$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft File: D746D75B817C987CF5174C6C1F75102E45E1979E.mft (raw, json) Hash identifier: lyvp9V1vizo6c0VXDwzWMgNYow8b/oVLsGs+l8UxhIo= Subject key identifier: 64:3D:C3:D0:0D:33:A8:56:23:25:A2:07:C8:FD:6A:DF:FE:5E:D6:C9 Authority key identifier: D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E Certificate issuer: /CN=D746D75B817C987CF5174C6C1F75102E45E1979E Certificate serial: 0D68630B4FD9DC8DA6585113AD8FB40DBE94E894 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft Manifest number: 3F Signing time: Mon 01 Jul 2024 09:51:07 +0000 Manifest this update: Mon 01 Jul 2024 09:46:07 +0000 Manifest next update: Sun 07 Jul 2024 01:14:07 +0000 Files and hashes: 1: D746D75B817C987CF5174C6C1F75102E45E1979E.crl (hash: MLRlBNZRT3Qih/UoWZ29EYXcYLem0maiOMxGVl8CIwY=) 2: 323830333a6439303a3a2f33322d3430203d3e20323732393837.roa (hash: RZL1oyM93zv+dS6BIpmJXaRsBgkAJSZiVKu1e1sgRJY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.crl rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 05 Jul 2024 04:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:68:63:0b:4f:d9:dc:8d:a6:58:51:13:ad:8f:b4:0d:be:94:e8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D746D75B817C987CF5174C6C1F75102E45E1979E Validity Not Before: Jul 1 09:46:07 2024 GMT Not After : Jul 7 01:14:07 2024 GMT Subject: CN=643DC3D00D33A8562325A207C8FD6ADFFE5ED6C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:63:af:93:aa:bd:c2:b7:af:72:f9:4c:07: b2:3e:6b:85:ef:e1:d3:8b:6f:c0:34:ef:cb:76:9f: 15:ed:0e:1e:ca:27:3e:b9:12:1b:41:98:7d:03:fa: 19:ae:60:17:f4:0b:d3:de:2b:73:cd:ad:f4:12:6e: 96:55:83:a5:13:be:59:78:44:64:3b:cc:5b:55:68: 84:e0:e3:08:e2:60:1f:5f:7f:a1:4d:f0:7d:68:12: 17:ad:9f:fe:89:3d:25:b7:af:6d:73:f4:58:eb:7a: ad:4b:4e:49:6b:80:78:22:7d:81:2a:45:74:e7:db: 8f:ff:dd:b1:e4:17:a0:93:30:b6:e5:c8:94:e2:ba: 27:b0:50:19:a4:2e:6c:69:61:70:db:a7:d8:7d:76: c5:59:9d:e4:50:95:e5:e9:02:ed:24:ed:ba:fc:87: e5:24:bb:aa:62:14:01:1d:14:95:06:2d:00:c1:86: 46:34:6c:6e:ab:d9:ab:87:22:b5:53:ae:49:35:e3: 66:26:94:17:7d:38:f3:71:72:d3:44:d2:fe:27:97: 71:9a:ce:a0:bb:bb:77:da:5f:af:99:c9:3e:95:57: d5:09:fc:13:e6:fa:64:8a:11:96:56:87:30:a7:9b: ca:2b:d6:25:ef:92:bb:e3:8b:2a:80:e1:f4:4d:14: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3D:C3:D0:0D:33:A8:56:23:25:A2:07:C8:FD:6A:DF:FE:5E:D6:C9 X509v3 Authority Key Identifier: keyid:D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ce:58:1b:c9:50:c2:c2:88:5b:98:b2:91:16:c5:72:41:a6: a3:ce:89:82:a8:83:65:5a:34:87:64:03:a1:93:23:bb:61:b1: 71:28:c4:97:e7:04:4b:8d:a8:7e:5a:2a:99:c2:64:34:c6:7b: 73:e8:e3:4c:4e:c9:ab:cf:d6:07:78:50:e3:51:24:2f:ad:81: 5f:9c:e5:9a:45:ed:1d:da:65:cd:23:76:46:d3:01:5c:34:89: 5a:5a:00:93:69:c6:b0:c4:5a:6d:12:2c:fc:da:fc:94:f7:5f: 62:cb:14:17:db:a7:76:09:17:4b:97:85:f5:d5:15:50:9c:96: f0:27:56:71:05:e2:e4:c0:dd:76:da:10:23:b1:dc:b9:d0:d0: c2:9d:5c:70:a3:72:6c:7d:27:12:fb:e0:ed:7b:a2:c7:80:9e: e2:5c:5d:d5:ae:7f:f1:a2:e3:04:18:b3:4b:49:cf:07:72:62: b5:78:f2:5b:b8:82:a6:e6:ca:33:e7:f1:0a:6d:99:d0:e9:07: c6:b8:b4:d8:a3:8d:aa:19:8f:ed:14:33:40:a2:4a:16:0c:c4: bc:ed:d5:7d:4a:90:bf:ca:99:0c:ac:9f:c8:3d:18:26:25:1d: fe:37:69:41:90:b8:03:8c:b4:81:d2:ad:93:03:fc:d2:93:95: 52:e5:ac:67 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDWhjC0/Z3I2mWFETrY+0Db6U6JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0NkQ3NUI4MTdDOTg3Q0Y1MTc0QzZDMUY3NTEwMkU0 NUUxOTc5RTAeFw0yNDA3MDEwOTQ2MDdaFw0yNDA3MDcwMTE0MDdaMDMxMTAvBgNV BAMTKDY0M0RDM0QwMEQzM0E4NTYyMzI1QTIwN0M4RkQ2QURGRkU1RUQ2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsq2Ovk6q9wrevcvlMB7I+a4Xv 4dOLb8A078t2nxXtDh7KJz65EhtBmH0D+hmuYBf0C9PeK3PNrfQSbpZVg6UTvll4 RGQ7zFtVaITg4wjiYB9ff6FN8H1oEhetn/6JPSW3r21z9Fjreq1LTklrgHgifYEq RXTn24//3bHkF6CTMLblyJTiuiewUBmkLmxpYXDbp9h9dsVZneRQleXpAu0k7br8 h+Uku6piFAEdFJUGLQDBhkY0bG6r2auHIrVTrkk142YmlBd9OPNxctNE0v4nl3Ga zqC7u3faX6+ZyT6VV9UJ/BPm+mSKEZZWhzCnm8or1iXvkrvjiyqA4fRNFIejAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZD3D0A0zqFYjJaIHyP1q3/5e1skwHwYDVR0j BBgwFoAU10bXW4F8mHz1F0xsH3UQLkXhl54wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QzBGRTAxMTJEMzQ0MTcxNzIxQkRFRjA1RUE4QjM0OUNF RjkxRDgwMDcwRDIyNDQ4N0NCMTYzNThCMTE3QUUxLzAvRDc0NkQ3NUI4MTdDOTg3 Q0Y1MTc0QzZDMUY3NTEwMkU0NUUxOTc5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzQ2RDc1QjgxN0M5ODdDRjUx NzRDNkMxRjc1MTAyRTQ1RTE5NzlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEMwRkUwMTEyRDM0NDE3MTcyMUJERUYwNUVBOEIzNDlDRUY5MUQ4MDA3 MEQyMjQ0ODdDQjE2MzU4QjExN0FFMS8wL0Q3NDZENzVCODE3Qzk4N0NGNTE3NEM2 QzFGNzUxMDJFNDVFMTk3OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGzlgbyVDCwohbmLKRFsVyQaaj zomCqINlWjSHZAOhkyO7YbFxKMSX5wRLjah+WiqZwmQ0xntz6ONMTsmrz9YHeFDj USQvrYFfnOWaRe0d2mXNI3ZG0wFcNIlaWgCTacawxFptEiz82vyU919iyxQX26d2 CRdLl4X11RVQnJbwJ1ZxBeLkwN122hAjsdy50NDCnVxwo3JsfScS++Dte6LHgJ7i XF3Vrn/xouMEGLNLSc8HcmK1ePJbuIKm5soz5/EKbZnQ6QfGuLTYo42qGY/tFDNA okoWDMS87dV9SpC/ypkMrJ/IPRgmJR3+N2lBkLgDjLSB0q2TA/zSk5VS5axn -----END CERTIFICATE-----Generated at Mon Jul 1 11:00:21 2024 by rpki-client on console-fra.rpki-client.org