$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.mft File: d4877474e56b45c3da892e4dfb3b84f2df97d32f.mft (raw, json) Hash identifier: qOz6kWvsuCg0Lp9rtlnxtPkj6BScrXhoEMilNQd+baM= Subject key identifier: 4B:09:2D:83:71:E5:6C:40:46:F9:94:CD:1D:8A:9B:3F:EC:1D:7C:B7 Authority key identifier: 63:4F:AE:99:6B:51:24:AD:E3:54:51:31:12:CE:7E:3F:5F:3B:E9:F2 Certificate issuer: /CN=d4877474e56b45c3da892e4dfb3b84f2df97d32f Certificate serial: 10E36E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4877474e56b45c3da892e4dfb3b84f2df97d32f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.mft Manifest Number: 08A5 Signing time: Fri 31 Mar 2023 00:16:34 +0000 Manifest this update: Thu 30 Mar 2023 23:15:45 +0000 Manifest next update: Mon 03 Apr 2023 00:52:45 +0000 Files and hashes: 1: 1cf4c339002349f34b38b80aac861c6fa9590c6c.roa (hash: PYgbKcA1kRH2JVjslUVD0HHADlNo7fSue26XgL+GVQo=) 2: d4877474e56b45c3da892e4dfb3b84f2df97d32f.crl (hash: +lwtiZkULI5B1/ahYdpkwvUQWEXyxc+Baeho4MhzMKg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.crl rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4877474e56b45c3da892e4dfb3b84f2df97d32f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Apr 2023 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106798 (0x10e36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4877474e56b45c3da892e4dfb3b84f2df97d32f Validity Not Before: Mar 30 23:15:45 2023 GMT Not After : Apr 3 00:52:45 2023 GMT Subject: CN=3c7417f69d3821d0c1aaf0bc670eb49c8fc4d898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:2a:7e:f6:e6:44:a1:f4:93:b4:d0:40:70: da:ff:0e:67:aa:6a:fc:85:0d:e1:2c:b7:85:de:f2: d7:0b:9e:35:ca:49:07:06:74:cf:3b:c3:4e:58:5c: d4:0f:28:37:48:6c:f2:67:cb:7c:46:a2:99:ff:7a: 5b:03:6f:a1:1c:6c:b5:0e:4b:ec:d2:96:3d:64:85: 3f:5f:8d:a4:b6:96:ad:77:3f:44:5d:13:0e:e1:7a: 9b:6e:54:dd:fd:d7:f9:93:ba:41:7b:b6:3e:c1:55: dd:e0:09:c6:33:e4:8b:e9:dc:e8:d0:bd:40:b6:3b: 11:3a:05:73:2b:06:9e:82:56:77:8c:bb:9e:86:42: be:e3:04:3a:21:d2:48:b6:8f:45:be:6d:00:52:f0: 20:a5:bb:94:bc:9a:2c:1d:67:7a:b8:a9:86:88:19: 41:ff:31:e4:03:10:ad:60:42:ca:6c:f9:a0:69:8e: 15:a2:e6:6c:bf:e6:ca:72:cf:4d:4c:89:f6:0b:5d: b7:c9:ae:fe:dd:3a:c7:3a:e5:4a:a8:d4:04:67:69: 17:50:bb:b9:72:db:93:63:42:2f:c1:7a:5f:18:7f: 7a:6f:ca:f6:fd:51:f7:71:50:1f:0e:5c:01:b0:0d: 73:f9:c8:63:87:e0:7d:85:4e:8e:25:23:31:5e:c3: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:09:2D:83:71:E5:6C:40:46:F9:94:CD:1D:8A:9B:3F:EC:1D:7C:B7 X509v3 Authority Key Identifier: keyid:63:4F:AE:99:6B:51:24:AD:E3:54:51:31:12:CE:7E:3F:5F:3B:E9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4877474e56b45c3da892e4dfb3b84f2df97d32f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3ab15eb0-6834-4f62-a0ba-ee74c811bd27/d4877474e56b45c3da892e4dfb3b84f2df97d32f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:54:e5:ed:bb:78:a3:1b:a1:da:1c:b2:83:66:63:19:f2: 30:e9:d0:19:54:9b:25:aa:42:fb:5e:05:28:dc:d4:6f:da:6b: b7:c3:e8:bb:be:2f:92:6e:44:eb:a8:5b:5f:22:09:ae:6b:84: 8b:53:74:38:f6:2b:17:61:de:8e:33:cb:3c:85:a4:af:29:db: 86:ed:6f:34:6a:fd:8b:9d:02:09:02:72:db:f7:c8:52:43:57: 0f:6e:b3:7c:b6:d3:1c:07:7b:e2:01:52:d4:c6:27:88:ff:20: 61:c9:41:b3:45:b5:59:27:02:13:ce:2f:79:9a:9b:28:c3:8a: 6e:55:75:12:48:9d:09:e0:95:ec:ed:9c:1f:04:84:18:0d:0e: 4b:44:d4:86:ed:78:8c:61:b8:b5:9a:18:5a:96:83:39:6f:c5: 7c:bb:dd:0b:cf:57:08:90:06:88:ff:9e:7e:de:a2:9b:86:66: b5:32:2c:91:a6:27:df:ae:d0:95:2f:54:86:d5:78:a7:9a:35: c2:f1:c4:dd:40:0e:81:d1:46:17:d1:32:bf:49:74:51:74:66: 98:2c:c9:65:49:d3:2d:18:d1:f4:36:8e:cf:c7:4d:38:79:fd: 2e:f8:fa:89:25:7a:df:13:7e:4d:0c:de:12:6f:b6:3e:33:5c: 67:46:3d:b9 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDEONuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ0 ODc3NDc0ZTU2YjQ1YzNkYTg5MmU0ZGZiM2I4NGYyZGY5N2QzMmYwHhcNMjMwMzMw MjMxNTQ1WhcNMjMwNDAzMDA1MjQ1WjAzMTEwLwYDVQQDEygzYzc0MTdmNjlkMzgy MWQwYzFhYWYwYmM2NzBlYjQ5YzhmYzRkODk4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnOgqfvbmRKH0k7TQQHDa/w5nqmr8hQ3hLLeF3vLXC541ykkH BnTPO8NOWFzUDyg3SGzyZ8t8RqKZ/3pbA2+hHGy1Dkvs0pY9ZIU/X42ktpatdz9E XRMO4XqbblTd/df5k7pBe7Y+wVXd4AnGM+SL6dzo0L1AtjsROgVzKwaeglZ3jLue hkK+4wQ6IdJIto9Fvm0AUvAgpbuUvJosHWd6uKmGiBlB/zHkAxCtYELKbPmgaY4V ouZsv+bKcs9NTIn2C123ya7+3TrHOuVKqNQEZ2kXULu5ctuTY0IvwXpfGH96b8r2 /VH3cVAfDlwBsA1z+chjh+B9hU6OJSMxXsPviQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFEsJLYNx5WxARvmUzR2Kmz/sHXy3MB8GA1UdIwQYMBaAFGNPrplrUSSt41RR MRLOfj9fO+nyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDQ4Nzc0 NzRlNTZiNDVjM2RhODkyZTRkZmIzYjg0ZjJkZjk3ZDMyZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvM2FiMTVlYjAtNjgzNC00ZjYyLWEwYmEtZWU3NGM4 MTFiZDI3L2Q0ODc3NDc0ZTU2YjQ1YzNkYTg5MmU0ZGZiM2I4NGYyZGY5N2QzMmYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zYWIxNWViMC02ODM0LTRmNjItYTBiYS1lZTc0 YzgxMWJkMjcvZDQ4Nzc0NzRlNTZiNDVjM2RhODkyZTRkZmIzYjg0ZjJkZjk3ZDMy Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAD6hVOXtu3ijG6HaHLKDZmMZ8jDp0BlUmyWqQvteBSjc1G/a a7fD6Lu+L5JuROuoW18iCa5rhItTdDj2Kxdh3o4zyzyFpK8p24btbzRq/YudAgkC ctv3yFJDVw9us3y20xwHe+IBUtTGJ4j/IGHJQbNFtVknAhPOL3mamyjDim5VdRJI nQngleztnB8EhBgNDktE1IbteIxhuLWaGFqWgzlvxXy73QvPVwiQBoj/nn7eopuG ZrUyLJGmJ9+u0JUvVIbVeKeaNcLxxN1ADoHRRhfRMr9JdFF0ZpgsyWVJ0y0Y0fQ2 js/HTTh5/S74+oklet8Tfk0M3hJvtj4zXGdGPbk= -----END CERTIFICATE-----Generated at Fri Mar 31 00:35:08 2023 by rpki-client on console-fra.rpki-client.org