$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft File: 1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft (raw, json) Hash identifier: 5HM82AORir3Wd0wGWjIfYA6dzkMAw9ffy/jlXbrA/a8= Subject key identifier: 98:69:E8:DA:B6:D4:91:54:7F:FB:84:07:D8:75:53:8B:09:54:DD:EF Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0 Certificate issuer: /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0 Certificate serial: 599BE20084CBE37721167845DE54F0A8933C00E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft Manifest number: 88 Signing time: Thu 21 Nov 2024 05:07:29 +0000 Manifest this update: Thu 21 Nov 2024 05:02:29 +0000 Manifest next update: Wed 27 Nov 2024 04:31:29 +0000 Files and hashes: 1: 3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa (hash: ypp4nuDlU934tr99oERW+f2Pat9LYyNgBYMNax1oAz8=) 2: 323830333a383239303a666666613a3a2f34382d3536203d3e203136353039.roa (hash: WETiFVh5TgIOWvvl+G0cgPEZF7xijC7Q2Wn+T+znKYs=) 3: 323830333a383239303a3a2f33322d3634203d3e20323732383531.roa (hash: 6fRy+/KdTDyyW1Oue3IRkijFRb2IoCFq5Qf3PjdBb14=) 4: 1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl (hash: keIb24f2eknhTzb63IEFQdlokc++5sjMP4Qr4xVqXvo=) 5: 323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa (hash: 0kzneLCLBpceFzSKdEIWtbMvjR0l6Udd+98OJf8Nmwk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9b:e2:00:84:cb:e3:77:21:16:78:45:de:54:f0:a8:93:3c:00:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0 Validity Not Before: Nov 21 05:02:29 2024 GMT Not After : Nov 27 04:31:29 2024 GMT Subject: CN=9869E8DAB6D491547FFB8407D875538B0954DDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:a8:d4:f6:c9:41:e2:26:d1:1c:48:64:81: 1d:a5:a1:a3:13:0e:33:14:9b:41:23:06:2b:31:b9: 01:53:a7:82:c6:5a:f0:83:68:05:1d:c3:e1:6a:fe: fd:c3:94:13:7f:7a:41:7d:bf:17:77:da:ca:00:48: 30:b7:75:ba:b2:6d:02:4f:85:69:9e:dc:d0:8c:b1: b8:03:38:e4:a7:e8:0e:94:d9:38:6c:ff:82:02:e1: dd:08:d2:28:83:6c:56:f9:86:9d:1a:90:c9:cd:b5: 73:10:9a:6a:50:c2:f8:67:9d:d1:92:1b:0c:43:28: 7f:f5:aa:83:cd:15:3f:de:56:86:39:96:38:90:48: 0f:35:8e:06:1a:1d:18:83:d4:e2:1b:ea:bb:26:72: eb:fe:cf:ce:25:20:0a:c2:45:64:20:bb:e8:41:da: bd:17:6f:74:ed:47:e6:2f:47:be:6f:71:1b:20:31: 30:9e:35:5e:49:2a:36:b6:6a:1c:e0:58:5d:46:21: 25:3e:40:43:b5:aa:dd:54:5e:24:6f:8d:c2:13:c6: e9:1b:2b:cf:5d:93:80:a6:77:c1:a8:03:0d:54:ee: 2f:9b:63:be:e2:ed:36:31:7d:20:7e:1b:90:fc:c7: 9c:3d:35:7a:b0:be:af:66:5f:84:dd:14:cc:3b:cb: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:69:E8:DA:B6:D4:91:54:7F:FB:84:07:D8:75:53:8B:09:54:DD:EF X509v3 Authority Key Identifier: keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ad:72:2f:ee:98:9d:f2:a3:c2:1d:ad:43:82:f4:12:99:86: 2c:77:87:7a:a4:06:ac:1a:bd:4e:f4:aa:d9:6a:61:f4:05:0e: 07:75:83:1e:0f:2f:67:6b:ad:2f:35:b3:e5:1e:c5:66:89:8a: 1f:d1:d5:eb:a1:19:97:37:c5:a9:e9:ce:b0:c5:74:18:b5:01: ca:30:9b:4b:45:a3:cd:2f:0a:ad:f2:dd:c2:c1:5d:9c:cf:1c: ef:a1:89:db:da:49:12:1a:23:69:45:76:7e:38:87:ac:e7:4d: 01:86:ff:db:2a:58:50:99:a0:73:af:57:0e:26:c2:12:57:7d: 4e:70:c9:1e:6a:14:39:71:4c:9a:22:1a:d5:27:5f:8c:16:aa: b2:9e:80:78:80:84:70:0f:19:9b:d1:dd:05:45:6e:a4:af:f8: f2:1c:e5:cb:bf:d1:4a:19:30:0c:14:0b:cc:df:ed:94:6f:26: 60:44:40:b3:b7:bb:10:de:1b:05:22:1a:ef:67:c5:28:bc:73: cf:c7:7a:c0:a4:df:74:b8:c9:19:76:df:77:34:e0:70:e6:c2: 31:df:47:95:a3:f7:3c:e9:81:3c:b1:65:ab:9b:20:da:43:b2: 8d:32:18:3c:ef:12:77:58:93:32:d4:d2:d4:1c:e9:04:d5:46: 6f:bc:40:43 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWZviAITL43chFnhF3lTwqJM8AOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQxQjNFRUFGMDg1NkZDREM2QzEyMDVBQUM3RDJDNkIx N0Y0REFFMDAeFw0yNDExMjEwNTAyMjlaFw0yNDExMjcwNDMxMjlaMDMxMTAvBgNV BAMTKDk4NjlFOERBQjZENDkxNTQ3RkZCODQwN0Q4NzU1MzhCMDk1NERERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVqjU9slB4ibRHEhkgR2loaMT DjMUm0EjBisxuQFTp4LGWvCDaAUdw+Fq/v3DlBN/ekF9vxd32soASDC3dbqybQJP hWme3NCMsbgDOOSn6A6U2Ths/4IC4d0I0iiDbFb5hp0akMnNtXMQmmpQwvhnndGS GwxDKH/1qoPNFT/eVoY5ljiQSA81jgYaHRiD1OIb6rsmcuv+z84lIArCRWQgu+hB 2r0Xb3TtR+YvR75vcRsgMTCeNV5JKja2ahzgWF1GISU+QEO1qt1UXiRvjcITxukb K89dk4Cmd8GoAw1U7i+bY77i7TYxfSB+G5D8x5w9NXqwvq9mX4TdFMw7y/cpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmGno2rbUkVR/+4QH2HVTiwlU3e8wHwYDVR0j BBgwFoAUHRs+6vCFb83GwSBarH0saxf02uAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QzUyQzZDNjMxMENEOTNDMEVCMENGQjBCNzE2NUM4OUMw RjgwMDU2MTNFM0JDQUE3QURENTM0MTg0QUIxOEU1LzAvMUQxQjNFRUFGMDg1NkZD REM2QzEyMDVBQUM3RDJDNkIxN0Y0REFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDFCM0VFQUYwODU2RkNEQzZD MTIwNUFBQzdEMkM2QjE3RjREQUUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkM1MkM2QzYzMTBDRDkzQzBFQjBDRkIwQjcxNjVDODlDMEY4MDA1NjEz RTNCQ0FBN0FERDUzNDE4NEFCMThFNS8wLzFEMUIzRUVBRjA4NTZGQ0RDNkMxMjA1 QUFDN0QyQzZCMTdGNERBRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAErXIv7pid8qPCHa1DgvQSmYYs d4d6pAasGr1O9KrZamH0BQ4HdYMeDy9na60vNbPlHsVmiYof0dXroRmXN8Wp6c6w xXQYtQHKMJtLRaPNLwqt8t3CwV2czxzvoYnb2kkSGiNpRXZ+OIes500Bhv/bKlhQ maBzr1cOJsISV31OcMkeahQ5cUyaIhrVJ1+MFqqynoB4gIRwDxmb0d0FRW6kr/jy HOXLv9FKGTAMFAvM3+2UbyZgRECzt7sQ3hsFIhrvZ8UovHPPx3rApN90uMkZdt93 NOBw5sIx30eVo/c86YE8sWWrmyDaQ7KNMhg87xJ3WJMy1NLUHOkE1UZvvEBD -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org