$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft File: FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft (raw, json) Hash identifier: 3HWg/xx4koDphi4qhGO7Pfw47raLQ6rhAC7k9ic1xB4= Subject key identifier: 45:47:87:A5:10:77:4E:D6:15:E9:2B:D1:BE:DC:0D:29:1A:31:3B:91 Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4 Certificate issuer: /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4 Certificate serial: 1E310EC790C0AE04D2EBA652310FDBE609D294E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft Manifest number: 86 Signing time: Wed 20 Nov 2024 20:52:56 +0000 Manifest this update: Wed 20 Nov 2024 20:47:56 +0000 Manifest next update: Tue 26 Nov 2024 07:03:56 +0000 Files and hashes: 1: FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl (hash: 6+BM6oyQhsPeoogVv2AFd3V75NbRHV9wtwD+XzkMOV8=) 2: 34352e3232372e39352e302f32342d3234203d3e20323636363533.roa (hash: abpf4qKjuayS3HxJh/2QyogfQAiIaPzr2Py6wxXDi5g=) 3: 34352e3232372e39332e302f32342d3234203d3e20323636363533.roa (hash: N/WJVv/xCONFR/ffN1gIhhvwcwEvOayyyHn2cFiG2fE=) 4: 34352e3232372e39322e302f32322d3234203d3e20323636363533.roa (hash: ZtBvYANFl+QKSKFQIkybKTI70effQXYquE7YxmJqB9w=) 5: 323830333a383132303a3a2f33322d3332203d3e20323636363533.roa (hash: pq9EpPby7wUS0s9nq2UiBN2/28esqyVjTvDMBI2MRk4=) 6: 34352e3232372e39322e302f32342d3234203d3e20323636363533.roa (hash: hKzmsj62xU0PDGKSUnUejFserjhFMGPKI4p1YBRywMY=) 7: 34352e3232372e39342e302f32342d3234203d3e20323636363533.roa (hash: +A46CSlx51gE4LBWHalQJ5f3YOON3eCAD2UF27KHH2o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:31:0e:c7:90:c0:ae:04:d2:eb:a6:52:31:0f:db:e6:09:d2:94:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4 Validity Not Before: Nov 20 20:47:56 2024 GMT Not After : Nov 26 07:03:56 2024 GMT Subject: CN=454787A510774ED615E92BD1BEDC0D291A313B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:3a:8c:9c:f5:48:a6:b8:58:02:05:4e:08: 1c:23:7b:4a:2c:d0:f1:de:6c:13:a4:26:be:8e:fd: a3:eb:58:7a:94:af:28:be:28:1c:49:ef:80:e6:18: d8:91:3d:12:40:7d:d3:85:2a:7d:c9:9a:67:d9:44: e2:f7:ab:18:44:5b:84:1c:ca:3e:92:47:10:21:a9: 3f:96:1b:3a:f9:13:17:21:d6:59:e7:8e:c6:fb:ae: b9:54:47:64:58:54:fa:3a:89:88:01:ef:3f:8b:b6: 32:0b:5e:77:cc:f9:5a:10:3e:cc:98:97:a9:3c:d6: a4:a8:66:b8:8a:72:8b:2b:d9:e6:d9:18:cd:07:63: 2c:03:33:31:da:ee:71:1b:81:35:b5:47:54:2c:d2: ba:16:eb:ab:44:80:ac:51:bd:86:c3:3e:65:4c:27: 29:35:4d:e4:ff:0c:59:4d:4e:f5:a7:0d:c3:16:16: 91:49:2b:5e:2f:cd:92:e4:6c:bb:6f:46:31:28:88: 5c:e5:af:94:a6:ef:e4:9b:5e:07:06:24:ad:33:19: 7d:c5:c9:16:e9:e2:ab:49:f3:dc:49:02:26:67:74: 8f:07:d0:c3:f2:0a:9d:06:8f:19:3c:25:40:12:7b: 32:77:b0:16:e4:38:0e:8e:1d:4a:40:71:69:45:55: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:47:87:A5:10:77:4E:D6:15:E9:2B:D1:BE:DC:0D:29:1A:31:3B:91 X509v3 Authority Key Identifier: keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:23:3f:fa:fe:3b:e0:44:37:58:1c:d9:c6:6b:b3:e0:4d:c0: a6:84:0a:16:c7:3c:af:7e:db:17:a6:86:7a:05:3c:68:5d:27: cf:ff:a6:1f:63:b2:bc:a8:a6:b8:0c:2f:02:20:a0:41:4c:ba: 86:a9:f2:17:12:6f:b4:e7:51:4f:e2:55:a2:b9:98:9e:4e:b4: 28:c2:0d:e9:25:d2:a4:2d:d7:04:d9:3d:cb:27:16:b5:ff:d9: 8b:6e:32:23:83:db:bf:92:f9:1b:5f:a7:7f:c7:1e:f1:12:1a: 11:55:3d:25:75:12:18:0b:fe:8d:b6:a5:65:d3:b9:26:34:a3: 4d:43:f8:c7:d7:be:95:ce:3d:02:22:39:47:51:b3:6b:c1:f4: f6:eb:d8:34:58:ca:38:53:f9:f2:11:3d:9b:51:a9:a8:bc:76: 58:f6:7d:96:db:cb:f7:b8:f0:35:12:6c:65:69:ec:09:e3:86: 0b:69:ef:a4:e2:dc:40:a7:fe:c6:f7:a9:f4:a6:71:b5:60:ec: 18:8c:87:25:cd:65:cc:81:4c:ae:85:90:43:d4:eb:6b:bc:47: 3c:44:ba:fb:f4:b1:65:b0:7e:0b:eb:d9:40:48:ca:2f:cb:61: e3:2f:02:98:1a:62:f8:ba:6d:49:25:74:2b:c1:63:4e:f7:dd: ca:23:0d:0c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHjEOx5DArgTS66ZSMQ/b5gnSlOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCQTUxMDZFNzBEOTFFMzg2MUI1Mzk1QjJEMTU2QzU2 RTk1ODlFNDAeFw0yNDExMjAyMDQ3NTZaFw0yNDExMjYwNzAzNTZaMDMxMTAvBgNV BAMTKDQ1NDc4N0E1MTA3NzRFRDYxNUU5MkJEMUJFREMwRDI5MUEzMTNCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCScDqMnPVIprhYAgVOCBwje0os 0PHebBOkJr6O/aPrWHqUryi+KBxJ74DmGNiRPRJAfdOFKn3JmmfZROL3qxhEW4Qc yj6SRxAhqT+WGzr5Exch1lnnjsb7rrlUR2RYVPo6iYgB7z+LtjILXnfM+VoQPsyY l6k81qSoZriKcosr2ebZGM0HYywDMzHa7nEbgTW1R1Qs0roW66tEgKxRvYbDPmVM Jyk1TeT/DFlNTvWnDcMWFpFJK14vzZLkbLtvRjEoiFzlr5Sm7+SbXgcGJK0zGX3F yRbp4qtJ89xJAiZndI8H0MPyCp0Gjxk8JUASezJ3sBbkOA6OHUpAcWlFVXjzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURUeHpRB3TtYV6SvRvtwNKRoxO5EwHwYDVR0j BBgwFoAU/7pRBucNkeOGG1OVstFWxW6VieQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRkZDQTc2NzYzOEE0REQzOUM2QTZEN0UyQkEzOTc3MkNE QTI5NkRFRTZCRjM2QTMzM0M3RkRDRTg5RDdGMjI1LzAvRkZCQTUxMDZFNzBEOTFF Mzg2MUI1Mzk1QjJEMTU2QzU2RTk1ODlFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkJBNTEwNkU3MEQ5MUUzODYx QjUzOTVCMkQxNTZDNTZFOTU4OUU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEZGQ0E3Njc2MzhBNEREMzlDNkE2RDdFMkJBMzk3NzJDREEyOTZERUU2 QkYzNkEzMzNDN0ZEQ0U4OUQ3RjIyNS8wL0ZGQkE1MTA2RTcwRDkxRTM4NjFCNTM5 NUIyRDE1NkM1NkU5NTg5RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPIz/6/jvgRDdYHNnGa7PgTcCm hAoWxzyvftsXpoZ6BTxoXSfP/6YfY7K8qKa4DC8CIKBBTLqGqfIXEm+051FP4lWi uZieTrQowg3pJdKkLdcE2T3LJxa1/9mLbjIjg9u/kvkbX6d/xx7xEhoRVT0ldRIY C/6NtqVl07kmNKNNQ/jH176Vzj0CIjlHUbNrwfT269g0WMo4U/nyET2bUamovHZY 9n2W28v3uPA1EmxlaewJ44YLae+k4txAp/7G96n0pnG1YOwYjIclzWXMgUyuhZBD 1OtrvEc8RLr79LFlsH4L69lASMovy2HjLwKYGmL4um1JJXQrwWNO993KIw0M -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org