$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: 0k8uf94UeIh4arsMZuuMejeNltUpgWLsS+IxRq2W4zk= Subject key identifier: 3F:6E:C7:4F:94:B3:D4:B5:FA:F1:75:E2:1A:10:38:0F:2A:EB:29:06 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 1CC816AD2CF5CBE51CC981CAAC1E50439E785E31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: D7 Signing time: Sun 27 Apr 2025 23:56:04 +0000 Manifest this update: Sun 27 Apr 2025 23:51:04 +0000 Manifest next update: Fri 02 May 2025 11:16:04 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: +u0MPIedVq2SCKdC46gI+sqK6bBs76COUW17JVgh0t0=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c8:16:ad:2c:f5:cb:e5:1c:c9:81:ca:ac:1e:50:43:9e:78:5e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Apr 27 23:51:04 2025 GMT Not After : May 2 11:16:04 2025 GMT Subject: CN=3F6EC74F94B3D4B5FAF175E21A10380F2AEB2906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:18:6a:84:27:ee:44:d5:57:4f:67:c2:4f: 36:0d:13:27:53:e7:b5:63:83:e7:cf:4d:2e:f3:d6: e3:c0:0d:20:f2:96:9d:7d:7d:48:4c:a9:a4:35:7c: 90:ed:06:a4:ef:53:85:a4:4f:c8:45:3a:3f:a6:1f: dc:0e:6a:2f:0a:ad:e8:fc:18:f8:8c:c5:a0:36:db: 07:b6:10:fe:64:2a:3d:32:7f:80:70:c0:63:bb:fb: 82:de:44:fb:39:09:ea:4d:de:f4:f9:f2:90:0f:f7: a6:61:6d:0b:c9:7d:bd:ad:9d:24:2b:59:cc:3d:53: 98:3d:9b:7f:40:4e:a7:69:23:a5:22:ae:16:d4:10: b9:36:31:de:88:76:b9:bb:a6:da:32:66:85:f5:fc: 27:ee:6f:47:7f:aa:ce:e0:94:c2:07:40:57:18:44: ba:08:f2:0c:be:b5:71:36:4e:5f:71:d9:bd:80:d0: be:53:20:21:c4:4a:8e:8f:84:d8:1b:19:78:d1:a9: 41:da:1a:46:e4:6b:71:e6:c3:68:d1:09:77:ec:8c: 96:d8:66:f2:a9:53:ba:e1:7e:ab:b4:25:97:f9:8f: e7:d7:d0:44:d0:45:0a:fd:5a:06:d9:0f:49:bb:b2: 52:b2:48:3a:86:26:49:d4:d6:0a:ef:ce:59:27:71: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6E:C7:4F:94:B3:D4:B5:FA:F1:75:E2:1A:10:38:0F:2A:EB:29:06 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:45:6a:52:b6:bb:0d:51:82:cd:0f:47:8b:43:24:fc:2b:98: 22:ee:1f:dc:6a:68:c3:40:21:d8:ee:cc:65:65:08:01:f7:76: b2:f0:05:10:cf:38:b2:a6:c6:83:d7:dd:95:92:6f:d9:1f:93: 0b:fc:fd:18:c9:a3:39:ff:05:c8:09:cd:1a:bd:e4:df:6d:f0: 8a:09:d0:59:72:c5:b9:53:74:81:5a:f9:3c:56:a2:48:f3:b2: 7d:59:01:c7:d1:3c:31:c7:c5:3d:ac:19:f4:4d:59:e5:8e:27: e3:30:6a:5d:17:8e:46:1e:26:ac:23:7d:ab:25:b4:8f:25:e7: 9d:dc:5f:f2:dc:36:0a:ac:7b:ff:29:95:8b:a1:66:5e:f9:7f: 23:f1:48:9f:ea:67:94:b7:c8:a6:4d:b4:22:d9:3b:f3:47:1c: 2e:52:2a:46:97:3a:43:a1:8d:82:36:32:ec:0f:8e:b8:a5:74: 1a:b2:63:fd:41:4a:64:ee:59:2d:80:54:b5:3e:1b:db:49:3d: e3:50:fb:16:12:1e:8a:cd:0b:df:14:2f:9b:e6:d5:25:39:d0: 58:6a:c7:9b:25:6d:c9:58:d7:b0:37:fc:b5:88:19:b3:40:9d: ba:64:e2:71:90:1a:6b:62:58:46:b4:f1:83:9c:e0:f3:63:3a: 99:bb:f8:2e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHMgWrSz1y+UcyYHKrB5QQ554XjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTA0MjcyMzUxMDRaFw0yNTA1MDIxMTE2MDRaMDMxMTAvBgNV BAMTKDNGNkVDNzRGOTRCM0Q0QjVGQUYxNzVFMjFBMTAzODBGMkFFQjI5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWRhqhCfuRNVXT2fCTzYNEydT 57Vjg+fPTS7z1uPADSDylp19fUhMqaQ1fJDtBqTvU4WkT8hFOj+mH9wOai8Krej8 GPiMxaA22we2EP5kKj0yf4BwwGO7+4LeRPs5CepN3vT58pAP96ZhbQvJfb2tnSQr Wcw9U5g9m39ATqdpI6UirhbUELk2Md6Idrm7ptoyZoX1/Cfub0d/qs7glMIHQFcY RLoI8gy+tXE2Tl9x2b2A0L5TICHESo6PhNgbGXjRqUHaGkbka3Hmw2jRCXfsjJbY ZvKpU7rhfqu0JZf5j+fX0ETQRQr9WgbZD0m7slKySDqGJknU1grvzlkncapJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUP27HT5Sz1LX68XXiGhA4DyrrKQYwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGRWpStrsNUYLND0eLQyT8K5gi 7h/camjDQCHY7sxlZQgB93ay8AUQzziypsaD192Vkm/ZH5ML/P0YyaM5/wXICc0a veTfbfCKCdBZcsW5U3SBWvk8VqJI87J9WQHH0Twxx8U9rBn0TVnljifjMGpdF45G HiasI32rJbSPJeed3F/y3DYKrHv/KZWLoWZe+X8j8Uif6meUt8imTbQi2TvzRxwu UipGlzpDoY2CNjLsD464pXQasmP9QUpk7lktgFS1PhvbST3jUPsWEh6KzQvfFC+b 5tUlOdBYasebJW3JWNewN/y1iBmzQJ26ZOJxkBprYlhGtPGDnODzYzqZu/gu -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:20 2025 by rpki-client on console.sobornost.net