$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft File: d170fa20ab91b4ab052483fd1d1a50af0baea258.mft (raw, json) Hash identifier: juOJq5FM0ksyD1uWqdXWfdD3bXRT1TCAd388g5w3Dus= Subject key identifier: 19:98:15:43:EE:08:14:68:C7:53:DD:C8:7C:B5:8C:D3:B9:0E:75:06 Authority key identifier: 03:A2:F3:95:BA:18:1F:A0:62:B4:C8:94:F9:BC:7C:6D:37:C5:C9:2F Certificate issuer: /CN=d170fa20ab91b4ab052483fd1d1a50af0baea258 Certificate serial: 047F62 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d170fa20ab91b4ab052483fd1d1a50af0baea258.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft Manifest Number: 0254 Signing time: Wed 29 Mar 2023 15:15:57 +0000 Manifest this update: Wed 29 Mar 2023 14:15:50 +0000 Manifest next update: Sat 01 Apr 2023 17:50:50 +0000 Files and hashes: 1: 071090683047f4decc3dee0fd345405d06220f08.roa (hash: JaKteHhVdaWDx/qughknyuzI6+SqxuJe4olXUN1wiSE=) 2: d170fa20ab91b4ab052483fd1d1a50af0baea258.crl (hash: oPW+UpRhRkUNlTUh+Yq8JRFbv9KVxRF2ofaZt4zWT1E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.crl rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d170fa20ab91b4ab052483fd1d1a50af0baea258.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Apr 2023 09:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294754 (0x47f62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fa20ab91b4ab052483fd1d1a50af0baea258 Validity Not Before: Mar 29 14:15:50 2023 GMT Not After : Apr 1 17:50:50 2023 GMT Subject: CN=7b2e794a72083c542bd72183366d3c579ec270a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:1a:72:6a:50:22:a1:32:cb:63:79:66:9d: 49:91:1a:29:0a:a4:ff:d3:a1:63:3c:f4:d2:23:9d: c4:94:76:30:c6:be:59:17:3d:99:9a:f1:e1:d5:5a: 1c:73:9c:7d:33:70:28:09:cc:54:9e:5d:96:14:e2: f8:30:28:46:66:12:8d:09:53:e1:9d:59:1f:67:ab: 5a:71:51:35:89:e2:01:2e:95:00:c4:dc:59:7c:57: ee:b9:54:af:a1:4e:47:59:7d:61:ef:49:0c:02:5d: a0:37:4d:04:b6:5c:30:20:48:1e:e4:d2:38:55:a6: af:f3:30:2a:9b:ef:84:19:6a:b2:25:ba:19:54:94: 31:cb:1c:41:7a:4b:07:5b:d9:a3:55:9d:82:16:ff: a8:8f:25:09:08:48:0d:cf:40:47:d0:c6:d2:17:ff: d2:7f:1c:39:bb:4f:fe:ab:93:04:f0:36:ba:10:c8: 08:7b:c7:2d:8b:b6:e7:75:73:5a:7c:f0:26:9b:0d: 06:1f:ac:80:2b:80:9e:c1:da:95:5b:e5:f7:3f:5f: 01:e4:a3:b6:f4:51:e1:c4:ae:2a:99:42:e4:1c:87: a0:1c:89:7b:ae:68:f9:93:85:56:20:00:56:2c:9b: d4:46:b8:80:44:2f:19:b6:5c:c6:16:ac:68:76:5b: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:98:15:43:EE:08:14:68:C7:53:DD:C8:7C:B5:8C:D3:B9:0E:75:06 X509v3 Authority Key Identifier: keyid:03:A2:F3:95:BA:18:1F:A0:62:B4:C8:94:F9:BC:7C:6D:37:C5:C9:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d170fa20ab91b4ab052483fd1d1a50af0baea258.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7b:77:cd:93:30:a7:ad:fd:3a:79:6c:83:be:1a:84:79:74: d6:24:42:2b:b8:d1:ca:82:28:5f:20:8d:64:a0:8f:5a:14:8e: a8:68:a1:3e:17:ff:05:15:23:45:21:31:11:8c:d4:ca:7c:55: 4c:fc:27:b0:85:fa:13:c4:d2:eb:25:99:b8:79:e2:e4:1a:2d: 75:e4:59:ee:8b:cb:98:41:fe:9d:1f:01:79:74:b0:f3:11:49: 1b:87:d9:57:36:f8:25:9a:5b:24:a9:99:d4:40:99:8b:b9:1b: 39:7b:cd:bb:8a:c4:d4:8a:6d:39:d7:d8:9f:85:2d:97:ea:37: 82:f1:7f:9d:d3:d1:17:49:f6:37:e7:db:b8:50:0a:4e:19:fb: 38:8a:1f:f5:15:c1:97:a2:8b:04:a6:6f:56:ef:9d:56:6a:8e: 6f:47:79:50:68:8e:59:94:3b:88:dc:96:af:4b:c8:b5:76:5a: 83:84:1b:67:fc:90:58:5b:39:bd:72:79:30:62:13:15:46:47: 66:d6:fa:e7:1e:24:31:db:63:1d:b6:8d:fd:ba:3e:b8:8d:bb: 3e:57:7f:5e:61:37:b3:f5:1d:89:cb:6b:1f:0a:44:11:41:b0: 2b:a8:ad:d3:41:1f:f0:25:1c:e4:5c:1a:04:17:aa:87:f6:dd: f6:0f:d2:73 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDBH9iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQx NzBmYTIwYWI5MWI0YWIwNTI0ODNmZDFkMWE1MGFmMGJhZWEyNTgwHhcNMjMwMzI5 MTQxNTUwWhcNMjMwNDAxMTc1MDUwWjAzMTEwLwYDVQQDEyg3YjJlNzk0YTcyMDgz YzU0MmJkNzIxODMzNjZkM2M1NzllYzI3MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsdkacmpQIqEyy2N5Zp1JkRopCqT/06FjPPTSI53ElHYwxr5Z Fz2ZmvHh1Vocc5x9M3AoCcxUnl2WFOL4MChGZhKNCVPhnVkfZ6tacVE1ieIBLpUA xNxZfFfuuVSvoU5HWX1h70kMAl2gN00EtlwwIEge5NI4Vaav8zAqm++EGWqyJboZ VJQxyxxBeksHW9mjVZ2CFv+ojyUJCEgNz0BH0MbSF//Sfxw5u0/+q5ME8Da6EMgI e8cti7bndXNafPAmmw0GH6yAK4CewdqVW+X3P18B5KO29FHhxK4qmULkHIegHIl7 rmj5k4VWIABWLJvURriARC8ZtlzGFqxodltBaQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFBmYFUPuCBRox1PdyHy1jNO5DnUGMB8GA1UdIwQYMBaAFAOi85W6GB+gYrTI lPm8fG03xckvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDE3MGZh MjBhYjkxYjRhYjA1MjQ4M2ZkMWQxYTUwYWYwYmFlYTI1OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjgwZTA5MWEtYTc1Ny00OGE1LTg0ZmMtOGRjZjQ2 YWYwOTE5L2QxNzBmYTIwYWI5MWI0YWIwNTI0ODNmZDFkMWE1MGFmMGJhZWEyNTgu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yODBlMDkxYS1hNzU3LTQ4YTUtODRmYy04ZGNm NDZhZjA5MTkvZDE3MGZhMjBhYjkxYjRhYjA1MjQ4M2ZkMWQxYTUwYWYwYmFlYTI1 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAB17d82TMKet/Tp5bIO+GoR5dNYkQiu40cqCKF8gjWSgj1oU jqhooT4X/wUVI0UhMRGM1Mp8VUz8J7CF+hPE0uslmbh54uQaLXXkWe6Ly5hB/p0f AXl0sPMRSRuH2Vc2+CWaWySpmdRAmYu5Gzl7zbuKxNSKbTnX2J+FLZfqN4Lxf53T 0RdJ9jfn27hQCk4Z+ziKH/UVwZeiiwSmb1bvnVZqjm9HeVBojlmUO4jclq9LyLV2 WoOEG2f8kFhbOb1yeTBiExVGR2bW+uceJDHbYx22jf26PriNuz5Xf15hN7P1HYnL ax8KRBFBsCuordNBH/AlHORcGgQXqof23fYP0nM= -----END CERTIFICATE-----Generated at Wed Mar 29 15:51:25 2023 by rpki-client on console-fra.rpki-client.org