMjQ0MDVaFw0yNTA1MDIyMjIwMDVaMDMxMTAvBgNV BAMTKDQyOERBOEI5MEI3OUExOTQ4QjkzMEYzNjdCNjc3MzU3MTQ5RDlGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rTI4V0mvwva7aGnPsOim9oxx tXGXHMKlIAi/P0svbE01mY+waYg6FRDG++FhzQOFqyADqW5iHsV9Af3Ty+h29hh+ MxDDx/8pxhLvToloYJeVz69nK5nPJrUVESL8F2/L7bkWZ5zumcDvONS0rYqolylE INCza3uhma0iqBOfrWtwh6v0yBXc56dwORiX7fOrWehoHV8jhHNRgbcwF6xpnqw+ LsHupax+j2GF9t381HTeRVVXpV3os+eTSUtvH+ndRonfR4ISRuFF5f5P5kXPRjeg roqF2JN0ZCDZw26cJq3wYzBKt7Y+ZOknsHi9zrAxHuXymuOP3tts/wlkcpHzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQo2ouQt5oZSLkw82e2dzVxSdn3IwHwYDVR0j BBgwFoAUtPq8v/gyiLZL5UAyO0WIJcVKRmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTFGQkExRTlBNkIwMTJGMTQyMkRGQ0I0MjhERDlGQTRE OTNCQkFEMjVENDk4OUJDQjFGRDMzMzhGQkE1NzU5LzAvQjRGQUJDQkZGODMyODhC NjRCRTU0MDMyM0I0NTg4MjVDNTRBNDY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNEZBQkNCRkY4MzI4OEI2NEJF NTQwMzIzQjQ1ODgyNUM1NEE0NjYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUExRkJBMUU5QTZCMDEyRjE0MjJERkNCNDI4REQ5RkE0RDkzQkJBRDI1 RDQ5ODlCQ0IxRkQzMzM4RkJBNTc1OS8wL0I0RkFCQ0JGRjgzMjg4QjY0QkU1NDAz MjNCNDU4ODI1QzU0QTQ2NjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCO3xCp2xerNWGOzQub7ERnpwuJ y4ok22E7/S6Gx7bo2fMYe9dyVYOQRQCb6mOCZ8iYsfQ2zgp8dpLm41+gbzAFs7EJ vTNuzEpmj0bXpLJApi4RQbQksrlHAL6pHAgSYJtRIRiUFwQBUvFy2DapAG6aHQwL 1OU3wPvmE+sOUNAz+l/X4XpXZ84Rjke2K6ip31/4gDMdMNQ3fiQ0gGxPsKO+HH8I reCemXgsEPHZ6cwoK5qJEWsdxrHm/eI2pNHyfu7DqrubxUHHeFaXolioFHMOrjWM 1iu1Ujyog9Ws8EYN8bGetnVqO50dMsG3hMbzvud2GcKbWM4Y+wdAurqnNIUE -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:56 2025 by rpki-client on console.sobornost.net