$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft File: D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft (raw, json) Hash identifier: TA926i0uOpZ5Wq+lS9DIc4FE0PDgcqWgVwtQrJQrGe4= Subject key identifier: C1:08:16:2D:2F:46:2E:32:52:7D:70:E6:FA:30:D5:16:01:F3:F9:AD Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA Certificate issuer: /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA Certificate serial: 7085A033A85091C9167543DF2C93624860538250 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft Manifest number: CA Signing time: Sun 27 Apr 2025 00:12:06 +0000 Manifest this update: Sun 27 Apr 2025 00:07:06 +0000 Manifest next update: Fri 02 May 2025 05:47:06 +0000 Files and hashes: 1: 34352e3233382e3137362e302f32342d3234203d3e203634313339.roa (hash: tDbhmRPKzcA1vexp8Cf/ZAzIF5JPQhSC5hM/O3svroQ=) 2: 3133382e302e3132322e302f32332d3234203d3e20323635373033.roa (hash: 9DN2a6/2yOaXSrp+epSvgmKQ8NkP3j4MxC0Fdv49nEM=) 3: D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl (hash: Az3AkNhkjD+rb6TlTDCbVJTGObm736T+WlaIPH5ojok=) 4: 34352e3233382e3137362e302f32332d3234203d3e20323635373033.roa (hash: V9eQ9AJUEuBDrH6/4cy9D6A11Mdrk2RGIvfe/G0DihQ=) 5: 3133382e302e3132332e302f32342d3234203d3e203634313339.roa (hash: C+EfL3m+CBc1rEWDXAzXamIIQGKAtXtd+ejROE9iQVc=) 6: 34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa (hash: Ih7oDld5f4O9rxONT5YsfxaDf1v+Yr2JwZVTF/Bo4bU=) 7: 3133382e302e3132322e302f32332d3234203d3e20323636383436.roa (hash: uQZJ3MWVXhnHJVO3d2EPCTnIhe692klUyBUsgITVDvc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:85:a0:33:a8:50:91:c9:16:75:43:df:2c:93:62:48:60:53:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA Validity Not Before: Apr 27 00:07:06 2025 GMT Not After : May 2 05:47:06 2025 GMT Subject: CN=C108162D2F462E32527D70E6FA30D51601F3F9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0a:df:ec:f5:54:4d:92:f6:7f:7a:bb:e6:3b: 77:8c:c0:b6:1b:8f:fc:b1:ef:a3:6a:78:44:36:0e: bf:7d:35:2d:51:80:ce:76:ba:88:91:27:e4:24:57: 39:41:5f:bb:17:6d:6e:f5:34:74:78:04:3a:c4:de: d4:cd:80:bb:e7:98:31:a9:e3:c1:1d:2e:fe:d7:77: 34:40:08:d8:2c:7f:2f:5f:ca:72:86:13:0a:06:f5: 63:16:8e:8e:2a:55:bf:0d:68:89:eb:77:b8:19:c3: b7:e6:e9:eb:79:03:f9:f4:07:8b:b4:f2:d4:db:48: f1:c4:ee:8f:22:cd:5f:c2:50:86:06:22:a0:eb:0c: da:d5:46:02:e3:fe:0a:41:f1:87:37:39:be:02:04: 39:8d:74:b7:da:c4:fb:d1:97:10:0e:39:3b:a7:00: 12:66:4d:3d:35:39:f7:ef:56:18:a2:29:e8:20:95: 59:7a:8b:12:ba:a9:97:e6:b7:81:09:21:8d:f0:71: 4c:7d:77:f9:ca:6e:60:4e:41:e3:25:1d:b6:4b:0e: 17:38:9e:e3:28:9e:da:fa:5b:15:00:f0:52:da:44: 36:79:2a:ac:9b:45:34:c5:b4:4d:1f:8f:42:02:0f: 92:21:56:36:7a:8b:08:71:90:f9:ac:68:86:a4:a9: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:08:16:2D:2F:46:2E:32:52:7D:70:E6:FA:30:D5:16:01:F3:F9:AD X509v3 Authority Key Identifier: keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a6:2f:ce:07:55:08:38:dc:90:3b:cb:36:9d:47:80:e6:bc: 8f:d7:e0:e6:eb:6a:45:d5:c4:6b:9e:c9:ae:5d:e8:bf:94:fb: 15:83:e3:f5:d6:21:52:84:32:d6:c0:b2:b3:91:be:2a:33:3b: b4:8f:30:0c:d5:36:ae:ca:4f:17:96:bd:0d:be:13:87:ca:1e: c1:ce:7e:67:9a:61:b8:2f:f9:87:72:e9:bb:c1:88:c1:ff:b3: ee:ae:69:99:06:1a:1b:6c:88:ff:ae:cb:7a:fc:82:ad:f0:3b: ae:32:39:56:28:f9:cf:57:c0:b9:f5:9d:26:fd:ba:55:1b:f9: 4f:e5:05:11:80:e4:e2:99:34:5f:42:bf:ce:57:44:24:7a:4c: 44:4b:30:40:f3:01:0f:2b:fe:c8:96:de:da:19:48:65:33:45: 69:3d:da:f1:8b:2c:d2:dc:be:ab:5e:51:60:a3:67:08:4a:6a: 7c:52:ba:39:2f:83:3e:26:5a:bf:d3:99:c6:77:89:e3:07:77: d8:4c:a2:c0:59:4a:c6:38:f8:f3:04:4f:56:48:6b:7a:07:c0: a6:1c:ea:82:f2:bc:9b:1a:7e:78:83:02:84:5b:87:99:d0:ea: 23:58:1d:f5:26:d7:d6:3a:d0:99:92:e0:ab:57:fe:eb:5f:d8: 53:73:b4:78 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcIWgM6hQkckWdUPfLJNiSGBTglAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgxQUE0M0RGMDMxRTAzMTIxQjEwMzc0QzA1QjUyQkJC MTdBQ0JFQTAeFw0yNTA0MjcwMDA3MDZaFw0yNTA1MDIwNTQ3MDZaMDMxMTAvBgNV BAMTKEMxMDgxNjJEMkY0NjJFMzI1MjdENzBFNkZBMzBENTE2MDFGM0Y5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFCt/s9VRNkvZ/ervmO3eMwLYb j/yx76NqeEQ2Dr99NS1RgM52uoiRJ+QkVzlBX7sXbW71NHR4BDrE3tTNgLvnmDGp 48EdLv7XdzRACNgsfy9fynKGEwoG9WMWjo4qVb8NaInrd7gZw7fm6et5A/n0B4u0 8tTbSPHE7o8izV/CUIYGIqDrDNrVRgLj/gpB8Yc3Ob4CBDmNdLfaxPvRlxAOOTun ABJmTT01OffvVhiiKegglVl6ixK6qZfmt4EJIY3wcUx9d/nKbmBOQeMlHbZLDhc4 nuMontr6WxUA8FLaRDZ5KqybRTTFtE0fj0ICD5IhVjZ6iwhxkPmsaIakqXCpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwQgWLS9GLjJSfXDm+jDVFgHz+a0wHwYDVR0j BBgwFoAU2BqkPfAx4DEhsQN0wFtSu7F6y+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERkYxQjgxRUFCODhFQ0QxMTQwODhEOTkyNjBGRkFCNDhE NjgwRURGNTE2QTQzQURCMjkxODdBRDI1NTkxRTFCLzAvRDgxQUE0M0RGMDMxRTAz MTIxQjEwMzc0QzA1QjUyQkJCMTdBQ0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODFBQTQzREYwMzFFMDMxMjFC MTAzNzRDMDVCNTJCQkIxN0FDQkVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREZGMUI4MUVBQjg4RUNEMTE0MDg4RDk5MjYwRkZBQjQ4RDY4MEVERjUx NkE0M0FEQjI5MTg3QUQyNTU5MUUxQi8wL0Q4MUFBNDNERjAzMUUwMzEyMUIxMDM3 NEMwNUI1MkJCQjE3QUNCRUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQpi/OB1UIONyQO8s2nUeA5ryP 1+Dm62pF1cRrnsmuXei/lPsVg+P11iFShDLWwLKzkb4qMzu0jzAM1Tauyk8Xlr0N vhOHyh7Bzn5nmmG4L/mHcum7wYjB/7PurmmZBhobbIj/rst6/IKt8DuuMjlWKPnP V8C59Z0m/bpVG/lP5QURgOTimTRfQr/OV0QkekxESzBA8wEPK/7Ilt7aGUhlM0Vp PdrxiyzS3L6rXlFgo2cISmp8Uro5L4M+Jlq/05nGd4njB3fYTKLAWUrGOPjzBE9W SGt6B8CmHOqC8rybGn54gwKEW4eZ0OojWB31JtfWOtCZkuCrV/7rX9hTc7R4 -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:30 2025 by rpki-client on console.sobornost.net