$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: Z1li5SmmFfF/jPWK+tHL3d9vzxRrjhtW0Hu6RkbpcLY= Subject key identifier: B8:36:07:0C:5D:FE:A3:60:78:23:A1:9D:DB:2A:17:B0:5D:EC:31:EC Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 10D17A7185294D53069CE7AACD2F07D28E1AF5DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: 38 Signing time: Tue 25 Jun 2024 18:55:01 +0000 Manifest this update: Tue 25 Jun 2024 18:50:01 +0000 Manifest next update: Mon 01 Jul 2024 16:18:01 +0000 Files and hashes: 1: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: VYIJJm3ORDtcUXwqviIl7MfgOc09bnnsTX2gekyu/PY=) 2: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: fbH69bt0mqXqj+XnwOM7XNxpewoPvUyZ3UpCVGvxI9E=) 3: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: jImgcMRvIddSSfJxSrha3pwe8dGeAD+6Ga1XnRTDQEw=) 4: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: sNRwPOCf9SVNODGyCVP7TlX1ucvAnMtvFFE3nMKbdo8=) 5: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: NeBRBkPnb98ripgOstuGo04XbRbGNrvotDx5Q8R3kTE=) 6: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: D2ZXr4yxv5AbAmIOMY713/KFlJEeCm80eeEE0v8/tQg=) 7: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: dVfYnoXxQdspCgKl8gV+0Kns9OxgDcI8i+0livr3ckE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d1:7a:71:85:29:4d:53:06:9c:e7:aa:cd:2f:07:d2:8e:1a:f5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Jun 25 18:50:01 2024 GMT Not After : Jul 1 16:18:01 2024 GMT Subject: CN=B836070C5DFEA3607823A19DDB2A17B05DEC31EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:0f:84:d9:89:13:ee:ff:62:96:7f:11:6f: b6:5f:30:bd:95:a4:3e:51:92:64:6b:3a:ed:b1:b4: 9a:0a:72:b9:0b:a8:38:80:95:b5:67:07:a6:60:18: 1d:7b:86:44:6c:da:db:d0:34:39:70:a2:aa:e9:2b: 2c:0a:56:cd:61:c0:59:de:ca:61:90:b2:35:08:50: c8:94:79:74:7e:88:5a:a3:28:d8:05:32:66:c8:e1: 13:86:03:55:7d:3c:4b:eb:0a:bb:35:fb:bb:5e:7b: cf:51:99:fd:25:6a:b4:81:bc:74:9b:a0:51:41:3d: b1:13:51:de:2d:72:6b:58:fb:b3:e4:11:67:e8:fd: 0b:02:ff:a4:94:15:9c:9f:0e:4e:63:74:e0:b8:be: e6:b5:9f:0e:52:75:f7:0a:34:d3:22:42:64:ee:0c: 18:93:4f:fc:03:9e:fe:35:27:ea:44:90:d8:02:81: 20:f3:ea:24:e1:88:e5:ed:ad:70:d6:c2:13:ff:bd: 12:af:1b:95:4c:6f:4e:53:f0:34:69:63:9e:57:c5: 05:d9:9d:dc:48:94:af:06:f1:39:d5:6d:7e:bb:21: ca:4f:61:99:d1:e4:62:65:04:97:66:71:23:ea:b2: 0d:53:a4:2a:53:1e:b7:1e:62:67:cd:bf:cb:b5:f7: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:36:07:0C:5D:FE:A3:60:78:23:A1:9D:DB:2A:17:B0:5D:EC:31:EC X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:60:27:15:e3:5b:06:a6:48:fd:b6:d9:0e:16:b8:df:b0:40: ea:ef:b1:09:41:69:bc:fe:e6:2b:c3:05:b3:34:77:30:36:e5: 23:bb:1d:b6:d9:d4:66:70:d8:cf:62:43:08:8c:55:8d:1e:30: c2:b6:f1:a5:7e:d9:a8:82:17:a3:5c:f8:c9:71:ea:8f:00:1d: 5e:cf:ab:52:34:c4:07:c2:a8:95:be:8a:81:08:88:79:7b:d7: a7:3e:90:6b:9d:18:74:ef:0a:bb:ac:c8:3c:f4:cd:53:b9:3f: d5:1f:23:ca:e1:58:ec:6c:d9:a0:32:5b:e3:df:52:87:0e:2f: 73:bf:31:3e:21:f5:3e:e0:78:24:32:51:18:17:2a:0d:c1:ef: 05:7b:e4:65:4a:cd:de:5c:cd:f8:e2:0b:f2:9d:ab:ba:b3:51: c9:94:27:23:66:1c:8b:b6:df:43:b5:1c:cb:37:9e:f7:5b:5d: 8b:15:ee:67:69:60:3e:d1:ad:aa:5f:f4:8e:cc:96:3b:f5:a5: 3a:e1:1f:ea:66:7f:a6:f4:26:32:75:48:c5:2c:68:da:f0:eb: 5d:aa:e5:47:c5:53:5d:29:87:4f:c1:08:1b:ea:c9:d7:a9:44: 0b:9c:c2:b9:6e:75:75:2a:0c:ef:c9:ce:a9:a5:6b:8d:ce:dd: 7a:97:6a:21 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUENF6cYUpTVMGnOeqzS8H0o4a9dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNDA2MjUxODUwMDFaFw0yNDA3MDExNjE4MDFaMDMxMTAvBgNV BAMTKEI4MzYwNzBDNURGRUEzNjA3ODIzQTE5RERCMkExN0IwNURFQzMxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTw+E2YkT7v9iln8Rb7ZfML2V pD5RkmRrOu2xtJoKcrkLqDiAlbVnB6ZgGB17hkRs2tvQNDlwoqrpKywKVs1hwFne ymGQsjUIUMiUeXR+iFqjKNgFMmbI4ROGA1V9PEvrCrs1+7tee89Rmf0larSBvHSb oFFBPbETUd4tcmtY+7PkEWfo/QsC/6SUFZyfDk5jdOC4vua1nw5SdfcKNNMiQmTu DBiTT/wDnv41J+pEkNgCgSDz6iThiOXtrXDWwhP/vRKvG5VMb05T8DRpY55XxQXZ ndxIlK8G8TnVbX67IcpPYZnR5GJlBJdmcSPqsg1TpCpTHrceYmfNv8u197sPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuDYHDF3+o2B4I6Gd2yoXsF3sMewwHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuYCcV41sGpkj9ttkOFrjfsEDq 77EJQWm8/uYrwwWzNHcwNuUjux222dRmcNjPYkMIjFWNHjDCtvGlftmoghejXPjJ ceqPAB1ez6tSNMQHwqiVvoqBCIh5e9enPpBrnRh07wq7rMg89M1TuT/VHyPK4Vjs bNmgMlvj31KHDi9zvzE+IfU+4HgkMlEYFyoNwe8Fe+RlSs3eXM344gvynau6s1HJ lCcjZhyLtt9DtRzLN573W12LFe5naWA+0a2qX/SOzJY79aU64R/qZn+m9CYydUjF LGja8OtdquVHxVNdKYdPwQgb6snXqUQLnMK5bnV1Kgzvyc6ppWuNzt16l2oh -----END CERTIFICATE-----Generated at Tue Jun 25 22:05:54 2024 by rpki-client on console-ams.rpki-client.org