$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.mft File: 026e3c3568646609466eb56f4d80d46b89bb2dcc.mft (raw, json) Hash identifier: UXsGnsobO/ASsKEcvJZG3jmcPcQ9on4g3GrkcBhbZV8= Subject key identifier: FA:93:BB:17:52:20:54:75:A9:48:87:6C:6B:41:C0:6C:6E:E5:3B:6B Authority key identifier: 49:CC:30:C6:95:38:DC:0C:E5:55:ED:EF:6E:A5:68:27:2E:86:FD:46 Certificate issuer: /CN=026e3c3568646609466eb56f4d80d46b89bb2dcc Certificate serial: 286AA2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/026e3c3568646609466eb56f4d80d46b89bb2dcc.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.mft Manifest number: 0DDC Signing time: Thu 28 Mar 2024 08:21:09 +0000 Manifest this update: Thu 28 Mar 2024 07:20:07 +0000 Manifest next update: Sun 31 Mar 2024 10:13:07 +0000 Files and hashes: 1: 026e3c3568646609466eb56f4d80d46b89bb2dcc.crl (hash: je9dFBz5tfVqmFuCJGdz6gD0cIyrn00gwFgR7fOyE+M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.crl rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/026e3c3568646609466eb56f4d80d46b89bb2dcc.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648738 (0x286aa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=026e3c3568646609466eb56f4d80d46b89bb2dcc Validity Not Before: Mar 28 07:20:07 2024 GMT Not After : Mar 31 10:13:07 2024 GMT Subject: CN=99bb4be0bfbe03b5841cac3d0f19afe65d4abae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:56:1b:03:04:84:25:4c:5e:c0:ab:dd:0b: 57:96:44:e3:04:79:a4:16:01:e6:4e:f5:93:59:ea: 46:bf:5c:02:b5:fb:86:b5:d7:e1:11:7a:29:1b:9d: d5:5a:aa:ae:68:b5:7b:b3:13:18:46:b5:d0:fa:df: f4:e9:61:d6:2d:99:8b:2c:2e:cc:34:36:20:f1:a2: 35:53:d1:0f:35:3b:2b:fc:21:08:80:b8:9b:39:7f: c7:0a:de:e6:6f:4b:35:61:d2:cc:47:dc:b4:71:c9: ff:e1:2d:11:4b:45:1f:03:f1:00:cc:19:36:9a:be: 8a:a9:39:83:b3:87:2f:37:8a:52:c6:32:de:11:3b: 18:0d:71:98:1d:af:4f:e4:f0:69:b7:be:2c:3b:38: 5e:a9:d5:f2:4a:12:b9:8d:bf:e5:59:50:9c:0f:aa: 02:20:cd:63:2b:ee:c4:b5:3a:cb:1b:19:25:0e:46: 61:c7:23:04:27:67:ef:34:44:67:6e:28:f3:87:fe: c9:e4:35:60:75:25:9e:80:57:4c:9f:27:ca:81:45: 5f:ae:35:a3:85:ed:d9:2a:d7:40:bd:f9:4b:55:2f: 72:d0:27:58:5d:cd:d4:a8:a5:74:80:52:0c:91:84: 1b:e3:30:30:1f:2f:85:0d:fd:4d:d7:fc:11:a1:42: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:BB:17:52:20:54:75:A9:48:87:6C:6B:41:C0:6C:6E:E5:3B:6B X509v3 Authority Key Identifier: keyid:49:CC:30:C6:95:38:DC:0C:E5:55:ED:EF:6E:A5:68:27:2E:86:FD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/026e3c3568646609466eb56f4d80d46b89bb2dcc.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:79:52:3b:a3:44:81:ba:83:df:a7:36:0d:d8:22:33:61:a0: 77:e3:64:30:97:e4:1b:2c:c3:b8:da:03:11:47:02:0f:be:96: 32:4b:71:d6:49:0f:1c:29:dd:7f:1b:89:06:31:f7:11:40:0e: 77:ae:5d:f0:26:d8:09:55:46:dd:59:39:6a:15:bf:a9:ab:b3: a8:96:46:0a:92:56:69:91:84:00:bf:67:39:cf:c7:c2:2d:55: d4:50:ee:f3:20:d2:69:29:6d:88:00:cf:e5:3c:f7:35:5c:17: 42:3b:07:39:67:b1:f7:51:33:70:85:73:4c:02:90:ba:2f:5a: 55:7e:ad:b3:cb:bd:36:46:a5:c1:5c:79:2a:e2:ba:fb:20:d2: 1b:d3:4d:3e:cc:78:e9:ff:85:20:64:3e:31:6c:37:f0:84:d3: 66:d0:5d:5d:42:b6:09:53:b0:c0:23:71:45:7e:40:7c:39:af: 50:a7:7b:31:a9:53:32:49:3c:67:6f:05:9f:e0:f8:9f:80:c5: 43:05:78:68:ab:84:4b:70:4b:dc:2f:3a:27:ee:70:df:c7:eb: 34:dd:7d:4a:29:a9:62:6e:88:c1:6a:15:83:2a:aa:83:e2:1c: fb:c1:e8:a0:d8:26:d9:01:36:cc:4a:4e:f7:06:ca:6e:ab:dc: b5:4e:28:ee -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKGqiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAy NmUzYzM1Njg2NDY2MDk0NjZlYjU2ZjRkODBkNDZiODliYjJkY2MwHhcNMjQwMzI4 MDcyMDA3WhcNMjQwMzMxMTAxMzA3WjAzMTEwLwYDVQQDEyg5OWJiNGJlMGJmYmUw M2I1ODQxY2FjM2QwZjE5YWZlNjVkNGFiYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArclWGwMEhCVMXsCr3QtXlkTjBHmkFgHmTvWTWepGv1wCtfuG tdfhEXopG53VWqquaLV7sxMYRrXQ+t/06WHWLZmLLC7MNDYg8aI1U9EPNTsr/CEI gLibOX/HCt7mb0s1YdLMR9y0ccn/4S0RS0UfA/EAzBk2mr6KqTmDs4cvN4pSxjLe ETsYDXGYHa9P5PBpt74sOzheqdXyShK5jb/lWVCcD6oCIM1jK+7EtTrLGxklDkZh xyMEJ2fvNERnbijzh/7J5DVgdSWegFdMnyfKgUVfrjWjhe3ZKtdAvflLVS9y0CdY Xc3UqKV0gFIMkYQb4zAwHy+FDf1N1/wRoULgeQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPqTuxdSIFR1qUiHbGtBwGxu5TtrMB8GA1UdIwQYMBaAFEnMMMaVONwM5VXt 726laCcuhv1GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDI2ZTNj MzU2ODY0NjYwOTQ2NmViNTZmNGQ4MGQ0NmI4OWJiMmRjYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMTY2MmY3ODEtNGZmMy00MDEwLWI5MTQtNTdhZDdj MjRiZGRhLzAyNmUzYzM1Njg2NDY2MDk0NjZlYjU2ZjRkODBkNDZiODliYjJkY2Mu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xNjYyZjc4MS00ZmYzLTQwMTAtYjkxNC01N2Fk N2MyNGJkZGEvMDI2ZTNjMzU2ODY0NjYwOTQ2NmViNTZmNGQ4MGQ0NmI4OWJiMmRj Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAD55UjujRIG6g9+nNg3YIjNhoHfjZDCX5Bssw7jaAxFHAg++ ljJLcdZJDxwp3X8biQYx9xFADneuXfAm2AlVRt1ZOWoVv6mrs6iWRgqSVmmRhAC/ ZznPx8ItVdRQ7vMg0mkpbYgAz+U89zVcF0I7BzlnsfdRM3CFc0wCkLovWlV+rbPL vTZGpcFceSriuvsg0hvTTT7MeOn/hSBkPjFsN/CE02bQXV1CtglTsMAjcUV+QHw5 r1CnezGpUzJJPGdvBZ/g+J+AxUMFeGirhEtwS9wvOifucN/H6zTdfUopqWJuiMFq FYMqqoPiHPvB6KDYJtkBNsxKTvcGym6r3LVOKO4= -----END CERTIFICATE-----Generated at Thu Mar 28 10:46:59 2024 by rpki-client on console-ams.rpki-client.org