$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.mft File: d67721c2027f185afaeb0fd9d993b9129e9feda6.mft (raw, json) Hash identifier: V+QnpKCmEh5Fet9REtokuHMBg72vVAe3lvj/r/N37YA= Subject key identifier: D2:0C:E1:AE:A6:DA:96:73:7A:41:21:62:C5:0F:15:5C:13:13:26:C1 Authority key identifier: C8:0D:D7:45:1A:E4:AB:F7:71:85:CA:6A:47:59:55:64:92:AD:B9:55 Certificate issuer: /CN=d67721c2027f185afaeb0fd9d993b9129e9feda6 Certificate serial: 18C6E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67721c2027f185afaeb0fd9d993b9129e9feda6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.mft Manifest Number: 091D Signing time: Sat 25 Mar 2023 14:16:04 +0000 Manifest this update: Sat 25 Mar 2023 13:15:42 +0000 Manifest next update: Tue 28 Mar 2023 16:35:42 +0000 Files and hashes: 1: 37877c4389797fd296803c78f0f88ac7ab724585.roa (hash: YvQnCgCG9ymrq4fzpAZbw/G5NmtO+aG0z+v3hevA4YI=) 2: d67721c2027f185afaeb0fd9d993b9129e9feda6.crl (hash: yd1c9cA8VNTbWBRDHCFJvYS3mXg4tUrEht8jQYlZ1to=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.crl rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67721c2027f185afaeb0fd9d993b9129e9feda6.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Mar 2023 12:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623776 (0x18c6e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67721c2027f185afaeb0fd9d993b9129e9feda6 Validity Not Before: Mar 25 13:15:42 2023 GMT Not After : Mar 28 16:35:42 2023 GMT Subject: CN=c2a81696ede2892b27b75d0159dcc9843767d512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d0:81:d6:5a:bd:09:5e:f7:ed:48:13:6a:4d: 32:e4:8f:7c:d2:a8:10:05:3f:f0:83:de:fc:ea:5e: 9c:bc:7c:05:61:5e:28:5b:59:a6:23:fc:8f:64:58: 67:6c:81:5a:ae:18:47:5e:2e:37:98:ac:00:97:c2: f8:fb:11:ed:11:9b:a1:b0:9c:85:a8:92:58:7d:aa: b4:60:85:37:ce:b6:1a:cb:d6:cc:7c:31:51:e8:13: f5:27:1c:57:23:da:9e:b7:d8:d0:26:bf:6b:42:ea: 18:1f:26:cd:8d:44:a7:4b:aa:35:87:8f:18:0f:c5: 5a:20:31:f3:9a:e4:c2:21:bd:03:d4:de:a3:b7:11: 54:ee:de:27:ec:ef:2d:b5:be:37:76:88:7a:aa:6b: f8:8f:1e:3b:5b:07:1c:d7:ee:9a:56:dd:7f:65:4f: 90:0d:ca:be:6d:af:ab:bf:0a:7e:21:fd:90:52:78: 65:0a:d7:82:ff:37:9a:4c:2b:f6:d1:e7:97:17:81: 7e:7f:61:38:71:a7:28:ba:60:f0:3e:3d:e6:78:a6: 57:6e:f4:a8:90:1c:46:2f:29:64:23:c2:82:14:8c: 63:0b:2b:27:be:ce:0e:89:5b:27:bb:e8:56:a8:90: fd:ed:48:21:52:91:70:c8:0e:fe:5a:4a:10:7d:9b: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:E1:AE:A6:DA:96:73:7A:41:21:62:C5:0F:15:5C:13:13:26:C1 X509v3 Authority Key Identifier: keyid:C8:0D:D7:45:1A:E4:AB:F7:71:85:CA:6A:47:59:55:64:92:AD:B9:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67721c2027f185afaeb0fd9d993b9129e9feda6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:20:b8:ee:69:af:b0:f8:9b:2e:b0:65:cd:13:21:2b:b6:89: bb:b2:96:e1:f4:0d:8c:bb:bc:f6:6a:28:3c:86:a5:8a:82:ea: 4f:a9:90:30:a0:5a:40:1d:0f:be:79:fc:7a:59:ec:d2:40:5c: b8:2f:05:88:d3:e2:45:a0:b3:1d:aa:fe:df:4b:82:fd:ec:1e: 54:07:d5:25:c0:80:05:95:79:02:74:56:7d:dd:80:fd:b7:54: 50:c9:d3:a0:2b:52:16:e8:48:13:5e:36:53:41:81:e8:64:f8: 24:ef:42:ef:91:ad:27:68:aa:36:1b:7d:e4:c9:8e:8b:7f:4f: 58:af:22:ff:61:03:c8:3e:e6:2d:49:e9:4a:6f:88:7e:b4:c6: 5f:8a:d7:35:c8:33:3b:97:30:e1:57:4f:9a:fa:73:76:d3:46: 00:c4:72:4f:4b:c8:34:be:75:d4:ed:11:67:d4:3e:7e:94:7f: d2:a5:aa:5d:1e:51:bd:a8:45:2f:37:3e:30:a9:50:86:03:84: 97:08:10:67:ee:b4:7e:c8:41:44:af:b6:96:4d:b1:5b:12:f3: 11:25:39:42:42:14:aa:44:74:41:41:d9:28:32:27:e1:8b:5b: a1:fa:26:67:a5:93:6b:c6:00:d9:ce:b9:1a:3e:ec:39:6f:1b: 99:ad:2b:0b -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGMbgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2 NzcyMWMyMDI3ZjE4NWFmYWViMGZkOWQ5OTNiOTEyOWU5ZmVkYTYwHhcNMjMwMzI1 MTMxNTQyWhcNMjMwMzI4MTYzNTQyWjAzMTEwLwYDVQQDEyhjMmE4MTY5NmVkZTI4 OTJiMjdiNzVkMDE1OWRjYzk4NDM3NjdkNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAg9CB1lq9CV737UgTak0y5I980qgQBT/wg9786l6cvHwFYV4o W1mmI/yPZFhnbIFarhhHXi43mKwAl8L4+xHtEZuhsJyFqJJYfaq0YIU3zrYay9bM fDFR6BP1JxxXI9qet9jQJr9rQuoYHybNjUSnS6o1h48YD8VaIDHzmuTCIb0D1N6j txFU7t4n7O8ttb43doh6qmv4jx47Wwcc1+6aVt1/ZU+QDcq+ba+rvwp+If2QUnhl CteC/zeaTCv20eeXF4F+f2E4cacoumDwPj3meKZXbvSokBxGLylkI8KCFIxjCysn vs4OiVsnu+hWqJD97UghUpFwyA7+WkoQfZtjqwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFNIM4a6m2pZzekEhYsUPFVwTEybBMB8GA1UdIwQYMBaAFMgN10Ua5Kv3cYXK akdZVWSSrblVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY3NzIx YzIwMjdmMTg1YWZhZWIwZmQ5ZDk5M2I5MTI5ZTlmZWRhNi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjFiMjNhOGItMWVkMi00OGQzLThmYTAtMGJiYWU5 ZDFlN2RlL2Q2NzcyMWMyMDI3ZjE4NWFmYWViMGZkOWQ5OTNiOTEyOWU5ZmVkYTYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yMWIyM2E4Yi0xZWQyLTQ4ZDMtOGZhMC0wYmJh ZTlkMWU3ZGUvZDY3NzIxYzIwMjdmMTg1YWZhZWIwZmQ5ZDk5M2I5MTI5ZTlmZWRh Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAIsguO5pr7D4my6wZc0TISu2ibuyluH0DYy7vPZqKDyGpYqC 6k+pkDCgWkAdD755/HpZ7NJAXLgvBYjT4kWgsx2q/t9Lgv3sHlQH1SXAgAWVeQJ0 Vn3dgP23VFDJ06ArUhboSBNeNlNBgehk+CTvQu+RrSdoqjYbfeTJjot/T1ivIv9h A8g+5i1J6UpviH60xl+K1zXIMzuXMOFXT5r6c3bTRgDEck9LyDS+ddTtEWfUPn6U f9Klql0eUb2oRS83PjCpUIYDhJcIEGfutH7IQUSvtpZNsVsS8xElOUJCFKpEdEFB 2SgyJ+GLW6H6Jmelk2vGANnOuRo+7DlvG5mtKws= -----END CERTIFICATE-----Generated at Sat Mar 25 14:45:35 2023 by rpki-client on console-ams.rpki-client.org