$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.mft File: 5fc7f0db9a5164f90e759ae11ff173e2845cfc55.mft (raw, json) Hash identifier: c3eG28lzqPuY5dA8KoHU2dOsfDexwswJ61Z+ysmF2D4= Subject key identifier: D1:31:41:DB:25:04:FF:C3:53:22:BD:AA:46:E1:99:DF:7D:2B:9F:6D Authority key identifier: D0:B6:9A:CB:9A:27:FA:1A:52:68:1F:A0:8F:10:78:EC:9F:3F:FF:AC Certificate issuer: /CN=5fc7f0db9a5164f90e759ae11ff173e2845cfc55 Certificate serial: 272549 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.mft Manifest number: 0DBA Signing time: Thu 28 Mar 2024 03:20:37 +0000 Manifest this update: Thu 28 Mar 2024 02:20:09 +0000 Manifest next update: Sun 31 Mar 2024 05:26:09 +0000 Files and hashes: 1: 47615f46f7063abda7cf0eddb64723c2025487de.roa (hash: Jyc5bPU3kU7R5d9PPZ1sI8Ajlft7yIR9DjAYd1WXUng=) 2: 5fc7f0db9a5164f90e759ae11ff173e2845cfc55.crl (hash: 8ukyxzFWazNqzJX2ULA5/lFfvexO1bsOcXLJuLmu2L0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.crl rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2565449 (0x272549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc7f0db9a5164f90e759ae11ff173e2845cfc55 Validity Not Before: Mar 28 02:20:09 2024 GMT Not After : Mar 31 05:26:09 2024 GMT Subject: CN=a60f567848cb2f0739a0df52377160523f8e64e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:5d:3e:e3:b2:06:4c:bf:06:50:a8:2b:c5: 29:c1:28:cd:35:75:19:5e:f4:1a:5f:eb:38:2a:4f: b8:9e:05:4e:09:06:31:e3:f3:61:38:9c:f6:ee:fc: 1d:8f:1a:f0:5b:16:d9:8b:dd:4d:ec:90:9a:4d:f1: b1:19:d9:0e:18:72:40:3e:1a:88:5f:e7:10:7c:a0: 1a:e3:54:1c:68:7f:a0:c8:40:6b:e2:3d:96:58:dc: 55:9a:d6:ba:5b:5a:95:ec:b5:a4:b9:e5:06:e3:b7: c9:c7:da:78:92:24:14:d3:de:b3:65:ba:20:f8:4d: f5:79:42:05:95:9b:bc:c3:9f:14:50:d4:b3:2c:bc: 90:ad:31:1a:df:d1:37:0c:89:b5:4f:a2:a6:f5:c4: c9:07:fb:12:46:6c:02:11:7c:8d:04:52:47:d8:cd: 97:9b:ac:4d:ab:db:3e:ed:2f:4e:f5:ed:52:ee:b3: c7:e7:30:3a:80:5e:54:b3:bb:f7:fd:b7:93:f4:f1: 55:53:e5:e9:fc:8b:3b:c8:ad:ac:39:60:6b:7d:18: a2:5c:9e:08:94:37:4e:65:2e:0e:c6:05:b3:44:53: 4a:72:3c:62:81:f6:b5:00:ab:82:ce:e9:54:1b:84: 6a:48:57:3d:67:69:cc:6e:31:a2:fb:05:a0:17:44: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:31:41:DB:25:04:FF:C3:53:22:BD:AA:46:E1:99:DF:7D:2B:9F:6D X509v3 Authority Key Identifier: keyid:D0:B6:9A:CB:9A:27:FA:1A:52:68:1F:A0:8F:10:78:EC:9F:3F:FF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bd:03:06:90:1d:bb:e4:07:57:21:53:83:b3:dc:94:bf:03: 9c:83:ca:46:49:fa:96:95:5e:4e:f8:43:4b:a9:46:96:3f:b0: e0:2e:b6:52:f2:21:39:1e:8c:76:5c:4b:dd:e2:0e:0b:f9:9d: d6:53:57:6e:63:ed:56:8e:a0:9d:16:56:0a:92:ee:45:08:83: 4b:64:0a:c3:63:70:c1:7d:cd:84:55:57:df:d2:a0:1f:fa:aa: aa:a9:21:ed:38:7e:1d:c5:f1:c4:c0:0d:6e:bf:e6:ea:8f:96: 0e:c8:c0:fa:9f:7f:d9:20:16:85:b1:47:5c:63:17:fb:6a:db: 7b:33:4d:aa:f9:39:64:fc:b9:ba:cd:5b:78:1c:48:47:b9:09: 79:7f:0d:e9:3e:f4:ab:dd:31:64:54:59:9f:1d:7d:06:4c:51: c3:2f:b0:c2:46:23:31:a5:78:ce:45:ac:b8:84:24:d9:4b:20: c6:1c:a0:3f:b9:ce:1e:76:30:53:3f:e6:38:28:34:95:96:da: 39:fc:87:fd:1c:fb:27:c0:ed:52:40:ac:55:66:70:4c:a6:36: 67:a9:37:87:70:f9:5a:24:b2:08:d4:50:32:7d:a2:91:00:5a: 96:ff:c8:be:60:0f:05:fc:e1:11:1b:a8:ee:14:35:25:df:11: a1:d6:92:61 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJyVJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm YzdmMGRiOWE1MTY0ZjkwZTc1OWFlMTFmZjE3M2UyODQ1Y2ZjNTUwHhcNMjQwMzI4 MDIyMDA5WhcNMjQwMzMxMDUyNjA5WjAzMTEwLwYDVQQDEyhhNjBmNTY3ODQ4Y2Iy ZjA3MzlhMGRmNTIzNzcxNjA1MjNmOGU2NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnh5dPuOyBky/BlCoK8UpwSjNNXUZXvQaX+s4Kk+4ngVOCQYx 4/NhOJz27vwdjxrwWxbZi91N7JCaTfGxGdkOGHJAPhqIX+cQfKAa41QcaH+gyEBr 4j2WWNxVmta6W1qV7LWkueUG47fJx9p4kiQU096zZbog+E31eUIFlZu8w58UUNSz LLyQrTEa39E3DIm1T6Km9cTJB/sSRmwCEXyNBFJH2M2Xm6xNq9s+7S9O9e1S7rPH 5zA6gF5Us7v3/beT9PFVU+Xp/Is7yK2sOWBrfRiiXJ4IlDdOZS4OxgWzRFNKcjxi gfa1AKuCzulUG4RqSFc9Z2nMbjGi+wWgF0TrfwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFNExQdslBP/DUyK9qkbhmd99K59tMB8GA1UdIwQYMBaAFNC2msuaJ/oaUmgf oI8QeOyfP/+sMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWZjN2Yw ZGI5YTUxNjRmOTBlNzU5YWUxMWZmMTczZTI4NDVjZmM1NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjJhYzdhNTQtM2EwNy00YjI3LThlMDMtMTBiZDk1 MTM2ODY4LzVmYzdmMGRiOWE1MTY0ZjkwZTc1OWFlMTFmZjE3M2UyODQ1Y2ZjNTUu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yMmFjN2E1NC0zYTA3LTRiMjctOGUwMy0xMGJk OTUxMzY4NjgvNWZjN2YwZGI5YTUxNjRmOTBlNzU5YWUxMWZmMTczZTI4NDVjZmM1 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHq9AwaQHbvkB1chU4Oz3JS/A5yDykZJ+paVXk74Q0upRpY/ sOAutlLyITkejHZcS93iDgv5ndZTV25j7VaOoJ0WVgqS7kUIg0tkCsNjcMF9zYRV V9/SoB/6qqqpIe04fh3F8cTADW6/5uqPlg7IwPqff9kgFoWxR1xjF/tq23szTar5 OWT8ubrNW3gcSEe5CXl/Dek+9KvdMWRUWZ8dfQZMUcMvsMJGIzGleM5FrLiEJNlL IMYcoD+5zh52MFM/5jgoNJWW2jn8h/0c+yfA7VJArFVmcEymNmepN4dw+VoksgjU UDJ9opEAWpb/yL5gDwX84REbqO4UNSXfEaHWkmE= -----END CERTIFICATE-----Generated at Thu Mar 28 04:08:00 2024 by rpki-client on console-ams.rpki-client.org