$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft File: 1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft (raw, json) Hash identifier: PDXL3VymjYZi9C13rDAihEx8RFsF6pRZS/2dKVxf3Cc= Subject key identifier: 8D:73:C3:29:10:03:2D:FD:FD:BD:0D:2A:56:99:49:93:F2:9B:83:B8 Authority key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF Certificate issuer: /CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Certificate serial: 39C25C6B4FBB0E6605FEE76A1F1E0F223A4C9F0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft Manifest number: A0 Signing time: Wed 22 Jan 2025 16:17:22 +0000 Manifest this update: Wed 22 Jan 2025 16:12:22 +0000 Manifest next update: Mon 27 Jan 2025 09:27:22 +0000 Files and hashes: 1: 323830313a3163323a3a2f34342d3434203d3e203138373437.roa (hash: 2g+0Go+xUbS+UQSDn8okLF1HLE2UVOesbbroG7Pfzqs=) 2: 323830313a3163323a3a2f34342d3434203d3e203133343839.roa (hash: Q2jAuAG4bxLtYtc86QBUVn0dvGHUCA1X3eT35wg5RBw=) 3: 1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl (hash: gT0d5VnTwcGJwP4z8ySIypBYJ62L0WxvmNW+wG9hRJ8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jan 2025 17:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c2:5c:6b:4f:bb:0e:66:05:fe:e7:6a:1f:1e:0f:22:3a:4c:9f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Validity Not Before: Jan 22 16:12:22 2025 GMT Not After : Jan 27 09:27:22 2025 GMT Subject: CN=8D73C32910032DFDFDBD0D2A56994993F29B83B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:94:f5:82:00:bf:84:b0:66:b7:46:41:a5: 33:a7:1d:de:a6:a0:c4:04:3c:ce:47:aa:60:60:04: 3e:bb:2e:1a:78:6d:e2:50:77:69:82:ed:f4:83:1c: 34:54:e6:2f:8c:29:a1:33:f3:8b:53:a9:ce:6f:4b: 4a:1b:c1:d4:b9:a1:6d:3c:ba:cf:9f:79:00:09:84: fa:6c:15:15:da:28:c9:37:ab:31:dd:cf:89:bc:18: fd:4a:d4:d4:ff:c9:37:ba:ff:32:04:09:31:94:d1: 20:1b:cf:a3:b8:ce:3f:73:1a:b5:aa:f7:13:c4:c1: 08:8a:a6:d8:85:56:f8:af:7a:a3:56:9d:03:e2:9f: 27:e5:d9:b6:e4:d5:c8:df:ee:aa:c0:7d:68:7a:ef: 96:d6:da:36:a3:86:81:55:29:e5:50:a3:60:36:5d: d9:c5:d0:52:16:fb:3b:9f:14:e8:3e:5c:9d:f3:83: ec:f3:dd:66:e7:dc:e6:3a:85:3e:12:43:6f:37:b0: d2:66:19:e6:55:f6:fb:f8:30:ab:d4:2a:1b:19:56: 41:b6:aa:31:b0:b6:74:54:67:b3:0a:3d:f5:9c:ab: 25:4b:55:7f:65:ed:e1:24:40:aa:86:03:f2:d1:d7: d4:2a:91:90:eb:69:a8:d0:36:c2:9e:0e:27:68:e4: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:73:C3:29:10:03:2D:FD:FD:BD:0D:2A:56:99:49:93:F2:9B:83:B8 X509v3 Authority Key Identifier: keyid:1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ab:b6:77:50:45:40:eb:1c:c2:ce:a3:63:cf:91:3b:d5:5f: 1f:f7:57:b8:d6:b0:54:dc:98:10:97:1a:ab:96:a7:17:e3:61: 33:df:94:73:2b:f8:b4:15:83:f8:ba:06:16:58:b3:ab:9a:57: e0:ec:52:81:13:bf:a7:e2:3f:67:f3:86:27:07:51:60:ac:bb: 4e:fe:db:9c:47:81:c7:fa:c3:01:1b:47:3f:2f:d6:bc:7a:04: 97:e5:f9:81:f2:e9:a7:e7:58:8e:13:1e:db:01:1e:6d:fb:03: 20:fa:d5:fa:f8:ec:e0:77:52:f5:20:1d:53:90:ed:0f:f2:41: dd:fd:8f:de:72:86:3e:57:dd:6c:8f:03:90:93:88:b3:df:39: 2e:83:4e:97:b6:dc:ac:3c:9c:15:5e:f5:19:b9:a6:fe:a6:35: 3c:a9:0e:49:85:38:8b:95:db:61:35:ce:e4:5c:f7:49:97:70: b5:8a:ab:31:6a:36:e1:f5:8e:83:e9:9c:24:f5:26:16:56:5e: e0:74:38:3b:54:ea:95:84:d7:21:82:49:6c:7e:aa:45:e9:7d: 9e:29:ba:b5:44:4e:0f:a1:63:92:af:91:36:1f:bd:ec:9d:ec: 11:d0:be:c6:f0:3a:4f:b7:c2:6f:36:1f:70:df:54:1a:a9:ec: 3b:0d:31:19 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOcJca0+7DmYF/udqHx4PIjpMnw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCNkVGM0NDNTQyMUFDM0FGNzFDQ0RDREY0M0JCMDU1 NkU2QkVGRjAeFw0yNTAxMjIxNjEyMjJaFw0yNTAxMjcwOTI3MjJaMDMxMTAvBgNV BAMTKDhENzNDMzI5MTAwMzJERkRGREJEMEQyQTU2OTk0OTkzRjI5QjgzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2G5T1ggC/hLBmt0ZBpTOnHd6m oMQEPM5HqmBgBD67Lhp4beJQd2mC7fSDHDRU5i+MKaEz84tTqc5vS0obwdS5oW08 us+feQAJhPpsFRXaKMk3qzHdz4m8GP1K1NT/yTe6/zIECTGU0SAbz6O4zj9zGrWq 9xPEwQiKptiFVviveqNWnQPinyfl2bbk1cjf7qrAfWh675bW2jajhoFVKeVQo2A2 XdnF0FIW+zufFOg+XJ3zg+zz3Wbn3OY6hT4SQ283sNJmGeZV9vv4MKvUKhsZVkG2 qjGwtnRUZ7MKPfWcqyVLVX9l7eEkQKqGA/LR19QqkZDraajQNsKeDido5GqhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjXPDKRADLf39vQ0qVplJk/Kbg7gwHwYDVR0j BBgwFoAUHrbvPMVCGsOvcczc30O7BVbmvv8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DREMxMEZGRTI5MEMyNjcwRkIzM0Y4MTI3N0Y3NUEzRTg1 NkM5RTJBNTA0MjFCNEExQjZGQ0RFQjNEM0IwMTQyLzAvMUVCNkVGM0NDNTQyMUFD M0FGNzFDQ0RDREY0M0JCMDU1NkU2QkVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRUI2RUYzQ0M1NDIxQUMzQUY3 MUNDRENERjQzQkIwNTU2RTZCRUZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0RDMTBGRkUyOTBDMjY3MEZCMzNGODEyNzdGNzVBM0U4NTZDOUUyQTUw NDIxQjRBMUI2RkNERUIzRDNCMDE0Mi8wLzFFQjZFRjNDQzU0MjFBQzNBRjcxQ0NE Q0RGNDNCQjA1NTZFNkJFRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQq7Z3UEVA6xzCzqNjz5E71V8f 91e41rBU3JgQlxqrlqcX42Ez35RzK/i0FYP4ugYWWLOrmlfg7FKBE7+n4j9n84Yn B1FgrLtO/tucR4HH+sMBG0c/L9a8egSX5fmB8umn51iOEx7bAR5t+wMg+tX6+Ozg d1L1IB1TkO0P8kHd/Y/ecoY+V91sjwOQk4iz3zkug06XttysPJwVXvUZuab+pjU8 qQ5JhTiLldthNc7kXPdJl3C1iqsxajbh9Y6D6Zwk9SYWVl7gdDg7VOqVhNchgkls fqpF6X2eKbq1RE4PoWOSr5E2H73snewR0L7G8DpPt8JvNh9w31Qaqew7DTEZ -----END CERTIFICATE-----Generated at Wed Jan 22 18:09:30 2025 by rpki-client on console-fra.rpki-client.org