$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.mft File: f3c3ff9caa6a1197088be4d1139481164c6ca86f.mft (raw, json) Hash identifier: GiOGsVyYOl3lq+VFOFcBsw1OC8VYsoOE+3RXBo0E/ag= Subject key identifier: 84:BF:C6:5D:19:73:A1:3D:85:70:74:F6:37:55:71:29:FB:28:76:63 Authority key identifier: A8:48:A3:D5:C3:57:ED:AB:87:7C:10:ED:D5:8A:23:9C:03:AB:09:66 Certificate issuer: /CN=f3c3ff9caa6a1197088be4d1139481164c6ca86f Certificate serial: 286BC4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3c3ff9caa6a1197088be4d1139481164c6ca86f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.mft Manifest number: 061B Signing time: Fri 29 Mar 2024 07:20:50 +0000 Manifest this update: Fri 29 Mar 2024 06:20:07 +0000 Manifest next update: Mon 01 Apr 2024 07:32:07 +0000 Files and hashes: 1: f3c3ff9caa6a1197088be4d1139481164c6ca86f.crl (hash: 8yV3qNfUKV1pHl4KsOuJqsO7jNR5MfVIDRSIBli8f4g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.crl rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3c3ff9caa6a1197088be4d1139481164c6ca86f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649028 (0x286bc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3c3ff9caa6a1197088be4d1139481164c6ca86f Validity Not Before: Mar 29 06:20:07 2024 GMT Not After : Apr 1 07:32:07 2024 GMT Subject: CN=3007fdb705340d581211235ab476fdce3b634434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:96:62:b2:db:72:4c:df:a4:50:3e:93:84: cc:1e:95:be:c0:0d:d8:b0:e6:27:3d:f5:8c:95:40: a9:d6:c6:fd:76:5e:01:da:b2:4a:d9:d6:b0:95:f5: 06:b3:e6:7f:d9:ed:a9:ce:50:9e:02:eb:47:4d:03: 92:61:41:50:cc:93:ce:a6:84:b8:fe:53:f6:0d:71: ec:0e:1a:ba:4d:74:bd:83:d7:35:d4:cf:46:f3:1c: c8:f7:b1:85:89:fc:7d:d9:a4:2c:c4:e4:ff:95:bf: 41:01:57:47:c0:62:71:a4:bd:0e:05:b6:e5:89:e2: 03:58:9b:6a:36:a0:f0:2e:4d:9d:70:5f:0d:e4:99: 23:bf:18:b1:03:b6:8e:9d:03:53:67:27:e4:a4:5e: 0a:97:7b:24:b8:2d:4d:64:11:16:12:94:50:51:fb: ec:c6:40:26:8c:56:ad:09:d3:85:e9:f2:92:a9:e0: 6e:1e:54:46:3b:d8:81:95:d9:1f:da:cd:0d:25:41: 88:cb:da:ef:5b:9a:1e:94:49:c0:2e:47:14:9f:35: 32:ac:c3:95:27:6c:6d:7b:2c:4f:38:2e:22:e2:e0: ab:2a:d6:ce:a1:66:63:ba:55:f1:94:ae:84:75:81: cb:e9:b6:8a:54:c0:0a:21:3c:d1:62:66:f9:b8:fd: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:C6:5D:19:73:A1:3D:85:70:74:F6:37:55:71:29:FB:28:76:63 X509v3 Authority Key Identifier: keyid:A8:48:A3:D5:C3:57:ED:AB:87:7C:10:ED:D5:8A:23:9C:03:AB:09:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3c3ff9caa6a1197088be4d1139481164c6ca86f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f1:c9:db:6a:a5:2b:8a:be:28:33:3d:56:dc:a1:29:b1:88: fb:2c:bc:cd:f2:39:f5:fd:52:59:1f:2d:12:74:88:7b:91:e1: b1:74:2b:e0:46:4e:3c:41:25:97:ce:8a:e6:c8:b4:d3:b4:0a: 79:5f:8f:37:de:e2:d9:18:57:76:59:ed:19:e0:3c:7d:be:05: 94:0e:cd:d0:f2:66:40:cc:35:94:b0:68:0d:9f:ea:ff:71:80: 2b:ff:9b:c6:48:a6:de:4f:a9:de:5a:eb:ff:7f:65:a5:9e:13: 0e:2d:f8:42:77:d2:a4:02:87:6f:6d:74:fb:c6:37:c7:7d:3a: d0:3c:94:3f:77:9d:c2:e8:13:cd:ec:16:68:0d:7f:cd:0c:05: 4a:f7:c5:aa:be:f4:6e:26:8a:b7:7b:60:af:79:3a:49:aa:12: b0:af:3e:28:46:dc:e7:97:2c:24:07:d4:fe:01:13:10:77:a8: 20:93:93:c0:05:aa:be:dc:c4:b1:37:b2:c1:08:9f:bf:7b:f3: 92:8a:24:5e:f4:3f:cf:64:a0:77:ff:a3:02:08:1c:d5:62:b7: 2f:5b:c8:0e:55:5d:c9:94:69:aa:a7:96:e4:7f:b0:72:4e:0b: a2:9f:0b:af:d2:7d:1c:c9:01:88:6f:d9:1b:f5:b9:91:79:4b: 7f:82:8f:0a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKGvEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYz YzNmZjljYWE2YTExOTcwODhiZTRkMTEzOTQ4MTE2NGM2Y2E4NmYwHhcNMjQwMzI5 MDYyMDA3WhcNMjQwNDAxMDczMjA3WjAzMTEwLwYDVQQDEygzMDA3ZmRiNzA1MzQw ZDU4MTIxMTIzNWFiNDc2ZmRjZTNiNjM0NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAx2OWYrLbckzfpFA+k4TMHpW+wA3YsOYnPfWMlUCp1sb9dl4B 2rJK2dawlfUGs+Z/2e2pzlCeAutHTQOSYUFQzJPOpoS4/lP2DXHsDhq6TXS9g9c1 1M9G8xzI97GFifx92aQsxOT/lb9BAVdHwGJxpL0OBbblieIDWJtqNqDwLk2dcF8N 5JkjvxixA7aOnQNTZyfkpF4Kl3skuC1NZBEWEpRQUfvsxkAmjFatCdOF6fKSqeBu HlRGO9iBldkf2s0NJUGIy9rvW5oelEnALkcUnzUyrMOVJ2xteyxPOC4i4uCrKtbO oWZjulXxlK6EdYHL6baKVMAKITzRYmb5uP3IXQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFIS/xl0Zc6E9hXB09jdVcSn7KHZjMB8GA1UdIwQYMBaAFKhIo9XDV+2rh3wQ 7dWKI5wDqwlmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjNjM2Zm OWNhYTZhMTE5NzA4OGJlNGQxMTM5NDgxMTY0YzZjYTg2Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMDQzYzdiZmMtZDNjOC00NTE4LThhMWMtZWQ2OGFk Yjc5N2Q1L2YzYzNmZjljYWE2YTExOTcwODhiZTRkMTEzOTQ4MTE2NGM2Y2E4NmYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wNDNjN2JmYy1kM2M4LTQ1MTgtOGExYy1lZDY4 YWRiNzk3ZDUvZjNjM2ZmOWNhYTZhMTE5NzA4OGJlNGQxMTM5NDgxMTY0YzZjYTg2 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAFnxydtqpSuKvigzPVbcoSmxiPssvM3yOfX9UlkfLRJ0iHuR 4bF0K+BGTjxBJZfOiubItNO0Cnlfjzfe4tkYV3ZZ7RngPH2+BZQOzdDyZkDMNZSw aA2f6v9xgCv/m8ZIpt5Pqd5a6/9/ZaWeEw4t+EJ30qQCh29tdPvGN8d9OtA8lD93 ncLoE83sFmgNf80MBUr3xaq+9G4mird7YK95OkmqErCvPihG3OeXLCQH1P4BExB3 qCCTk8AFqr7cxLE3ssEIn79785KKJF70P89koHf/owIIHNVity9byA5VXcmUaaqn luR/sHJOC6KfC6/SfRzJAYhv2Rv1uZF5S3+Cjwo= -----END CERTIFICATE-----Generated at Fri Mar 29 08:11:17 2024 by rpki-client on console-fra.rpki-client.org