$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31d8d017-e5db-4f4d-b4e0-67912cc8c867/06200aa21a7b4aecea79219a36704e812359a1f3.mft File: 06200aa21a7b4aecea79219a36704e812359a1f3.mft (raw, json) Hash identifier: Q9+W6a6jeCdbWGsGWp1/88hTwY9aTH64vDbi4d/3Z2Y= Subject key identifier: 66:EB:60:43:01:48:3A:B2:17:D0:3D:42:03:B7:F8:CD:FE:F0:04:64 Authority key identifier: 31:D8:F2:46:4B:B0:DD:48:A6:B4:FC:2A:67:22:E1:16:48:F1:EC:03 Certificate issuer: /CN=06200aa21a7b4aecea79219a36704e812359a1f3 Certificate serial: 219B4F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06200aa21a7b4aecea79219a36704e812359a1f3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31d8d017-e5db-4f4d-b4e0-67912cc8c867/06200aa21a7b4aecea79219a36704e812359a1f3.mft Manifest number: 0DB7 Signing time: Thu 28 Mar 2024 09:20:18 +0000 Manifest this update: Thu 28 Mar 2024 08:20:08 +0000 Manifest next update: Sun 31 Mar 2024 11:27:08 +0000 Files and hashes: 1: 06200aa21a7b4aecea79219a36704e812359a1f3.crl (hash: i6wmVLoZZe1XJE3aYptu1wIkS7vNL9oBxSf41N+j+gQ=) 2: 994f2f6aa5fb37c6abe9f2e1583ef5a455ff0ea4.roa (hash: Xb1rYyqPBrq5QAj4E4qwm1nIiwv8wmcjeHg8g77YWIY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/31d8d017-e5db-4f4d-b4e0-67912cc8c867/06200aa21a7b4aecea79219a36704e812359a1f3.crl rsync://repository.lacnic.net/rpki/lacnic/31d8d017-e5db-4f4d-b4e0-67912cc8c867/06200aa21a7b4aecea79219a36704e812359a1f3.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06200aa21a7b4aecea79219a36704e812359a1f3.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202447 (0x219b4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06200aa21a7b4aecea79219a36704e812359a1f3 Validity Not Before: Mar 28 08:20:08 2024 GMT Not After : Mar 31 11:27:08 2024 GMT Subject: CN=6d71e19b707b61fdcc2d9e6d3a75b9d80a56d9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:b9:a3:fe:44:09:d1:c8:e1:35:3a:ad:89: 00:ce:41:c3:2f:71:c9:a3:9e:2d:ba:1b:41:69:02: c3:32:e0:6e:06:01:0f:94:54:88:76:67:4e:b8:84: 58:41:61:27:09:a5:d4:39:26:b3:29:68:19:41:f5: 3f:25:ee:e2:2e:5d:03:70:39:6a:15:80:4e:61:13: 78:03:c7:e9:28:c8:d5:6a:e8:d1:93:5a:8e:41:32: ed:05:6d:55:de:f3:f5:93:3a:ae:13:ae:64:8f:5a: 8c:97:69:8a:50:fb:82:69:80:df:7c:38:71:23:de: 72:f7:60:37:fe:a2:3e:56:d5:33:04:66:91:49:0e: 68:f0:11:30:94:1d:30:1a:71:aa:f7:a6:c7:c2:c8: 33:b0:65:da:ed:fb:50:b7:e2:fe:9a:1a:bc:3a:c1: 6b:8a:cb:95:59:3c:b3:22:e3:b5:44:f0:42:e6:29: 47:32:97:65:75:18:55:3a:18:31:6a:3a:8e:29:6c: 58:58:0e:5f:df:49:dd:c5:d7:46:c7:2f:2f:91:de: bf:07:ff:15:56:ee:66:0e:37:73:af:3c:25:1f:bc: 57:61:cd:dc:3f:f9:cf:a3:1f:9d:e7:16:cd:00:ce: dd:68:c0:4d:1e:6f:e4:56:7b:2f:c4:54:0d:80:a2: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EB:60:43:01:48:3A:B2:17:D0:3D:42:03:B7:F8:CD:FE:F0:04:64 X509v3 Authority Key Identifier: keyid:31:D8:F2:46:4B:B0:DD:48:A6:B4:FC:2A:67:22:E1:16:48:F1:EC:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06200aa21a7b4aecea79219a36704e812359a1f3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31d8d017-e5db-4f4d-b4e0-67912cc8c867/06200aa21a7b4aecea79219a36704e812359a1f3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/31d8d017-e5db-4f4d-b4e0-67912cc8c867/06200aa21a7b4aecea79219a36704e812359a1f3.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:aa:9d:7c:a9:7f:31:1c:04:e1:b5:c7:97:31:86:c2:e4:46: c1:68:97:49:90:a1:58:d8:5e:44:6e:0f:5b:48:6f:68:c5:c2: d0:e2:29:76:96:b3:62:1a:c2:ad:d0:f2:b4:8b:bb:30:56:c6: 1a:90:91:0b:48:b9:06:2c:94:28:07:b9:b1:25:f9:77:03:1f: 6f:2a:62:42:8f:20:59:da:a2:a2:bb:c2:03:c0:70:ec:50:f7: 75:03:1d:23:04:f3:23:13:13:b3:f3:86:14:ae:8e:a4:fc:38: c9:db:1f:34:f3:f5:1f:27:fb:81:97:90:0b:19:9f:86:67:07: 64:0b:10:22:34:93:3a:80:39:ff:35:79:bd:a8:72:0f:7b:92: 60:79:9f:3d:ac:83:5b:91:13:4d:06:70:63:12:99:d5:7a:d5: 0a:7e:a3:2c:90:31:a7:91:af:ef:a4:90:49:08:ee:f5:ed:e6: ec:78:87:78:7e:e7:b1:ae:08:79:33:e5:45:e8:0b:b8:b3:c1: 88:95:84:f6:b0:cf:61:e5:22:1c:c4:33:3d:d8:06:07:94:bd: 43:73:cf:18:7c:ed:46:62:98:52:d2:39:f9:f8:0e:49:59:3c: b5:97:8b:f1:b1:3a:5f:76:4f:07:8d:ce:9c:de:65:b4:6d:96: 5d:b8:80:8f -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDIZtPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA2 MjAwYWEyMWE3YjRhZWNlYTc5MjE5YTM2NzA0ZTgxMjM1OWExZjMwHhcNMjQwMzI4 MDgyMDA4WhcNMjQwMzMxMTEyNzA4WjAzMTEwLwYDVQQDEyg2ZDcxZTE5YjcwN2I2 MWZkY2MyZDllNmQzYTc1YjlkODBhNTZkOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkKq5o/5ECdHI4TU6rYkAzkHDL3HJo54tuhtBaQLDMuBuBgEP lFSIdmdOuIRYQWEnCaXUOSazKWgZQfU/Je7iLl0DcDlqFYBOYRN4A8fpKMjVaujR k1qOQTLtBW1V3vP1kzquE65kj1qMl2mKUPuCaYDffDhxI95y92A3/qI+VtUzBGaR SQ5o8BEwlB0wGnGq96bHwsgzsGXa7ftQt+L+mhq8OsFrisuVWTyzIuO1RPBC5ilH MpdldRhVOhgxajqOKWxYWA5f30ndxddGxy8vkd6/B/8VVu5mDjdzrzwlH7xXYc3c P/nPox+d5xbNAM7daMBNHm/kVnsvxFQNgKJS7QIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFGbrYEMBSDqyF9A9QgO3+M3+8ARkMB8GA1UdIwQYMBaAFDHY8kZLsN1IprT8 Kmci4RZI8ewDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDYyMDBh YTIxYTdiNGFlY2VhNzkyMTlhMzY3MDRlODEyMzU5YTFmMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzFkOGQwMTctZTVkYi00ZjRkLWI0ZTAtNjc5MTJj YzhjODY3LzA2MjAwYWEyMWE3YjRhZWNlYTc5MjE5YTM2NzA0ZTgxMjM1OWExZjMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zMWQ4ZDAxNy1lNWRiLTRmNGQtYjRlMC02Nzkx MmNjOGM4NjcvMDYyMDBhYTIxYTdiNGFlY2VhNzkyMTlhMzY3MDRlODEyMzU5YTFm My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAD+qnXypfzEcBOG1x5cxhsLkRsFol0mQoVjYXkRuD1tIb2jF wtDiKXaWs2Iawq3Q8rSLuzBWxhqQkQtIuQYslCgHubEl+XcDH28qYkKPIFnaoqK7 wgPAcOxQ93UDHSME8yMTE7PzhhSujqT8OMnbHzTz9R8n+4GXkAsZn4ZnB2QLECI0 kzqAOf81eb2ocg97kmB5nz2sg1uRE00GcGMSmdV61Qp+oyyQMaeRr++kkEkI7vXt 5ux4h3h+57GuCHkz5UXoC7izwYiVhPawz2HlIhzEMz3YBgeUvUNzzxh87UZimFLS Ofn4DklZPLWXi/GxOl92TweNzpzeZbRtll24gI8= -----END CERTIFICATE-----Generated at Thu Mar 28 11:17:40 2024 by rpki-client on console-fra.rpki-client.org