$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05f17b31-bcb2-4a3c-89d6-70e52a73ad8f/14a5fd5127356fa7b9278f785efa7ad4ef844d12.mft File: 14a5fd5127356fa7b9278f785efa7ad4ef844d12.mft (raw, json) Hash identifier: hpn505DnGhEbF/inJ/zRuXQlaFZVko25/TM9eTfomD0= Subject key identifier: 25:C2:3B:46:2D:29:AB:3C:9D:6D:6D:41:3F:40:39:90:7D:54:F0:A8 Authority key identifier: 9C:ED:74:DC:1E:EB:56:FA:77:8A:77:BD:C3:C7:AC:9F:85:1D:BE:17 Certificate issuer: /CN=14a5fd5127356fa7b9278f785efa7ad4ef844d12 Certificate serial: 27D922 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14a5fd5127356fa7b9278f785efa7ad4ef844d12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05f17b31-bcb2-4a3c-89d6-70e52a73ad8f/14a5fd5127356fa7b9278f785efa7ad4ef844d12.mft Manifest number: 0DD0 Signing time: Fri 29 Mar 2024 05:21:04 +0000 Manifest this update: Fri 29 Mar 2024 04:20:08 +0000 Manifest next update: Mon 01 Apr 2024 07:14:08 +0000 Files and hashes: 1: 14a5fd5127356fa7b9278f785efa7ad4ef844d12.crl (hash: nePUNOcaOkWBTom8ZvdPXJzUSVzeBESnYfoPzXJfcK4=) 2: bf58fee16bada5386c85c5bbbdc8e803a1f0d015.roa (hash: VvKUPyskLed6QHhTkx5J7YSJOTyIqH4VD9jCF0wPyFc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/05f17b31-bcb2-4a3c-89d6-70e52a73ad8f/14a5fd5127356fa7b9278f785efa7ad4ef844d12.crl rsync://repository.lacnic.net/rpki/lacnic/05f17b31-bcb2-4a3c-89d6-70e52a73ad8f/14a5fd5127356fa7b9278f785efa7ad4ef844d12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14a5fd5127356fa7b9278f785efa7ad4ef844d12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611490 (0x27d922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a5fd5127356fa7b9278f785efa7ad4ef844d12 Validity Not Before: Mar 29 04:20:08 2024 GMT Not After : Apr 1 07:14:08 2024 GMT Subject: CN=28c59bdeeeba742dd7d38dba412196431796001b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:03:3f:a1:3a:4e:06:ef:d9:4f:28:a7:1d: 64:6c:51:3c:4f:8a:8d:53:8a:ec:4e:2f:3e:83:32: 5d:3b:2b:38:98:91:60:70:1f:5c:f3:f7:ce:05:aa: 89:3a:a9:10:d1:cf:61:f8:fc:38:66:b8:db:47:c8: a8:50:7f:00:5a:d0:ba:db:58:07:f5:fa:75:ac:30: 6f:cf:5a:8f:77:02:45:10:b6:a6:98:2f:4f:11:49: 7f:8d:91:73:c3:51:e8:68:01:d4:c7:f3:87:b8:09: 5d:da:70:c8:59:02:0a:e9:01:a2:8b:9c:a2:ce:b2: 4b:6f:0d:ec:9c:f2:25:e4:f0:75:14:e9:7e:0f:ee: 49:84:2e:58:6f:0e:50:9f:d8:e9:96:5a:f3:1d:76: b2:0e:a3:a8:55:a6:40:77:20:70:c7:c9:7b:4e:7f: 10:20:7c:32:7f:9a:a3:91:62:c7:6d:72:f4:89:f5: a4:21:32:8c:1e:10:2f:a6:99:fd:22:37:b5:3e:2c: fd:c0:d0:13:d3:d6:43:28:76:0f:06:bd:d3:20:88: 48:b2:45:a6:fc:96:4b:26:4b:74:85:17:27:12:97: 59:c4:7b:8c:bc:e0:aa:b9:bc:63:66:1f:ff:d3:92: 5e:47:f0:9a:ee:79:4c:3c:7b:69:38:3d:de:d9:fe: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:3B:46:2D:29:AB:3C:9D:6D:6D:41:3F:40:39:90:7D:54:F0:A8 X509v3 Authority Key Identifier: keyid:9C:ED:74:DC:1E:EB:56:FA:77:8A:77:BD:C3:C7:AC:9F:85:1D:BE:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14a5fd5127356fa7b9278f785efa7ad4ef844d12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05f17b31-bcb2-4a3c-89d6-70e52a73ad8f/14a5fd5127356fa7b9278f785efa7ad4ef844d12.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/05f17b31-bcb2-4a3c-89d6-70e52a73ad8f/14a5fd5127356fa7b9278f785efa7ad4ef844d12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:61:38:fb:ab:3b:25:0d:09:a8:b6:39:87:e1:e6:df:81:a4: e3:b2:ea:85:f4:11:71:83:80:51:57:f9:e8:07:a4:66:a5:7a: 43:1f:39:cb:c8:0f:70:13:2d:6d:fd:69:65:8b:3a:30:fb:01: 6a:f0:7d:6e:9e:20:cf:5c:94:2f:36:65:88:97:a4:5d:79:d8: f0:85:95:4d:c5:c2:bf:1d:4e:d5:0a:cf:25:d9:13:38:15:4a: 5c:90:5e:4e:ae:56:3b:e2:bc:27:9c:99:de:26:68:c4:33:c1: 05:54:70:f7:be:3e:9f:99:57:3e:9d:9e:5f:2f:44:bf:46:58: d3:2b:f8:a3:be:32:57:78:6f:ea:f5:71:a1:a6:da:70:cf:9b: 1d:cf:5b:ff:56:51:8a:ee:0b:ab:a9:a6:f5:fb:22:b8:fd:87: cb:1f:75:a4:bc:55:ac:d7:9b:88:4e:66:1c:2a:73:f1:85:d5: c6:db:23:9b:d7:8e:4b:12:f6:89:b5:d8:5f:96:82:7e:95:72: c5:85:4d:09:19:cc:03:2a:a2:75:55:b7:81:6c:a2:ae:b4:7e: ed:45:03:57:4c:82:cf:d3:2a:ed:0d:ba:80:eb:d0:cb:6a:32: ee:9a:3b:2c:c8:a1:cf:e3:69:b3:c3:43:d6:e4:a8:fe:30:28: 0c:f8:6d:4b -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ9kiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0 YTVmZDUxMjczNTZmYTdiOTI3OGY3ODVlZmE3YWQ0ZWY4NDRkMTIwHhcNMjQwMzI5 MDQyMDA4WhcNMjQwNDAxMDcxNDA4WjAzMTEwLwYDVQQDEygyOGM1OWJkZWVlYmE3 NDJkZDdkMzhkYmE0MTIxOTY0MzE3OTYwMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArd8DP6E6Tgbv2U8opx1kbFE8T4qNU4rsTi8+gzJdOys4mJFg cB9c8/fOBaqJOqkQ0c9h+Pw4ZrjbR8ioUH8AWtC621gH9fp1rDBvz1qPdwJFELam mC9PEUl/jZFzw1HoaAHUx/OHuAld2nDIWQIK6QGii5yizrJLbw3snPIl5PB1FOl+ D+5JhC5Ybw5Qn9jpllrzHXayDqOoVaZAdyBwx8l7Tn8QIHwyf5qjkWLHbXL0ifWk ITKMHhAvppn9Ije1Piz9wNAT09ZDKHYPBr3TIIhIskWm/JZLJkt0hRcnEpdZxHuM vOCqubxjZh//05JeR/Ca7nlMPHtpOD3e2f4fvQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFCXCO0YtKas8nW1tQT9AOZB9VPCoMB8GA1UdIwQYMBaAFJztdNwe61b6d4p3 vcPHrJ+FHb4XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTRhNWZk NTEyNzM1NmZhN2I5Mjc4Zjc4NWVmYTdhZDRlZjg0NGQxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMDVmMTdiMzEtYmNiMi00YTNjLTg5ZDYtNzBlNTJh NzNhZDhmLzE0YTVmZDUxMjczNTZmYTdiOTI3OGY3ODVlZmE3YWQ0ZWY4NDRkMTIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wNWYxN2IzMS1iY2IyLTRhM2MtODlkNi03MGU1 MmE3M2FkOGYvMTRhNWZkNTEyNzM1NmZhN2I5Mjc4Zjc4NWVmYTdhZDRlZjg0NGQx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBADVhOPurOyUNCai2OYfh5t+BpOOy6oX0EXGDgFFX+egHpGal ekMfOcvID3ATLW39aWWLOjD7AWrwfW6eIM9clC82ZYiXpF152PCFlU3Fwr8dTtUK zyXZEzgVSlyQXk6uVjvivCecmd4maMQzwQVUcPe+Pp+ZVz6dnl8vRL9GWNMr+KO+ Mld4b+r1caGm2nDPmx3PW/9WUYruC6uppvX7Irj9h8sfdaS8VazXm4hOZhwqc/GF 1cbbI5vXjksS9om12F+Wgn6VcsWFTQkZzAMqonVVt4Fsoq60fu1FA1dMgs/TKu0N uoDr0MtqMu6aOyzIoc/jabPDQ9bkqP4wKAz4bUs= -----END CERTIFICATE-----Generated at Fri Mar 29 06:25:27 2024 by rpki-client on console-ams.rpki-client.org