$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.mft File: 63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.mft (raw, json) Hash identifier: u7kSPu2i3Iff4CdOEPJgU2fnzfq+1awM0IiuhIaWerM= Subject key identifier: 18:1F:D1:1B:2A:F6:D1:88:27:57:CC:16:A1:BC:8A:DE:7E:2A:59:03 Authority key identifier: 5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9 Certificate issuer: /CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf Certificate serial: 1725C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.mft Manifest number: 0BE9 Signing time: Thu 28 Mar 2024 10:20:25 +0000 Manifest this update: Thu 28 Mar 2024 09:20:07 +0000 Manifest next update: Sun 31 Mar 2024 12:43:07 +0000 Files and hashes: 1: 63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.crl (hash: VrPYKdqLLaL0rt42GeBtp36mKysdWwHisySGhCf2Sfw=) 2: be52a0cabb7e497ed8fb8dd301d2376a1d698621.roa (hash: VVGDMaWkxu20uiBGXBlUnbef8xQYyvvUcrFqtTTIFak=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.crl rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 10:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516995 (0x1725c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf Validity Not Before: Mar 28 09:20:07 2024 GMT Not After : Mar 31 12:43:07 2024 GMT Subject: CN=bd8db0610329edd9545f9f747098af0cadf20c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:f4:17:8c:4b:ab:c8:ef:c0:73:8c:dc:f3: 74:d9:f4:07:f7:d8:b4:50:d6:af:f4:cd:87:7b:b4: 49:f9:5b:cc:0e:f1:99:db:11:fc:28:b8:48:fb:29: 58:77:1e:9a:97:80:cc:2d:8d:ea:d4:67:08:e0:48: 80:16:14:46:7d:8a:05:e1:2b:5e:bc:46:27:74:e3: 06:d7:09:33:ee:24:7d:55:29:0e:34:e9:7a:bd:f3: 39:a1:08:0c:6a:7f:80:03:ea:64:a4:e6:ad:ae:6b: 68:5e:da:ec:e2:84:11:20:86:90:14:58:6a:ca:45: 42:9f:cc:ca:cb:44:18:0e:49:a2:b5:14:2b:cb:d9: be:2a:97:a4:69:32:15:de:86:7b:a8:68:42:58:62: 93:b3:a2:6e:a3:37:4c:21:3e:0f:82:79:c1:7a:ae: 48:45:85:5e:1c:fb:d9:17:9d:0a:93:0a:c6:44:ef: e2:cc:5f:25:84:ec:39:b9:83:9b:78:25:83:90:48: a7:6e:47:88:94:3d:1c:e0:bc:fc:ef:e6:41:36:a3: d2:71:d9:bf:6b:8f:da:d3:9d:26:ec:8f:cf:3d:4c: d8:0b:07:8c:c3:d1:2b:fd:55:1a:65:77:d0:f1:f4: e8:e7:3f:62:ae:e0:50:b3:13:30:9d:ca:41:5f:4d: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1F:D1:1B:2A:F6:D1:88:27:57:CC:16:A1:BC:8A:DE:7E:2A:59:03 X509v3 Authority Key Identifier: keyid:5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:59:0f:68:c9:c4:b4:45:71:31:cc:2f:bb:3d:01:ff:16:84: 26:19:97:9c:72:b6:c5:22:2c:a7:37:55:3e:fd:d3:36:43:5c: 77:66:73:23:2d:96:f6:7a:e3:b7:00:b4:13:5f:28:e3:c9:a9: 79:e4:ee:76:af:d2:34:9a:8e:f8:fe:d8:eb:bc:b7:41:28:15: eb:f9:39:f5:0c:05:ee:3a:ef:c9:ac:22:de:1e:eb:73:92:58: d1:0a:85:90:90:7c:a5:ea:31:54:a2:57:dd:a7:3a:25:03:db: 06:34:f4:2b:1f:a9:81:21:7d:18:8a:eb:7e:56:c7:a6:41:60: 4e:43:d8:0b:1b:8d:50:17:e3:67:c9:87:2d:be:f2:7e:bc:d8: 23:13:28:b2:d3:33:9b:ac:6d:10:49:d8:68:5f:0b:ee:98:24: 1d:d0:d9:62:16:5e:df:af:ae:97:68:62:b1:ce:27:f2:64:72: a3:f1:97:43:26:13:0c:91:16:a8:70:9f:88:f2:b1:10:05:23: d0:aa:61:69:4b:e5:63:44:07:d0:10:e1:9b:86:7d:a0:89:e3: b0:b3:8c:da:c9:51:bd:93:79:52:c1:99:00:50:b7:67:15:e3: cc:f0:18:cd:2b:58:17:74:d4:76:72:ae:5b:fe:ce:95:ff:b8: 7f:c2:11:67 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFyXDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz ZDgzNGU4YWFhNzhlN2Q3ZGY3M2Y4YTliNjBkNGZlY2ZkMmJkY2YwHhcNMjQwMzI4 MDkyMDA3WhcNMjQwMzMxMTI0MzA3WjAzMTEwLwYDVQQDEyhiZDhkYjA2MTAzMjll ZGQ5NTQ1ZjlmNzQ3MDk4YWYwY2FkZjIwYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAq+/0F4xLq8jvwHOM3PN02fQH99i0UNav9M2He7RJ+VvMDvGZ 2xH8KLhI+ylYdx6al4DMLY3q1GcI4EiAFhRGfYoF4StevEYndOMG1wkz7iR9VSkO NOl6vfM5oQgMan+AA+pkpOatrmtoXtrs4oQRIIaQFFhqykVCn8zKy0QYDkmitRQr y9m+KpekaTIV3oZ7qGhCWGKTs6JuozdMIT4PgnnBeq5IRYVeHPvZF50KkwrGRO/i zF8lhOw5uYObeCWDkEinbkeIlD0c4Lz87+ZBNqPScdm/a4/a050m7I/PPUzYCweM w9Er/VUaZXfQ8fTo5z9iruBQsxMwncpBX023KQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFBgf0Rsq9tGIJ1fMFqG8it5+KlkDMB8GA1UdIwQYMBaAFFtX/B12+K5iSsGI fmpPgwKaIcrZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjNkODM0 ZThhYWE3OGU3ZDdkZjczZjhhOWI2MGQ0ZmVjZmQyYmRjZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjQ4MDRkYjctYTA2Mi00OWEwLTkwNDctOTc3ODYx YjdjMmQwLzYzZDgzNGU4YWFhNzhlN2Q3ZGY3M2Y4YTliNjBkNGZlY2ZkMmJkY2Yu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yNDgwNGRiNy1hMDYyLTQ5YTAtOTA0Ny05Nzc4 NjFiN2MyZDAvNjNkODM0ZThhYWE3OGU3ZDdkZjczZjhhOWI2MGQ0ZmVjZmQyYmRj Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAIdZD2jJxLRFcTHML7s9Af8WhCYZl5xytsUiLKc3VT790zZD XHdmcyMtlvZ647cAtBNfKOPJqXnk7nav0jSajvj+2Ou8t0EoFev5OfUMBe4678ms It4e63OSWNEKhZCQfKXqMVSiV92nOiUD2wY09CsfqYEhfRiK635Wx6ZBYE5D2Asb jVAX42fJhy2+8n682CMTKLLTM5usbRBJ2GhfC+6YJB3Q2WIWXt+vrpdoYrHOJ/Jk cqPxl0MmEwyRFqhwn4jysRAFI9CqYWlL5WNEB9AQ4ZuGfaCJ47CzjNrJUb2TeVLB mQBQt2cV48zwGM0rWBd01HZyrlv+zpX/uH/CEWc= -----END CERTIFICATE-----Generated at Thu Mar 28 13:27:50 2024 by rpki-client on console-ams.rpki-client.org