$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: 3mYk+4Af561IvKJ6dOhjbVOTdGYuik4N/mIxtqP9lE8= Subject key identifier: 58:12:7A:04:F7:FD:22:E6:85:45:52:D7:D3:3A:BF:38:B6:98:7B:21 Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 2C8E4F10EB533616E7681AC9F29D86D7E87BEC98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: 7F Signing time: Tue 19 Nov 2024 13:40:21 +0000 Manifest this update: Tue 19 Nov 2024 13:35:21 +0000 Manifest next update: Mon 25 Nov 2024 08:48:21 +0000 Files and hashes: 1: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: 5dUcg5GiAGma/5xBuenEGKBbu2ZaPlnqD5tuoX1DZCU=) 2: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: ibT1Kdf2bdPXQqR2GSt5ssofhZPtTYo/Osupgt2hG9o=) 3: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: FJna7bq753+TeQUluLucO2jmxtFR3EK2cTajbdzHFkA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 22 Nov 2024 14:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8e:4f:10:eb:53:36:16:e7:68:1a:c9:f2:9d:86:d7:e8:7b:ec:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: Nov 19 13:35:21 2024 GMT Not After : Nov 25 08:48:21 2024 GMT Subject: CN=58127A04F7FD22E6854552D7D33ABF38B6987B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c5:81:72:55:a0:f4:ec:6e:15:b4:63:23:20: b5:0a:22:2d:ea:01:2a:48:66:85:58:72:8c:a4:5f: 5e:0e:4d:2d:fc:70:25:9d:55:79:ae:1f:cf:a2:2b: b7:41:fb:7d:cf:75:67:df:02:bb:b2:23:63:f9:10: 69:57:41:fb:19:17:25:65:f5:11:ff:e8:df:25:47: 1f:85:46:56:5a:c4:d5:8f:af:2c:8e:09:35:6d:12: a2:d0:ee:57:6a:50:21:c7:eb:99:f3:d7:66:ee:df: f7:3a:0d:eb:40:e9:d4:46:52:fb:a5:0f:3b:59:9a: 5c:49:17:ee:c0:f5:9f:65:94:38:af:5c:50:ca:ba: 91:6e:7b:b7:3c:04:c8:96:90:db:85:9d:ce:bd:37: 09:9e:47:e7:b8:3b:f1:88:7d:ff:11:6d:f1:e6:83: be:fb:30:ea:68:ab:64:aa:a4:8a:d5:53:39:33:cd: c0:39:d5:96:db:16:c3:b8:84:f3:35:0e:ee:9a:48: cc:b4:31:b4:c4:35:e7:7b:b5:1e:e0:f2:5a:c9:38: bc:70:20:7b:0e:cb:de:f1:f8:95:aa:bf:41:7a:60: 63:70:05:79:ad:d4:a2:3d:a3:3f:0f:eb:9c:47:0a: 43:f1:47:69:a7:87:c3:34:9f:81:66:53:56:14:35: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:7A:04:F7:FD:22:E6:85:45:52:D7:D3:3A:BF:38:B6:98:7B:21 X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c4:80:1c:4d:c4:54:e7:f9:8f:3e:32:3e:bd:38:44:40:85: 99:dc:1f:06:88:55:f9:b3:0b:d6:5a:0c:fc:15:80:44:cd:5b: ac:71:70:6d:58:2f:10:6b:b5:9b:87:4d:aa:3d:9f:11:27:ce: fc:10:eb:64:ab:39:78:9a:ad:f4:ea:83:d1:e1:48:b8:78:02: 18:7f:37:a7:44:f3:fa:7e:ea:11:48:da:cd:c3:19:2f:69:e9: 01:70:7e:15:15:89:5e:a3:af:7c:37:a4:8a:74:22:e6:59:61: fc:95:d6:5f:04:78:21:e8:6d:7c:d3:2a:19:a8:d9:36:a4:9f: c2:85:3f:0a:70:3e:53:c4:00:23:b9:46:cd:72:e7:06:ad:eb: 21:b8:e0:72:a7:3a:8d:b0:bd:ef:8b:ab:31:25:52:dc:00:d0: 33:98:a5:20:e4:1c:c1:60:96:e5:4b:a9:55:56:ed:e3:06:33: ab:6b:f3:74:c1:e9:88:85:9d:c3:bd:ba:8d:52:84:b8:a6:cd: 3c:8d:59:f1:23:23:34:3d:b4:3b:9d:2e:d6:6c:eb:92:9d:73: 33:87:3b:b6:53:a5:d3:c2:17:41:6e:74:de:0f:db:15:4e:b7: f8:97:a4:03:86:ab:3c:bc:8a:7b:1b:78:10:dd:e3:72:39:20: 6f:0b:d0:c0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULI5PEOtTNhbnaBrJ8p2G1+h77JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNDExMTkxMzM1MjFaFw0yNDExMjUwODQ4MjFaMDMxMTAvBgNV BAMTKDU4MTI3QTA0RjdGRDIyRTY4NTQ1NTJEN0QzM0FCRjM4QjY5ODdCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMxYFyVaD07G4VtGMjILUKIi3q ASpIZoVYcoykX14OTS38cCWdVXmuH8+iK7dB+33PdWffAruyI2P5EGlXQfsZFyVl 9RH/6N8lRx+FRlZaxNWPryyOCTVtEqLQ7ldqUCHH65nz12bu3/c6DetA6dRGUvul DztZmlxJF+7A9Z9llDivXFDKupFue7c8BMiWkNuFnc69NwmeR+e4O/GIff8RbfHm g777MOpoq2SqpIrVUzkzzcA51ZbbFsO4hPM1Du6aSMy0MbTENed7tR7g8lrJOLxw IHsOy97x+JWqv0F6YGNwBXmt1KI9oz8P65xHCkPxR2mnh8M0n4FmU1YUNeyNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWBJ6BPf9IuaFRVLX0zq/OLaYeyEwHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSxIAcTcRU5/mPPjI+vThEQIWZ 3B8GiFX5swvWWgz8FYBEzVuscXBtWC8Qa7Wbh02qPZ8RJ878EOtkqzl4mq306oPR 4Ui4eAIYfzenRPP6fuoRSNrNwxkvaekBcH4VFYleo698N6SKdCLmWWH8ldZfBHgh 6G180yoZqNk2pJ/ChT8KcD5TxAAjuUbNcucGreshuOBypzqNsL3vi6sxJVLcANAz mKUg5BzBYJblS6lVVu3jBjOra/N0wemIhZ3DvbqNUoS4ps08jVnxIyM0PbQ7nS7W bOuSnXMzhzu2U6XTwhdBbnTeD9sVTrf4l6QDhqs8vIp7G3gQ3eNyOSBvC9DA -----END CERTIFICATE-----Generated at Tue Nov 19 15:06:57 2024 by rpki-client on console-ams.rpki-client.org