$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.mft File: 42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.mft (raw, json) Hash identifier: oNmB5xLQHDGOkDx9P9EzN2p0pzyriwlAhrvGDMDZUPw= Subject key identifier: 1B:A7:80:6C:D9:1E:6F:8C:93:02:2F:7B:8F:F7:EB:FC:F9:3C:31:60 Authority key identifier: E7:9E:BE:5D:25:A6:32:5E:1E:8E:4E:9D:78:22:A8:DE:BD:09:57:CE Certificate issuer: /CN=42f3ea5b6e4b307fe0fd6659359a0e86b013f16c Certificate serial: 16A876 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.mft Manifest number: 0B8E Signing time: Fri 29 Mar 2024 07:21:18 +0000 Manifest this update: Fri 29 Mar 2024 06:20:07 +0000 Manifest next update: Mon 01 Apr 2024 08:46:07 +0000 Files and hashes: 1: 42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.crl (hash: qn+eGLF8BteuOzJmfGsbJAdEJ9R9S/vENmNd0gxHpGk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.crl rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484918 (0x16a876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f3ea5b6e4b307fe0fd6659359a0e86b013f16c Validity Not Before: Mar 29 06:20:07 2024 GMT Not After : Apr 1 08:46:07 2024 GMT Subject: CN=ac6924b70e92fb6cd42dfdde7085c3fc2a8ddaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:34:5a:76:3d:aa:97:4f:67:ed:6c:f5:dd: 5f:9b:8c:ad:13:98:e4:02:52:8a:b0:81:c6:97:c5: 76:1a:ab:e2:1e:b1:a7:85:1f:2d:0b:06:0d:a1:3c: d2:ed:b0:c6:78:52:16:a8:13:12:de:66:01:86:52: 28:6c:cb:ca:49:57:62:04:46:b0:01:7d:df:7f:f1: 6a:46:3e:1d:8b:02:87:8c:7e:ca:25:9f:40:54:b5: 51:3d:1d:ed:c8:da:7b:76:dc:83:bc:5d:1c:74:61: c9:45:75:86:3e:02:07:bb:ed:fd:32:9d:f0:28:65: 39:d6:06:0b:ad:48:8e:a3:c4:c1:d8:56:48:9d:6b: 37:8d:71:27:b4:27:df:59:6a:8f:6e:0a:20:1f:63: ff:9c:eb:a2:c1:f5:1e:b0:0c:ba:2b:73:b2:e6:bc: 10:94:b3:13:5b:ff:fd:35:cb:8d:2a:8b:81:e8:93: 5d:2b:d8:6c:1d:b9:52:25:54:8b:dd:3d:d2:6f:a6: e2:fe:13:d3:11:50:0b:96:f6:30:36:23:13:7f:2e: 97:5c:41:ea:4f:74:c3:3d:1b:c5:10:4e:fd:b7:23: 2f:67:91:f0:fb:73:e7:4a:08:1d:10:ce:9a:6f:d6: eb:71:7e:f0:34:7d:6d:24:6b:10:65:15:23:97:7b: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A7:80:6C:D9:1E:6F:8C:93:02:2F:7B:8F:F7:EB:FC:F9:3C:31:60 X509v3 Authority Key Identifier: keyid:E7:9E:BE:5D:25:A6:32:5E:1E:8E:4E:9D:78:22:A8:DE:BD:09:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:61:50:b4:73:ea:7e:c4:6b:cc:f9:b8:ac:25:fc:61:95:c9: 7d:38:c1:c5:69:78:14:10:4e:e3:30:89:c1:d9:05:4f:15:74: 68:72:1c:de:dc:f9:f6:43:6a:bc:3a:94:5c:e8:47:82:15:1f: 16:0c:4a:9c:d4:c8:95:49:16:f5:50:2a:7d:e0:3d:37:08:9c: d6:32:dd:bf:cc:2a:dc:0b:81:28:b2:2f:bd:e9:f3:98:da:50: 45:11:10:31:c3:7e:6f:c7:08:d0:5c:b3:f2:cb:c3:c7:b5:57: 88:15:5c:d1:8e:f0:fa:f2:dd:cf:6d:5a:23:50:f0:a1:65:5b: 99:f7:77:3c:02:5a:ee:a4:8b:4d:e8:7d:a7:7a:9b:c0:9b:32: e9:75:62:c3:9d:2e:64:fa:3d:c6:48:c9:9a:96:34:91:2a:3c: 72:e1:41:09:fc:21:5a:8b:1d:bb:46:bb:c2:c6:26:cd:e3:da: 65:fe:a2:c7:9e:1b:5a:69:87:1b:36:0b:6b:f0:00:11:f5:df: 13:d9:58:50:2e:c4:b0:a2:71:ba:3c:01:a6:a1:70:5f:99:36: 2b:dd:91:07:97:a8:cf:b3:4d:de:ca:86:c2:95:35:96:72:17: 6d:7a:29:f1:85:90:3a:32:c9:57:55:f9:08:1b:de:6b:3e:a7: 83:d2:e6:a4 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFqh2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy ZjNlYTViNmU0YjMwN2ZlMGZkNjY1OTM1OWEwZTg2YjAxM2YxNmMwHhcNMjQwMzI5 MDYyMDA3WhcNMjQwNDAxMDg0NjA3WjAzMTEwLwYDVQQDEyhhYzY5MjRiNzBlOTJm YjZjZDQyZGZkZGU3MDg1YzNmYzJhOGRkYWVkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtCQ0WnY9qpdPZ+1s9d1fm4ytE5jkAlKKsIHGl8V2GqviHrGn hR8tCwYNoTzS7bDGeFIWqBMS3mYBhlIobMvKSVdiBEawAX3ff/FqRj4diwKHjH7K JZ9AVLVRPR3tyNp7dtyDvF0cdGHJRXWGPgIHu+39Mp3wKGU51gYLrUiOo8TB2FZI nWs3jXEntCffWWqPbgogH2P/nOuiwfUesAy6K3Oy5rwQlLMTW//9NcuNKouB6JNd K9hsHblSJVSL3T3Sb6bi/hPTEVALlvYwNiMTfy6XXEHqT3TDPRvFEE79tyMvZ5Hw +3PnSggdEM6ab9brcX7wNH1tJGsQZRUjl3t5wQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFBungGzZHm+MkwIve4/36/z5PDFgMB8GA1UdIwQYMBaAFOeevl0lpjJeHo5O nXgiqN69CVfOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDJmM2Vh NWI2ZTRiMzA3ZmUwZmQ2NjU5MzU5YTBlODZiMDEzZjE2Yy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMDkyMDUxMDctMTljNC00NzViLTk5YTMtODIzMmI4 M2E3ZjFiLzQyZjNlYTViNmU0YjMwN2ZlMGZkNjY1OTM1OWEwZTg2YjAxM2YxNmMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wOTIwNTEwNy0xOWM0LTQ3NWItOTlhMy04MjMy YjgzYTdmMWIvNDJmM2VhNWI2ZTRiMzA3ZmUwZmQ2NjU5MzU5YTBlODZiMDEzZjE2 Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEZhULRz6n7Ea8z5uKwl/GGVyX04wcVpeBQQTuMwicHZBU8V dGhyHN7c+fZDarw6lFzoR4IVHxYMSpzUyJVJFvVQKn3gPTcInNYy3b/MKtwLgSiy L73p85jaUEUREDHDfm/HCNBcs/LLw8e1V4gVXNGO8Pry3c9tWiNQ8KFlW5n3dzwC Wu6ki03ofad6m8CbMul1YsOdLmT6PcZIyZqWNJEqPHLhQQn8IVqLHbtGu8LGJs3j 2mX+oseeG1pphxs2C2vwABH13xPZWFAuxLCicbo8AaahcF+ZNivdkQeXqM+zTd7K hsKVNZZyF216KfGFkDoyyVdV+Qgb3ms+p4PS5qQ= -----END CERTIFICATE-----Generated at Fri Mar 29 08:39:16 2024 by rpki-client on console-ams.rpki-client.org