$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft File: 20FD70DC301FF93D288ED851C3A69B22D7B04220.mft (raw, json) Hash identifier: AnU++Rue4Z5KtZQkDjJxFeohUBKwYQdKIHGq227DpvM= Subject key identifier: 1A:12:AE:FD:A4:95:37:37:68:97:E2:D1:E1:BC:5E:A6:D3:7C:B2:E1 Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Certificate serial: 4976B16921708B58CB8CF5DA5E5FC78DF02FF74B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft Manifest number: 85 Signing time: Wed 20 Nov 2024 13:38:51 +0000 Manifest this update: Wed 20 Nov 2024 13:33:51 +0000 Manifest next update: Tue 26 Nov 2024 11:24:51 +0000 Files and hashes: 1: 20FD70DC301FF93D288ED851C3A69B22D7B04220.crl (hash: crLksJBauZWWY1K/Rf0CIT544qwT0fYpHcGDv5ivx4g=) 2: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (hash: WxWq/j10iLL9bK5ylZ01gcmWN6/noKoAliWfDVJLvyc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 22:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:76:b1:69:21:70:8b:58:cb:8c:f5:da:5e:5f:c7:8d:f0:2f:f7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220 Validity Not Before: Nov 20 13:33:51 2024 GMT Not After : Nov 26 11:24:51 2024 GMT Subject: CN=1A12AEFDA49537376897E2D1E1BC5EA6D37CB2E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:47:43:d3:98:cb:c2:df:ed:62:06:0e:f6: ba:c6:df:fc:db:33:75:03:74:5a:0d:c0:fa:35:45: e0:52:a0:8c:28:8f:ec:0c:27:cb:7c:77:c0:2f:ee: 02:04:0f:1d:d9:e2:fe:bc:68:b7:80:72:6a:ac:cb: f3:1a:7b:77:a1:52:10:5c:11:af:f8:09:c1:db:8b: 45:0d:7f:35:91:51:e3:23:e7:84:b5:83:5d:1a:4c: 95:3d:c8:d4:07:ba:43:85:93:90:e6:6c:98:cc:e9: e2:99:df:37:f1:6d:54:0e:4e:c0:64:a0:8c:ee:e0: 17:72:c4:b2:7a:c8:37:dd:8b:56:97:8f:2b:48:d9: 1b:58:5d:ac:0b:15:4f:6e:78:cc:47:eb:4b:1f:6f: 8a:a7:3a:f6:31:d5:72:54:29:1a:c8:a5:99:9c:4d: 1d:b0:44:35:ff:fb:51:79:ce:ae:39:e4:57:85:01: b2:00:fe:ef:91:70:6d:17:70:f4:ae:8a:c6:d8:3b: 46:73:dc:6c:4b:c3:37:4a:c0:d9:e6:22:0f:36:55: 4a:72:60:cf:ae:c7:f6:4f:d9:54:df:db:43:44:a6: d5:f2:7d:bb:a8:40:ea:09:2b:4f:69:f1:e2:b3:a3: 82:a4:b1:c5:ee:bc:1d:c7:a3:11:6e:9f:44:99:17: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:AE:FD:A4:95:37:37:68:97:E2:D1:E1:BC:5E:A6:D3:7C:B2:E1 X509v3 Authority Key Identifier: keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1e:90:db:1a:c9:e0:89:7c:00:de:59:eb:f6:fe:78:79:cb: 26:12:75:79:0c:f9:c4:43:89:ff:81:ee:72:da:f5:30:8a:fe: 26:e6:61:79:7f:b6:1d:9c:5c:ed:e0:79:db:a4:a3:4f:ce:85: f8:2d:34:a2:d8:42:74:82:53:38:a8:78:fe:36:6a:fc:60:1f: fa:7d:c8:06:53:21:d4:8c:11:92:c0:19:9d:98:b2:af:6b:91: 08:9e:85:f2:e3:e0:52:ca:6f:d1:73:c9:9c:30:58:7a:0c:4a: e0:3f:4d:14:98:5c:e4:c7:e6:3d:89:39:37:f0:21:38:74:ac: 74:e1:21:93:e5:fe:51:d6:94:36:96:a6:7d:98:7d:95:eb:98: 62:3f:12:6b:6f:43:55:4d:c0:46:f9:af:ef:1e:39:54:30:a9: b5:89:9b:e8:7d:18:df:ff:16:41:ac:c4:e9:22:3c:bf:25:4e: 84:f7:3a:53:9f:b3:66:39:54:5c:c6:6a:94:ae:c6:80:09:06: b5:46:a9:37:fa:14:67:23:b0:cd:6b:20:a4:ff:24:eb:99:bb: 90:40:ea:5d:96:00:3f:05:87:3a:97:91:2b:5e:f8:45:e0:e8: 52:7a:57:bc:f8:c0:4b:a8:30:42:fc:b2:68:38:91:c7:ed:71: 1b:53:82:4a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSXaxaSFwi1jLjPXaXl/HjfAv90swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE N0IwNDIyMDAeFw0yNDExMjAxMzMzNTFaFw0yNDExMjYxMTI0NTFaMDMxMTAvBgNV BAMTKDFBMTJBRUZEQTQ5NTM3Mzc2ODk3RTJEMUUxQkM1RUE2RDM3Q0IyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3UdD05jLwt/tYgYO9rrG3/zb M3UDdFoNwPo1ReBSoIwoj+wMJ8t8d8Av7gIEDx3Z4v68aLeAcmqsy/Mae3ehUhBc Ea/4CcHbi0UNfzWRUeMj54S1g10aTJU9yNQHukOFk5DmbJjM6eKZ3zfxbVQOTsBk oIzu4BdyxLJ6yDfdi1aXjytI2RtYXawLFU9ueMxH60sfb4qnOvYx1XJUKRrIpZmc TR2wRDX/+1F5zq455FeFAbIA/u+RcG0XcPSuisbYO0Zz3GxLwzdKwNnmIg82VUpy YM+ux/ZP2VTf20NEptXyfbuoQOoJK09p8eKzo4KkscXuvB3HoxFun0SZF0n7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGhKu/aSVNzdol+LR4bxeptN8suEwHwYDVR0j BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4 RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzIwRkQ3MERDMzAxRkY5M0QyODhFRDg1 MUMzQTY5QjIyRDdCMDQyMjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArHpDbGsngiXwA3lnr9v54ecsm EnV5DPnEQ4n/ge5y2vUwiv4m5mF5f7YdnFzt4HnbpKNPzoX4LTSi2EJ0glM4qHj+ Nmr8YB/6fcgGUyHUjBGSwBmdmLKva5EInoXy4+BSym/Rc8mcMFh6DErgP00UmFzk x+Y9iTk38CE4dKx04SGT5f5R1pQ2lqZ9mH2V65hiPxJrb0NVTcBG+a/vHjlUMKm1 iZvofRjf/xZBrMTpIjy/JU6E9zpTn7NmOVRcxmqUrsaACQa1Rqk3+hRnI7DNayCk /yTrmbuQQOpdlgA/BYc6l5ErXvhF4OhSele8+MBLqDBC/LJoOJHH7XEbU4JK -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org