$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft File: 9d0eefbeed1a04984bf835792198e2b00880f6fa.mft (raw, json) Hash identifier: w/+xpXGYLgFzYFJMAvF7JR3ZhEu5b7o40qXJgmpp/G8= Subject key identifier: 5F:9F:C6:31:E3:5C:D1:A0:F0:5E:66:57:8D:36:D6:68:8B:89:10:9B Authority key identifier: 1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70 Certificate issuer: /CN=9d0eefbeed1a04984bf835792198e2b00880f6fa Certificate serial: 1CB59A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft Manifest number: 0DD3 Signing time: Thu 28 Mar 2024 15:21:11 +0000 Manifest this update: Thu 28 Mar 2024 14:20:15 +0000 Manifest next update: Sun 31 Mar 2024 17:08:15 +0000 Files and hashes: 1: 9cc977feb2997a9ae59c40d3f4db71f7b82175e7.roa (hash: 4klH9zB3JIvICEJiqEGEu7q9qx4RVBit8IRiZAM7bNs=) 2: 9d0eefbeed1a04984bf835792198e2b00880f6fa.crl (hash: 3PjpTeuGkJpRuRj+dBiwUCxuvQvVq0dI53an1DI6ch8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881498 (0x1cb59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0eefbeed1a04984bf835792198e2b00880f6fa Validity Not Before: Mar 28 14:20:15 2024 GMT Not After : Mar 31 17:08:15 2024 GMT Subject: CN=dbdf7c069b6af334846e4e79a5c251e675ed8321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:db:ff:8b:de:c4:7d:b9:ef:b5:ae:88:c0: 5d:03:66:45:8e:cc:04:82:23:59:79:88:22:84:31: 2b:a7:a2:d5:64:92:a2:0a:74:31:7a:f4:55:b9:a3: d7:52:eb:86:2e:94:96:fa:ed:56:7f:9f:28:8d:20: 9a:a8:29:80:ed:c2:1f:a0:47:7c:cc:f7:98:49:1c: 18:a1:45:a3:d8:76:87:5f:14:07:87:42:2e:87:7b: 83:f4:c6:25:84:9a:f9:85:6c:25:aa:b6:8e:cc:57: 7a:13:45:94:1d:b8:9b:ca:81:28:43:a1:cc:6e:ea: 30:8c:7c:23:49:7c:1d:bf:08:d2:d5:30:1f:fa:22: 69:f3:ee:d8:1e:0d:03:c6:d2:28:4e:b2:2a:5b:8b: d7:ab:57:a0:ff:b8:78:7d:71:c4:02:c2:b4:11:3f: f8:65:83:6b:ca:6b:21:92:9e:a4:78:53:7f:f3:d5: b4:cb:5a:98:fb:05:2c:a8:c6:c7:58:f4:f6:09:ac: 57:04:ed:bc:e2:f1:08:58:e5:76:30:b4:b5:09:ad: fb:9b:8f:01:92:94:43:d4:83:d6:4f:33:8d:e4:70: e8:3d:df:af:80:b6:44:5e:d2:f8:97:15:f0:78:de: d7:d3:b5:9f:c3:8e:cb:bf:01:bf:15:ca:f8:dc:9e: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9F:C6:31:E3:5C:D1:A0:F0:5E:66:57:8D:36:D6:68:8B:89:10:9B X509v3 Authority Key Identifier: keyid:1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:93:d4:45:6f:89:5d:0d:4e:a1:b2:89:3b:5a:00:40:c4:2f: 5b:ae:cf:ab:e0:12:f0:5b:02:5f:1c:61:a5:27:3b:e2:56:c0: b1:ba:c6:0c:4d:a6:21:91:2e:2b:0f:1a:55:0c:9f:69:52:a8: 02:cd:7a:91:e1:21:bf:1e:30:0a:39:bc:b1:70:33:ea:fe:4d: a3:e1:d2:a5:4a:3b:6d:85:5d:8a:f0:26:c6:53:dd:2c:7f:19: af:e3:01:6e:d2:b0:f1:73:5f:b8:90:64:4f:e2:e0:b1:c8:a8: 2f:9c:33:e9:f7:36:38:c6:a8:d6:d2:88:12:c6:46:b7:23:e3: 8b:15:2e:6c:46:50:4c:10:13:8c:8d:dc:5e:7a:be:be:69:cf: a9:52:6f:b1:69:6d:68:67:61:5a:81:0b:16:01:9c:b8:0e:be: 27:16:2d:18:41:30:2f:50:6b:ed:49:93:8f:ad:bf:c9:57:47: 34:b3:8a:7b:d3:74:bd:d5:41:85:b2:b5:49:9a:a2:99:50:84: 07:79:e7:57:f8:64:f9:87:6c:18:ce:8d:2d:50:59:91:e9:2e: 21:ac:cc:c9:c8:b5:3a:34:0c:2c:d1:45:3c:43:a6:93:c4:8f: 4c:9a:07:c8:43:fc:40:71:ca:16:92:59:a1:fe:e5:10:de:d2: 10:85:6c:16 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHLWaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk MGVlZmJlZWQxYTA0OTg0YmY4MzU3OTIxOThlMmIwMDg4MGY2ZmEwHhcNMjQwMzI4 MTQyMDE1WhcNMjQwMzMxMTcwODE1WjAzMTEwLwYDVQQDEyhkYmRmN2MwNjliNmFm MzM0ODQ2ZTRlNzlhNWMyNTFlNjc1ZWQ4MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvJzb/4vexH2577WuiMBdA2ZFjswEgiNZeYgihDErp6LVZJKi CnQxevRVuaPXUuuGLpSW+u1Wf58ojSCaqCmA7cIfoEd8zPeYSRwYoUWj2HaHXxQH h0Iuh3uD9MYlhJr5hWwlqraOzFd6E0WUHbibyoEoQ6HMbuowjHwjSXwdvwjS1TAf +iJp8+7YHg0DxtIoTrIqW4vXq1eg/7h4fXHEAsK0ET/4ZYNrymshkp6keFN/89W0 y1qY+wUsqMbHWPT2CaxXBO284vEIWOV2MLS1Ca37m48BkpRD1IPWTzON5HDoPd+v gLZEXtL4lxXweN7X07Wfw47LvwG/Fcr43J4qzQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFF+fxjHjXNGg8F5mV4021miLiRCbMB8GA1UdIwQYMBaAFBsBOmVWBAlFeGhB WUrEHXhCTXxwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQwZWVm YmVlZDFhMDQ5ODRiZjgzNTc5MjE5OGUyYjAwODgwZjZmYS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMWM1M2FjYzQtMWQ4MS00NzIxLWIwZmYtMDkyNGEw YzhlMWU1LzlkMGVlZmJlZWQxYTA0OTg0YmY4MzU3OTIxOThlMmIwMDg4MGY2ZmEu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xYzUzYWNjNC0xZDgxLTQ3MjEtYjBmZi0wOTI0 YTBjOGUxZTUvOWQwZWVmYmVlZDFhMDQ5ODRiZjgzNTc5MjE5OGUyYjAwODgwZjZm YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHWT1EVviV0NTqGyiTtaAEDEL1uuz6vgEvBbAl8cYaUnO+JW wLG6xgxNpiGRLisPGlUMn2lSqALNepHhIb8eMAo5vLFwM+r+TaPh0qVKO22FXYrw JsZT3Sx/Ga/jAW7SsPFzX7iQZE/i4LHIqC+cM+n3NjjGqNbSiBLGRrcj44sVLmxG UEwQE4yN3F56vr5pz6lSb7FpbWhnYVqBCxYBnLgOvicWLRhBMC9Qa+1Jk4+tv8lX RzSzinvTdL3VQYWytUmaoplQhAd551f4ZPmHbBjOjS1QWZHpLiGszMnItTo0DCzR RTxDppPEj0yaB8hD/EBxyhaSWaH+5RDe0hCFbBY= -----END CERTIFICATE-----Generated at Thu Mar 28 16:02:49 2024 by rpki-client on console-ams.rpki-client.org