$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.mft File: 212eef6d5c813481abd4b75f30b9ef564ed111ab.mft (raw, json) Hash identifier: VQJOm5HlOOgFeh0iBmnQ6eBqrWPPDaby32Sb2f9Z28M= Subject key identifier: 1F:49:1A:A6:42:94:1D:B9:3A:C2:8A:3C:30:62:80:CB:4F:7A:75:D2 Authority key identifier: FD:16:D8:3D:62:76:52:53:86:79:18:4D:B9:46:E5:DB:A9:CD:D4:A3 Certificate issuer: /CN=212eef6d5c813481abd4b75f30b9ef564ed111ab Certificate serial: 1EC22B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/212eef6d5c813481abd4b75f30b9ef564ed111ab.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.mft Manifest number: 0DB1 Signing time: Fri 29 Mar 2024 00:21:14 +0000 Manifest this update: Thu 28 Mar 2024 23:20:10 +0000 Manifest next update: Mon 01 Apr 2024 02:52:10 +0000 Files and hashes: 1: 212eef6d5c813481abd4b75f30b9ef564ed111ab.crl (hash: 3IRRvOB7IfQItXBpE0Uod0hQbx+Gw/Ygor539G89cmE=) 2: 589f8ccd3c522f0b02143eb5b11e2d48526f25fe.roa (hash: Tfox1tkfSqtqMZYVUwJ9PtWBAAXR+LFqOlgPM2peDXw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.crl rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/212eef6d5c813481abd4b75f30b9ef564ed111ab.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015787 (0x1ec22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212eef6d5c813481abd4b75f30b9ef564ed111ab Validity Not Before: Mar 28 23:20:10 2024 GMT Not After : Apr 1 02:52:10 2024 GMT Subject: CN=b6287ce672727426e5851b611699b977805f990c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:3b:1c:4b:05:e2:94:f6:a9:6f:7e:19:e9: 55:76:5a:2b:c1:4c:5a:7a:8b:76:cb:be:0d:2b:38: aa:6c:18:21:c1:ca:0d:08:14:d8:58:e9:62:0b:5b: b2:e8:6c:09:58:71:35:30:28:bc:ad:f0:1b:10:65: 79:14:8d:d8:6f:a7:78:db:4f:45:46:11:14:ec:bb: b6:6c:7d:59:e9:df:39:da:85:51:b9:39:1c:6f:71: e3:07:e6:8c:29:aa:61:66:66:50:bf:aa:d4:65:95: 81:2f:c1:29:73:97:3e:f3:26:17:3a:f2:b0:ec:38: 17:68:f3:3c:26:a6:ff:42:e7:c8:ca:34:7b:ea:c3: 03:8b:a1:49:b8:68:1c:12:21:93:9f:67:ad:03:9a: 8f:07:02:70:a7:33:6b:e1:5c:51:9e:c0:49:40:fb: 81:5f:77:b8:be:ee:bd:fe:a8:3e:36:f7:8a:66:25: b3:48:ee:60:24:52:fa:3d:37:1b:98:3a:2c:ff:10: d8:08:a0:e9:43:e8:9c:f7:95:2a:8b:be:24:97:7c: 54:ce:3f:71:ab:ff:5c:97:4a:00:7f:48:c6:bf:13: 0b:66:e8:2d:a9:43:ed:e3:c1:7d:b9:f8:a1:41:95: 37:ce:af:d9:9f:d5:16:38:4e:c8:08:ad:6d:b3:77: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:49:1A:A6:42:94:1D:B9:3A:C2:8A:3C:30:62:80:CB:4F:7A:75:D2 X509v3 Authority Key Identifier: keyid:FD:16:D8:3D:62:76:52:53:86:79:18:4D:B9:46:E5:DB:A9:CD:D4:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/212eef6d5c813481abd4b75f30b9ef564ed111ab.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/24f65175-e5c4-473e-9e7f-1350817a2b61/212eef6d5c813481abd4b75f30b9ef564ed111ab.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a5:43:08:f6:fa:c3:c4:f8:30:83:cc:5e:ef:9c:af:f1:fe: 1e:69:19:07:d4:cc:bd:1c:d5:cb:a4:f0:40:c3:f4:c5:c9:b9: 72:65:82:29:d1:8f:a6:ee:1a:62:c9:33:54:1c:ae:cc:1f:9d: ef:1f:7a:9c:6f:8a:61:61:c9:e0:75:e9:6c:73:27:e5:f2:3e: ba:18:00:5c:92:b4:fe:5f:64:99:b2:74:4a:7a:34:13:41:dc: 52:49:33:b7:6f:ab:91:59:30:eb:56:5a:58:cf:58:12:86:fb: 44:f1:2d:81:3f:54:51:a5:16:d0:8c:f7:79:ae:f6:36:b2:cc: c3:e2:47:ef:43:05:e2:9e:81:04:ab:ee:b0:5c:c0:54:60:c4: 51:73:7e:b1:e8:96:23:98:e7:10:46:62:23:90:ba:05:b2:1b: a0:6d:11:f1:b5:ac:72:eb:af:cf:a7:b7:c6:f4:82:43:56:0c: 1c:fd:62:7d:ce:f4:7c:88:0a:e8:7b:9a:b1:3a:dd:d2:9e:60: e9:ff:69:53:d0:8f:e6:47:9f:57:87:29:d4:aa:4f:f8:1d:63: 49:d8:2e:95:5f:97:a4:4c:36:16:d6:8b:92:7a:b0:c6:2c:7d: 88:3b:ae:f8:f9:48:f7:fb:f9:ab:0e:c7:f5:84:15:60:ad:56: 41:0d:62:b4 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHsIrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx MmVlZjZkNWM4MTM0ODFhYmQ0Yjc1ZjMwYjllZjU2NGVkMTExYWIwHhcNMjQwMzI4 MjMyMDEwWhcNMjQwNDAxMDI1MjEwWjAzMTEwLwYDVQQDEyhiNjI4N2NlNjcyNzI3 NDI2ZTU4NTFiNjExNjk5Yjk3NzgwNWY5OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAoaA7HEsF4pT2qW9+GelVdlorwUxaeot2y74NKziqbBghwcoN CBTYWOliC1uy6GwJWHE1MCi8rfAbEGV5FI3Yb6d4209FRhEU7Lu2bH1Z6d852oVR uTkcb3HjB+aMKaphZmZQv6rUZZWBL8Epc5c+8yYXOvKw7DgXaPM8Jqb/QufIyjR7 6sMDi6FJuGgcEiGTn2etA5qPBwJwpzNr4VxRnsBJQPuBX3e4vu69/qg+NveKZiWz SO5gJFL6PTcbmDos/xDYCKDpQ+ic95Uqi74kl3xUzj9xq/9cl0oAf0jGvxMLZugt qUPt48F9ufihQZU3zq/Zn9UWOE7ICK1ts3d9CQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFB9JGqZClB25OsKKPDBigMtPenXSMB8GA1UdIwQYMBaAFP0W2D1idlJThnkY TblG5dupzdSjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjEyZWVm NmQ1YzgxMzQ4MWFiZDRiNzVmMzBiOWVmNTY0ZWQxMTFhYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjRmNjUxNzUtZTVjNC00NzNlLTllN2YtMTM1MDgx N2EyYjYxLzIxMmVlZjZkNWM4MTM0ODFhYmQ0Yjc1ZjMwYjllZjU2NGVkMTExYWIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yNGY2NTE3NS1lNWM0LTQ3M2UtOWU3Zi0xMzUw ODE3YTJiNjEvMjEyZWVmNmQ1YzgxMzQ4MWFiZDRiNzVmMzBiOWVmNTY0ZWQxMTFh Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAAilQwj2+sPE+DCDzF7vnK/x/h5pGQfUzL0c1cuk8EDD9MXJ uXJlginRj6buGmLJM1Qcrswfne8fepxvimFhyeB16WxzJ+XyProYAFyStP5fZJmy dEp6NBNB3FJJM7dvq5FZMOtWWljPWBKG+0TxLYE/VFGlFtCM93mu9jayzMPiR+9D BeKegQSr7rBcwFRgxFFzfrHoliOY5xBGYiOQugWyG6BtEfG1rHLrr8+nt8b0gkNW DBz9Yn3O9HyICuh7mrE63dKeYOn/aVPQj+ZHn1eHKdSqT/gdY0nYLpVfl6RMNhbW i5J6sMYsfYg7rvj5SPf7+asOx/WEFWCtVkENYrQ= -----END CERTIFICATE-----Generated at Fri Mar 29 02:32:04 2024 by rpki-client on console-fra.rpki-client.org