$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft File: AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft (raw, json) Hash identifier: ojF2d6wmMDrdkB+kyi+wrczv2DBdAniP9VUVK4gX2Zg= Subject key identifier: 0A:1A:F3:A8:87:C0:DE:CD:7D:B4:67:35:A2:77:9C:5D:D8:35:86:FA Authority key identifier: AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6 Certificate issuer: /CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6 Certificate serial: 186212661F2FD4529DDBDFAF0F5495F4B3743BCC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft Manifest number: 29 Signing time: Wed 23 Oct 2024 07:07:16 +0000 Manifest this update: Wed 23 Oct 2024 07:02:16 +0000 Manifest next update: Mon 28 Oct 2024 10:17:16 +0000 Files and hashes: 1: 323830333a336435303a3a2f33322d3438203d3e20323733383736.roa (hash: r+3i2ifjM2LHnmOCQJikeXJggnYzD2lY2kvJsKPH5xc=) 2: AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl (hash: uMpFBYXRijM2XbAKwXanFtajdg4M51Zz4HMKRW6C6lo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Oct 2024 02:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:62:12:66:1f:2f:d4:52:9d:db:df:af:0f:54:95:f4:b3:74:3b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6 Validity Not Before: Oct 23 07:02:16 2024 GMT Not After : Oct 28 10:17:16 2024 GMT Subject: CN=0A1AF3A887C0DECD7DB46735A2779C5DD83586FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:3a:b4:16:0e:41:ec:5e:2c:4d:7c:d7:c3: de:f7:d0:6e:53:8e:3e:6e:2e:d2:1d:b1:20:60:47: 89:6e:42:44:bd:6a:14:a4:4e:68:9b:16:b1:15:e7: 8b:2e:a9:90:90:8b:83:8a:37:79:1e:18:0c:d5:24: b5:67:06:fc:d6:63:68:bb:35:62:95:5f:ea:d2:b5: 6b:25:a6:74:23:a5:a1:0a:22:e8:d7:1b:53:70:f9: 99:09:bf:cf:88:d8:62:3a:15:72:90:df:df:11:fa: 80:7d:58:40:16:20:99:a0:a5:8f:4d:f9:c1:ab:92: 24:7c:38:72:ab:c4:84:76:23:c9:0b:e0:a3:82:eb: a4:3b:10:f5:3f:34:a0:d8:5b:31:f7:0d:67:23:55: 2f:1a:05:62:71:a2:9f:ae:f7:93:86:a0:d6:69:9a: 96:09:f2:f4:a8:55:d2:81:ff:4a:22:65:c6:0a:bb: 84:4b:4d:0c:38:c0:65:75:2d:a7:b4:88:27:51:4f: e6:67:78:53:f6:cd:84:8f:be:1c:45:70:ae:8d:81: dc:a9:7f:47:6f:29:fa:51:00:47:e7:3f:72:f9:5c: 2b:ea:13:56:a5:a9:00:32:84:ec:11:17:7c:0c:7f: c8:69:54:34:6a:44:c2:8b:a0:e5:17:89:0f:eb:10: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1A:F3:A8:87:C0:DE:CD:7D:B4:67:35:A2:77:9C:5D:D8:35:86:FA X509v3 Authority Key Identifier: keyid:AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c0:aa:3e:25:2a:da:20:4e:8c:b9:7b:26:b1:06:d3:5d:f8: 98:66:13:5d:66:d7:aa:fe:f1:9d:5b:7e:e3:ff:0d:2b:4a:77: 54:29:31:0b:49:5e:88:50:86:c3:6d:14:d3:ba:8a:22:76:91: 70:79:d6:a3:d6:3b:e4:1f:a6:a1:91:69:7b:dc:1b:64:d0:b9: 8a:79:40:33:73:e4:32:21:01:d5:fc:aa:eb:ca:2b:fd:31:20: 96:73:99:91:ed:c4:cc:b4:81:f0:dc:92:0a:74:83:82:0d:fd: 8f:9f:0b:73:51:ed:c7:46:9f:eb:f4:ff:12:98:bf:41:ec:c4: 52:d9:5c:ee:a2:c9:2c:ff:da:5f:ca:6c:93:aa:d2:6f:cb:12: 4b:e5:d5:59:76:12:1a:4b:35:45:42:6a:fe:71:fb:56:21:12: cf:31:06:1d:91:79:07:56:80:86:77:9c:c5:7e:ba:89:fc:a1: 58:fb:7a:c7:a5:a2:bd:61:86:5c:36:b8:45:cc:3b:b1:6f:81: 21:01:47:c2:35:ca:11:0d:2b:67:e5:e0:87:73:51:b4:00:03: 39:da:f1:2c:d6:82:b9:18:84:5e:20:4d:a0:41:2b:b1:b5:72: 5c:04:07:2e:56:62:8c:bf:9c:e4:06:4f:f1:43:0c:94:2b:ce: bf:f0:dc:96 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGGISZh8v1FKd29+vD1SV9LN0O8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwRjVEOUMwOEYzMTJEMzRGNEM0NUZCNzY0QjI0MUIz QzZDNjJBNjAeFw0yNDEwMjMwNzAyMTZaFw0yNDEwMjgxMDE3MTZaMDMxMTAvBgNV BAMTKDBBMUFGM0E4ODdDMERFQ0Q3REI0NjczNUEyNzc5QzVERDgzNTg2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgoTq0Fg5B7F4sTXzXw9730G5T jj5uLtIdsSBgR4luQkS9ahSkTmibFrEV54suqZCQi4OKN3keGAzVJLVnBvzWY2i7 NWKVX+rStWslpnQjpaEKIujXG1Nw+ZkJv8+I2GI6FXKQ398R+oB9WEAWIJmgpY9N +cGrkiR8OHKrxIR2I8kL4KOC66Q7EPU/NKDYWzH3DWcjVS8aBWJxop+u95OGoNZp mpYJ8vSoVdKB/0oiZcYKu4RLTQw4wGV1Lae0iCdRT+ZneFP2zYSPvhxFcK6Ngdyp f0dvKfpRAEfnP3L5XCvqE1alqQAyhOwRF3wMf8hpVDRqRMKLoOUXiQ/rEG09AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUChrzqIfA3s19tGc1onecXdg1hvowHwYDVR0j BBgwFoAUqg9dnAjzEtNPTEX7dkskGzxsYqYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRjIxRkIxQ0E3OTU1MUQ0Q0Q3NjIxQTU3MkIwNzM4M0Uz NDlEOTIzNTQzMzk4QzIxRjE2MUZGODExN0YzQThBLzAvQUEwRjVEOUMwOEYzMTJE MzRGNEM0NUZCNzY0QjI0MUIzQzZDNjJBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTBGNUQ5QzA4RjMxMkQzNEY0 QzQ1RkI3NjRCMjQxQjNDNkM2MkE2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0YyMUZCMUNBNzk1NTFENENENzYyMUE1NzJCMDczODNFMzQ5RDkyMzU0 MzM5OEMyMUYxNjFGRjgxMTdGM0E4QS8wL0FBMEY1RDlDMDhGMzEyRDM0RjRDNDVG Qjc2NEIyNDFCM0M2QzYyQTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrwKo+JSraIE6MuXsmsQbTXfiY ZhNdZteq/vGdW37j/w0rSndUKTELSV6IUIbDbRTTuooidpFwedaj1jvkH6ahkWl7 3Btk0LmKeUAzc+QyIQHV/Krryiv9MSCWc5mR7cTMtIHw3JIKdIOCDf2PnwtzUe3H Rp/r9P8SmL9B7MRS2Vzuosks/9pfymyTqtJvyxJL5dVZdhIaSzVFQmr+cftWIRLP MQYdkXkHVoCGd5zFfrqJ/KFY+3rHpaK9YYZcNrhFzDuxb4EhAUfCNcoRDStn5eCH c1G0AAM52vEs1oK5GIReIE2gQSuxtXJcBAcuVmKMv5zkBk/xQwyUK86/8NyW -----END CERTIFICATE-----Generated at Wed Oct 23 09:56:03 2024 by rpki-client on console-ams.rpki-client.org