$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft File: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json) Hash identifier: RA9+9Gq5PiWShKqxGxTX47k+Z0JOgExTi8mEAsjl3hI= Subject key identifier: 90:1A:AA:28:C9:F0:76:DF:E8:CB:3D:02:AB:40:EB:F5:39:01:CC:D6 Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 Certificate issuer: /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Certificate serial: 01FE53DF60CE5A4F82DEBFC5CF0B0CC3C1F9E427 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft Manifest number: BA Signing time: Mon 28 Apr 2025 18:17:20 +0000 Manifest this update: Mon 28 Apr 2025 18:12:20 +0000 Manifest next update: Sun 04 May 2025 17:56:20 +0000 Files and hashes: 1: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: 8+LssdHVc/Mu5xFCFFuFrmV3GmoW1iHNG3gP3AT2zss=) 2: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: 52CkrWIeh3/WtMUuKWKH8nsK+HsC8V+k1+vyMgSvhdE=) 3: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: uWEhrGLqJXMAoZTZyyMFW1p7Iz6/t6HLsdeX2wpttRM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fe:53:df:60:ce:5a:4f:82:de:bf:c5:cf:0b:0c:c3:c1:f9:e4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Validity Not Before: Apr 28 18:12:20 2025 GMT Not After : May 4 17:56:20 2025 GMT Subject: CN=901AAA28C9F076DFE8CB3D02AB40EBF53901CCD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:5f:c7:73:cc:92:80:3e:1f:19:fd:ae:cf: 28:5a:6e:5a:3e:49:ed:65:d2:f7:4e:5a:ae:ca:6f: 86:7e:f7:3d:23:3d:fd:17:da:87:3c:e9:79:95:e4: 30:22:84:1f:7c:b2:3c:cc:07:82:84:66:1b:c5:92: 86:fa:28:ac:0c:a0:bd:22:27:f2:25:0b:ee:1f:10: d9:37:65:4f:c3:23:ab:cf:a7:7f:d3:01:4a:a1:53: 7b:d8:96:df:19:4c:b4:5a:91:48:30:8f:87:de:ca: 74:e5:c4:18:c4:20:df:1e:be:af:35:3e:93:22:85: e6:a7:05:e7:df:59:8b:a1:73:f1:c8:a3:44:fa:45: 81:4b:c1:eb:4c:c9:b1:bf:37:45:f9:19:6c:6b:d5: 2d:4f:75:6a:69:00:24:8c:bc:e8:c5:2f:67:38:29: 1a:1f:2b:27:f9:fe:7c:c1:82:e8:ba:96:28:6d:f4: 0b:16:c2:7f:3f:b9:e0:84:bb:1d:3a:80:d1:8a:b8: c8:c4:22:a2:63:bf:a2:c2:42:1e:c2:86:dc:61:3e: 1d:10:17:32:d0:7c:14:3c:84:e9:1c:2e:e6:27:52: a9:0a:89:b1:96:89:30:0b:c8:f1:3c:44:a3:34:da: 9e:24:15:67:0d:05:bb:e2:6e:87:ee:10:28:f5:5b: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1A:AA:28:C9:F0:76:DF:E8:CB:3D:02:AB:40:EB:F5:39:01:CC:D6 X509v3 Authority Key Identifier: keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1b:c6:1b:62:a9:a2:60:18:75:97:a8:bc:a2:a4:ba:cb:5d: 02:e4:8e:fd:e8:d3:da:5a:ab:41:a3:91:3f:5f:d0:ca:c7:3f: b3:ed:c9:e6:65:11:f5:e6:bb:31:09:e0:6b:ec:8f:95:8f:d0: 41:c8:de:29:fd:f5:50:c5:e3:9b:35:5f:e2:1a:0b:04:7e:88: dd:53:9d:7b:a0:14:0a:5b:c4:b4:5c:65:26:ca:b8:a8:b1:d3: c1:ae:02:89:5d:39:e3:d0:c4:ab:69:29:40:f4:1a:a3:5e:2f: 60:d7:c8:5e:1d:73:2a:8f:98:25:2f:8c:e2:fe:01:ad:f3:5a: 0f:8b:9c:6e:55:df:f5:f4:6e:04:2c:20:2b:6f:0f:97:3b:e5: f5:04:c5:18:5a:c4:4b:32:bb:e6:0b:f6:cc:86:4a:2c:9a:f5: 08:59:82:3b:3a:59:84:3a:b3:28:38:98:d0:fb:2a:84:37:cf: f8:4e:6a:eb:cf:d7:84:6b:0c:9e:c5:37:aa:d8:2e:9c:bf:67: 9f:fc:c0:57:a5:63:b5:85:eb:fa:6d:dd:80:39:8f:53:6b:e4: 7d:d9:96:86:8f:81:53:0f:bf:f3:de:d6:ea:1e:4e:76:3f:84: 0d:86:5f:89:8b:a3:cd:21:e8:6f:16:68:96:4f:63:cd:e0:e5: dd:cf:26:35 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAf5T32DOWk+C3r/FzwsMw8H55CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBRkQ0NDM1RTlEODc3ODExMThCRDE2Rjk3QUQ4MUYx MTlCRkJENjAeFw0yNTA0MjgxODEyMjBaFw0yNTA1MDQxNzU2MjBaMDMxMTAvBgNV BAMTKDkwMUFBQTI4QzlGMDc2REZFOENCM0QwMkFCNDBFQkY1MzkwMUNDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYM1/Hc8ySgD4fGf2uzyhablo+ Se1l0vdOWq7Kb4Z+9z0jPf0X2oc86XmV5DAihB98sjzMB4KEZhvFkob6KKwMoL0i J/IlC+4fENk3ZU/DI6vPp3/TAUqhU3vYlt8ZTLRakUgwj4feynTlxBjEIN8evq81 PpMiheanBeffWYuhc/HIo0T6RYFLwetMybG/N0X5GWxr1S1PdWppACSMvOjFL2c4 KRofKyf5/nzBgui6liht9AsWwn8/ueCEux06gNGKuMjEIqJjv6LCQh7ChtxhPh0Q FzLQfBQ8hOkcLuYnUqkKibGWiTALyPE8RKM02p4kFWcNBbvibofuECj1Wyi7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkBqqKMnwdt/oyz0Cq0Dr9TkBzNYwHwYDVR0j BBgwFoAUIa/UQ16dh3gRGL0W+XrYHxGb+9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUE5NDkzQzFGNTk4NjBFNEFGMjEyMjQ1ODMyQkRDQ0E1 MDBCRTUxQjM5MTVCQjBCQ0ZDOEQzRDcyREFEOENGLzAvMjFBRkQ0NDM1RTlEODc3 ODExMThCRDE2Rjk3QUQ4MUYxMTlCRkJENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUFGRDQ0MzVFOUQ4Nzc4MTEx OEJEMTZGOTdBRDgxRjExOUJGQkQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFBOTQ5M0MxRjU5ODYwRTRBRjIxMjI0NTgzMkJEQ0NBNTAwQkU1MUIz OTE1QkIwQkNGQzhEM0Q3MkRBRDhDRi8wLzIxQUZENDQzNUU5RDg3NzgxMTE4QkQx NkY5N0FEODFGMTE5QkZCRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrG8YbYqmiYBh1l6i8oqS6y10C 5I796NPaWqtBo5E/X9DKxz+z7cnmZRH15rsxCeBr7I+Vj9BByN4p/fVQxeObNV/i GgsEfojdU517oBQKW8S0XGUmyriosdPBrgKJXTnj0MSraSlA9BqjXi9g18heHXMq j5glL4zi/gGt81oPi5xuVd/19G4ELCArbw+XO+X1BMUYWsRLMrvmC/bMhkosmvUI WYI7OlmEOrMoOJjQ+yqEN8/4Tmrrz9eEawyexTeq2C6cv2ef/MBXpWO1hev6bd2A OY9Ta+R92ZaGj4FTD7/z3tbqHk52P4QNhl+Ji6PNIehvFmiWT2PN4OXdzyY1 -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net