$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.mft File: FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.mft (raw, json) Hash identifier: QfMU8TdPl5tgAo0C6hCHZXAKnIzhvy5Gn0FsAREpSs4= Subject key identifier: CF:65:9A:E1:1D:26:D2:64:0B:F2:CA:43:05:07:CF:69:CA:10:74:74 Authority key identifier: FF:06:C3:3F:B0:00:1E:E2:8F:FC:36:47:C9:C6:B9:FD:0B:0A:39:A7 Certificate issuer: /CN=FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7 Certificate serial: 345B3516F7A00681FE5B1625A7B100CC7CE4FA41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.mft Manifest number: 3B Signing time: Tue 25 Jun 2024 10:30:45 +0000 Manifest this update: Tue 25 Jun 2024 10:25:45 +0000 Manifest next update: Sun 30 Jun 2024 01:23:45 +0000 Files and hashes: 1: 34352e3233342e38362e302f32342d3234203d3e20323636373832.roa (hash: 83XMRaiNMUZKgXwiDJijkGGHGeSHXDM38krOLDtvHCs=) 2: FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.crl (hash: Gnz2Y6HNmptHUIfFTiTYTqLt8xJLqQnGth/VObHXL4M=) 3: 34352e3233342e38342e302f32332d3233203d3e20323636373832.roa (hash: LKpxTf4JgaK7uFmUNLdc2tLtueUNN4SWT2ipv5RfPuk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.crl rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 01:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5b:35:16:f7:a0:06:81:fe:5b:16:25:a7:b1:00:cc:7c:e4:fa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7 Validity Not Before: Jun 25 10:25:45 2024 GMT Not After : Jun 30 01:23:45 2024 GMT Subject: CN=CF659AE11D26D2640BF2CA430507CF69CA107474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:f4:e0:d0:89:47:58:b1:d2:6a:bd:fb:e7: 5d:c1:c6:79:1b:68:a0:e4:fe:47:5e:28:f7:61:ae: 91:d1:95:9c:39:cb:95:70:6f:f0:61:3b:9e:6a:55: a8:a6:8f:82:c6:70:16:50:67:24:84:a2:23:26:8c: 4a:d4:fc:b1:e4:3b:c7:d5:73:82:39:73:56:a3:14: 05:11:b1:60:8c:b5:6e:1f:e7:cd:08:14:9f:b8:78: 78:df:28:df:a3:95:a9:cc:c1:64:9a:5b:f0:9f:21: 02:ad:6e:9f:84:95:0b:eb:09:68:f7:d2:32:a6:93: 53:6f:46:c9:93:9a:65:8b:02:71:29:bb:fd:06:f4: c6:af:8e:49:75:85:87:84:6c:64:26:d7:dd:22:b2: 7f:9d:f8:aa:10:8e:ee:49:32:64:d7:85:b5:d9:11: b2:41:5c:30:65:af:2a:92:50:05:7f:0d:98:e4:f3: 8d:de:45:a3:ac:5c:a1:ad:43:32:36:fb:f6:27:55: 50:0b:b9:21:53:d4:72:c6:84:15:dd:5d:71:c7:30: d1:91:f6:af:50:d8:2d:31:7e:4b:22:01:08:e5:b0: 05:6c:ec:3a:06:cb:7a:15:57:ae:98:f1:07:91:46: df:8b:1d:7f:64:ab:02:64:ac:af:54:53:a8:5d:63: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:9A:E1:1D:26:D2:64:0B:F2:CA:43:05:07:CF:69:CA:10:74:74 X509v3 Authority Key Identifier: keyid:FF:06:C3:3F:B0:00:1E:E2:8F:FC:36:47:C9:C6:B9:FD:0B:0A:39:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8e:ad:55:15:3a:38:e7:3d:ab:d2:a2:ed:eb:ba:4e:d8:0b: 93:1c:84:a1:2b:af:42:eb:82:d8:ab:7c:49:04:b0:cd:8f:eb: 27:77:0f:fd:06:ad:76:db:e9:bc:4d:f6:7c:a7:90:0e:d4:2a: 01:1f:a1:f5:f6:c1:9f:4e:71:fb:0c:b8:7f:49:8d:1a:0f:3c: a2:9f:47:bc:09:b0:27:f4:53:33:fb:6c:b0:c7:2a:53:48:c6: 88:12:67:8f:bd:50:0b:a5:05:0b:07:c6:66:48:e0:46:5f:bb: b4:25:09:e8:93:fc:9b:94:b9:f4:a3:18:16:6d:72:a2:9c:3f: a5:0e:80:cb:5b:df:d7:d3:d5:dc:1e:59:98:e9:7f:c5:f3:f0: d2:5a:93:4b:bb:07:ef:98:25:28:af:d5:21:e6:7c:6e:c2:15: 2f:b8:d0:50:d8:70:57:d4:45:21:b2:fa:d8:b1:cc:86:f3:ed: 91:10:55:dd:8d:bc:9c:90:b5:0d:77:63:d7:4b:24:2d:06:d5: a5:1b:d0:83:ee:54:0a:d2:fc:10:7f:da:a7:ae:d2:d1:8e:77: 2c:c4:75:65:2c:e0:84:df:7e:b1:66:c4:3a:05:e0:55:14:c5: ae:03:8c:cd:7b:b1:ac:6f:29:37:ce:00:7e:f4:00:20:8f:df: ac:6d:9f:4e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNFs1FvegBoH+WxYlp7EAzHzk+kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYwNkMzM0ZCMDAwMUVFMjhGRkMzNjQ3QzlDNkI5RkQw QjBBMzlBNzAeFw0yNDA2MjUxMDI1NDVaFw0yNDA2MzAwMTIzNDVaMDMxMTAvBgNV BAMTKENGNjU5QUUxMUQyNkQyNjQwQkYyQ0E0MzA1MDdDRjY5Q0ExMDc0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfc/Tg0IlHWLHSar37513Bxnkb aKDk/kdeKPdhrpHRlZw5y5Vwb/BhO55qVaimj4LGcBZQZySEoiMmjErU/LHkO8fV c4I5c1ajFAURsWCMtW4f580IFJ+4eHjfKN+jlanMwWSaW/CfIQKtbp+ElQvrCWj3 0jKmk1NvRsmTmmWLAnEpu/0G9Mavjkl1hYeEbGQm190isn+d+KoQju5JMmTXhbXZ EbJBXDBlryqSUAV/DZjk843eRaOsXKGtQzI2+/YnVVALuSFT1HLGhBXdXXHHMNGR 9q9Q2C0xfksiAQjlsAVs7DoGy3oVV66Y8QeRRt+LHX9kqwJkrK9UU6hdY9TpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUz2Wa4R0m0mQL8spDBQfPacoQdHQwHwYDVR0j BBgwFoAU/wbDP7AAHuKP/DZHyca5/QsKOacwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MEY4RDZEQTYxQzhERUNENUExMjQzOTkzQ0Y5MDREMjZD OURBOEVEMUJBM0M5OTVBMTI1QTRBODhDMDFFRjFELzAvRkYwNkMzM0ZCMDAwMUVF MjhGRkMzNjQ3QzlDNkI5RkQwQjBBMzlBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjA2QzMzRkIwMDAxRUUyOEZG QzM2NDdDOUM2QjlGRDBCMEEzOUE3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDBGOEQ2REE2MUM4REVDRDVBMTI0Mzk5M0NGOTA0RDI2QzlEQThFRDFC QTNDOTk1QTEyNUE0QTg4QzAxRUYxRC8wL0ZGMDZDMzNGQjAwMDFFRTI4RkZDMzY0 N0M5QzZCOUZEMEIwQTM5QTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqjq1VFTo45z2r0qLt67pO2AuT HIShK69C64LYq3xJBLDNj+sndw/9Bq122+m8TfZ8p5AO1CoBH6H19sGfTnH7DLh/ SY0aDzyin0e8CbAn9FMz+2ywxypTSMaIEmePvVALpQULB8ZmSOBGX7u0JQnok/yb lLn0oxgWbXKinD+lDoDLW9/X09XcHlmY6X/F8/DSWpNLuwfvmCUor9Uh5nxuwhUv uNBQ2HBX1EUhsvrYscyG8+2REFXdjbyckLUNd2PXSyQtBtWlG9CD7lQK0vwQf9qn rtLRjncsxHVlLOCE336xZsQ6BeBVFMWuA4zNe7Gsbyk3zgB+9AAgj9+sbZ9O -----END CERTIFICATE-----Generated at Tue Jun 25 12:54:04 2024 by rpki-client on console-fra.rpki-client.org