$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft File: 2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft (raw, json) Hash identifier: kAWclUPsnFi7B6UxaTTlWX4usnpDaLj/ROnwMLyj95o= Subject key identifier: FA:15:A8:44:4B:6F:9B:4A:58:1F:29:20:D9:5D:CE:34:76:CA:1C:B8 Authority key identifier: DD:1C:DF:C9:2E:45:94:EE:5B:BE:55:DA:0B:1C:49:17:E3:86:96:46 Certificate issuer: /CN=2ab3c7cf52a8ce275e026127c8b74ae7b577cab0 Certificate serial: 16B503 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft Manifest Number: 0940 Signing time: Fri 31 Mar 2023 16:16:13 +0000 Manifest this update: Fri 31 Mar 2023 15:15:45 +0000 Manifest next update: Mon 03 Apr 2023 16:25:45 +0000 Files and hashes: 1: 2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.crl (hash: 2+n2G3q35mjGyym0AbBqeu9nOYCif2/RSA3bJ3pSbcw=) 2: 81ef616194e51bc6098309498c5b95dac58deb8e.roa (hash: XlizdxhJrBUCpsuxzui5fnwGAZwIcBJwGES4T29chHU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.crl rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Apr 2023 16:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488131 (0x16b503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab3c7cf52a8ce275e026127c8b74ae7b577cab0 Validity Not Before: Mar 31 15:15:45 2023 GMT Not After : Apr 3 16:25:45 2023 GMT Subject: CN=d43e76d0a3f9731b5967bb6cf513a7bafc114eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:24:66:e0:14:5a:70:a3:ca:2b:a1:c4:57: 4f:37:c5:a0:a3:5a:c9:7e:f2:c6:40:33:af:c8:8f: bd:32:23:e5:53:63:c9:75:4b:0d:38:10:6e:bf:4c: c0:ab:65:85:a2:69:cd:39:e8:d6:82:2e:a3:d5:7f: 79:69:3e:97:46:03:b2:04:be:43:f1:c1:bd:00:33: b8:f3:c8:7f:eb:a5:f1:b2:be:96:1d:70:9b:76:6a: bb:91:26:9a:b1:7a:43:32:81:55:41:5c:80:48:a0: d2:f8:c3:2d:eb:49:d0:49:43:0b:20:d4:8a:5c:8f: ad:e1:c5:5f:17:39:c4:a4:0a:e2:78:e6:2e:93:9a: 25:62:05:db:f1:8d:b0:9d:60:3b:b8:e2:fd:5a:f3: 9b:d0:77:58:e1:ad:0c:a4:67:91:ca:5a:22:32:c1: b8:6a:9a:95:6b:46:e0:ba:33:b7:c1:24:38:74:86: 5d:5b:7b:61:3a:01:cd:ef:71:a9:63:01:91:4f:d8: db:14:30:0f:fc:7e:5e:81:28:b8:ee:d4:85:32:81: 4e:37:cb:09:9f:9a:5c:b0:58:0f:85:84:f5:da:f0: d5:fc:2a:a8:6a:72:ea:34:79:c2:0f:2e:90:e7:a9: 79:ed:7f:0f:e8:95:17:d8:8d:06:5c:c7:96:87:e2: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:A8:44:4B:6F:9B:4A:58:1F:29:20:D9:5D:CE:34:76:CA:1C:B8 X509v3 Authority Key Identifier: keyid:DD:1C:DF:C9:2E:45:94:EE:5B:BE:55:DA:0B:1C:49:17:E3:86:96:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:df:7d:c8:07:1f:1c:ac:c9:8c:23:d4:59:e8:ae:23:4f:20: aa:66:8c:43:bb:1b:58:af:ed:69:2b:e9:21:61:5c:45:e9:15: 94:cf:57:8f:5b:59:c6:c4:65:77:d5:f9:42:6e:69:7d:b2:60: dd:81:cd:08:53:a8:4a:19:ef:e7:63:4b:f5:42:b7:49:43:a1: 67:29:c4:7e:09:ee:08:71:4f:f0:11:30:65:f0:ea:61:a9:2e: 3f:fd:d1:14:14:13:4c:28:e1:aa:21:75:74:6d:b1:5e:85:b5: 00:6d:ea:1a:1f:16:5a:40:36:1a:94:43:3b:cf:5a:a1:34:46: 1b:67:23:ad:75:5b:2f:a9:98:b6:24:1e:0d:5d:d3:b2:c4:81: 6d:c4:3f:b5:af:99:f7:42:eb:09:c4:b1:d1:d7:c3:ac:3d:a3: c2:93:15:7b:e1:fa:a0:4a:1d:03:6c:b8:2c:93:04:5d:0f:7f: 44:3a:8b:9a:f6:94:71:12:4a:9e:97:a7:3b:30:eb:f0:d9:c4: f3:ac:ce:1c:59:9d:5d:da:a6:7d:b9:86:98:bb:a8:b4:15:11: d4:2d:3a:d0:45:d4:c2:92:04:a6:6a:ab:ac:1f:a5:b9:d6:0f: 1c:95:cb:46:f9:92:69:c0:be:20:ec:2b:17:3e:d8:96:80:37: 3e:aa:f6:f2 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFrUDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh YjNjN2NmNTJhOGNlMjc1ZTAyNjEyN2M4Yjc0YWU3YjU3N2NhYjAwHhcNMjMwMzMx MTUxNTQ1WhcNMjMwNDAzMTYyNTQ1WjAzMTEwLwYDVQQDEyhkNDNlNzZkMGEzZjk3 MzFiNTk2N2JiNmNmNTEzYTdiYWZjMTE0ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjhAkZuAUWnCjyiuhxFdPN8Wgo1rJfvLGQDOvyI+9MiPlU2PJ dUsNOBBuv0zAq2WFomnNOejWgi6j1X95aT6XRgOyBL5D8cG9ADO488h/66Xxsr6W HXCbdmq7kSaasXpDMoFVQVyASKDS+MMt60nQSUMLINSKXI+t4cVfFznEpArieOYu k5olYgXb8Y2wnWA7uOL9WvOb0HdY4a0MpGeRyloiMsG4apqVa0bgujO3wSQ4dIZd W3thOgHN73GpYwGRT9jbFDAP/H5egSi47tSFMoFON8sJn5pcsFgPhYT12vDV/Cqo anLqNHnCDy6Q56l57X8P6JUX2I0GXMeWh+Jf8QIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPoVqERLb5tKWB8pINldzjR2yhy4MB8GA1UdIwQYMBaAFN0c38kuRZTuW75V 2gscSRfjhpZGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFiM2M3 Y2Y1MmE4Y2UyNzVlMDI2MTI3YzhiNzRhZTdiNTc3Y2FiMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMmRkZTEzZDEtYTBjOS00MzkxLTg3ZGYtYmI5ZjM1 YzdjZjk2LzJhYjNjN2NmNTJhOGNlMjc1ZTAyNjEyN2M4Yjc0YWU3YjU3N2NhYjAu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yZGRlMTNkMS1hMGM5LTQzOTEtODdkZi1iYjlm MzVjN2NmOTYvMmFiM2M3Y2Y1MmE4Y2UyNzVlMDI2MTI3YzhiNzRhZTdiNTc3Y2Fi MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAH7ffcgHHxysyYwj1FnoriNPIKpmjEO7G1iv7Wkr6SFhXEXp FZTPV49bWcbEZXfV+UJuaX2yYN2BzQhTqEoZ7+djS/VCt0lDoWcpxH4J7ghxT/AR MGXw6mGpLj/90RQUE0wo4aohdXRtsV6FtQBt6hofFlpANhqUQzvPWqE0RhtnI611 Wy+pmLYkHg1d07LEgW3EP7WvmfdC6wnEsdHXw6w9o8KTFXvh+qBKHQNsuCyTBF0P f0Q6i5r2lHESSp6Xpzsw6/DZxPOszhxZnV3apn25hpi7qLQVEdQtOtBF1MKSBKZq q6wfpbnWDxyVy0b5kmnAviDsKxc+2JaANz6q9vI= -----END CERTIFICATE-----Generated at Fri Mar 31 16:52:09 2023 by rpki-client on console-ams.rpki-client.org