$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: RPy/Y20JSNldS9PX+mdGQjLppcj0GfE7y9XFVkTPpDc= Subject key identifier: 83:08:98:CB:84:36:B0:79:BF:F7:F1:3C:B9:0F:C3:06:59:59:37:CD Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 1E9C543764CAADE36DE350AC6CA8612E2767D09D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: 2F Signing time: Fri 31 May 2024 13:11:47 +0000 Manifest this update: Fri 31 May 2024 13:06:47 +0000 Manifest next update: Tue 04 Jun 2024 17:52:47 +0000 Files and hashes: 1: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: iyANPHuwpTDgreM0QiFFTk7GyPH8N8zZdw/kxSB9fVQ=) 2: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: GlI9M+ina4gq5IV6sReHgPudJe8L1xGFnRIJAcHUcjc=) 3: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Ww8Z3jSheGqTG4qdgMsE/dMX1PN+b0x8QpIXxQAmp9Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 17:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9c:54:37:64:ca:ad:e3:6d:e3:50:ac:6c:a8:61:2e:27:67:d0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: May 31 13:06:47 2024 GMT Not After : Jun 4 17:52:47 2024 GMT Subject: CN=830898CB8436B079BFF7F13CB90FC306595937CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:a5:90:31:30:56:c4:34:cb:27:a0:ff:b6: 27:a7:4d:c8:e6:10:81:9a:b4:c5:6a:6a:7a:33:d1: c8:1e:05:8b:90:7e:99:55:cd:c1:70:37:45:91:b3: ca:a1:3c:6b:c6:9c:56:b7:68:9b:27:4c:4b:d5:ea: 25:ad:e6:d5:2a:63:15:1a:fd:89:cb:cd:b6:bf:63: 77:bf:25:81:47:30:cd:a5:1d:f4:d3:dc:0d:c0:2a: d8:58:03:a0:be:4b:ba:72:b8:8a:bf:fc:51:09:05: d2:87:4e:6e:bc:62:55:cf:8c:01:10:ef:81:67:c9: 77:c3:17:fe:a4:11:02:f8:ff:4f:72:55:87:5d:94: 96:85:da:de:e9:5b:6f:75:b4:af:f2:12:34:b2:0d: 4b:b6:04:87:d9:4d:f5:5b:4d:c5:0e:13:73:e4:7e: 7b:50:4f:01:ef:e4:d8:59:66:68:25:e8:28:e9:90: b6:38:56:d8:3f:05:7f:14:31:78:4b:ff:20:34:8b: c0:a4:ef:02:06:bf:89:ea:9f:2b:2b:57:74:2e:10: a1:8d:4f:71:73:fa:3a:6f:d1:e0:df:dd:47:dd:87: d7:d8:6d:aa:23:33:d4:a4:ff:88:04:30:10:7c:d7: 91:2f:4e:ab:80:66:01:be:33:c9:5e:75:09:08:37: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:08:98:CB:84:36:B0:79:BF:F7:F1:3C:B9:0F:C3:06:59:59:37:CD X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:18:7f:f9:f0:49:81:49:6d:a6:95:05:0b:e2:64:6a:a6:a6: 94:99:d3:60:61:e1:33:9e:e7:52:ac:cd:de:d8:dd:d2:82:2c: 11:bb:68:29:12:49:c5:8e:98:86:5d:d6:88:47:5f:04:dd:d2: a6:be:18:d0:53:a7:11:97:19:3f:9c:fe:13:1a:93:b4:7a:9a: 51:43:4e:e3:05:c7:f5:34:81:20:48:54:1b:5c:03:1d:0b:f3: 8c:ec:79:09:60:cf:0b:30:16:d5:3a:7f:06:81:0e:e1:8a:29: 09:dc:9d:e7:30:79:59:1b:1e:ef:7f:b9:27:8e:d9:3e:5a:60: 52:43:d2:ea:ef:33:87:c3:70:b9:63:0c:be:49:1f:e7:fb:f9: 7f:61:4d:c8:29:24:a3:d3:ca:9f:fc:c9:92:2b:e8:77:df:68: c0:32:43:0b:b7:7f:4a:33:6e:f2:c2:65:e2:82:6f:a2:26:a7: 74:77:6f:d6:e8:56:a6:21:78:e1:8a:e7:d1:cc:5e:73:10:3c: 91:a1:e1:3f:4f:48:3f:5a:9c:76:44:52:92:2d:aa:06:50:7b: 04:44:65:18:ec:66:bb:b0:d5:6e:e2:d4:ee:01:aa:5d:46:99: 40:68:5a:0e:4d:2e:03:be:2f:fa:2a:5c:38:eb:15:ad:66:f9: d1:e8:a0:ca -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHpxUN2TKreNt41CsbKhhLidn0J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNDA1MzExMzA2NDdaFw0yNDA2MDQxNzUyNDdaMDMxMTAvBgNV BAMTKDgzMDg5OENCODQzNkIwNzlCRkY3RjEzQ0I5MEZDMzA2NTk1OTM3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxKWQMTBWxDTLJ6D/tienTcjm EIGatMVqanoz0cgeBYuQfplVzcFwN0WRs8qhPGvGnFa3aJsnTEvV6iWt5tUqYxUa /YnLzba/Y3e/JYFHMM2lHfTT3A3AKthYA6C+S7pyuIq//FEJBdKHTm68YlXPjAEQ 74FnyXfDF/6kEQL4/09yVYddlJaF2t7pW291tK/yEjSyDUu2BIfZTfVbTcUOE3Pk fntQTwHv5NhZZmgl6CjpkLY4Vtg/BX8UMXhL/yA0i8Ck7wIGv4nqnysrV3QuEKGN T3Fz+jpv0eDf3Ufdh9fYbaojM9Sk/4gEMBB815EvTquAZgG+M8ledQkIN+uvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUgwiYy4Q2sHm/9/E8uQ/DBllZN80wHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOGH/58EmBSW2mlQUL4mRqpqaU mdNgYeEznudSrM3e2N3SgiwRu2gpEknFjpiGXdaIR18E3dKmvhjQU6cRlxk/nP4T GpO0eppRQ07jBcf1NIEgSFQbXAMdC/OM7HkJYM8LMBbVOn8GgQ7hiikJ3J3nMHlZ Gx7vf7knjtk+WmBSQ9Lq7zOHw3C5Ywy+SR/n+/l/YU3IKSSj08qf/MmSK+h332jA MkMLt39KM27ywmXigm+iJqd0d2/W6FamIXjhiufRzF5zEDyRoeE/T0g/Wpx2RFKS LaoGUHsERGUY7Ga7sNVu4tTuAapdRplAaFoOTS4Dvi/6Klw46xWtZvnR6KDK -----END CERTIFICATE-----Generated at Fri May 31 16:38:20 2024 by rpki-client on console-ams.rpki-client.org