$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft File: 68daa985947750b9a7aa4090e0e120abbd088f1b.mft (raw, json) Hash identifier: 8OirGa2vtgprg0uDJYBOgzZnPC3wkc5ylcQrWpifHPo= Subject key identifier: CE:EA:74:E0:CA:03:D3:73:7A:08:B0:43:15:10:DC:05:62:94:09:CB Authority key identifier: 79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F Certificate issuer: /CN=68daa985947750b9a7aa4090e0e120abbd088f1b Certificate serial: 16835F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft Manifest number: 0B5F Signing time: Fri 29 Mar 2024 02:21:10 +0000 Manifest this update: Fri 29 Mar 2024 01:20:08 +0000 Manifest next update: Mon 01 Apr 2024 04:45:08 +0000 Files and hashes: 1: 68daa985947750b9a7aa4090e0e120abbd088f1b.crl (hash: sxsyfYz+cyGQjwekKljqlRkm9ZFKBB4tTGYnJKDNezk=) 2: 71fec9b1c23594aa816be97a1742c5f81d99c021.roa (hash: wLnzvOfxxGA93kftswElxwqa01LdccFcC+Rh/OTUKKo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.crl rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475423 (0x16835f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68daa985947750b9a7aa4090e0e120abbd088f1b Validity Not Before: Mar 29 01:20:08 2024 GMT Not After : Apr 1 04:45:08 2024 GMT Subject: CN=4996aeaf9aea3aaae3a7f32e94fbee348fc8f763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:ed:a0:0f:4f:3d:d9:df:4b:28:5f:d9:a0: e7:67:50:14:49:d2:94:aa:65:09:b1:ee:ae:c7:d3: 68:be:3a:e5:96:f2:25:ec:e9:8c:46:ab:43:de:64: 98:b6:e9:cb:c3:dd:b3:d4:05:c5:07:1f:a2:85:cc: dd:90:ed:18:ff:bf:2d:75:75:15:11:e7:9d:61:0d: 34:10:45:d3:1c:e6:2b:bc:74:85:bb:6c:95:86:35: 18:0a:fc:5c:8a:27:da:d2:55:34:d5:3a:c7:34:16: c0:d2:83:7a:6b:9b:4d:33:ca:7d:5f:9a:27:06:fe: 66:50:8c:0d:17:f6:30:76:98:d3:01:d6:01:4e:70: 14:28:5c:dd:46:32:d2:cf:1d:76:5a:13:88:fa:6a: d2:0a:1b:80:33:d1:58:84:d5:d8:d5:12:07:01:80: 7b:53:bc:0c:35:2a:46:c0:a1:f3:e6:e3:9c:29:97: 13:49:e1:e3:99:6e:e7:93:f3:e4:f5:2f:a0:c5:8c: 2f:ad:bd:a0:d9:7e:5f:3e:f8:10:04:a1:e7:49:81: 61:88:c6:21:95:3a:22:27:d9:7d:84:52:45:bc:e1: 19:27:bc:98:22:21:75:d7:03:41:ea:5d:69:5d:bd: a7:dd:69:72:12:86:fb:93:d3:eb:69:e5:75:7b:47: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:74:E0:CA:03:D3:73:7A:08:B0:43:15:10:DC:05:62:94:09:CB X509v3 Authority Key Identifier: keyid:79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a2:92:0f:f4:f5:fd:7c:9b:7f:28:fc:b0:13:2e:cc:57:cd: bd:b4:fa:a0:ed:9a:3d:d4:12:97:2a:24:7d:f6:42:6b:35:02: 7d:4a:c3:66:24:74:25:68:f6:a6:0f:91:48:9f:bb:9a:37:c3: 43:a3:17:0c:7c:71:d5:2c:26:99:10:5e:07:a2:e7:e5:81:e8: 93:a4:3e:f6:bd:1c:83:40:4e:be:71:68:af:e5:f1:b7:9f:22: 1d:af:8a:24:9f:c6:bf:ca:fa:d3:60:af:95:59:a5:17:be:e5: 59:d4:92:eb:54:0c:eb:a2:56:24:f7:58:11:75:ad:23:38:44: 70:e3:80:f9:b2:f7:31:59:57:de:4c:b7:5d:a3:6a:08:cd:13: 55:9a:47:f6:55:8a:a0:09:85:c0:b1:17:e9:66:37:e0:61:98: 9f:70:35:e2:8e:af:9c:eb:c6:44:67:bb:22:60:b7:b4:14:8f: a6:0e:6f:a6:f6:2d:2a:b7:53:83:7d:92:91:60:d1:a5:19:91: 80:7d:e7:0a:df:98:fb:8f:fd:5b:9d:60:0b:6c:83:fa:12:1c: 38:be:80:0e:78:90:65:d0:7a:0f:b9:8b:05:65:4f:d3:b7:54: fb:c7:02:c2:64:19:33:ef:89:45:1d:46:38:0b:f3:c8:e3:df: 73:4a:de:b8 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFoNfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY4 ZGFhOTg1OTQ3NzUwYjlhN2FhNDA5MGUwZTEyMGFiYmQwODhmMWIwHhcNMjQwMzI5 MDEyMDA4WhcNMjQwNDAxMDQ0NTA4WjAzMTEwLwYDVQQDEyg0OTk2YWVhZjlhZWEz YWFhZTNhN2YzMmU5NGZiZWUzNDhmYzhmNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAniTtoA9PPdnfSyhf2aDnZ1AUSdKUqmUJse6ux9NovjrllvIl 7OmMRqtD3mSYtunLw92z1AXFBx+ihczdkO0Y/78tdXUVEeedYQ00EEXTHOYrvHSF u2yVhjUYCvxciifa0lU01TrHNBbA0oN6a5tNM8p9X5onBv5mUIwNF/YwdpjTAdYB TnAUKFzdRjLSzx12WhOI+mrSChuAM9FYhNXY1RIHAYB7U7wMNSpGwKHz5uOcKZcT SeHjmW7nk/Pk9S+gxYwvrb2g2X5fPvgQBKHnSYFhiMYhlToiJ9l9hFJFvOEZJ7yY IiF11wNB6l1pXb2n3WlyEob7k9PraeV1e0cNSQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFM7qdODKA9NzegiwQxUQ3AVilAnLMB8GA1UdIwQYMBaAFHkaJ9QtRhr5Owrw FBU6neTSCDIfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjhkYWE5 ODU5NDc3NTBiOWE3YWE0MDkwZTBlMTIwYWJiZDA4OGYxYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMDA5NGNkZWItNDUxZi00ZmM1LTk0MzktYzExMjFm ZjM3YmFlLzY4ZGFhOTg1OTQ3NzUwYjlhN2FhNDA5MGUwZTEyMGFiYmQwODhmMWIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wMDk0Y2RlYi00NTFmLTRmYzUtOTQzOS1jMTEy MWZmMzdiYWUvNjhkYWE5ODU5NDc3NTBiOWE3YWE0MDkwZTBlMTIwYWJiZDA4OGYx Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHqikg/09f18m38o/LATLsxXzb20+qDtmj3UEpcqJH32Qms1 An1Kw2YkdCVo9qYPkUifu5o3w0OjFwx8cdUsJpkQXgei5+WB6JOkPva9HINATr5x aK/l8befIh2viiSfxr/K+tNgr5VZpRe+5VnUkutUDOuiViT3WBF1rSM4RHDjgPmy 9zFZV95Mt12jagjNE1WaR/ZViqAJhcCxF+lmN+BhmJ9wNeKOr5zrxkRnuyJgt7QU j6YOb6b2LSq3U4N9kpFg0aUZkYB95wrfmPuP/VudYAtsg/oSHDi+gA54kGXQeg+5 iwVlT9O3VPvHAsJkGTPviUUdRjgL88jj33NK3rg= -----END CERTIFICATE-----Generated at Fri Mar 29 03:23:49 2024 by rpki-client on console-ams.rpki-client.org