$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: i8zYSvno3jimkGJqNjE6IwoOvmVY8aUhSIC+CYdiR04= Subject key identifier: 2A:63:10:01:38:3D:D8:9A:8B:0D:A4:63:A9:0C:45:0B:10:F4:57:77 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 3290F36E766AEF639D02DD1CAA4AAC0406CE7E61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 27 Signing time: Wed 15 May 2024 11:18:01 +0000 Manifest this update: Wed 15 May 2024 11:13:01 +0000 Manifest next update: Mon 20 May 2024 13:57:01 +0000 Files and hashes: 1: 34352e3136342e32322e302f32342d3234203d3e203233343730.roa (hash: O2i/wqXwxFtqyS2yeKNQXqCJaq7KHggPiXY76a7SRq0=) 2: 34352e3136342e32332e302f32342d3234203d3e203233343730.roa (hash: wvnS4XbsAgz9+OUCipFSnqG5kIx+6sh7ngSGcTabmW8=) 3: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: iSkHenrSGzkokyzI8iTObb+Q5d81g7x7/UUAVn6Lmvw=) 4: 34352e3136342e32312e302f32342d3234203d3e203233343730.roa (hash: EAi4HW/T/owujdCsNi+9/lN/tP+dPsScG5gKvoh9bk8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:90:f3:6e:76:6a:ef:63:9d:02:dd:1c:aa:4a:ac:04:06:ce:7e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: May 15 11:13:01 2024 GMT Not After : May 20 13:57:01 2024 GMT Subject: CN=2A631001383DD89A8B0DA463A90C450B10F45777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:e5:36:ab:4d:32:8b:f5:15:a3:30:4e:3e: 5e:61:76:eb:94:6e:e3:b0:fc:40:b1:6d:80:17:63: 49:59:1f:14:84:dc:b0:77:dd:cf:56:5a:cb:d1:4f: f4:88:04:94:de:63:64:9a:fa:87:a0:3a:c3:2e:fd: 70:f6:ea:e0:66:99:af:86:8c:b1:32:05:81:29:8b: 98:b6:2d:bd:13:8a:7f:fb:a2:1d:44:1f:d5:b2:35: 08:49:53:bb:b2:dc:f8:77:9e:de:c8:c1:07:41:b7: d4:84:cf:c9:66:3d:0c:a4:97:a2:36:2e:10:ae:11: fb:95:a7:b6:16:e9:8b:c5:2f:73:22:94:b5:32:e1: 84:f5:74:d7:72:f9:be:77:3f:03:92:e8:b6:e2:43: 8f:5e:f9:40:12:5c:17:42:d8:7f:fd:c1:4b:51:d6: ea:d8:ef:c9:ff:e3:f7:32:00:7f:8f:f2:ce:f4:8a: fd:3f:b9:a3:1c:e8:21:b4:12:02:3d:a9:83:14:4e: 06:cc:ec:64:e7:58:30:f0:be:3d:d8:a3:9f:61:69: c4:ec:5d:61:97:e9:2c:08:f1:f9:4a:a2:27:90:58: bb:1d:66:92:98:35:2a:6b:7e:84:cf:03:ca:87:59: 71:86:d5:62:7f:42:50:eb:cd:0b:6e:19:64:e4:43: fe:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:63:10:01:38:3D:D8:9A:8B:0D:A4:63:A9:0C:45:0B:10:F4:57:77 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e9:99:93:89:88:94:bb:1f:c2:f3:c0:16:55:07:02:83:88: ae:1d:f0:53:c2:68:26:66:aa:6a:56:24:30:bc:6e:dd:cc:d9: 71:bd:9c:47:82:ca:e9:23:98:27:c0:79:a3:7d:9f:1a:61:61: 4f:24:ae:5e:5a:5c:3c:93:fa:55:81:2a:39:71:49:7e:a5:47: 1b:a4:16:7c:a6:ab:73:52:11:90:ff:e1:42:db:c9:b0:e6:53: ca:18:3f:5a:97:23:05:42:c2:d2:f0:8e:9a:9f:c4:61:b9:16: 28:d7:3d:80:ed:b1:31:f7:ed:a0:fd:fc:bd:b5:08:ea:cc:ef: fe:d3:f0:3d:8a:94:bb:d6:4a:01:a4:ad:e5:11:b6:ea:d7:e4: 9e:f6:b5:90:67:a5:0c:24:f9:e6:8b:6e:5d:4f:8e:0e:a2:4e: ab:e1:38:cf:6d:3b:e4:b9:1c:d9:af:01:4c:25:96:03:64:9d: 1a:c7:01:6c:3b:9d:42:b2:71:00:1d:ff:32:d4:e9:9c:d0:10: a4:dd:49:8b:55:80:4e:83:02:85:d6:9f:00:9d:f3:6e:fb:f6: 56:ae:f4:89:69:61:f6:1f:da:58:d3:c9:85:b9:c3:85:f5:de: 58:c3:e8:55:5d:7e:69:3e:31:ba:0d:e6:bf:63:7a:61:96:24: 5b:63:34:b4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMpDzbnZq72OdAt0cqkqsBAbOfmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNDA1MTUxMTEzMDFaFw0yNDA1MjAxMzU3MDFaMDMxMTAvBgNV BAMTKDJBNjMxMDAxMzgzREQ4OUE4QjBEQTQ2M0E5MEM0NTBCMTBGNDU3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWeU2q00yi/UVozBOPl5hduuU buOw/ECxbYAXY0lZHxSE3LB33c9WWsvRT/SIBJTeY2Sa+oegOsMu/XD26uBmma+G jLEyBYEpi5i2Lb0Tin/7oh1EH9WyNQhJU7uy3Ph3nt7IwQdBt9SEz8lmPQykl6I2 LhCuEfuVp7YW6YvFL3MilLUy4YT1dNdy+b53PwOS6LbiQ49e+UASXBdC2H/9wUtR 1urY78n/4/cyAH+P8s70iv0/uaMc6CG0EgI9qYMUTgbM7GTnWDDwvj3Yo59hacTs XWGX6SwI8flKoieQWLsdZpKYNSprfoTPA8qHWXGG1WJ/QlDrzQtuGWTkQ/7DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKmMQATg92JqLDaRjqQxFCxD0V3cwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA6ZmTiYiUux/C88AWVQcCg4iu HfBTwmgmZqpqViQwvG7dzNlxvZxHgsrpI5gnwHmjfZ8aYWFPJK5eWlw8k/pVgSo5 cUl+pUcbpBZ8pqtzUhGQ/+FC28mw5lPKGD9alyMFQsLS8I6an8RhuRYo1z2A7bEx 9+2g/fy9tQjqzO/+0/A9ipS71koBpK3lEbbq1+Se9rWQZ6UMJPnmi25dT44Ook6r 4TjPbTvkuRzZrwFMJZYDZJ0axwFsO51CsnEAHf8y1Omc0BCk3UmLVYBOgwKF1p8A nfNu+/ZWrvSJaWH2H9pY08mFucOF9d5Yw+hVXX5pPjG6Dea/Y3phliRbYzS0 -----END CERTIFICATE-----Generated at Wed May 15 12:06:26 2024 by rpki-client on console-fra.rpki-client.org