$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: uWnhMWgBHhu2E1Tpl8id+raIZS0JYUCaYAZA6hRqqWE= Subject key identifier: 77:8A:21:10:6D:90:9F:88:E5:0F:BE:C0:5E:E9:E5:21:97:3C:12:4F Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 428248C7F5E0BDDBE94165D67BB307768CA6B6E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: D4 Signing time: Mon 28 Apr 2025 16:06:01 +0000 Manifest this update: Mon 28 Apr 2025 16:01:01 +0000 Manifest next update: Sun 04 May 2025 06:05:01 +0000 Files and hashes: 1: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: Tpu5mtmY/E6RnTTm3zG1QJJywy3a24/BBCfGwU0oGCo=) 2: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: awSHfYu5olO3Sr1hdIR9ko/TcZ0IMSchh5DLzNlGd+k=) 3: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: /papCO0JjlVs32JzAD38PXCthVk1/CXsFlag7N1QtgM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:82:48:c7:f5:e0:bd:db:e9:41:65:d6:7b:b3:07:76:8c:a6:b6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Apr 28 16:01:01 2025 GMT Not After : May 4 06:05:01 2025 GMT Subject: CN=778A21106D909F88E50FBEC05EE9E521973C124F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:30:2a:62:9f:6a:39:7a:ad:5d:f1:b4:14: d4:6b:04:5e:bd:f9:3b:ea:ee:59:81:55:3c:43:f3: 50:d4:cb:af:a5:08:1e:ed:9c:5e:7d:54:0d:5a:e8: 94:e6:e4:c2:cf:52:82:ec:13:1d:5f:ab:a5:79:a3: 04:64:42:f9:2a:f5:68:2d:53:6a:1d:3a:7d:e0:32: a9:16:a4:d3:6c:3c:21:47:4e:d4:2a:5c:ae:ae:96: 37:c3:3c:ba:89:cd:e9:03:0a:39:c9:b3:84:28:53: 18:62:73:47:01:00:9b:cb:f1:96:fd:07:e2:bb:fc: ae:ed:a9:4c:88:33:ce:71:52:b7:94:9a:64:20:68: 16:7b:85:f8:2f:4b:36:fe:29:5e:ca:c2:a6:42:27: df:4d:f4:9e:4a:e8:a1:ae:2b:f9:c0:25:f3:21:2b: 4d:f1:3c:92:a5:de:29:4b:a8:3f:cc:3f:b5:d1:f3: 9b:ab:83:2b:af:fa:92:d3:c9:c8:23:97:4c:c1:fe: 57:75:d5:fb:24:8b:3d:52:10:45:bc:c6:9b:38:67: 36:a2:16:98:df:39:0a:a5:de:1b:70:d0:d3:e6:66: 12:60:2c:f0:12:40:2d:49:74:bd:f4:19:a9:52:9e: 86:e8:71:97:68:e3:b8:2c:38:e0:57:eb:b9:b9:ef: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8A:21:10:6D:90:9F:88:E5:0F:BE:C0:5E:E9:E5:21:97:3C:12:4F X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:84:be:29:23:38:36:d7:d0:a1:bc:1c:f8:aa:be:d1:e6:6f: 44:cd:2c:16:0f:de:92:55:e3:1a:f5:1e:95:65:f5:2e:77:6d: 7e:40:96:86:2b:6f:17:f1:b8:8d:77:ed:4a:42:91:b9:7b:00: ff:e9:e6:0b:66:67:3e:c3:d7:9a:b5:16:4b:97:c8:25:36:f5: 42:f7:3b:96:01:ae:23:ab:9f:26:39:36:95:c5:c4:6a:9e:11: cd:ce:46:7e:b5:8b:f0:67:25:26:40:33:24:49:14:61:ce:ff: 46:55:9d:24:be:c6:56:9e:28:7b:a7:01:58:69:75:17:c9:c8: 10:19:34:2b:b3:ed:71:f2:0f:9c:f0:4d:ec:8c:f8:b7:4a:aa: 83:0b:4f:d4:cd:4a:f3:1f:65:35:2f:1b:8a:1b:10:65:2d:3a: 77:5d:bd:14:b5:cf:75:e3:88:e5:53:4d:d8:97:dd:9a:90:3c: 5e:a2:29:59:38:96:70:10:d3:70:95:d8:dc:8a:e8:46:49:20: 4c:e8:7d:9f:1f:81:a4:e5:d3:29:ec:82:5b:88:e3:0b:17:03: 35:b8:8a:0a:dd:dc:d0:77:b6:a9:73:10:57:2a:7f:37:a1:d7: 98:af:2a:70:a5:5f:e8:cd:06:2e:9d:68:fe:74:9a:0f:ff:d1: 39:5b:a2:18 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQoJIx/XgvdvpQWXWe7MHdoymtuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNTA0MjgxNjAxMDFaFw0yNTA1MDQwNjA1MDFaMDMxMTAvBgNV BAMTKDc3OEEyMTEwNkQ5MDlGODhFNTBGQkVDMDVFRTlFNTIxOTczQzEyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCzAqYp9qOXqtXfG0FNRrBF69 +Tvq7lmBVTxD81DUy6+lCB7tnF59VA1a6JTm5MLPUoLsEx1fq6V5owRkQvkq9Wgt U2odOn3gMqkWpNNsPCFHTtQqXK6uljfDPLqJzekDCjnJs4QoUxhic0cBAJvL8Zb9 B+K7/K7tqUyIM85xUreUmmQgaBZ7hfgvSzb+KV7KwqZCJ99N9J5K6KGuK/nAJfMh K03xPJKl3ilLqD/MP7XR85urgyuv+pLTycgjl0zB/ld11fskiz1SEEW8xps4Zzai FpjfOQql3htw0NPmZhJgLPASQC1JdL30GalSnobocZdo47gsOOBX67m5716VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUd4ohEG2Qn4jlD77AXunlIZc8Ek8wHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/hL4pIzg219ChvBz4qr7R5m9E zSwWD96SVeMa9R6VZfUud21+QJaGK28X8biNd+1KQpG5ewD/6eYLZmc+w9eatRZL l8glNvVC9zuWAa4jq58mOTaVxcRqnhHNzkZ+tYvwZyUmQDMkSRRhzv9GVZ0kvsZW nih7pwFYaXUXycgQGTQrs+1x8g+c8E3sjPi3SqqDC0/UzUrzH2U1LxuKGxBlLTp3 Xb0Utc9144jlU03Yl92akDxeoilZOJZwENNwldjciuhGSSBM6H2fH4Gk5dMp7IJb iOMLFwM1uIoK3dzQd7apcxBXKn83odeYrypwpV/ozQYunWj+dJoP/9E5W6IY -----END CERTIFICATE-----Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net