$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.mft File: cd16539c52bd19701a219cb7f91b852671af6b16.mft (raw, json) Hash identifier: b+A+ih80TQuUsq6kV7LieeSPUvkwdONoxgcULq4uMhM= Subject key identifier: 64:B1:3F:C7:98:D5:70:E6:4F:8E:77:D6:CB:6B:3D:B2:04:36:E1:03 Authority key identifier: 65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36 Certificate issuer: /CN=cd16539c52bd19701a219cb7f91b852671af6b16 Certificate serial: 122167 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.mft Manifest number: 095B Signing time: Thu 28 Mar 2024 11:21:19 +0000 Manifest this update: Thu 28 Mar 2024 10:20:10 +0000 Manifest next update: Sun 31 Mar 2024 12:49:10 +0000 Files and hashes: 1: 7dfe90dd3538c2c4676628bd97506aa5de7a9abc.roa (hash: EfExab1XmWmDKv/VSnuuEdCS97PshrgBcmzXbnze+AE=) 2: cd16539c52bd19701a219cb7f91b852671af6b16.crl (hash: OISlwwaL8AeFVpjGHGXg1zokPPtQqI5ozkbEVCrbDRw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.crl rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188199 (0x122167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd16539c52bd19701a219cb7f91b852671af6b16 Validity Not Before: Mar 28 10:20:10 2024 GMT Not After : Mar 31 12:49:10 2024 GMT Subject: CN=d4dfce7839a80426685d405bc6c0e74b2e2fb6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1b:6d:54:0e:20:6e:64:29:ef:ac:92:12:6e: be:9a:82:05:b2:87:52:8e:b6:7c:5c:b7:97:2d:6f: da:74:f3:8d:a7:c4:23:25:54:2a:1a:c2:ea:92:a5: 4c:49:82:8a:99:9a:9c:8e:bf:d8:37:7c:dd:56:c7: 2c:f9:32:55:cf:f0:db:38:20:ef:1b:25:06:16:68: 80:de:d3:57:a2:05:32:da:41:84:fc:c6:11:d8:a2: 31:7f:16:fd:cd:fc:fe:03:69:c1:08:2d:57:d3:74: b7:6c:9d:af:a2:9f:e7:70:60:90:56:92:29:1d:0c: 52:f2:d2:95:07:d0:39:8f:cf:f4:c1:5b:2f:65:93: a4:dc:76:b8:40:bf:a2:ee:bf:41:ba:19:ae:21:05: 7b:ec:fb:c1:5c:43:28:1f:3b:e8:ff:a2:b2:8a:f3: cb:4f:39:37:26:08:57:51:2e:b3:d0:ec:7e:58:44: 98:8d:6d:30:c6:d1:c0:1d:6b:a6:8a:5f:50:b8:f8: 46:8b:1c:83:40:16:df:a1:8f:45:79:c5:06:71:e6: 0e:a4:95:bb:09:e2:e9:86:51:54:0c:e4:70:4f:0d: cc:89:4c:0a:e2:ce:ee:c5:79:21:4b:d0:c3:9a:5c: 45:07:9b:5b:7e:64:b3:8c:fb:34:25:18:ee:32:b8: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:3F:C7:98:D5:70:E6:4F:8E:77:D6:CB:6B:3D:B2:04:36:E1:03 X509v3 Authority Key Identifier: keyid:65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a8:78:ed:ea:77:07:ec:1e:22:47:d0:a1:00:44:06:72:ef: 01:10:36:7a:92:b5:b4:3a:9b:a2:d4:48:cf:56:9d:82:46:79: 9a:fc:37:88:96:8d:af:7a:d0:02:66:0c:f8:f2:2e:fd:f2:9b: e0:69:8f:67:7b:4b:e9:47:d6:cf:36:60:78:6b:25:64:b9:93: 26:f2:37:4a:f5:f6:ee:aa:24:7f:a7:57:9f:f0:fa:fe:b7:35: 95:03:23:5f:81:01:6a:b3:00:69:13:9e:c9:01:be:52:8d:e2: 64:f3:ef:9f:4c:b0:3d:c3:64:b8:b9:3b:e4:e5:e8:fc:10:65: 75:0e:db:5e:0b:04:9b:6d:9d:bd:d6:88:14:40:9e:25:2e:c8: 61:e4:e4:88:5d:12:65:75:77:b0:94:c6:88:6c:07:0c:f4:cc: bd:b4:c5:88:39:3b:ff:47:64:54:b9:fe:88:c7:9d:f6:8a:b3: 2b:9b:ef:a8:90:8a:78:7d:5a:4a:22:17:9f:30:11:59:73:6f: a8:5d:ff:b2:cd:b9:10:07:5d:39:2d:05:d0:e7:1c:88:78:c2: 93:6b:77:bb:c7:09:24:90:96:05:15:3c:01:ca:ad:ae:ce:21: 30:c9:eb:a8:ad:71:0f:2c:6e:af:b2:8e:b1:a0:81:30:af:e1: 30:a8:0f:6c -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDEiFnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk MTY1MzljNTJiZDE5NzAxYTIxOWNiN2Y5MWI4NTI2NzFhZjZiMTYwHhcNMjQwMzI4 MTAyMDEwWhcNMjQwMzMxMTI0OTEwWjAzMTEwLwYDVQQDEyhkNGRmY2U3ODM5YTgw NDI2Njg1ZDQwNWJjNmMwZTc0YjJlMmZiNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkxttVA4gbmQp76ySEm6+moIFsodSjrZ8XLeXLW/adPONp8Qj JVQqGsLqkqVMSYKKmZqcjr/YN3zdVscs+TJVz/DbOCDvGyUGFmiA3tNXogUy2kGE /MYR2KIxfxb9zfz+A2nBCC1X03S3bJ2vop/ncGCQVpIpHQxS8tKVB9A5j8/0wVsv ZZOk3Ha4QL+i7r9BuhmuIQV77PvBXEMoHzvo/6KyivPLTzk3JghXUS6z0Ox+WESY jW0wxtHAHWumil9QuPhGixyDQBbfoY9FecUGceYOpJW7CeLphlFUDORwTw3MiUwK 4s7uxXkhS9DDmlxFB5tbfmSzjPs0JRjuMrgHjQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFGSxP8eY1XDmT4531strPbIENuEDMB8GA1UdIwQYMBaAFGVO+CUD7k/UOQ8I KOI1b65ZgtA2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2QxNjUz OWM1MmJkMTk3MDFhMjE5Y2I3ZjkxYjg1MjY3MWFmNmIxNi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMDU2Nzc5YjktNzRlNy00ZmMzLTgxZjYtMzI2NGFi OWZjOWZjL2NkMTY1MzljNTJiZDE5NzAxYTIxOWNiN2Y5MWI4NTI2NzFhZjZiMTYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wNTY3NzliOS03NGU3LTRmYzMtODFmNi0zMjY0 YWI5ZmM5ZmMvY2QxNjUzOWM1MmJkMTk3MDFhMjE5Y2I3ZjkxYjg1MjY3MWFmNmIx Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAC+oeO3qdwfsHiJH0KEARAZy7wEQNnqStbQ6m6LUSM9WnYJG eZr8N4iWja960AJmDPjyLv3ym+Bpj2d7S+lH1s82YHhrJWS5kybyN0r19u6qJH+n V5/w+v63NZUDI1+BAWqzAGkTnskBvlKN4mTz759MsD3DZLi5O+Tl6PwQZXUO214L BJttnb3WiBRAniUuyGHk5IhdEmV1d7CUxohsBwz0zL20xYg5O/9HZFS5/ojHnfaK syub76iQinh9WkoiF58wEVlzb6hd/7LNuRAHXTktBdDnHIh4wpNrd7vHCSSQlgUV PAHKra7OITDJ66itcQ8sbq+yjrGggTCv4TCoD2w= -----END CERTIFICATE-----Generated at Thu Mar 28 13:27:47 2024 by rpki-client on console-ams.rpki-client.org