$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft File: AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft (raw, json) Hash identifier: 3pbs66wDDtJstpzQDMAL3upcm4DaC4YWEhZ8nJnhe9g= Subject key identifier: 2B:25:21:7D:A6:86:8F:31:89:DC:71:C6:C7:02:72:EA:AB:44:56:8A Authority key identifier: AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6 Certificate issuer: /CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6 Certificate serial: 28355364318D7430B021F1134E58702248673E0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft Manifest number: 85 Signing time: Sun 27 Apr 2025 19:18:23 +0000 Manifest this update: Sun 27 Apr 2025 19:13:23 +0000 Manifest next update: Sat 03 May 2025 17:49:23 +0000 Files and hashes: 1: 323830333a336435303a3a2f33322d3438203d3e20323733383736.roa (hash: r+3i2ifjM2LHnmOCQJikeXJggnYzD2lY2kvJsKPH5xc=) 2: AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl (hash: gdO570Hl1cz0yY2ajKQnqb2DhEhZz9wZB1O0uYGYAyc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 04:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:35:53:64:31:8d:74:30:b0:21:f1:13:4e:58:70:22:48:67:3e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6 Validity Not Before: Apr 27 19:13:23 2025 GMT Not After : May 3 17:49:23 2025 GMT Subject: CN=2B25217DA6868F3189DC71C6C70272EAAB44568A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:c4:b3:e0:07:a8:0e:b7:20:43:c9:95:3c: a5:0d:dc:54:b4:f6:83:ab:ea:01:d5:3c:83:92:2a: 04:86:52:ef:eb:6d:cd:57:1a:84:e3:f6:5c:01:ad: 12:30:0c:00:3e:e1:fd:df:44:f3:f8:ac:37:e7:27: 07:96:40:60:7d:b1:5f:b6:04:89:a6:74:c9:5f:3d: 45:79:b0:81:d0:4e:3d:bb:51:27:e7:b1:76:f5:6e: f6:4d:7c:2a:92:37:71:29:4e:4a:1c:38:03:90:28: 6e:2d:2e:c0:ae:0b:37:bf:d5:36:6c:35:8d:12:07: b8:7f:97:43:a9:1a:fb:02:22:0f:9d:6b:f4:84:04: 5e:1e:08:13:3d:71:1b:25:7e:8c:ce:e9:4b:c4:0e: e9:4f:4b:ee:df:e1:21:05:3e:09:21:cc:ef:01:ee: 87:61:33:d3:5d:68:77:5c:ae:fe:2e:22:04:ce:5b: 90:0a:a3:35:af:dd:e3:e8:bf:65:8f:4d:4f:ea:8e: d0:c1:2d:27:cb:e7:50:b4:66:11:41:60:81:2a:47: 62:30:23:52:30:ff:f7:ce:17:3b:b9:14:6a:7c:e1: 3f:a3:70:4d:c2:a3:cf:a7:e5:a0:16:06:14:5a:5c: eb:19:25:0f:65:56:69:a1:49:a3:10:49:31:2a:1b: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:25:21:7D:A6:86:8F:31:89:DC:71:C6:C7:02:72:EA:AB:44:56:8A X509v3 Authority Key Identifier: keyid:AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:32:9e:e0:cd:d7:08:75:d5:45:fd:05:5c:55:45:21:41:52: e1:fb:be:0c:8c:ee:ed:f7:04:4b:46:58:8b:d9:3f:52:81:d1: e2:d4:9c:71:8d:36:b9:c2:cc:7b:39:9b:04:50:59:cd:ce:b3: 80:c8:63:25:6b:09:b1:c7:f0:97:7e:a3:1a:26:4b:1e:cc:f0: d3:94:0e:4e:5e:5b:8b:5e:66:34:69:1e:08:a6:68:db:13:72: 7c:6c:4d:88:42:fe:3f:87:34:0b:d1:00:8d:fe:3c:a1:6d:86: a6:17:fd:fe:a7:23:3e:1b:eb:44:f4:b9:07:74:7d:10:c4:f2: 61:33:ac:3a:83:e2:05:cb:7e:4d:81:52:6b:79:52:fe:27:7e: 50:cf:68:0b:29:51:26:55:cb:64:8f:84:97:ae:24:36:46:5b: dc:a5:35:61:78:11:7d:3b:32:ef:37:bf:95:f1:5a:37:80:18: fb:e9:a7:04:b9:31:94:fd:72:09:68:b2:a0:1f:0b:0b:8d:ea: 8c:10:95:3b:7b:18:78:3a:96:7f:28:07:cd:ca:b6:86:09:e9: 47:ee:35:2e:6b:2e:fc:9d:0d:98:88:7b:44:df:c8:e5:b4:e8: 77:82:19:9c:2a:90:43:cf:3d:c3:dc:72:fa:b9:a5:3a:e2:41: 4d:55:b7:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKDVTZDGNdDCwIfETTlhwIkhnPg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwRjVEOUMwOEYzMTJEMzRGNEM0NUZCNzY0QjI0MUIz QzZDNjJBNjAeFw0yNTA0MjcxOTEzMjNaFw0yNTA1MDMxNzQ5MjNaMDMxMTAvBgNV BAMTKDJCMjUyMTdEQTY4NjhGMzE4OURDNzFDNkM3MDI3MkVBQUI0NDU2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiMSz4AeoDrcgQ8mVPKUN3FS0 9oOr6gHVPIOSKgSGUu/rbc1XGoTj9lwBrRIwDAA+4f3fRPP4rDfnJweWQGB9sV+2 BImmdMlfPUV5sIHQTj27USfnsXb1bvZNfCqSN3EpTkocOAOQKG4tLsCuCze/1TZs NY0SB7h/l0OpGvsCIg+da/SEBF4eCBM9cRslfozO6UvEDulPS+7f4SEFPgkhzO8B 7odhM9NdaHdcrv4uIgTOW5AKozWv3ePov2WPTU/qjtDBLSfL51C0ZhFBYIEqR2Iw I1Iw//fOFzu5FGp84T+jcE3Co8+n5aAWBhRaXOsZJQ9lVmmhSaMQSTEqG4H7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKyUhfaaGjzGJ3HHGxwJy6qtEVoowHwYDVR0j BBgwFoAUqg9dnAjzEtNPTEX7dkskGzxsYqYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRjIxRkIxQ0E3OTU1MUQ0Q0Q3NjIxQTU3MkIwNzM4M0Uz NDlEOTIzNTQzMzk4QzIxRjE2MUZGODExN0YzQThBLzAvQUEwRjVEOUMwOEYzMTJE MzRGNEM0NUZCNzY0QjI0MUIzQzZDNjJBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTBGNUQ5QzA4RjMxMkQzNEY0 QzQ1RkI3NjRCMjQxQjNDNkM2MkE2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0YyMUZCMUNBNzk1NTFENENENzYyMUE1NzJCMDczODNFMzQ5RDkyMzU0 MzM5OEMyMUYxNjFGRjgxMTdGM0E4QS8wL0FBMEY1RDlDMDhGMzEyRDM0RjRDNDVG Qjc2NEIyNDFCM0M2QzYyQTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLMp7gzdcIddVF/QVcVUUhQVLh +74MjO7t9wRLRliL2T9SgdHi1JxxjTa5wsx7OZsEUFnNzrOAyGMlawmxx/CXfqMa JksezPDTlA5OXluLXmY0aR4IpmjbE3J8bE2IQv4/hzQL0QCN/jyhbYamF/3+pyM+ G+tE9LkHdH0QxPJhM6w6g+IFy35NgVJreVL+J35Qz2gLKVEmVctkj4SXriQ2Rlvc pTVheBF9OzLvN7+V8Vo3gBj76acEuTGU/XIJaLKgHwsLjeqMEJU7exh4OpZ/KAfN yraGCelH7jUuay78nQ2YiHtE38jltOh3ghmcKpBDzz3D3HL6uaU64kFNVbcC -----END CERTIFICATE-----Generated at Sun Apr 27 21:43:02 2025 by rpki-client on console.sobornost.net