$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft File: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft (raw, json) Hash identifier: lmkxJS6/oAv34O6bOVRiVqjgw2TZFZt2f0jIhefYq04= Subject key identifier: 89:F0:CF:E3:38:A8:8D:8D:A1:97:06:07:8A:DE:19:50:1B:F3:40:96 Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D Certificate issuer: /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Certificate serial: 753F0EB4CC2D61D151EA7DFDFDCC2A676273B089 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft Manifest number: CA Signing time: Sat 26 Apr 2025 03:06:23 +0000 Manifest this update: Sat 26 Apr 2025 03:01:23 +0000 Manifest next update: Thu 01 May 2025 19:37:23 +0000 Files and hashes: 1: 3139302e372e3136302e302f32302d3230203d3e203237393038.roa (hash: RBfH2qwoDfbMUXE7gNz3K9WJNvswOMqQt7nmCq3uON8=) 2: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl (hash: dwElmOnqTvuTIh+NmpzQjsuDbWANbe2d2EHt+kuJArU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3f:0e:b4:cc:2d:61:d1:51:ea:7d:fd:fd:cc:2a:67:62:73:b0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Validity Not Before: Apr 26 03:01:23 2025 GMT Not After : May 1 19:37:23 2025 GMT Subject: CN=89F0CFE338A88D8DA19706078ADE19501BF34096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:8e:44:58:82:60:dc:d7:b1:13:c5:87:91: d5:bf:55:25:f1:f9:0f:3c:9e:2e:9d:ac:3f:b7:e1: 3b:a2:b6:7a:57:fe:ff:93:6f:5c:9f:79:32:b1:8f: 61:ae:a4:2d:13:96:8d:c6:c9:84:67:b8:cb:68:89: 9a:01:cc:92:d5:83:10:29:ef:26:90:ef:ab:35:3f: cd:3a:a6:6a:a2:c6:9d:bd:53:64:38:fd:10:34:01: 8a:bc:7a:18:eb:4b:20:93:c2:0d:cd:2a:1d:45:be: 70:cc:01:d5:42:3d:35:f5:dc:f0:41:d6:8e:1d:8f: 40:3f:fc:92:8f:cb:88:9a:72:60:ff:34:44:66:18: 50:a9:e8:a4:0e:00:73:3d:9d:8b:93:13:a6:62:9c: e6:d7:0c:4f:68:92:99:91:81:fc:56:c9:0d:2c:f0: 07:a5:af:85:0d:18:47:c2:da:92:91:9e:34:0e:be: b1:94:88:f7:8a:e5:ec:4e:28:d6:d7:df:5e:12:ea: c6:d2:f2:dd:d7:6d:31:b9:8b:8a:9a:bb:61:84:d4: a9:f9:6b:e5:03:8b:ea:8b:1a:c7:fe:0c:4e:a1:45: 23:b0:9d:3c:31:27:9b:28:7d:f4:28:92:b4:cb:ef: f2:59:29:be:ba:9d:b5:9e:b8:58:53:49:ab:4d:5c: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F0:CF:E3:38:A8:8D:8D:A1:97:06:07:8A:DE:19:50:1B:F3:40:96 X509v3 Authority Key Identifier: keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:88:c3:2e:3f:7d:64:11:e5:38:0c:5e:1e:6e:23:23:87:ec: 02:b0:2a:c0:0d:61:19:f8:55:f7:33:d8:4b:65:57:97:9f:b1: e8:02:a0:2d:81:a3:2b:a2:1a:77:34:ba:c4:5f:15:a4:61:23: e9:93:b7:bb:0d:dc:43:65:1a:6b:4d:1f:fd:e1:47:19:52:92: f6:9e:56:c9:68:e8:59:bd:9d:8e:63:27:af:b7:18:99:e3:e6: a7:19:e2:60:9f:10:e0:7f:d3:6b:18:ad:97:e3:7f:06:31:0d: 14:d3:7c:1e:23:ac:58:79:28:1a:b0:eb:4c:06:6d:0d:12:c3: 61:49:1e:e5:21:b2:2e:40:6e:82:de:58:ef:7b:cb:48:69:e6: 99:87:a2:a4:ba:9d:48:33:a6:3b:39:0c:34:5d:bc:98:6e:e1: b4:e2:31:0b:5d:f1:ae:d3:7f:ae:b3:87:c3:38:2a:6d:d8:57: cb:ec:ac:dc:7a:e5:f0:79:e8:4a:9c:a6:a0:e5:d1:ed:b6:51: 1f:90:ef:e4:f0:2b:86:a3:92:99:67:61:b1:c1:ba:db:8e:df: 93:81:85:92:8d:23:2b:b2:4b:70:ea:a4:88:58:26:a1:27:fd: 1c:22:70:be:77:95:67:e2:86:8e:a2:d2:71:c3:f5:e0:b7:b0: 14:90:93:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdT8OtMwtYdFR6n39/cwqZ2JzsIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY1RUZBMTlBQTRCREIzQjZEMzNCQUU1NDc0REY4QzEz QTJFRUI2RDAeFw0yNTA0MjYwMzAxMjNaFw0yNTA1MDExOTM3MjNaMDMxMTAvBgNV BAMTKDg5RjBDRkUzMzhBODhEOERBMTk3MDYwNzhBREUxOTUwMUJGMzQwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJo5EWIJg3NexE8WHkdW/VSXx +Q88ni6drD+34TuitnpX/v+Tb1yfeTKxj2GupC0Tlo3GyYRnuMtoiZoBzJLVgxAp 7yaQ76s1P806pmqixp29U2Q4/RA0AYq8ehjrSyCTwg3NKh1FvnDMAdVCPTX13PBB 1o4dj0A//JKPy4iacmD/NERmGFCp6KQOAHM9nYuTE6ZinObXDE9okpmRgfxWyQ0s 8Aelr4UNGEfC2pKRnjQOvrGUiPeK5exOKNbX314S6sbS8t3XbTG5i4qau2GE1Kn5 a+UDi+qLGsf+DE6hRSOwnTwxJ5soffQokrTL7/JZKb66nbWeuFhTSatNXLVPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUifDP4ziojY2hlwYHit4ZUBvzQJYwHwYDVR0j BBgwFoAUll76GapL2zttM7rlR034wTou620wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMkQ5REY2Qjg1Nzc3QjlGNTNFODFBRkZEODk2NjE2MjdF OERGRkY4MUVFQjhENjRDNzY3ODBFRjFBMEU0MkM5LzAvOTY1RUZBMTlBQTRCREIz QjZEMzNCQUU1NDc0REY4QzEzQTJFRUI2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjVFRkExOUFBNEJEQjNCNkQz M0JBRTU0NzRERjhDMTNBMkVFQjZELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzJEOURGNkI4NTc3N0I5RjUzRTgxQUZGRDg5NjYxNjI3RThERkZGODFF RUI4RDY0Qzc2NzgwRUYxQTBFNDJDOS8wLzk2NUVGQTE5QUE0QkRCM0I2RDMzQkFF NTQ3NERGOEMxM0EyRUVCNkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/iMMuP31kEeU4DF4ebiMjh+wC sCrADWEZ+FX3M9hLZVeXn7HoAqAtgaMrohp3NLrEXxWkYSPpk7e7DdxDZRprTR/9 4UcZUpL2nlbJaOhZvZ2OYyevtxiZ4+anGeJgnxDgf9NrGK2X438GMQ0U03weI6xY eSgasOtMBm0NEsNhSR7lIbIuQG6C3ljve8tIaeaZh6Kkup1IM6Y7OQw0XbyYbuG0 4jELXfGu03+us4fDOCpt2FfL7KzceuXweehKnKag5dHttlEfkO/k8CuGo5KZZ2Gx wbrbjt+TgYWSjSMrsktw6qSIWCahJ/0cInC+d5Vn4oaOotJxw/Xgt7AUkJM/ -----END CERTIFICATE-----Generated at Sat Apr 26 06:14:00 2025 by rpki-client on console.sobornost.net