$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.mft File: ad25e0e95ec04958be3de512ff6388c7b80e5fe5.mft (raw, json) Hash identifier: 0bnyZ0hGi1R2t4DJHDRDTkfcupRgQE52QsptZUbK7g4= Subject key identifier: F0:27:BC:46:C2:FF:89:F9:E5:75:00:EE:C1:1E:E8:5B:AE:96:55:3C Authority key identifier: B5:8C:13:04:EF:B2:A1:FE:B4:DE:61:BE:94:EC:37:5B:8D:E4:AB:A4 Certificate issuer: /CN=ad25e0e95ec04958be3de512ff6388c7b80e5fe5 Certificate serial: 199A52 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.mft Manifest number: 0CE3 Signing time: Fri 29 Mar 2024 00:21:05 +0000 Manifest this update: Thu 28 Mar 2024 23:20:10 +0000 Manifest next update: Mon 01 Apr 2024 02:50:10 +0000 Files and hashes: 1: 7b3f93991031aec76c785cc82d884f7373aa9201.roa (hash: Q41sVMLFsW/W45QZmczSsYJ44Vg5vbxCRg6ZhE0iAOI=) 2: ad25e0e95ec04958be3de512ff6388c7b80e5fe5.crl (hash: in6hDiAfQ4drF/2bezo3q270iuu7qgByI/nyk5yPrVU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.crl rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677906 (0x199a52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad25e0e95ec04958be3de512ff6388c7b80e5fe5 Validity Not Before: Mar 28 23:20:10 2024 GMT Not After : Apr 1 02:50:10 2024 GMT Subject: CN=1301168675ec5cf0efb7ca8e7d25fe307abd36ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:4e:7f:43:82:67:7d:a3:31:e0:2f:dc:ad: e3:80:ad:73:ed:12:1d:f7:dc:87:3f:20:13:eb:5b: b1:b5:e3:e9:27:ca:0a:9d:53:5a:d0:bf:58:de:1b: 9e:f7:0c:4d:8a:be:b2:d3:47:4d:6c:91:ed:65:45: b3:8e:42:a8:fe:76:dc:8c:8a:e4:0d:77:8c:c5:7c: cc:32:c3:92:e2:72:ec:8f:c1:e9:a2:93:be:5b:fe: 42:0b:92:61:c1:f8:80:27:f3:5b:5b:94:bd:cd:fd: f2:e9:78:87:e3:a5:78:9a:21:8a:3d:c1:dd:ca:dd: 36:68:d9:fa:af:3f:c4:c5:cb:df:45:0a:f8:c5:53: 27:ea:8d:80:00:2e:4c:1d:4b:29:7e:fa:d3:40:4c: 83:5d:9a:ad:9b:ba:9e:2f:df:24:dc:2e:77:a4:97: 49:a4:d5:63:07:53:79:2f:cc:e0:84:72:80:04:f6: 65:b3:7f:ee:42:3f:4a:cd:04:d5:14:bb:3e:eb:44: 61:70:f5:e7:ae:d0:7b:9c:4e:3a:43:38:6b:ad:98: 50:3c:27:f8:8a:ef:46:5d:88:59:f4:58:3c:8d:98: b5:94:d5:69:2c:72:2e:df:a7:98:7c:cd:c3:81:32: eb:dd:84:3b:a8:ce:c1:40:da:6d:3d:21:60:0b:1c: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:27:BC:46:C2:FF:89:F9:E5:75:00:EE:C1:1E:E8:5B:AE:96:55:3C X509v3 Authority Key Identifier: keyid:B5:8C:13:04:EF:B2:A1:FE:B4:DE:61:BE:94:EC:37:5B:8D:E4:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:56:b5:19:b7:0e:f0:97:8c:2a:ea:59:90:4b:b5:d7:cc:fd: 58:74:93:4a:8d:b5:2a:02:20:89:28:d7:31:ef:d0:3c:ce:43: e9:67:dd:66:ab:19:1c:cf:f1:5e:47:3e:4e:46:bd:56:44:a3: ae:87:26:02:3e:9c:06:8a:cf:f4:d6:6d:93:3e:24:fa:5f:70: 1d:ad:a7:93:db:16:fd:65:d8:f2:6b:3a:7d:09:79:9d:71:34: 97:29:9c:df:c8:79:73:39:87:5d:91:41:f0:08:f8:cb:c4:4e: d4:9a:fe:b1:76:b9:00:1c:bf:c0:13:94:15:ed:ad:59:a3:79: 62:70:1e:58:db:bc:d8:79:1d:73:f0:ed:c2:26:18:95:6e:4e: e0:dc:c8:93:4b:87:3d:a3:26:b8:13:4b:a6:6a:c4:47:2a:4d: 63:b7:e3:c1:ec:0d:25:61:4a:03:96:ba:a7:20:19:b9:6d:2a: 0a:f0:ac:b0:48:72:69:98:62:73:a8:d7:21:82:cb:ae:3b:02: e8:89:4a:42:65:82:e7:35:c8:27:49:ad:a8:ba:8a:4c:18:97: 21:d2:b4:58:04:8c:15:2f:a9:e6:3e:52:72:3e:63:17:cc:1b: 72:df:8d:93:6b:f3:38:fb:dd:07:e9:9d:fb:5a:22:32:b8:7e: 94:4f:b1:55 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGZpSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk MjVlMGU5NWVjMDQ5NThiZTNkZTUxMmZmNjM4OGM3YjgwZTVmZTUwHhcNMjQwMzI4 MjMyMDEwWhcNMjQwNDAxMDI1MDEwWjAzMTEwLwYDVQQDEygxMzAxMTY4Njc1ZWM1 Y2YwZWZiN2NhOGU3ZDI1ZmUzMDdhYmQzNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgIpOf0OCZ32jMeAv3K3jgK1z7RId99yHPyAT61uxtePpJ8oK nVNa0L9Y3hue9wxNir6y00dNbJHtZUWzjkKo/nbcjIrkDXeMxXzMMsOS4nLsj8Hp opO+W/5CC5JhwfiAJ/NbW5S9zf3y6XiH46V4miGKPcHdyt02aNn6rz/ExcvfRQr4 xVMn6o2AAC5MHUspfvrTQEyDXZqtm7qeL98k3C53pJdJpNVjB1N5L8zghHKABPZl s3/uQj9KzQTVFLs+60RhcPXnrtB7nE46QzhrrZhQPCf4iu9GXYhZ9Fg8jZi1lNVp LHIu36eYfM3DgTLr3YQ7qM7BQNptPSFgCxwIyQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPAnvEbC/4n55XUA7sEe6FuullU8MB8GA1UdIwQYMBaAFLWMEwTvsqH+tN5h vpTsN1uN5KukMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWQyNWUw ZTk1ZWMwNDk1OGJlM2RlNTEyZmY2Mzg4YzdiODBlNWZlNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvM2JmODk5MzUtMWZiMC00MzM4LTlkYjMtMTYyNTRi YTQ1NzEyL2FkMjVlMGU5NWVjMDQ5NThiZTNkZTUxMmZmNjM4OGM3YjgwZTVmZTUu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zYmY4OTkzNS0xZmIwLTQzMzgtOWRiMy0xNjI1 NGJhNDU3MTIvYWQyNWUwZTk1ZWMwNDk1OGJlM2RlNTEyZmY2Mzg4YzdiODBlNWZl NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHdWtRm3DvCXjCrqWZBLtdfM/Vh0k0qNtSoCIIko1zHv0DzO Q+ln3WarGRzP8V5HPk5GvVZEo66HJgI+nAaKz/TWbZM+JPpfcB2tp5PbFv1l2PJr On0JeZ1xNJcpnN/IeXM5h12RQfAI+MvETtSa/rF2uQAcv8ATlBXtrVmjeWJwHljb vNh5HXPw7cImGJVuTuDcyJNLhz2jJrgTS6ZqxEcqTWO348HsDSVhSgOWuqcgGblt KgrwrLBIcmmYYnOo1yGCy647AuiJSkJlguc1yCdJrai6ikwYlyHStFgEjBUvqeY+ UnI+YxfMG3LfjZNr8zj73QfpnftaIjK4fpRPsVU= -----END CERTIFICATE-----Generated at Fri Mar 29 02:32:07 2024 by rpki-client on console-fra.rpki-client.org