$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: 1diAr5o0rAtRi7ak2IOsNwqb136/xhGVNrF4yDIt/ew= Subject key identifier: 59:E3:15:D1:6E:F4:77:29:62:61:C4:59:12:55:E5:01:78:D5:63:A5 Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 3573932C7F256FC83E289420DF46E44A6F018053 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 85 Signing time: Wed 20 Nov 2024 15:04:36 +0000 Manifest this update: Wed 20 Nov 2024 14:59:36 +0000 Manifest next update: Mon 25 Nov 2024 01:41:36 +0000 Files and hashes: 1: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: RbRIu/UhQ+jeygBhK40SBa9bhJn/hkzqAWP1uR9i2NU=) 2: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: KzguzYdOgwLEIskE0OcUC9RqA4A82jzJMp7WOFHPUV0=) 3: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: uSUOTl1MHIG7vtPl2D/GcRK9G40CQaovbtKKpvOBwQ4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 22:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:73:93:2c:7f:25:6f:c8:3e:28:94:20:df:46:e4:4a:6f:01:80:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Nov 20 14:59:36 2024 GMT Not After : Nov 25 01:41:36 2024 GMT Subject: CN=59E315D16EF477296261C4591255E50178D563A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:b7:52:be:aa:88:df:7d:54:34:ac:c1:c0: 03:fc:61:d6:aa:59:66:44:25:82:c6:63:d2:a1:2d: c7:81:42:b9:5b:e6:69:2f:89:00:42:8b:cf:ce:57: d2:42:30:93:97:f3:b6:d4:7f:51:98:41:b3:df:70: 4d:42:d5:84:b4:60:57:38:7f:a3:a9:d9:51:2b:1c: c6:b1:49:79:fc:f4:13:32:2c:89:0b:90:03:d4:b8: 37:5a:b6:55:44:19:81:ba:23:34:f3:e6:0c:cb:7e: 01:69:48:63:82:0f:49:b5:ac:78:a7:1a:1e:00:49: 43:87:87:69:7b:e1:1b:16:07:ff:1a:b6:98:0e:7f: 36:56:e9:66:7f:54:f8:95:2f:4f:7a:a9:4f:0b:ac: c5:4d:c6:63:dd:d8:4c:cb:ce:06:be:d6:6d:07:e9: 41:83:b1:f1:ef:07:ee:58:3a:fe:31:54:e2:1c:3d: af:1e:8e:ff:49:8f:e1:5c:c4:68:b4:bf:76:71:a8: fa:52:be:85:c0:55:ee:0a:46:4a:b5:b5:43:37:99: 71:56:55:ae:bf:91:72:14:b6:c7:33:97:f0:6d:60: 4e:b3:cf:cf:4f:c4:6f:5a:c2:5e:2e:35:68:b4:6d: 10:a3:80:c2:21:5f:38:e1:41:05:39:a9:81:40:02: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E3:15:D1:6E:F4:77:29:62:61:C4:59:12:55:E5:01:78:D5:63:A5 X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d6:f5:9c:fd:10:c1:14:2c:6b:d4:bb:8e:30:7e:65:ce:5f: 93:8f:f8:96:5c:89:63:ff:a3:ca:f0:f4:dc:07:d9:77:54:51: 11:89:0f:6b:86:44:a9:e3:7d:7e:40:a3:77:7e:af:cc:95:b9: ec:27:e3:ec:94:50:2e:58:a7:a2:23:25:32:94:3a:87:cd:61: 92:82:55:3c:78:48:81:88:4f:78:e7:de:d7:e1:73:8f:87:b9: a3:3d:40:f4:67:4e:49:64:22:61:e1:0d:e3:a1:9d:95:25:ce: ef:0a:19:33:cb:ca:d5:ea:26:ef:d6:4a:b9:c7:57:1b:43:85: ed:21:3c:17:40:c8:2f:3e:56:f7:4a:96:06:10:e3:16:54:8a: f4:a6:47:27:b9:29:30:27:b1:ed:ec:bd:da:b4:5e:61:1b:70: d0:c2:d6:a9:8d:7f:3c:a1:8c:19:a8:7f:06:7d:76:ad:3f:36: 66:f0:8f:71:0c:bd:76:67:65:e4:b3:a8:8e:50:c9:08:68:52: a8:ca:a7:d9:09:fc:ba:61:d4:fc:51:06:8b:bc:ac:f5:3e:09: 88:c1:8b:bd:ff:23:90:fb:17:ff:4e:92:98:03:f9:f2:da:26: 8b:d2:13:54:af:ec:92:fa:07:41:8c:f5:7f:27:7b:d9:c7:27: b0:06:12:64 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNXOTLH8lb8g+KJQg30bkSm8BgFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNDExMjAxNDU5MzZaFw0yNDExMjUwMTQxMzZaMDMxMTAvBgNV BAMTKDU5RTMxNUQxNkVGNDc3Mjk2MjYxQzQ1OTEyNTVFNTAxNzhENTYzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bbdSvqqI331UNKzBwAP8Ydaq WWZEJYLGY9KhLceBQrlb5mkviQBCi8/OV9JCMJOX87bUf1GYQbPfcE1C1YS0YFc4 f6Op2VErHMaxSXn89BMyLIkLkAPUuDdatlVEGYG6IzTz5gzLfgFpSGOCD0m1rHin Gh4ASUOHh2l74RsWB/8atpgOfzZW6WZ/VPiVL096qU8LrMVNxmPd2EzLzga+1m0H 6UGDsfHvB+5YOv4xVOIcPa8ejv9Jj+FcxGi0v3ZxqPpSvoXAVe4KRkq1tUM3mXFW Va6/kXIUtsczl/BtYE6zz89PxG9awl4uNWi0bRCjgMIhXzjhQQU5qYFAAnjJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWeMV0W70dyliYcRZElXlAXjVY6UwHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA61vWc/RDBFCxr1LuOMH5lzl+T j/iWXIlj/6PK8PTcB9l3VFERiQ9rhkSp431+QKN3fq/MlbnsJ+PslFAuWKeiIyUy lDqHzWGSglU8eEiBiE94597X4XOPh7mjPUD0Z05JZCJh4Q3joZ2VJc7vChkzy8rV 6ibv1kq5x1cbQ4XtITwXQMgvPlb3SpYGEOMWVIr0pkcnuSkwJ7Ht7L3atF5hG3DQ wtapjX88oYwZqH8GfXatPzZm8I9xDL12Z2Xks6iOUMkIaFKoyqfZCfy6YdT8UQaL vKz1PgmIwYu9/yOQ+xf/TpKYA/ny2iaL0hNUr+yS+gdBjPV/J3vZxyewBhJk -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org