$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/840cb80670ecd016b1a9a3cf14bc123c01d93d86.mft File: 840cb80670ecd016b1a9a3cf14bc123c01d93d86.mft (raw, json) Hash identifier: pUs+73KmaCPJNEi4WJcqb1IK73D6mdhCouxJqAIDrBo= Subject key identifier: 87:7C:84:9D:4E:42:4E:09:B9:1B:A3:80:EC:4C:B1:EA:E8:2D:55:30 Authority key identifier: 95:6A:12:67:F3:E8:7D:FF:82:CE:A8:2F:CC:3C:A0:FF:2D:07:3B:8B Certificate issuer: /CN=840cb80670ecd016b1a9a3cf14bc123c01d93d86 Certificate serial: 0B2BEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/840cb80670ecd016b1a9a3cf14bc123c01d93d86.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/840cb80670ecd016b1a9a3cf14bc123c01d93d86.mft Manifest number: 05AC Signing time: Fri 29 Mar 2024 09:21:24 +0000 Manifest this update: Fri 29 Mar 2024 08:20:11 +0000 Manifest next update: Mon 01 Apr 2024 12:15:11 +0000 Files and hashes: 1: 840cb80670ecd016b1a9a3cf14bc123c01d93d86.crl (hash: eYI1QHYYI2J2IWXn/ko+DCUnXQto5g2bc2JhjGgrEgw=) 2: bb34f3d4f634682746291fd3e50b2bb4d7044381.roa (hash: e9hog6XCbg/W5IEm4Fpc6ywXE1abr5Gr0Bmnx0CXlu0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/840cb80670ecd016b1a9a3cf14bc123c01d93d86.crl rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/840cb80670ecd016b1a9a3cf14bc123c01d93d86.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/840cb80670ecd016b1a9a3cf14bc123c01d93d86.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732139 (0xb2beb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=840cb80670ecd016b1a9a3cf14bc123c01d93d86 Validity Not Before: Mar 29 08:20:11 2024 GMT Not After : Apr 1 12:15:11 2024 GMT Subject: CN=faeff7e327a7c70f249fb0f109ce7537c147f1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:13:d5:11:a0:3a:ad:9c:b7:48:d8:9b:d9: 63:d8:22:10:9a:2e:dd:bc:a7:93:ac:ad:55:f3:d3: 28:c6:87:09:4c:a8:d5:3e:8c:30:0a:50:87:14:7d: ee:c5:d3:5c:63:74:9f:77:94:91:2c:03:af:cb:c7: 51:09:1e:b8:a5:a5:b4:6f:b6:72:c6:b4:1b:65:55: ca:3b:56:96:50:10:dd:9f:96:c0:7c:86:71:57:2f: a7:5f:16:f8:3c:1e:c9:b0:ea:ba:04:db:ac:70:7f: e2:29:0a:d3:13:c0:2e:e5:92:e0:11:61:b7:8c:7a: 0c:e7:eb:6b:07:b5:06:84:7d:13:81:5f:ce:14:9a: 49:71:54:d2:ac:d1:4b:a5:d3:2a:ae:f9:6c:fe:da: fc:ed:77:e6:22:b0:4f:db:c1:b4:f6:d9:1b:7f:bd: 17:2e:35:85:9c:85:5b:a8:3b:0a:11:a7:24:91:de: af:83:af:f1:b5:d8:11:dc:c3:57:b4:ba:9e:5f:55: e4:4a:22:12:ad:8a:e7:50:4c:17:08:13:02:da:75: be:2b:b2:90:ee:67:ea:a6:f1:bc:1e:f9:13:e8:0c: eb:a8:3a:7b:40:3b:4f:97:ec:97:ab:f9:e5:2b:87: 7f:15:65:aa:6e:9d:99:4e:f9:2a:74:be:dd:45:44: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:84:9D:4E:42:4E:09:B9:1B:A3:80:EC:4C:B1:EA:E8:2D:55:30 X509v3 Authority Key Identifier: keyid:95:6A:12:67:F3:E8:7D:FF:82:CE:A8:2F:CC:3C:A0:FF:2D:07:3B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/840cb80670ecd016b1a9a3cf14bc123c01d93d86.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/840cb80670ecd016b1a9a3cf14bc123c01d93d86.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/840cb80670ecd016b1a9a3cf14bc123c01d93d86.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d0:f6:06:ad:9a:f2:3a:b4:d6:9e:67:d6:b8:44:b8:3b:ab: c8:7e:96:e0:dd:f8:35:66:81:fd:45:1c:27:72:43:70:b5:87: d0:08:49:6a:b3:85:bb:bf:08:11:67:07:40:5f:4f:23:93:2b: 5a:82:6d:63:0f:57:c2:b0:02:82:aa:d5:43:50:e6:e7:4c:dd: 65:22:76:4d:9f:1e:27:db:52:8a:bf:6e:d8:47:c8:e4:c2:56: 5a:d2:a8:a4:fa:52:dc:86:c8:fc:89:2f:2e:cc:dc:ff:ab:8f: f2:d1:69:a0:50:96:c8:97:ae:5b:fb:49:99:79:48:8c:68:5e: 0c:83:71:ea:e0:59:6a:ee:61:4f:4c:47:92:cb:0d:13:15:ec: 69:51:72:0e:a5:98:3b:87:cb:56:6a:eb:2d:0b:ea:40:12:b0: 5e:11:c9:6d:b0:c8:03:7b:e1:d3:b9:2b:de:c8:6c:a1:b3:3b: e9:e7:0f:11:89:cd:43:ea:2e:1d:11:9a:47:9f:08:26:47:42: 6f:29:e6:e0:15:49:4c:c3:5b:35:83:e2:03:cd:6b:e1:d8:2b: a5:d7:41:52:f7:9e:f6:ee:c4:ed:40:2e:ec:ff:48:7b:82:b4: 41:0e:cf:a4:8b:b3:6f:89:9b:43:ec:63:8f:04:fa:20:c9:fd: e3:34:30:d3 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDCyvrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0 MGNiODA2NzBlY2QwMTZiMWE5YTNjZjE0YmMxMjNjMDFkOTNkODYwHhcNMjQwMzI5 MDgyMDExWhcNMjQwNDAxMTIxNTExWjAzMTEwLwYDVQQDEyhmYWVmZjdlMzI3YTdj NzBmMjQ5ZmIwZjEwOWNlNzUzN2MxNDdmMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhVsT1RGgOq2ct0jYm9lj2CIQmi7dvKeTrK1V89MoxocJTKjV PowwClCHFH3uxdNcY3Sfd5SRLAOvy8dRCR64paW0b7ZyxrQbZVXKO1aWUBDdn5bA fIZxVy+nXxb4PB7JsOq6BNuscH/iKQrTE8Au5ZLgEWG3jHoM5+trB7UGhH0TgV/O FJpJcVTSrNFLpdMqrvls/tr87XfmIrBP28G09tkbf70XLjWFnIVbqDsKEackkd6v g6/xtdgR3MNXtLqeX1XkSiISrYrnUEwXCBMC2nW+K7KQ7mfqpvG8HvkT6AzrqDp7 QDtPl+yXq/nlK4d/FWWqbp2ZTvkqdL7dRUSNkwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFId8hJ1OQk4JuRujgOxMseroLVUwMB8GA1UdIwQYMBaAFJVqEmfz6H3/gs6o L8w8oP8tBzuLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODQwY2I4 MDY3MGVjZDAxNmIxYTlhM2NmMTRiYzEyM2MwMWQ5M2Q4Ni5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMmQ2NGIxNTctZTY4MS00ZDk5LTllYzYtN2E3NTE1 MDg3MTk4Lzg0MGNiODA2NzBlY2QwMTZiMWE5YTNjZjE0YmMxMjNjMDFkOTNkODYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yZDY0YjE1Ny1lNjgxLTRkOTktOWVjNi03YTc1 MTUwODcxOTgvODQwY2I4MDY3MGVjZDAxNmIxYTlhM2NmMTRiYzEyM2MwMWQ5M2Q4 Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAErQ9gatmvI6tNaeZ9a4RLg7q8h+luDd+DVmgf1FHCdyQ3C1 h9AISWqzhbu/CBFnB0BfTyOTK1qCbWMPV8KwAoKq1UNQ5udM3WUidk2fHifbUoq/ bthHyOTCVlrSqKT6UtyGyPyJLy7M3P+rj/LRaaBQlsiXrlv7SZl5SIxoXgyDcerg WWruYU9MR5LLDRMV7GlRcg6lmDuHy1Zq6y0L6kASsF4RyW2wyAN74dO5K97IbKGz O+nnDxGJzUPqLh0RmkefCCZHQm8p5uAVSUzDWzWD4gPNa+HYK6XXQVL3nvbuxO1A Luz/SHuCtEEOz6SLs2+Jm0PsY48E+iDJ/eM0MNM= -----END CERTIFICATE-----Generated at Fri Mar 29 11:05:00 2024 by rpki-client on console-ams.rpki-client.org