$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft File: 95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft (raw, json) Hash identifier: xAtnp8HPTBHe+XxC3JeOiZZaTmhZV0Jyh7zi8gq2Imk= Subject key identifier: 1B:77:2F:8A:73:AD:A5:8B:B6:DB:79:7C:94:71:1B:74:93:B6:51:E8 Authority key identifier: 95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA Certificate issuer: /CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA Certificate serial: 4248F55B953B979DE4FDA20E56D20E3E238AFB0E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft Manifest number: 25 Signing time: Tue 21 May 2024 13:57:32 +0000 Manifest this update: Tue 21 May 2024 13:52:32 +0000 Manifest next update: Sun 26 May 2024 13:12:32 +0000 Files and hashes: 1: 34352e3137332e3139372e302f32342d3234203d3e20323637383039.roa (hash: 5LUTTBv6SHmoGfSQ6xft+itvpAGszdwPHcvPrFTW4CY=) 2: 34352e3137332e3139392e302f32342d3234203d3e20323637383039.roa (hash: UJZIXnWfXxoLZCby9mC2q6S7dodcqYNnMrikLVVazaA=) 3: 95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl (hash: oQ3GGmI0jCn545sXEn6zpQIMXgcrRU/eFIgY65KkSNM=) 4: 34352e3137332e3139362e302f32342d3234203d3e20323637383039.roa (hash: QbEvn5cYJasWUbFUE0m2QGwlAqCXwIzLljbER+41cRs=) 5: 34352e3137332e3139382e302f32342d3234203d3e20323637383039.roa (hash: KLnxyI8o+Mh2jxd9Sm6wHu4Fy3bfGGW19v6wYPtKlJM=) 6: 323830333a313036303a3a2f33322d3332203d3e20323637383039.roa (hash: EsNZTkN/BwUgdwOODIwvKFNOUZ+VsSYms2INBQZ5cD8=) 7: 34352e3137332e3139362e302f32322d3232203d3e20323637383039.roa (hash: XucC39TnHIIFqpYUlO2r/1pcZzGYt8a8ZRi3ROjNK2s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 May 2024 09:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:48:f5:5b:95:3b:97:9d:e4:fd:a2:0e:56:d2:0e:3e:23:8a:fb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA Validity Not Before: May 21 13:52:32 2024 GMT Not After : May 26 13:12:32 2024 GMT Subject: CN=1B772F8A73ADA58BB6DB797C94711B7493B651E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:e5:cc:a4:56:a3:ab:d7:8d:ac:e6:f3:88: 98:2e:ba:fe:99:e2:f0:f1:ba:c1:c1:db:08:90:ed: 04:9c:98:54:d0:d3:27:e3:db:69:a6:a8:4d:a4:f1: 5e:09:19:71:04:ee:b1:ac:f1:70:f5:76:5f:a7:3a: da:ec:8d:a0:fa:ac:85:54:06:11:3f:38:6a:21:dc: 80:6b:43:5f:98:a2:f0:e0:7c:81:7c:84:90:18:30: 21:30:9d:11:8d:be:f1:fa:da:be:5c:8d:8b:dc:4a: c6:97:f4:70:54:9d:82:d8:c1:da:98:65:bf:e9:ae: a8:55:0d:15:f1:a8:39:da:cb:fb:9f:d9:70:95:c1: 92:af:86:3c:35:57:a2:3e:f9:e7:ba:17:49:52:03: 47:02:95:83:eb:9b:4d:1f:02:d0:10:2f:e6:33:97: f0:92:da:79:10:7c:e5:01:3a:75:99:ff:3e:8f:b5: 21:f9:6a:65:71:e8:16:0c:52:70:32:d9:7d:ba:70: 7c:01:50:53:aa:d3:01:78:5e:aa:e1:03:c7:ac:54: 84:32:4a:6d:e6:70:d8:6d:ed:91:02:b7:e9:0c:89: f4:67:8f:13:7a:c6:ee:bc:38:d2:cf:b4:15:31:3d: 65:22:7f:32:0d:33:55:e7:1c:93:22:08:c7:85:a0: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:77:2F:8A:73:AD:A5:8B:B6:DB:79:7C:94:71:1B:74:93:B6:51:E8 X509v3 Authority Key Identifier: keyid:95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a1:d7:fe:32:44:fb:28:98:f3:f4:07:74:c8:94:27:8e:57: fb:75:78:8b:4a:20:d8:fd:d5:97:8a:f5:88:f3:b1:6f:ce:02: e1:3e:13:60:be:df:d9:49:f0:20:59:42:c0:f1:39:e3:de:b0: 88:7a:a2:7c:d9:fe:84:37:10:6b:72:af:d9:08:9d:8e:0a:ad: d1:8a:cd:a9:17:d3:0f:13:51:f0:7a:3a:97:76:cf:e6:ba:71: f4:d6:5e:e4:36:9d:62:53:ee:6e:a9:75:cb:b1:52:52:16:c4: 68:32:dd:77:a2:21:5b:a3:bb:32:dc:28:57:a2:fd:98:ba:d5: 93:59:b4:5f:3c:6d:25:bf:13:07:e9:db:bc:38:1f:95:98:3c: c2:12:64:1d:50:33:54:fc:7f:e6:33:25:ec:25:5b:d8:9e:30: 34:0d:e8:f8:82:03:ca:48:6d:ab:e5:fe:a8:01:37:7b:a2:8d: 43:38:cf:13:8d:f5:06:bc:1e:5d:0c:b7:ba:ab:a2:fa:45:ba: af:2f:3f:9a:6f:21:b7:2b:b9:f3:62:f0:11:42:25:30:8e:0d: 46:02:0a:f5:22:49:a6:f8:98:7f:a9:53:f5:e8:c6:28:84:39: 21:b2:fd:b4:05:a1:d2:c7:27:d5:7e:95:61:c2:06:cb:68:d7: e3:77:7e:2e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQkj1W5U7l53k/aIOVtIOPiOK+w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBOENFQTFGNzExNUMwRDk5MDgzMjhBMEI5MUJBNENF REQ0QjZEQTAeFw0yNDA1MjExMzUyMzJaFw0yNDA1MjYxMzEyMzJaMDMxMTAvBgNV BAMTKDFCNzcyRjhBNzNBREE1OEJCNkRCNzk3Qzk0NzExQjc0OTNCNjUxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOEOXMpFajq9eNrObziJguuv6Z 4vDxusHB2wiQ7QScmFTQ0yfj22mmqE2k8V4JGXEE7rGs8XD1dl+nOtrsjaD6rIVU BhE/OGoh3IBrQ1+YovDgfIF8hJAYMCEwnRGNvvH62r5cjYvcSsaX9HBUnYLYwdqY Zb/prqhVDRXxqDnay/uf2XCVwZKvhjw1V6I++ee6F0lSA0cClYPrm00fAtAQL+Yz l/CS2nkQfOUBOnWZ/z6PtSH5amVx6BYMUnAy2X26cHwBUFOq0wF4XqrhA8esVIQy Sm3mcNht7ZECt+kMifRnjxN6xu68ONLPtBUxPWUifzINM1XnHJMiCMeFoMq/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUG3cvinOtpYu223l8lHEbdJO2UegwHwYDVR0j BBgwFoAUlajOofcRXA2ZCDKKC5G6TO3UttowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82Q0RDNURFMkQ3Q0Q2QUM5QUYyN0YyQzc0OUJFMkRCODIz QkY0RDUzMUYyM0MwQzM1RTE3NDNCMkQ3RjExQzA5LzAvOTVBOENFQTFGNzExNUMw RDk5MDgzMjhBMEI5MUJBNENFREQ0QjZEQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NUE4Q0VBMUY3MTE1QzBEOTkw ODMyOEEwQjkxQkE0Q0VERDRCNkRBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkNEQzVERTJEN0NENkFDOUFGMjdGMkM3NDlCRTJEQjgyM0JGNEQ1MzFG MjNDMEMzNUUxNzQzQjJEN0YxMUMwOS8wLzk1QThDRUExRjcxMTVDMEQ5OTA4MzI4 QTBCOTFCQTRDRURENEI2REEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxodf+MkT7KJjz9Ad0yJQnjlf7 dXiLSiDY/dWXivWI87FvzgLhPhNgvt/ZSfAgWULA8Tnj3rCIeqJ82f6ENxBrcq/Z CJ2OCq3Ris2pF9MPE1HwejqXds/munH01l7kNp1iU+5uqXXLsVJSFsRoMt13oiFb o7sy3ChXov2YutWTWbRfPG0lvxMH6du8OB+VmDzCEmQdUDNU/H/mMyXsJVvYnjA0 Dej4ggPKSG2r5f6oATd7oo1DOM8TjfUGvB5dDLe6q6L6RbqvLz+abyG3K7nzYvAR QiUwjg1GAgr1Ikmm+Jh/qVP16MYohDkhsv20BaHSxyfVfpVhwgbLaNfjd34u -----END CERTIFICATE-----Generated at Tue May 21 14:38:09 2024 by rpki-client on console-fra.rpki-client.org