$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft File: 011a9b477733e7669c43604e0c34e662ac21a23d.mft (raw, json) Hash identifier: IO3qfqThcoq7HRAAXAXtszmii+f2tylgrx7n42tDbDw= Subject key identifier: F9:59:89:0A:AF:82:9A:DF:BB:B6:5E:C9:39:D9:24:9E:59:69:A4:C2 Authority key identifier: F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8 Certificate issuer: /CN=011a9b477733e7669c43604e0c34e662ac21a23d Certificate serial: 036A24 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft Manifest Number: 01BB Signing time: Wed 29 Mar 2023 14:16:28 +0000 Manifest this update: Wed 29 Mar 2023 13:15:46 +0000 Manifest next update: Sat 01 Apr 2023 16:55:46 +0000 Files and hashes: 1: 011a9b477733e7669c43604e0c34e662ac21a23d.crl (hash: yNPLWFrOXTD9UbrMOzYaLwXYrOpX0dj7hAIxjd/0qvU=) 2: cfb14fc051a0066f97f79bb9cb1d232d818dd81d.roa (hash: LRjUIVzU5L/lzRjhOdDn0q0hX0PKMaUQjofkeUeK/X0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.crl rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Apr 2023 09:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223780 (0x36a24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a9b477733e7669c43604e0c34e662ac21a23d Validity Not Before: Mar 29 13:15:46 2023 GMT Not After : Apr 1 16:55:46 2023 GMT Subject: CN=95c1fc8b69a401b99688bedef7fe61c9a76a87ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:95:57:9f:d2:19:fa:c9:92:3e:5f:b9:8f: 6d:46:d5:01:f1:13:aa:2b:3c:de:5c:e7:dd:ce:94: eb:10:28:16:21:8a:c2:2e:f8:7b:ee:73:f5:b2:85: 94:85:e8:fa:98:db:4d:9a:cf:df:dc:01:24:43:fc: 19:87:c8:ea:b2:be:92:a4:01:a3:27:d0:83:0c:c9: 28:9e:6e:2e:43:84:13:85:5b:3a:45:02:89:d4:d5: 80:36:32:a3:47:4c:b4:ff:43:ef:24:62:b8:b5:c6: 52:5d:73:6a:45:2f:8c:3a:66:73:08:ea:e1:3d:45: c3:07:31:af:3f:c5:3a:12:59:06:29:51:d4:76:fb: 6e:64:2a:d7:bd:74:ec:6a:5e:27:bf:c0:cd:f9:91: b1:9e:95:08:f9:08:59:7c:f5:65:b4:05:6a:23:8f: a8:4d:af:77:da:81:e1:e2:ec:80:9d:ad:b0:e4:02: b5:e2:0f:ff:d3:76:27:d6:ff:de:12:f3:a5:3d:bd: 70:86:2d:19:65:19:77:1d:50:7f:93:94:4c:b4:bb: 89:e8:9f:17:59:a9:3d:0b:3d:5f:6e:36:53:f6:8b: 4f:69:98:49:0b:81:ab:01:fb:4a:57:9d:9d:3c:ba: 02:e0:80:6f:66:e5:ac:58:9b:18:e3:9d:4a:7b:1e: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:89:0A:AF:82:9A:DF:BB:B6:5E:C9:39:D9:24:9E:59:69:A4:C2 X509v3 Authority Key Identifier: keyid:F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:86:9f:26:a9:ec:67:fb:4c:d0:56:b7:29:04:eb:7b:6a: 39:63:09:2d:89:e6:d6:2d:70:89:f2:13:55:45:63:7f:84:c8: 43:ba:15:b9:23:c4:dc:38:b1:e2:d7:c8:62:be:40:fd:f3:70: 0c:9f:86:6d:13:64:80:86:a9:d7:5d:54:30:d2:f5:c4:9f:50: cb:00:b8:88:fb:a3:67:91:fe:88:14:9e:87:f5:dd:48:f0:27: c0:71:94:ab:9e:a1:db:43:10:84:aa:6d:bc:16:70:03:4b:03: c6:44:d2:3d:81:7e:a4:7d:bd:a6:99:56:08:e9:07:16:e9:00: 83:aa:2a:f5:6f:02:3e:82:c6:4b:3f:5d:25:be:59:a9:e4:27: 21:14:9f:dd:f4:e9:9d:0b:3e:9d:20:ca:43:b5:c4:34:01:16: 5a:f4:ee:69:c6:ac:d8:fc:4d:7b:fa:72:fd:fa:ae:a5:76:58: 05:41:a6:52:13:be:e3:81:e7:0a:6e:4b:d7:a8:4c:a3:b9:35: 40:e4:12:44:dc:0b:8f:09:92:64:f6:5d:91:2a:f4:c3:1d:a1: 54:b0:e6:ac:12:01:86:52:bd:f5:c8:17:e4:9b:32:d8:21:e0: 9e:85:39:3c:b5:09:e4:99:0d:3b:ad:c2:af:44:90:0a:28:4b: d7:c2:f9:b6 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDA2okMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAx MWE5YjQ3NzczM2U3NjY5YzQzNjA0ZTBjMzRlNjYyYWMyMWEyM2QwHhcNMjMwMzI5 MTMxNTQ2WhcNMjMwNDAxMTY1NTQ2WjAzMTEwLwYDVQQDEyg5NWMxZmM4YjY5YTQw MWI5OTY4OGJlZGVmN2ZlNjFjOWE3NmE4N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqpuVV5/SGfrJkj5fuY9tRtUB8ROqKzzeXOfdzpTrECgWIYrC Lvh77nP1soWUhej6mNtNms/f3AEkQ/wZh8jqsr6SpAGjJ9CDDMkonm4uQ4QThVs6 RQKJ1NWANjKjR0y0/0PvJGK4tcZSXXNqRS+MOmZzCOrhPUXDBzGvP8U6ElkGKVHU dvtuZCrXvXTsal4nv8DN+ZGxnpUI+QhZfPVltAVqI4+oTa932oHh4uyAna2w5AK1 4g//03Yn1v/eEvOlPb1whi0ZZRl3HVB/k5RMtLuJ6J8XWak9Cz1fbjZT9otPaZhJ C4GrAftKV52dPLoC4IBvZuWsWJsY451Kex4CywIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPlZiQqvgprfu7ZeyTnZJJ5ZaaTCMB8GA1UdIwQYMBaAFPfwizOCxAe4DdRa YaamD1XURlHYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDExYTli NDc3NzMzZTc2NjljNDM2MDRlMGMzNGU2NjJhYzIxYTIzZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMWFmMWQ5ODYtYzczZi00YTA4LWEzZmMtYmJkNmE0 OGMzNjA5LzAxMWE5YjQ3NzczM2U3NjY5YzQzNjA0ZTBjMzRlNjYyYWMyMWEyM2Qu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xYWYxZDk4Ni1jNzNmLTRhMDgtYTNmYy1iYmQ2 YTQ4YzM2MDkvMDExYTliNDc3NzMzZTc2NjljNDM2MDRlMGMzNGU2NjJhYzIxYTIz ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAH+Dhp8mqexn+0zQVrcpBOt7ajljCS2J5tYtcInyE1VFY3+E yEO6FbkjxNw4seLXyGK+QP3zcAyfhm0TZICGqdddVDDS9cSfUMsAuIj7o2eR/ogU nof13UjwJ8BxlKueodtDEISqbbwWcANLA8ZE0j2BfqR9vaaZVgjpBxbpAIOqKvVv Aj6Cxks/XSW+WankJyEUn9306Z0LPp0gykO1xDQBFlr07mnGrNj8TXv6cv36rqV2 WAVBplITvuOB5wpuS9eoTKO5NUDkEkTcC48JkmT2XZEq9MMdoVSw5qwSAYZSvfXI F+SbMtgh4J6FOTy1CeSZDTutwq9EkAooS9fC+bY= -----END CERTIFICATE-----Generated at Wed Mar 29 14:45:11 2023 by rpki-client on console-fra.rpki-client.org