$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: Y+OqAKRrOhZlsypohQqHFk5V0M1/ncx5tr9W0oHrRWw= Subject key identifier: BF:F1:C5:09:DB:B5:FB:E0:75:AC:FE:CD:18:D5:4D:29:23:99:32:29 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 010D777C20D81F104301455930479620DC0986F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 87 Signing time: Wed 20 Nov 2024 05:24:09 +0000 Manifest this update: Wed 20 Nov 2024 05:19:09 +0000 Manifest next update: Mon 25 Nov 2024 05:44:09 +0000 Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: 2iyjl3KWydu2EVyzYs/WwV2dBw0z51vWKtaRRMogG+s=) 2: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: JweOFM3H78c7YY447dnTzSXp7y30+NNdVar8s6WuYGw=) 3: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: bGvQhhq3zAdxN464HB3VVzSe9rPYzdcGacZSRUnUw4M=) 4: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: GuRrz5JE7Zxoean1/PZlFsibWvsYs6FttgcpXxRURAk=) 5: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: cNZs1lwYGd2Cy5Y8Ki6cpaNItt5cYr35yejlTMpAdmg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 22:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:77:7c:20:d8:1f:10:43:01:45:59:30:47:96:20:dc:09:86:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Nov 20 05:19:09 2024 GMT Not After : Nov 25 05:44:09 2024 GMT Subject: CN=BFF1C509DBB5FBE075ACFECD18D54D2923993229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:3a:1a:d3:be:3f:3c:d3:6b:1a:77:61:ce: e8:2a:b8:08:ae:7f:75:b0:95:b2:56:f7:12:ea:3f: f9:e8:60:25:bf:49:7b:28:b5:0e:95:c4:b5:c6:f6: 7d:1f:ed:ba:b9:f8:60:cb:5d:ca:af:eb:02:4e:f6: 62:91:5d:7f:99:f7:39:39:f4:ac:f9:f5:20:d7:5c: 34:55:f2:a1:21:13:a7:4e:83:bb:90:1a:e2:bf:4f: bb:eb:0f:71:5e:50:84:30:67:ec:68:5c:18:45:53: 27:69:83:2e:76:86:71:3f:bc:a6:a2:56:f4:00:f3: b7:fd:27:b3:c1:1d:bb:c2:61:62:ca:cd:35:e9:08: 66:b0:7a:a9:22:0a:f0:5b:d8:76:79:15:f8:49:15: 59:9a:ef:80:67:da:29:39:db:a4:6c:74:41:b6:86: 9f:f6:61:e2:0c:15:1e:1e:4a:cf:73:be:d0:ed:16: 72:19:99:71:35:b2:85:51:26:73:de:e0:20:0d:0d: 29:34:3c:cd:5e:0b:e9:06:0d:34:34:f6:70:f8:30: b0:e0:38:04:65:97:92:15:58:e8:19:71:06:9f:f0: 42:8a:4c:9f:de:00:85:2a:6b:ab:85:96:e4:d4:a7: cc:e2:69:5f:d8:a4:e8:c0:92:2f:ec:3c:70:28:28: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F1:C5:09:DB:B5:FB:E0:75:AC:FE:CD:18:D5:4D:29:23:99:32:29 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:de:1b:06:dc:7c:a3:88:62:2c:51:f4:b5:50:15:f7:e6:f8: 70:b3:ca:4b:bf:ec:48:19:bb:64:cf:dc:4a:e4:a7:73:7a:44: dd:48:c0:e9:b6:17:00:33:73:13:dc:68:01:c0:ef:8a:f4:01: e1:58:41:d7:1a:32:fc:62:50:57:dc:0f:dd:17:e4:01:b1:ae: 18:b1:23:e2:b5:0e:52:e4:31:4b:da:88:9c:b1:36:1f:e2:8b: fe:fb:5a:4d:5e:dc:b0:56:d5:e1:ec:63:dc:cb:3c:64:ee:d2: 1e:0c:be:5c:3f:55:45:5f:ae:ea:4a:6e:ee:39:29:7d:cc:aa: c9:58:10:a2:2f:4d:b5:31:fe:e6:08:af:b7:7d:9a:32:2d:8a: 02:37:1a:9b:8b:44:36:fc:60:31:29:db:35:64:e2:12:cd:69: e4:0d:e8:01:79:25:ec:a6:ce:74:69:e5:6c:65:da:97:2c:74: 4c:f5:56:d1:6d:86:b3:0f:fe:b8:44:38:ce:28:2a:d7:c3:32: b3:a6:15:57:25:80:7d:0e:55:5f:65:cb:17:7d:24:12:49:74: e1:49:77:68:b3:ab:22:56:e6:9d:87:e8:a1:bd:d3:f5:04:ef: 29:5e:50:3c:94:81:2a:1f:71:f7:1f:34:e9:ad:75:c8:d6:5a: de:a3:7d:4f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAQ13fCDYHxBDAUVZMEeWINwJhvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4 RkJFOERBOTAeFw0yNDExMjAwNTE5MDlaFw0yNDExMjUwNTQ0MDlaMDMxMTAvBgNV BAMTKEJGRjFDNTA5REJCNUZCRTA3NUFDRkVDRDE4RDU0RDI5MjM5OTMyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoDoa074/PNNrGndhzugquAiu f3WwlbJW9xLqP/noYCW/SXsotQ6VxLXG9n0f7bq5+GDLXcqv6wJO9mKRXX+Z9zk5 9Kz59SDXXDRV8qEhE6dOg7uQGuK/T7vrD3FeUIQwZ+xoXBhFUydpgy52hnE/vKai VvQA87f9J7PBHbvCYWLKzTXpCGaweqkiCvBb2HZ5FfhJFVma74Bn2ik526RsdEG2 hp/2YeIMFR4eSs9zvtDtFnIZmXE1soVRJnPe4CANDSk0PM1eC+kGDTQ09nD4MLDg OARll5IVWOgZcQaf8EKKTJ/eAIUqa6uFluTUp8ziaV/YpOjAki/sPHAoKB4XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUv/HFCdu1++B1rP7NGNVNKSOZMikwHwYDVR0j BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4 RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1 QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAU3hsG3HyjiGIsUfS1UBX35vhw s8pLv+xIGbtkz9xK5KdzekTdSMDpthcAM3MT3GgBwO+K9AHhWEHXGjL8YlBX3A/d F+QBsa4YsSPitQ5S5DFL2oicsTYf4ov++1pNXtywVtXh7GPcyzxk7tIeDL5cP1VF X67qSm7uOSl9zKrJWBCiL021Mf7mCK+3fZoyLYoCNxqbi0Q2/GAxKds1ZOISzWnk DegBeSXsps50aeVsZdqXLHRM9VbRbYazD/64RDjOKCrXwzKzphVXJYB9DlVfZcsX fSQSSXThSXdos6siVuadh+ihvdP1BO8pXlA8lIEqH3H3HzTprXXI1lreo31P -----END CERTIFICATE-----Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org