$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json) Hash identifier: oWbm6wJDPlyTGY3JUzAed22iVul6Mzw9CkUczLm24tI= Subject key identifier: 01:4B:54:29:B1:D7:63:BD:71:C1:C0:D1:D8:CA:D5:28:B1:DA:3B:FB Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 4A145718D1B6FDA0482B7C5BD53B52FE3E35A9CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft Manifest number: D0 Signing time: Mon 28 Apr 2025 12:23:51 +0000 Manifest this update: Mon 28 Apr 2025 12:18:51 +0000 Manifest next update: Sat 03 May 2025 04:00:51 +0000 Files and hashes: 1: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: jg31lv7dw9mGpKiZ48Xql1P4syXRxMLBEGZSxw2dMYc=) 2: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:14:57:18:d1:b6:fd:a0:48:2b:7c:5b:d5:3b:52:fe:3e:35:a9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: Apr 28 12:18:51 2025 GMT Not After : May 3 04:00:51 2025 GMT Subject: CN=014B5429B1D763BD71C1C0D1D8CAD528B1DA3BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:9b:b0:0b:ab:36:d6:e3:d1:c9:c9:0e:55: 24:1c:64:56:8c:dd:7f:a8:98:08:aa:81:86:93:09: 93:e8:17:c3:8d:cc:b2:02:a7:6c:d4:17:4d:72:40: 2b:1a:e1:d3:cc:8e:f0:54:50:0c:fc:b6:5c:f6:c7: 69:57:40:ab:71:a5:e0:89:16:0b:3b:79:0f:94:01: 3e:10:39:68:15:58:8a:cd:8b:54:b8:e7:76:9d:9f: a3:4a:1a:26:88:f2:93:a1:55:31:97:fb:04:26:0a: 9e:06:18:b4:8c:02:3a:78:a0:42:8c:cb:c9:75:b4: c3:a3:21:68:44:72:58:ec:43:05:bd:a7:a0:34:34: 51:9a:48:58:b1:8c:ed:e3:cc:67:a5:d8:e2:b5:5e: 34:ad:cc:45:68:f3:86:fb:40:b0:2c:58:50:42:55: 02:62:56:0b:c3:b5:9a:65:c2:10:a7:25:8c:e1:24: 26:f5:cb:56:b0:30:49:7f:47:e1:4a:16:72:d3:6f: 56:8f:b3:27:f2:ea:04:c3:a5:ab:d4:18:18:70:ed: 2b:0a:56:ab:a2:01:08:ce:bd:15:2a:bf:ca:d4:d3: ca:0f:6d:78:6a:36:86:a6:73:b7:cc:00:61:64:7b: f9:6d:50:41:5d:df:2e:48:e7:af:a0:e2:6c:c1:b2: c5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4B:54:29:B1:D7:63:BD:71:C1:C0:D1:D8:CA:D5:28:B1:DA:3B:FB X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1a:0b:37:0c:df:b9:36:76:9d:dd:ab:6c:0d:6d:b0:3c:51: cd:f3:1e:7f:cf:44:bb:c9:23:4f:75:87:26:34:47:26:81:52: 42:5d:24:30:3d:65:7a:40:f4:c4:4c:69:62:d0:ab:01:55:c4: 03:43:83:37:e8:ea:5a:14:91:87:70:f0:b2:7e:09:30:18:25: f6:fa:aa:e7:99:f7:09:3f:e1:d8:b5:2e:e2:a4:7a:ed:28:b0: c6:1c:7f:46:6f:08:76:8f:1d:e1:ac:3b:aa:a6:be:de:f2:64: 8c:2d:9e:fb:3f:b5:b4:e3:72:3a:66:05:88:cd:0b:4d:9d:74: a7:3a:c5:c7:25:28:5f:05:cf:a1:80:2e:a2:07:0e:97:b9:12: 85:c5:14:7a:ee:6d:ef:b0:cf:18:58:6d:31:a1:27:3b:e6:5b: 42:56:2b:e2:30:e3:af:d8:93:54:a3:5d:56:9e:2a:05:b5:74: 25:60:c2:e6:8a:d0:ab:e4:ea:ac:59:b6:6a:0f:d2:37:da:d1: 6c:f8:e7:3f:08:1e:4e:d4:99:5c:21:10:0f:f7:17:5a:55:a7: 88:33:1d:2d:da:f8:8f:2c:de:70:30:54:c7:0d:32:ee:f7:a7: 04:b2:ec:78:9b:1b:d7:07:d2:23:db:2b:be:8d:5f:73:fe:c1: 2f:ff:8a:ea -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUShRXGNG2/aBIK3xb1TtS/j41qc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNTA0MjgxMjE4NTFaFw0yNTA1MDMwNDAwNTFaMDMxMTAvBgNV BAMTKDAxNEI1NDI5QjFENzYzQkQ3MUMxQzBEMUQ4Q0FENTI4QjFEQTNCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6JuwC6s21uPRyckOVSQcZFaM 3X+omAiqgYaTCZPoF8ONzLICp2zUF01yQCsa4dPMjvBUUAz8tlz2x2lXQKtxpeCJ Fgs7eQ+UAT4QOWgVWIrNi1S453adn6NKGiaI8pOhVTGX+wQmCp4GGLSMAjp4oEKM y8l1tMOjIWhEcljsQwW9p6A0NFGaSFixjO3jzGel2OK1XjStzEVo84b7QLAsWFBC VQJiVgvDtZplwhCnJYzhJCb1y1awMEl/R+FKFnLTb1aPsyfy6gTDpavUGBhw7SsK VquiAQjOvRUqv8rU08oPbXhqNoamc7fMAGFke/ltUEFd3y5I56+g4mzBssUjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAUtUKbHXY71xwcDR2MrVKLHaO/swHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wL0ZGQjRCRjNENjBCNEZGMkZBQThBMzY0 NDY1MkMyRTJBQkY4MzZBQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZGgs3DN+5Nnad3atsDW2wPFHN 8x5/z0S7ySNPdYcmNEcmgVJCXSQwPWV6QPTETGli0KsBVcQDQ4M36OpaFJGHcPCy fgkwGCX2+qrnmfcJP+HYtS7ipHrtKLDGHH9Gbwh2jx3hrDuqpr7e8mSMLZ77P7W0 43I6ZgWIzQtNnXSnOsXHJShfBc+hgC6iBw6XuRKFxRR67m3vsM8YWG0xoSc75ltC ViviMOOv2JNUo11WnioFtXQlYMLmitCr5OqsWbZqD9I32tFs+Oc/CB5O1JlcIRAP 9xdaVaeIMx0t2viPLN5wMFTHDTLu96cEsux4mxvXB9Ij2yu+jV9z/sEv/4rq -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:57 2025 by rpki-client on console.sobornost.net