$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json) Hash identifier: 0dQEJgJSMgRFFWGfAJoA6hqlvu8Y/04NBWnVilKpUnI= Subject key identifier: 49:F2:04:83:FA:90:3E:7C:56:02:C9:66:4C:5D:AB:CE:16:FE:5A:B0 Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Certificate serial: 7DBEF99920C32E320911B51B91AC4BF92474AD66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft Manifest number: 38 Signing time: Tue 25 Jun 2024 02:51:39 +0000 Manifest this update: Tue 25 Jun 2024 02:46:39 +0000 Manifest next update: Sat 29 Jun 2024 12:59:39 +0000 Files and hashes: 1: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: WNt/FPiNVAeikbMbUU2XUnPHDHQ2/I0C8t6CW0HF89M=) 2: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: HIktaHWcAEvjmLjIEpha9rS+/5j/JqfuoZHy3+a/umQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 29 Jun 2024 12:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:be:f9:99:20:c3:2e:32:09:11:b5:1b:91:ac:4b:f9:24:74:ad:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Validity Not Before: Jun 25 02:46:39 2024 GMT Not After : Jun 29 12:59:39 2024 GMT Subject: CN=49F20483FA903E7C5602C9664C5DABCE16FE5AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:42:b6:45:bd:30:4b:c6:42:7c:cc:f1:44: b5:ad:af:ec:13:a2:e6:9b:09:88:e7:b3:bc:7b:a3: 39:b9:00:90:2e:86:51:73:55:8e:82:11:32:58:c6: b5:00:d3:93:d3:f6:b8:b6:79:b6:4e:62:4f:45:47: 65:fb:10:ca:9c:2f:a7:bd:b5:45:06:bb:45:28:a4: d1:6e:ea:48:50:97:c9:af:ca:0b:37:83:1b:6e:bf: 26:a1:aa:cb:da:3c:5e:00:ea:73:6a:0f:ea:08:77: 20:5a:90:1f:18:ef:97:4d:b4:9d:2e:4a:ad:06:59: 09:da:19:fc:65:59:7b:96:ed:f3:22:3e:6c:9a:3c: 6a:1f:06:4c:8d:45:67:2d:fd:b6:3a:14:92:44:46: 1e:c5:29:50:87:d5:27:b0:88:31:8a:a3:56:16:81: eb:b0:ff:64:ea:d7:8e:51:9f:20:8c:8e:f4:90:5e: 08:1a:6f:ec:3c:b9:4a:49:38:f2:27:23:8b:a9:48: 81:68:8b:c0:a5:35:76:92:08:49:99:21:3c:eb:b4: e0:30:33:80:0e:9b:ab:c7:f5:45:75:d3:04:55:80: 79:e4:62:1e:00:c2:da:19:90:52:8e:e5:d8:dd:ff: 3b:1b:e5:68:59:00:d4:a2:6e:53:c5:24:92:c8:df: f1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F2:04:83:FA:90:3E:7C:56:02:C9:66:4C:5D:AB:CE:16:FE:5A:B0 X509v3 Authority Key Identifier: keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1b:d9:56:86:64:1f:4d:18:d9:ba:47:d9:eb:11:98:1e:d8: aa:17:86:0d:7d:5f:6b:df:13:e1:ba:20:93:6d:38:e5:21:e1: 23:b3:af:9e:d6:1e:1b:2f:7a:f6:82:b8:be:cc:b4:fe:73:cd: 9c:bc:44:8d:e6:36:f3:cf:2f:f0:72:73:58:5f:c1:1f:d2:c8: b0:50:48:66:21:1f:87:6f:c2:bc:3c:f0:2f:c9:24:e4:45:a2: 09:f7:f0:58:30:ad:7e:b7:d8:8a:91:f8:82:42:0c:d5:19:d2: af:3c:6e:14:8f:74:d8:16:f2:c2:09:d6:a4:65:19:a0:d9:7c: 70:9f:e5:fa:2c:50:e5:f0:4f:ab:4c:83:49:50:bd:81:48:3b: e6:3f:02:3d:90:19:01:b6:ba:60:1c:b6:ea:2b:87:d2:9a:37: 74:0c:96:b5:e2:ff:14:53:c3:f5:40:c6:7e:8b:e6:9c:4f:ee: 4a:23:9b:77:15:c7:c0:20:eb:f5:1e:de:03:57:53:fb:8f:a9: 3d:92:af:9a:21:43:10:da:0b:9a:9e:37:4c:b9:98:d7:18:bc: c0:aa:a7:39:cd:b7:af:24:80:27:e6:32:fe:67:48:d1:24:32: 75:f6:84:7d:ba:e1:ad:89:e8:07:74:cc:d9:c3:b0:a8:fb:99: b6:c7:99:99 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfb75mSDDLjIJEbUbkaxL+SR0rWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGODFBNkU3OUNGRjBCMUM0RUVGQkMzMkNGRDNCMzE0 NEE1MTA0QzAeFw0yNDA2MjUwMjQ2MzlaFw0yNDA2MjkxMjU5MzlaMDMxMTAvBgNV BAMTKDQ5RjIwNDgzRkE5MDNFN0M1NjAyQzk2NjRDNURBQkNFMTZGRTVBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr30K2Rb0wS8ZCfMzxRLWtr+wT ouabCYjns7x7ozm5AJAuhlFzVY6CETJYxrUA05PT9ri2ebZOYk9FR2X7EMqcL6e9 tUUGu0UopNFu6khQl8mvygs3gxtuvyahqsvaPF4A6nNqD+oIdyBakB8Y75dNtJ0u Sq0GWQnaGfxlWXuW7fMiPmyaPGofBkyNRWct/bY6FJJERh7FKVCH1SewiDGKo1YW geuw/2Tq145RnyCMjvSQXggab+w8uUpJOPInI4upSIFoi8ClNXaSCEmZITzrtOAw M4AOm6vH9UV10wRVgHnkYh4AwtoZkFKO5djd/zsb5WhZANSiblPFJJLI3/E9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSfIEg/qQPnxWAslmTF2rzhb+WrAwHwYDVR0j BBgwFoAUqvgabnnP8LHE7vvDLP07MUSlEEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEUyMzk4RTIxNEI4MDZFRDVGNkJFQUY5QzBGRDU4NjU1 NjM3NTk1MzFEODIwQjQ2NzFGNEE3RUY2NDQzOEQ2LzAvQUFGODFBNkU3OUNGRjBC MUM0RUVGQkMzMkNGRDNCMzE0NEE1MTA0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUY4MUE2RTc5Q0ZGMEIxQzRF RUZCQzMyQ0ZEM0IzMTQ0QTUxMDRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhFMjM5OEUyMTRCODA2RUQ1RjZCRUFGOUMwRkQ1ODY1NTYzNzU5NTMx RDgyMEI0NjcxRjRBN0VGNjQ0MzhENi8wL0FBRjgxQTZFNzlDRkYwQjFDNEVFRkJD MzJDRkQzQjMxNDRBNTEwNEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJG9lWhmQfTRjZukfZ6xGYHtiq F4YNfV9r3xPhuiCTbTjlIeEjs6+e1h4bL3r2gri+zLT+c82cvESN5jbzzy/wcnNY X8Ef0siwUEhmIR+Hb8K8PPAvySTkRaIJ9/BYMK1+t9iKkfiCQgzVGdKvPG4Uj3TY FvLCCdakZRmg2Xxwn+X6LFDl8E+rTINJUL2BSDvmPwI9kBkBtrpgHLbqK4fSmjd0 DJa14v8UU8P1QMZ+i+acT+5KI5t3FcfAIOv1Ht4DV1P7j6k9kq+aIUMQ2guanjdM uZjXGLzAqqc5zbevJIAn5jL+Z0jRJDJ19oR9uuGtiegHdMzZw7Co+5m2x5mZ -----END CERTIFICATE-----Generated at Tue Jun 25 04:09:48 2024 by rpki-client on console-ams.rpki-client.org