$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft File: 40dd355863a64b49aaea56a333a078f4104009ff.mft (raw, json) Hash identifier: NzrQLo31UM6rXkIkcUjRULavNYd+U8DZ6S14d1opraM= Subject key identifier: 39:E4:6D:2E:BF:A3:69:9C:BF:F0:64:64:98:87:66:C0:52:DD:56:46 Authority key identifier: 30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78 Certificate issuer: /CN=40dd355863a64b49aaea56a333a078f4104009ff Certificate serial: 19491C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft Manifest number: 0D25 Signing time: Fri 29 Mar 2024 08:21:15 +0000 Manifest this update: Fri 29 Mar 2024 07:20:10 +0000 Manifest next update: Mon 01 Apr 2024 10:06:10 +0000 Files and hashes: 1: 0362be8444d2168bcee78e27218aa78d70716d8d.roa (hash: p2RmqdZQ8Kykw1A3rK4qcdrPxP1+N002bvEWjn+qeV4=) 2: 40dd355863a64b49aaea56a333a078f4104009ff.crl (hash: 4qg365b0u8QghToQQvcR0nLzHVBWmjQXKyS5BmFnY1k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.crl rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657116 (0x19491c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dd355863a64b49aaea56a333a078f4104009ff Validity Not Before: Mar 29 07:20:10 2024 GMT Not After : Apr 1 10:06:10 2024 GMT Subject: CN=b8bf058e9ccae4744b7a959bf362daeefcd6b386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:27:00:88:7a:d2:9e:42:8c:dc:47:b4:75:67: 14:20:28:af:10:c5:0a:9a:3e:11:7b:70:ed:88:fb: 6e:80:8a:03:33:81:d3:e1:be:ec:c5:82:12:45:bd: 3c:48:40:21:3b:23:87:2e:4a:43:35:df:53:e3:02: 4e:a5:5e:31:0b:de:75:18:a3:ce:dc:5f:8b:90:90: 01:78:c8:72:d0:17:64:52:99:df:71:c7:f3:f8:e9: 53:44:37:9b:c9:2f:e9:f9:32:2b:b8:e6:8c:8a:e9: 52:57:3e:31:e6:65:a8:e6:6e:93:f6:29:a9:98:8d: 9d:b8:24:02:5f:5c:52:36:2e:15:fe:9c:61:ab:c0: 2c:3c:8f:c6:38:44:4b:82:c5:4a:7b:23:83:5d:be: 43:3c:83:9f:5f:cc:bc:35:3d:6e:da:4a:d3:5e:bf: 81:a7:7f:91:84:d3:08:43:d6:3e:49:77:9c:d9:3d: a5:5b:c5:54:23:ea:8e:3d:12:e6:9c:d5:b5:96:2f: 2c:d2:07:bf:d5:4d:53:24:5c:82:43:40:0b:ee:bc: 5d:d6:3f:f5:cf:67:08:66:ff:19:c8:76:2e:b7:b8: e3:25:62:79:16:52:cf:12:0b:01:90:c2:ab:a0:04: 98:a9:e0:23:76:b1:65:8e:40:78:a5:6d:56:94:39: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E4:6D:2E:BF:A3:69:9C:BF:F0:64:64:98:87:66:C0:52:DD:56:46 X509v3 Authority Key Identifier: keyid:30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:72:91:9c:68:68:f1:40:d8:a3:a3:32:4f:96:2d:4d:4f:77: 0e:97:98:b4:9b:e1:bd:37:46:31:9a:80:b1:8a:7a:d4:fc:6f: 2a:d6:46:5c:8c:ea:6f:0c:42:78:24:35:d8:16:46:c9:80:f5: c4:6d:5f:3b:41:a3:af:d1:6d:82:2a:2a:60:d6:64:cb:ca:2f: 81:eb:c9:a5:76:5c:b9:26:d4:68:06:e1:6b:be:9e:d1:19:d0: de:33:7c:27:d6:c5:64:9b:ba:9c:d1:4d:04:31:42:f9:8d:f6: 43:70:9c:bd:aa:1d:e4:d8:24:12:76:2e:30:22:be:45:78:aa: 38:e2:5b:3d:61:e2:62:e7:21:e3:36:11:ef:c8:76:34:b7:b3: 02:07:90:ce:71:96:e1:69:b3:0c:21:22:53:1e:52:69:4d:aa: 28:9e:f0:ba:47:eb:02:ad:fb:ce:a6:97:7b:04:33:82:c5:1d: 9f:ea:56:d6:88:a5:ef:e4:a5:c2:4d:a5:10:95:3d:ef:db:9a: 9f:d1:50:67:c3:7a:48:7b:f9:b1:69:e1:93:2f:02:92:c5:eb: 13:5d:bc:65:49:36:30:0f:19:9e:7f:6c:65:44:af:66:aa:71: ed:33:6d:f1:01:76:a0:f4:77:9a:98:45:bb:3e:42:02:a7:69: 58:0b:96:85 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGUkcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQw ZGQzNTU4NjNhNjRiNDlhYWVhNTZhMzMzYTA3OGY0MTA0MDA5ZmYwHhcNMjQwMzI5 MDcyMDEwWhcNMjQwNDAxMTAwNjEwWjAzMTEwLwYDVQQDEyhiOGJmMDU4ZTljY2Fl NDc0NGI3YTk1OWJmMzYyZGFlZWZjZDZiMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgicAiHrSnkKM3Ee0dWcUICivEMUKmj4Re3DtiPtugIoDM4HT 4b7sxYISRb08SEAhOyOHLkpDNd9T4wJOpV4xC951GKPO3F+LkJABeMhy0BdkUpnf ccfz+OlTRDebyS/p+TIruOaMiulSVz4x5mWo5m6T9impmI2duCQCX1xSNi4V/pxh q8AsPI/GOERLgsVKeyODXb5DPIOfX8y8NT1u2krTXr+Bp3+RhNMIQ9Y+SXec2T2l W8VUI+qOPRLmnNW1li8s0ge/1U1TJFyCQ0AL7rxd1j/1z2cIZv8ZyHYut7jjJWJ5 FlLPEgsBkMKroASYqeAjdrFljkB4pW1WlDlu0wIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFDnkbS6/o2mcv/BkZJiHZsBS3VZGMB8GA1UdIwQYMBaAFDAD6+0EedvO3Qpg +DOsUmlRW6d4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDBkZDM1 NTg2M2E2NGI0OWFhZWE1NmEzMzNhMDc4ZjQxMDQwMDlmZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMDJlZmQzMmEtNjY0Yi00NzcwLWE1MDAtOGZjNzRh NTk5MmFkLzQwZGQzNTU4NjNhNjRiNDlhYWVhNTZhMzMzYTA3OGY0MTA0MDA5ZmYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wMmVmZDMyYS02NjRiLTQ3NzAtYTUwMC04ZmM3 NGE1OTkyYWQvNDBkZDM1NTg2M2E2NGI0OWFhZWE1NmEzMzNhMDc4ZjQxMDQwMDlm Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAJZykZxoaPFA2KOjMk+WLU1Pdw6XmLSb4b03RjGagLGKetT8 byrWRlyM6m8MQngkNdgWRsmA9cRtXztBo6/RbYIqKmDWZMvKL4HryaV2XLkm1GgG 4Wu+ntEZ0N4zfCfWxWSbupzRTQQxQvmN9kNwnL2qHeTYJBJ2LjAivkV4qjjiWz1h 4mLnIeM2Ee/IdjS3swIHkM5xluFpswwhIlMeUmlNqiie8LpH6wKt+86ml3sEM4LF HZ/qVtaIpe/kpcJNpRCVPe/bmp/RUGfDekh7+bFp4ZMvApLF6xNdvGVJNjAPGZ5/ bGVEr2aqce0zbfEBdqD0d5qYRbs+QgKnaVgLloU= -----END CERTIFICATE-----Generated at Fri Mar 29 11:04:55 2024 by rpki-client on console-ams.rpki-client.org