$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json) Hash identifier: K5dxWyR6Jv5hzM7IqjvMHz7eUUs8qykDw8xSwv8Ru+A= Subject key identifier: B8:77:17:D9:FD:E4:49:69:3E:50:48:A9:75:35:EF:A2:18:44:C7:E7 Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 2DE8833E7822EDA441F3D5BC6C509E7E1319A5A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft Manifest number: 32 Signing time: Sun 02 Jun 2024 06:33:32 +0000 Manifest this update: Sun 02 Jun 2024 06:28:32 +0000 Manifest next update: Fri 07 Jun 2024 20:40:32 +0000 Files and hashes: 1: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: mjrelByTXY65k+8XtzNbOMeTPkoqm96Q5yh1S+YEjo8=) 2: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: zErM+CPflAkITssycVvihV8c6roSkTSOWIofHXnSQRk=) 3: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: A2mR0o7Mi8JNtwQpM3EC7hkwENgFsz8Hc8GEtybN2cQ=) 4: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: xvWmK9K1BpRciO+T+cR82VhgkRzdY0Pcy23PcTLKuXw=) 5: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: l/en10Om4Si29mlufHWLN09ePz3dCvUqT4/P00O/EjI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Jun 2024 10:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e8:83:3e:78:22:ed:a4:41:f3:d5:bc:6c:50:9e:7e:13:19:a5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: Jun 2 06:28:32 2024 GMT Not After : Jun 7 20:40:32 2024 GMT Subject: CN=B87717D9FDE449693E5048A97535EFA21844C7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:24:46:60:4f:3a:01:2b:97:76:83:fd:0f:f5: 36:a8:4c:91:31:16:9a:87:7c:66:38:e8:81:61:e5: c1:22:5c:fd:75:2e:85:c4:31:b6:4e:d1:ec:c4:f5: 16:65:9c:05:51:c5:38:ad:88:8d:21:bc:69:d2:9a: a7:4c:4e:48:f5:99:b2:7c:ee:3f:ed:a5:8d:23:84: da:43:9d:e4:e4:9a:d4:e8:3f:ff:ff:81:ca:be:84: 1c:ab:be:93:b0:6e:c1:22:02:36:fe:10:1b:7a:b5: eb:e1:7d:9d:7c:75:b3:43:91:0e:31:76:d9:69:0b: a2:9d:ac:40:c2:bb:2c:8e:c0:22:db:55:77:22:75: f6:57:f1:b3:55:bd:05:80:a4:06:21:69:f6:34:87: c3:fb:bc:e4:6e:ca:4a:d5:1b:05:f9:2c:b1:9f:25: bd:cb:ac:41:c4:2a:8d:22:ee:da:31:af:d4:c1:fe: 51:f9:b5:b2:f2:93:f5:63:15:a7:1a:5d:30:7c:56: de:3d:48:8e:04:28:4b:81:de:e4:48:e4:59:c5:31: 3e:c7:da:b0:c5:79:10:90:cf:1f:d0:f4:bf:7e:af: 9c:c3:37:c2:ff:f5:ba:7f:5e:f5:c0:72:dc:8e:c1: d8:fb:41:90:09:cb:b7:ff:8e:c9:b2:31:a8:89:86: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:77:17:D9:FD:E4:49:69:3E:50:48:A9:75:35:EF:A2:18:44:C7:E7 X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5c:1a:c5:aa:31:95:2f:1f:cf:ec:09:33:10:a3:3a:7a:66: 33:5f:28:b2:02:89:70:ba:f7:8e:e8:85:f2:37:86:12:6d:87: 79:43:3c:24:4b:3a:37:3c:82:ce:43:bf:e8:6f:3c:89:d0:ce: 41:f4:40:2b:25:71:86:90:b8:e7:0b:dd:95:8f:48:08:91:9c: 66:c2:66:20:71:9f:a1:94:9e:e5:4f:f0:3e:8f:bd:f9:fd:52: 02:3c:54:17:fd:46:9a:6a:a6:fb:47:55:76:c1:7a:f1:9d:8d: 6e:86:b0:d5:c4:73:5d:93:b4:62:8c:a5:07:9b:91:4c:c4:50: 7e:ba:b9:51:4b:b3:f4:ff:25:db:77:dc:6a:22:95:61:cd:fd: 58:65:3a:82:d5:c1:09:28:15:61:9f:32:14:c3:2e:01:f7:e4: 91:e2:d6:c0:11:34:46:89:0e:a1:5b:d0:47:9e:c4:0f:92:aa: 89:76:e2:96:32:22:8f:a3:37:7b:19:35:72:11:e9:88:0c:12: 3c:d0:79:4e:01:71:a5:a2:27:d4:d4:f3:bc:0d:44:28:75:3d: 9f:e6:a7:cc:8e:1e:b3:7d:f0:d4:b8:bf:25:0d:f5:eb:b8:a9: 3c:7b:bb:db:4e:fb:2f:13:8a:4a:70:fa:8d:22:0b:84:0c:81: d4:ba:7b:2c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULeiDPngi7aRB89W8bFCefhMZpaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNDA2MDIwNjI4MzJaFw0yNDA2MDcyMDQwMzJaMDMxMTAvBgNV BAMTKEI4NzcxN0Q5RkRFNDQ5NjkzRTUwNDhBOTc1MzVFRkEyMTg0NEM3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2JEZgTzoBK5d2g/0P9TaoTJEx FpqHfGY46IFh5cEiXP11LoXEMbZO0ezE9RZlnAVRxTitiI0hvGnSmqdMTkj1mbJ8 7j/tpY0jhNpDneTkmtToP///gcq+hByrvpOwbsEiAjb+EBt6tevhfZ18dbNDkQ4x dtlpC6KdrEDCuyyOwCLbVXcidfZX8bNVvQWApAYhafY0h8P7vORuykrVGwX5LLGf Jb3LrEHEKo0i7toxr9TB/lH5tbLyk/VjFacaXTB8Vt49SI4EKEuB3uRI5FnFMT7H 2rDFeRCQzx/Q9L9+r5zDN8L/9bp/XvXActyOwdj7QZAJy7f/jsmyMaiJhktxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuHcX2f3kSWk+UEipdTXvohhEx+cwHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFXBrFqjGVLx/P7AkzEKM6emYz XyiyAolwuveO6IXyN4YSbYd5QzwkSzo3PILOQ7/obzyJ0M5B9EArJXGGkLjnC92V j0gIkZxmwmYgcZ+hlJ7lT/A+j735/VICPFQX/Uaaaqb7R1V2wXrxnY1uhrDVxHNd k7RijKUHm5FMxFB+urlRS7P0/yXbd9xqIpVhzf1YZTqC1cEJKBVhnzIUwy4B9+SR 4tbAETRGiQ6hW9BHnsQPkqqJduKWMiKPozd7GTVyEemIDBI80HlOAXGloifU1PO8 DUQodT2f5qfMjh6zffDUuL8lDfXruKk8e7vbTvsvE4pKcPqNIguEDIHUunss -----END CERTIFICATE-----Generated at Sun Jun 2 07:53:02 2024 by rpki-client on console-fra.rpki-client.org