$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft File: c421a24623084ac56fd5acff08e76a5dd734e47f.mft (raw, json) Hash identifier: oJf5uOcHPN2WWC4oh3E9dJK9O+/7Z1zENE1nLe9pGbw= Subject key identifier: 70:71:FF:F6:09:FD:32:42:A3:64:D0:70:24:C0:2E:D0:6C:EA:99:1D Authority key identifier: 39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30 Certificate issuer: /CN=c421a24623084ac56fd5acff08e76a5dd734e47f Certificate serial: 1310F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft Manifest number: 0994 Signing time: Fri 29 Mar 2024 13:20:38 +0000 Manifest this update: Fri 29 Mar 2024 12:20:07 +0000 Manifest next update: Mon 01 Apr 2024 13:48:07 +0000 Files and hashes: 1: 91fde135e1642059b3ab6893f49768ede7f40a22.roa (hash: zAIo59c7EnAPMLD/Tc8Fi517M7x2nbAJkuhqKeEXGfk=) 2: c421a24623084ac56fd5acff08e76a5dd734e47f.crl (hash: zcGDG1mvP2y7yNVS993HgyRTJCa7r+3davmY0tYa1jc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.crl rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 13:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249523 (0x1310f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c421a24623084ac56fd5acff08e76a5dd734e47f Validity Not Before: Mar 29 12:20:07 2024 GMT Not After : Apr 1 13:48:07 2024 GMT Subject: CN=c68548c2e5607dcdf02d6cbf69b5298fb0fd4d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:de:8e:05:b8:0e:9f:98:44:c4:03:a4:fb: a2:a2:fb:be:5d:5b:b2:77:5f:d6:7f:6d:a7:7b:17: 82:7f:20:d3:f0:e1:d4:13:40:d7:77:f6:39:96:2e: a1:18:f9:9c:19:0d:c5:f7:3c:6f:5a:ec:c9:b6:87: c7:08:34:f5:8c:c5:6d:f5:f6:2a:64:df:4c:87:f6: 28:e3:89:7e:3a:a5:43:f8:67:a5:b2:da:1b:39:ce: 9f:ca:c5:c4:07:ca:22:9f:02:a7:86:4a:38:2f:f6: fc:00:2f:5b:f4:4c:f7:dc:c2:5e:45:07:7e:83:b6: fa:5a:e9:43:a6:b6:63:8c:89:71:c9:1c:a5:94:b5: 9c:df:c5:7e:b7:df:12:cb:3e:dd:c7:82:8f:e3:43: e2:4a:65:b5:ac:d4:32:83:e3:49:79:cd:b6:ee:2a: a3:e7:02:41:89:ac:d8:5d:67:81:dd:68:4a:a2:50: 06:4d:29:d3:8c:b4:8d:c5:38:60:ae:89:49:bd:31: 94:d5:cd:f9:27:a8:62:09:76:29:6b:5d:71:2f:5c: be:40:c5:e0:e1:d3:cc:cd:d5:50:7d:2f:7d:40:20: 74:a2:04:7f:2b:d8:aa:1c:3e:e5:c2:a1:15:5a:ea: dc:c7:11:63:a9:fb:2a:85:01:67:4d:0e:72:63:56: 20:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:71:FF:F6:09:FD:32:42:A3:64:D0:70:24:C0:2E:D0:6C:EA:99:1D X509v3 Authority Key Identifier: keyid:39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:55:f9:b7:b7:e4:e7:79:81:91:2f:57:22:ee:2d:1c:e6:c0: a8:23:e1:45:15:68:13:ac:22:f4:b2:16:ef:f7:e3:8a:63:dc: b4:b5:b6:20:ca:69:e6:3d:11:d8:be:4d:29:f9:88:98:ce:61: 13:85:5b:f8:5d:af:c4:00:d2:3c:7c:89:41:35:0d:82:32:ab: c8:cb:a9:7c:03:1d:02:8d:12:8e:e0:5b:0b:d0:d5:87:30:ca: a4:c4:94:00:ba:f9:3a:73:12:64:56:3c:59:85:61:6c:0b:66: 0d:23:71:1a:a9:64:ee:83:9c:0d:2d:d4:b3:2a:c4:40:35:42: 4c:ba:8a:eb:5f:6b:ed:43:fc:0d:ea:68:82:27:3f:9c:ca:13: a7:d3:65:1e:ee:9a:9e:c2:10:08:e1:07:89:33:d9:69:a0:55: 47:a6:d7:5b:2b:97:2b:72:26:8e:3d:cb:e3:9b:4c:0f:f0:b0: 59:31:32:44:c0:c6:3a:dd:d6:25:99:8d:d1:9b:52:45:23:19: a7:62:8d:f8:f5:27:5f:5a:30:89:0a:93:20:d5:46:3e:2e:ad: 91:d3:ec:f0:0f:b9:9f:5a:0d:2b:9f:ba:17:45:f8:10:54:d3: cb:fa:b0:39:38:91:d1:10:f4:7b:7b:33:5a:7c:f0:8c:98:77: 83:97:fb:44 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDExDzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0 MjFhMjQ2MjMwODRhYzU2ZmQ1YWNmZjA4ZTc2YTVkZDczNGU0N2YwHhcNMjQwMzI5 MTIyMDA3WhcNMjQwNDAxMTM0ODA3WjAzMTEwLwYDVQQDEyhjNjg1NDhjMmU1NjA3 ZGNkZjAyZDZjYmY2OWI1Mjk4ZmIwZmQ0ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsz/ejgW4Dp+YRMQDpPuiovu+XVuyd1/Wf22nexeCfyDT8OHU E0DXd/Y5li6hGPmcGQ3F9zxvWuzJtofHCDT1jMVt9fYqZN9Mh/Yo44l+OqVD+Gel stobOc6fysXEB8oinwKnhko4L/b8AC9b9Ez33MJeRQd+g7b6WulDprZjjIlxyRyl lLWc38V+t98Syz7dx4KP40PiSmW1rNQyg+NJec227iqj5wJBiazYXWeB3WhKolAG TSnTjLSNxThgrolJvTGU1c35J6hiCXYpa11xL1y+QMXg4dPMzdVQfS99QCB0ogR/ K9iqHD7lwqEVWurcxxFjqfsqhQFnTQ5yY1YgwQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFHBx//YJ/TJCo2TQcCTALtBs6pkdMB8GA1UdIwQYMBaAFDmN0jGVtIbJg4we 97YD5zFzcqQwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyMWEy NDYyMzA4NGFjNTZmZDVhY2ZmMDhlNzZhNWRkNzM0ZTQ3Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzYwOTVkNWUtYjk1OS00NzM2LWE0ZTEtNzJiM2Rk ZDdlNzYwL2M0MjFhMjQ2MjMwODRhYzU2ZmQ1YWNmZjA4ZTc2YTVkZDczNGU0N2Yu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zNjA5NWQ1ZS1iOTU5LTQ3MzYtYTRlMS03MmIz ZGRkN2U3NjAvYzQyMWEyNDYyMzA4NGFjNTZmZDVhY2ZmMDhlNzZhNWRkNzM0ZTQ3 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBABtV+be35Od5gZEvVyLuLRzmwKgj4UUVaBOsIvSyFu/344pj 3LS1tiDKaeY9Edi+TSn5iJjOYROFW/hdr8QA0jx8iUE1DYIyq8jLqXwDHQKNEo7g WwvQ1YcwyqTElAC6+TpzEmRWPFmFYWwLZg0jcRqpZO6DnA0t1LMqxEA1Qky6iutf a+1D/A3qaIInP5zKE6fTZR7ump7CEAjhB4kz2WmgVUem11srlytyJo49y+ObTA/w sFkxMkTAxjrd1iWZjdGbUkUjGadijfj1J19aMIkKkyDVRj4urZHT7PAPuZ9aDSuf uhdF+BBU08v6sDk4kdEQ9Ht7M1p88IyYd4OX+0Q= -----END CERTIFICATE-----Generated at Fri Mar 29 15:30:24 2024 by rpki-client on console-fra.rpki-client.org