$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.mft File: dffb95a77b596556dc922d7d59d7e123c2fec9b7.mft (raw, json) Hash identifier: voXzfCMzOrqZ9z5SuxadVPGTHzDSUKjQqluGw9tVzJ4= Subject key identifier: D4:97:A4:92:78:97:17:82:C4:DB:8B:EB:BE:14:36:2D:45:47:6B:45 Authority key identifier: D4:7C:4D:55:EF:31:B5:B6:73:BE:CF:CE:F3:1F:AF:BE:A3:18:37:F0 Certificate issuer: /CN=dffb95a77b596556dc922d7d59d7e123c2fec9b7 Certificate serial: 167714 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb95a77b596556dc922d7d59d7e123c2fec9b7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.mft Manifest Number: 0929 Signing time: Thu 30 Mar 2023 16:16:18 +0000 Manifest this update: Thu 30 Mar 2023 15:15:50 +0000 Manifest next update: Sun 02 Apr 2023 18:26:50 +0000 Files and hashes: 1: 370431fe592012168e67ae4b7103c3e94f1dd958.roa (hash: 7gm9Ba8+ms4QtXv3+Gz2G+PFYP7sDQ8vuyRcXWpm3TU=) 2: dffb95a77b596556dc922d7d59d7e123c2fec9b7.crl (hash: fWNkjz76rv0J7gh9ESttKydPDVnsWdaubcxK3sA8U6Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.crl rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb95a77b596556dc922d7d59d7e123c2fec9b7.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Apr 2023 08:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472276 (0x167714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dffb95a77b596556dc922d7d59d7e123c2fec9b7 Validity Not Before: Mar 30 15:15:50 2023 GMT Not After : Apr 2 18:26:50 2023 GMT Subject: CN=6f28a340621f0c026c7a5d57df8fd3c147d37610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:6a:46:38:a4:03:9b:2b:32:06:41:82:61:37: 26:2d:36:9b:fd:58:cc:87:ac:95:4c:82:64:05:2a: a9:a0:b4:ec:ae:93:c2:d3:01:95:74:d4:4c:ae:8b: b9:e1:ce:19:ef:7f:7b:73:c3:76:45:f2:52:ce:c4: dc:b4:bf:24:92:1c:b5:6c:f7:74:4f:02:1b:c8:22: b1:2e:81:93:f6:c2:45:e9:0d:3c:ce:8d:d5:7e:20: e8:aa:74:50:18:55:2e:ba:8f:57:6e:e4:eb:14:fe: 13:e4:3a:f1:de:4a:39:7a:e8:cd:f8:a5:2c:a9:e6: aa:90:3f:e6:e5:78:cc:c6:53:46:79:a5:c0:02:50: d3:bc:22:59:e0:e2:31:66:11:dc:09:2e:14:e6:7e: 30:37:09:20:fd:6f:74:2c:96:46:ac:a3:d2:5d:e1: b9:38:6e:60:3d:26:aa:87:0e:67:3c:67:05:68:88: 8d:46:d2:d9:c0:c7:5f:20:51:b2:63:6c:17:d4:b9: 50:c1:d0:0a:0d:66:c4:59:c0:41:67:9b:45:27:e2: d1:95:6e:3b:59:5d:2a:86:cd:3c:51:5b:a0:64:13: cf:bc:1a:a9:54:68:93:f0:bc:c4:f7:e6:f8:7c:0b: 4e:4d:43:e5:e1:42:76:8b:f5:05:2a:11:cb:99:f5: de:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:97:A4:92:78:97:17:82:C4:DB:8B:EB:BE:14:36:2D:45:47:6B:45 X509v3 Authority Key Identifier: keyid:D4:7C:4D:55:EF:31:B5:B6:73:BE:CF:CE:F3:1F:AF:BE:A3:18:37:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb95a77b596556dc922d7d59d7e123c2fec9b7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6d:85:63:48:ad:73:84:4b:78:7c:91:84:99:8d:c4:37:77: a6:f1:d1:a5:4b:c2:66:00:ad:3d:aa:79:49:69:60:e6:9d:d4: 5f:cb:e1:22:5d:e3:85:a1:38:e3:6f:7b:bf:e9:9d:2f:fd:d0: c5:b0:d4:75:7a:f1:f3:90:8c:1b:26:19:19:f0:38:12:aa:e7: d8:3d:a9:50:c7:ed:b4:8c:16:55:2e:04:a4:af:36:73:5e:b7: 7c:1d:52:47:2c:e4:38:5d:35:7c:f7:4e:69:1f:a2:e1:df:c3: ba:c1:6e:f4:b7:ee:1e:ba:3f:6e:e9:2e:fc:bb:5f:9a:ac:b3: 77:c7:eb:1a:a5:d4:cd:fd:6b:c5:f5:67:41:df:e7:78:d2:77: 02:7c:99:58:bb:1e:f3:2d:50:0c:da:65:a9:a6:79:66:a4:03: 1e:99:fe:37:c2:2c:51:2b:a5:b3:d8:f2:62:19:f0:5b:8b:b5: 03:48:12:2c:68:e2:0d:f9:3d:8a:74:40:b7:0e:6e:18:f1:42: ba:3b:bc:aa:0e:9b:0d:d1:b2:cd:53:c8:35:f6:a4:66:e3:0d: 9b:95:8d:eb:c5:75:a6:f2:c5:06:12:bd:8e:db:61:d2:b2:bf: 75:8e:ad:66:ab:01:08:6d:9a:42:64:6c:8d:ec:bc:fa:6a:64: f8:d3:20:79 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFncUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm ZmI5NWE3N2I1OTY1NTZkYzkyMmQ3ZDU5ZDdlMTIzYzJmZWM5YjcwHhcNMjMwMzMw MTUxNTUwWhcNMjMwNDAyMTgyNjUwWjAzMTEwLwYDVQQDEyg2ZjI4YTM0MDYyMWYw YzAyNmM3YTVkNTdkZjhmZDNjMTQ3ZDM3NjEwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA/2pGOKQDmysyBkGCYTcmLTab/VjMh6yVTIJkBSqpoLTsrpPC 0wGVdNRMrou54c4Z7397c8N2RfJSzsTctL8kkhy1bPd0TwIbyCKxLoGT9sJF6Q08 zo3VfiDoqnRQGFUuuo9XbuTrFP4T5Drx3ko5eujN+KUsqeaqkD/m5XjMxlNGeaXA AlDTvCJZ4OIxZhHcCS4U5n4wNwkg/W90LJZGrKPSXeG5OG5gPSaqhw5nPGcFaIiN RtLZwMdfIFGyY2wX1LlQwdAKDWbEWcBBZ5tFJ+LRlW47WV0qhs08UVugZBPPvBqp VGiT8LzE9+b4fAtOTUPl4UJ2i/UFKhHLmfXeZQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFNSXpJJ4lxeCxNuL674UNi1FR2tFMB8GA1UdIwQYMBaAFNR8TVXvMbW2c77P zvMfr76jGDfwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGZmYjk1 YTc3YjU5NjU1NmRjOTIyZDdkNTlkN2UxMjNjMmZlYzliNy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNDljMThkODItOWE2Mi00NmE2LTg0NzAtYmU5MDlj YWM0MzA0L2RmZmI5NWE3N2I1OTY1NTZkYzkyMmQ3ZDU5ZDdlMTIzYzJmZWM5Yjcu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80OWMxOGQ4Mi05YTYyLTQ2YTYtODQ3MC1iZTkw OWNhYzQzMDQvZGZmYjk1YTc3YjU5NjU1NmRjOTIyZDdkNTlkN2UxMjNjMmZlYzli Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAIdthWNIrXOES3h8kYSZjcQ3d6bx0aVLwmYArT2qeUlpYOad 1F/L4SJd44WhOONve7/pnS/90MWw1HV68fOQjBsmGRnwOBKq59g9qVDH7bSMFlUu BKSvNnNet3wdUkcs5DhdNXz3TmkfouHfw7rBbvS37h66P27pLvy7X5qss3fH6xql 1M39a8X1Z0Hf53jSdwJ8mVi7HvMtUAzaZammeWakAx6Z/jfCLFErpbPY8mIZ8FuL tQNIEixo4g35PYp0QLcObhjxQro7vKoOmw3Rss1TyDX2pGbjDZuVjevFdabyxQYS vY7bYdKyv3WOrWarAQhtmkJkbI3svPpqZPjTIHk= -----END CERTIFICATE-----Generated at Thu Mar 30 16:50:57 2023 by rpki-client on console-fra.rpki-client.org