$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/d9dcc4557e432f1ab19bac82aca733fa3689b707.mft File: d9dcc4557e432f1ab19bac82aca733fa3689b707.mft (raw, json) Hash identifier: mVrY51klzPs5foZ/De8XcacotAxCypWHWI+eT5NxEsY= Subject key identifier: 8D:0C:4D:25:15:01:BE:1A:DA:27:F2:4D:7C:A9:6E:EF:BE:CD:C5:F5 Authority key identifier: 32:76:AC:21:1E:D7:67:5F:9F:51:D5:B6:5C:08:32:5D:2D:0F:D4:6C Certificate issuer: /CN=d9dcc4557e432f1ab19bac82aca733fa3689b707 Certificate serial: 07B31E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9dcc4557e432f1ab19bac82aca733fa3689b707.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/d9dcc4557e432f1ab19bac82aca733fa3689b707.mft Manifest Number: 03E6 Signing time: Tue 28 Mar 2023 03:15:58 +0000 Manifest this update: Tue 28 Mar 2023 02:15:44 +0000 Manifest next update: Fri 31 Mar 2023 04:20:44 +0000 Files and hashes: 1: a11d59cd2bfa081bd9677fb9d2fb6e2ed2a37ae4.roa (hash: Cg4c/KtPKQ9FCW7Oz4TgxpurQQiQ+cxY3w/EJMlh+L0=) 2: d9dcc4557e432f1ab19bac82aca733fa3689b707.crl (hash: JoXKJbco0YC3DLlYRn7OyQ2MIqKG395OgUVQ/Thn3KI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/d9dcc4557e432f1ab19bac82aca733fa3689b707.crl rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/d9dcc4557e432f1ab19bac82aca733fa3689b707.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9dcc4557e432f1ab19bac82aca733fa3689b707.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 31 Mar 2023 00:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504606 (0x7b31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9dcc4557e432f1ab19bac82aca733fa3689b707 Validity Not Before: Mar 28 02:15:44 2023 GMT Not After : Mar 31 04:20:44 2023 GMT Subject: CN=c9142760a0ab25f5781592d7bc8bcfbec7685d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1f:1d:ff:9d:ae:bc:39:95:32:9d:d8:60:05: dd:08:ea:1a:6d:f1:68:ec:0d:da:1f:89:9d:97:d6: d6:3e:cb:c4:9c:d3:d6:3d:18:ba:14:38:fd:03:db: 74:dc:b9:1a:fe:44:5b:77:2b:46:10:57:5a:c0:fa: 3c:35:86:f2:e7:6b:45:3e:97:8a:b5:2f:57:50:c3: df:cf:42:2d:31:6e:eb:f1:e3:b3:6b:39:0a:0c:6d: 10:4c:6d:54:a1:57:ed:c0:0c:e8:93:1c:75:19:55: fb:d4:73:47:28:2b:4a:c8:2b:dc:5e:c0:6e:d6:bc: 9c:79:46:c8:66:40:8e:43:0c:25:4b:65:e2:93:3a: 8c:74:df:f4:b2:0c:07:6c:dd:70:c5:d0:16:80:e0: 51:f2:c1:f6:4c:b7:a5:a9:04:f4:6b:e2:65:ec:f7: 77:3c:75:e9:29:c9:c7:fd:54:67:c0:de:06:23:a1: 0a:45:5b:7b:32:ec:e5:a5:75:1d:24:a3:97:bf:30: 19:96:2f:d9:1a:c0:51:f8:df:4e:15:7a:34:91:c4: 91:09:22:03:b4:b0:dd:9c:d8:26:19:b1:a2:d6:56: e3:20:a9:e0:04:0a:f6:29:a1:17:f3:aa:f3:88:65: 17:78:46:5f:88:0e:32:fb:1f:72:88:c3:be:f9:8f: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0C:4D:25:15:01:BE:1A:DA:27:F2:4D:7C:A9:6E:EF:BE:CD:C5:F5 X509v3 Authority Key Identifier: keyid:32:76:AC:21:1E:D7:67:5F:9F:51:D5:B6:5C:08:32:5D:2D:0F:D4:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9dcc4557e432f1ab19bac82aca733fa3689b707.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/d9dcc4557e432f1ab19bac82aca733fa3689b707.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/d9dcc4557e432f1ab19bac82aca733fa3689b707.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:31:ec:1c:80:12:c5:22:8e:b3:df:ba:fd:ca:91:0e:62:9c: c6:14:c6:98:a6:5a:63:a4:00:9a:c0:ff:34:7b:b8:18:41:33: 45:2a:2e:e5:1a:6c:a0:d0:a7:07:1c:a7:92:99:c6:eb:63:2f: e0:21:47:a3:23:b3:ea:cf:c9:c9:70:7b:14:1f:32:75:26:d2: 24:75:8b:34:03:34:d9:e2:39:15:f9:41:cc:6a:af:1e:c9:50: 1c:ec:7f:42:49:ac:92:07:36:56:18:77:ad:33:00:d7:ab:fa: d6:01:04:44:75:d7:4c:cd:38:56:03:3c:22:d3:7e:a0:f5:1e: 14:41:19:13:88:20:cf:71:a1:9f:89:19:22:13:03:68:f8:2c: 20:8e:41:0b:72:93:b1:d5:bd:da:8c:6e:c9:95:af:b8:99:b6: 1d:bf:c8:30:c5:55:3b:f3:d5:f2:45:02:2a:a6:3e:71:15:99: 1e:a6:9f:8a:4a:ef:34:8c:de:49:7c:31:5a:44:1e:08:b5:ac: 31:c3:52:91:bf:e9:b6:fa:79:f6:64:29:a4:5f:3f:f4:dc:48: 53:03:ff:ba:93:34:0c:43:8c:23:d1:21:b7:63:4d:49:6b:4a: 36:ec:1d:db:ee:39:9c:59:e2:7b:a7:9c:6d:34:06:16:75:68: 13:f3:09:29 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDB7MeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5 ZGNjNDU1N2U0MzJmMWFiMTliYWM4MmFjYTczM2ZhMzY4OWI3MDcwHhcNMjMwMzI4 MDIxNTQ0WhcNMjMwMzMxMDQyMDQ0WjAzMTEwLwYDVQQDEyhjOTE0Mjc2MGEwYWIy NWY1NzgxNTkyZDdiYzhiY2ZiZWM3Njg1ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhB8d/52uvDmVMp3YYAXdCOoabfFo7A3aH4mdl9bWPsvEnNPW PRi6FDj9A9t03Lka/kRbdytGEFdawPo8NYby52tFPpeKtS9XUMPfz0ItMW7r8eOz azkKDG0QTG1UoVftwAzokxx1GVX71HNHKCtKyCvcXsBu1ryceUbIZkCOQwwlS2Xi kzqMdN/0sgwHbN1wxdAWgOBR8sH2TLelqQT0a+Jl7Pd3PHXpKcnH/VRnwN4GI6EK RVt7MuzlpXUdJKOXvzAZli/ZGsBR+N9OFXo0kcSRCSIDtLDdnNgmGbGi1lbjIKng BAr2KaEX86rziGUXeEZfiA4y+x9yiMO++Y/h2QIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFI0MTSUVAb4a2ifyTXypbu++zcX1MB8GA1UdIwQYMBaAFDJ2rCEe12dfn1HV tlwIMl0tD9RsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDlkY2M0 NTU3ZTQzMmYxYWIxOWJhYzgyYWNhNzMzZmEzNjg5YjcwNy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzc1OGNjNjgtYzc3MC00ZGZlLWI5MDgtMzI4OGNi YTdkNTIyL2Q5ZGNjNDU1N2U0MzJmMWFiMTliYWM4MmFjYTczM2ZhMzY4OWI3MDcu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zNzU4Y2M2OC1jNzcwLTRkZmUtYjkwOC0zMjg4 Y2JhN2Q1MjIvZDlkY2M0NTU3ZTQzMmYxYWIxOWJhYzgyYWNhNzMzZmEzNjg5Yjcw Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEkx7ByAEsUijrPfuv3KkQ5inMYUxpimWmOkAJrA/zR7uBhB M0UqLuUabKDQpwccp5KZxutjL+AhR6Mjs+rPyclwexQfMnUm0iR1izQDNNniORX5 Qcxqrx7JUBzsf0JJrJIHNlYYd60zANer+tYBBER110zNOFYDPCLTfqD1HhRBGROI IM9xoZ+JGSITA2j4LCCOQQtyk7HVvdqMbsmVr7iZth2/yDDFVTvz1fJFAiqmPnEV mR6mn4pK7zSM3kl8MVpEHgi1rDHDUpG/6bb6efZkKaRfP/TcSFMD/7qTNAxDjCPR IbdjTUlrSjbsHdvuOZxZ4nunnG00BhZ1aBPzCSk= -----END CERTIFICATE-----Generated at Tue Mar 28 04:12:51 2023 by rpki-client on console-ams.rpki-client.org