$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.mft File: 7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.mft (raw, json) Hash identifier: qFIhah3PZ/qZmcn2rEoVGjK7ie4gKYwQs2tdbpEG0kY= Subject key identifier: 1D:00:4F:E6:54:86:CA:FF:D7:BF:D5:3F:05:67:D1:0B:93:91:01:8F Authority key identifier: FA:C4:DA:CB:D0:88:43:CB:DC:1F:78:38:A4:7D:61:FC:B2:07:A6:8A Certificate issuer: /CN=7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee Certificate serial: 1CC5A7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.mft Manifest number: 0D95 Signing time: Fri 29 Mar 2024 01:20:42 +0000 Manifest this update: Fri 29 Mar 2024 00:20:07 +0000 Manifest next update: Mon 01 Apr 2024 02:07:07 +0000 Files and hashes: 1: 17204b1f444b8c1f2ab2d9e62b118033fda2fdf0.roa (hash: tgQuUzYxGXWabjMXziMU4V5/kLxt06VkYkhFuGs4Is8=) 2: 7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.crl (hash: i35dFknq5PeRvOWFYbpQAOB3v1cJabxc58h70H4WmFY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.crl rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885607 (0x1cc5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee Validity Not Before: Mar 29 00:20:07 2024 GMT Not After : Apr 1 02:07:07 2024 GMT Subject: CN=402f8404abfa12bb4b7bdd233a593781b2f817eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:ab:f1:7a:87:fe:d1:cd:b5:14:13:60:fa: 67:bc:33:a3:a8:92:1a:d3:52:0c:0f:d9:6c:c5:fd: 1a:11:81:38:60:65:0f:83:a9:89:cc:0f:66:63:4f: 9e:11:b2:c7:1d:7d:e3:4d:a1:d1:09:ae:cb:17:fd: f5:b4:3c:1f:98:b2:d4:52:fc:ae:05:b9:f7:b0:1b: 49:71:bd:0d:4d:cb:70:66:b9:f8:97:36:c0:50:3b: 8f:e5:68:37:e7:02:4b:7f:b7:d1:20:f0:21:e7:51: 91:c2:84:c7:85:fa:c2:c6:78:7f:43:fd:e3:93:f1: 61:96:50:66:13:0f:bb:cf:36:81:2f:43:09:6d:34: ea:44:4a:c6:f8:5a:7d:7e:81:95:7f:98:32:d7:7d: 70:ec:b8:de:e3:d8:04:4e:19:3a:4d:a3:6c:a6:2d: bc:2a:a5:72:ed:ea:2e:13:a3:ed:45:c4:99:1c:46: f8:a1:45:30:aa:00:2d:75:9e:23:72:9d:20:f1:fb: c0:01:18:94:4e:c2:ec:5f:c8:87:b9:6e:bc:f3:1c: 12:5d:07:0d:dc:a3:22:38:40:84:55:8c:a2:d3:b9: 88:6f:a3:6b:e6:9f:59:7a:ca:b2:7f:3f:9a:63:61: 13:a1:a3:41:15:04:b4:10:9c:8f:46:85:cf:c3:c5: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:00:4F:E6:54:86:CA:FF:D7:BF:D5:3F:05:67:D1:0B:93:91:01:8F X509v3 Authority Key Identifier: keyid:FA:C4:DA:CB:D0:88:43:CB:DC:1F:78:38:A4:7D:61:FC:B2:07:A6:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:71:51:26:ea:08:a7:cd:ce:50:87:32:ab:99:10:af:a0:7e: 8e:a9:70:5c:a9:c6:84:c0:8a:aa:4e:49:c3:b5:be:f5:ad:41: 8d:a7:68:0c:59:cd:bb:82:20:cd:01:a9:8c:c7:84:7d:11:3d: fe:47:2e:3f:42:bf:21:30:7d:bf:28:bd:5d:8d:67:ea:ee:77: 9a:34:0e:4f:3f:45:0a:26:35:87:8a:41:1f:18:cf:fa:a8:20: 27:5a:7a:57:c2:4b:6e:fc:e8:71:87:fd:88:a4:12:33:5d:fb: 4a:7b:cd:d8:94:d3:c1:72:e5:1e:fc:42:46:4b:96:5c:f2:89: 3a:14:95:7d:44:12:7f:3d:7d:d6:39:0b:aa:22:15:72:1c:76: 86:c3:75:fa:31:60:82:e1:37:1d:16:6f:b4:04:b4:79:9f:44: f1:d2:75:3c:a8:9f:bc:de:18:bc:3d:71:a6:2e:6d:8b:31:14: 08:e0:f8:0b:5b:92:9c:de:05:9b:30:cc:ef:2b:33:d2:21:c6: 2b:b0:95:ca:6f:08:de:61:b0:b2:46:79:e4:ae:42:b7:ce:d0: a3:e4:be:d7:fd:15:73:a6:36:5d:9e:d8:6c:1f:d8:14:d1:d0: 52:90:d7:97:98:e0:46:37:bf:c6:64:6e:d1:eb:56:1e:6c:4b: fe:7a:23:4a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHMWnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4 NDc5MzNhY2MzZjljZjdlYTFjZTNjYTVmMjBhMTM5NWQ3YjZjZWUwHhcNMjQwMzI5 MDAyMDA3WhcNMjQwNDAxMDIwNzA3WjAzMTEwLwYDVQQDEyg0MDJmODQwNGFiZmEx MmJiNGI3YmRkMjMzYTU5Mzc4MWIyZjgxN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApjWr8XqH/tHNtRQTYPpnvDOjqJIa01IMD9lsxf0aEYE4YGUP g6mJzA9mY0+eEbLHHX3jTaHRCa7LF/31tDwfmLLUUvyuBbn3sBtJcb0NTctwZrn4 lzbAUDuP5Wg35wJLf7fRIPAh51GRwoTHhfrCxnh/Q/3jk/FhllBmEw+7zzaBL0MJ bTTqRErG+Fp9foGVf5gy131w7Lje49gEThk6TaNspi28KqVy7eouE6PtRcSZHEb4 oUUwqgAtdZ4jcp0g8fvAARiUTsLsX8iHuW688xwSXQcN3KMiOECEVYyi07mIb6Nr 5p9Zesqyfz+aY2EToaNBFQS0EJyPRoXPw8XyvQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFB0AT+ZUhsr/17/VPwVn0QuTkQGPMB8GA1UdIwQYMBaAFPrE2svQiEPL3B94 OKR9YfyyB6aKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzg0Nzkz M2FjYzNmOWNmN2VhMWNlM2NhNWYyMGExMzk1ZDdiNmNlZS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMWJlMTc4ZDYtNjc5ZS00YjA3LTk3NDQtNTQ3OGUw M2FlZTUxLzc4NDc5MzNhY2MzZjljZjdlYTFjZTNjYTVmMjBhMTM5NWQ3YjZjZWUu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xYmUxNzhkNi02NzllLTRiMDctOTc0NC01NDc4 ZTAzYWVlNTEvNzg0NzkzM2FjYzNmOWNmN2VhMWNlM2NhNWYyMGExMzk1ZDdiNmNl ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAFtxUSbqCKfNzlCHMquZEK+gfo6pcFypxoTAiqpOScO1vvWt QY2naAxZzbuCIM0BqYzHhH0RPf5HLj9CvyEwfb8ovV2NZ+rud5o0Dk8/RQomNYeK QR8Yz/qoICdaelfCS2786HGH/YikEjNd+0p7zdiU08Fy5R78QkZLllzyiToUlX1E En89fdY5C6oiFXIcdobDdfoxYILhNx0Wb7QEtHmfRPHSdTyon7zeGLw9caYubYsx FAjg+AtbkpzeBZswzO8rM9IhxiuwlcpvCN5hsLJGeeSuQrfO0KPkvtf9FXOmNl2e 2Gwf2BTR0FKQ15eY4EY3v8ZkbtHrVh5sS/56I0o= -----END CERTIFICATE-----Generated at Fri Mar 29 02:12:56 2024 by rpki-client on console-ams.rpki-client.org