$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.mft File: 7d1cf578607bddf5774ec2de09aa770ef8e6b54f.mft (raw, json) Hash identifier: Rr9OG3jquxJBfXKagD/nOBGGt8MXSu2EJQPNQ8o0t8Y= Subject key identifier: 72:19:05:61:75:5C:4C:66:83:66:4A:A9:FA:A7:99:0E:EC:C3:A2:41 Authority key identifier: D4:C1:53:10:1C:ED:B0:5C:54:4B:7C:47:0F:A8:10:3F:F7:28:BE:43 Certificate issuer: /CN=7d1cf578607bddf5774ec2de09aa770ef8e6b54f Certificate serial: 1C4228 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.mft Manifest Number: 0941 Signing time: Thu 30 Mar 2023 19:15:56 +0000 Manifest this update: Thu 30 Mar 2023 18:15:50 +0000 Manifest next update: Sun 02 Apr 2023 20:56:50 +0000 Files and hashes: 1: 51512321dcbfad13e5bbde0b1e7db785486061b1.roa (hash: 6yfTP5svwTnlQbV4JbwZFYT3qLMGsEiVat3UC9Mt2Qk=) 2: 7d1cf578607bddf5774ec2de09aa770ef8e6b54f.crl (hash: CdwxHtVDpmWGakFHJS0F2cAgxwqmaI10ZM7q8oluzTQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.crl rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Apr 2023 19:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851944 (0x1c4228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d1cf578607bddf5774ec2de09aa770ef8e6b54f Validity Not Before: Mar 30 18:15:50 2023 GMT Not After : Apr 2 20:56:50 2023 GMT Subject: CN=ecb606e69eba5b87d887ed5cbca526e39576fc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:b8:4d:10:76:7e:0f:b8:98:a2:a2:29:c7: b0:a9:e6:81:6e:eb:01:69:91:19:e1:65:d4:d7:47: 84:85:98:b9:bf:8f:60:0d:37:7a:d3:6a:4a:ac:14: 8d:63:2b:86:9d:22:ec:24:3a:24:dd:5b:e9:85:63: e8:5a:63:93:67:77:23:0f:d1:0a:48:68:61:02:1f: cc:e0:46:10:c0:3b:ad:ea:e0:06:75:81:6f:47:f9: 0b:d1:ed:b2:2c:dc:4d:63:a3:45:8c:be:c4:5e:3d: 2b:da:80:33:19:f4:5c:f6:09:ce:d2:88:f3:53:a9: 21:43:4e:15:39:e5:25:a5:4c:64:6a:3a:00:21:cc: 55:c8:4c:bb:57:69:d5:07:40:41:2d:e8:87:d9:1e: 7e:28:6c:7b:ba:85:f5:57:42:8b:59:b6:35:01:d1: 44:9d:69:df:a2:ae:28:47:ca:cd:67:15:bb:9d:e7: 88:ad:dd:23:77:2c:e4:99:e2:dd:d6:42:72:c3:5a: 87:1b:4d:fb:27:c6:c3:5a:5d:d0:88:70:b9:42:1e: f2:02:87:d8:ff:78:b5:cd:af:59:b3:0e:8c:3d:d4: 3f:97:04:d1:26:8e:a0:2b:00:10:e1:9d:51:0e:50: 86:74:27:11:4c:40:73:2e:1c:58:65:df:32:7f:82: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:19:05:61:75:5C:4C:66:83:66:4A:A9:FA:A7:99:0E:EC:C3:A2:41 X509v3 Authority Key Identifier: keyid:D4:C1:53:10:1C:ED:B0:5C:54:4B:7C:47:0F:A8:10:3F:F7:28:BE:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5b:97:08:b7:85:9b:31:73:09:8e:95:e8:a4:76:0e:24:e3: a6:22:96:78:bf:ff:7b:3f:73:ae:ae:81:8a:16:84:02:bd:0c: 17:3e:57:d2:7e:ec:5c:bc:f2:60:d6:41:50:3a:fd:9c:9f:61: ef:f8:7d:ed:87:64:b3:e9:bd:4c:7c:6d:f8:9d:96:f0:b2:2c: c5:f5:82:ba:10:1a:0f:0b:39:c0:30:9f:8f:39:e5:76:5c:62: 6e:13:b8:dd:c7:61:58:dc:21:42:7a:62:9f:6d:87:d1:4b:69: a3:f6:d8:00:9d:44:1a:51:94:41:dc:21:ab:af:0a:61:0c:50: db:35:eb:a1:15:7b:cd:45:01:9e:c7:8c:19:81:06:87:5c:58: bd:f2:3c:e6:45:be:77:9a:20:84:db:20:1e:e0:27:84:16:1b: 6c:4e:5d:d3:3b:fa:68:9f:88:54:0a:aa:b5:b8:b5:1a:ff:d9: 87:f4:34:2d:c0:40:7a:64:c4:3e:1b:5d:0d:87:6e:97:ee:0f: 4e:78:58:05:1b:2b:ef:80:5d:51:93:d2:f5:de:4a:6a:2d:83: 40:b5:b7:77:40:26:9a:51:45:c8:7b:e8:2f:78:71:f8:99:a8: 25:4e:e5:52:52:d0:5b:b9:93:69:74:14:f1:54:e1:db:2f:13: 6e:3d:41:31 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHEIoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk MWNmNTc4NjA3YmRkZjU3NzRlYzJkZTA5YWE3NzBlZjhlNmI1NGYwHhcNMjMwMzMw MTgxNTUwWhcNMjMwNDAyMjA1NjUwWjAzMTEwLwYDVQQDEyhlY2I2MDZlNjllYmE1 Yjg3ZDg4N2VkNWNiY2E1MjZlMzk1NzZmYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAlXC4TRB2fg+4mKKiKcewqeaBbusBaZEZ4WXU10eEhZi5v49g DTd602pKrBSNYyuGnSLsJDok3VvphWPoWmOTZ3cjD9EKSGhhAh/M4EYQwDut6uAG dYFvR/kL0e2yLNxNY6NFjL7EXj0r2oAzGfRc9gnO0ojzU6khQ04VOeUlpUxkajoA IcxVyEy7V2nVB0BBLeiH2R5+KGx7uoX1V0KLWbY1AdFEnWnfoq4oR8rNZxW7neeI rd0jdyzkmeLd1kJyw1qHG037J8bDWl3QiHC5Qh7yAofY/3i1za9Zsw6MPdQ/lwTR Jo6gKwAQ4Z1RDlCGdCcRTEBzLhxYZd8yf4L7vQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFHIZBWF1XExmg2ZKqfqnmQ7sw6JBMB8GA1UdIwQYMBaAFNTBUxAc7bBcVEt8 Rw+oED/3KL5DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2QxY2Y1 Nzg2MDdiZGRmNTc3NGVjMmRlMDlhYTc3MGVmOGU2YjU0Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNGM2ZDMyMDEtNjUzOC00OWVkLTgxNDktNWE3YmQ0 OTIyMjAyLzdkMWNmNTc4NjA3YmRkZjU3NzRlYzJkZTA5YWE3NzBlZjhlNmI1NGYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80YzZkMzIwMS02NTM4LTQ5ZWQtODE0OS01YTdi ZDQ5MjIyMDIvN2QxY2Y1Nzg2MDdiZGRmNTc3NGVjMmRlMDlhYTc3MGVmOGU2YjU0 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAIZblwi3hZsxcwmOleikdg4k46Yilni//3s/c66ugYoWhAK9 DBc+V9J+7Fy88mDWQVA6/ZyfYe/4fe2HZLPpvUx8bfidlvCyLMX1groQGg8LOcAw n4855XZcYm4TuN3HYVjcIUJ6Yp9th9FLaaP22ACdRBpRlEHcIauvCmEMUNs166EV e81FAZ7HjBmBBodcWL3yPOZFvneaIITbIB7gJ4QWG2xOXdM7+mifiFQKqrW4tRr/ 2Yf0NC3AQHpkxD4bXQ2HbpfuD054WAUbK++AXVGT0vXeSmotg0C1t3dAJppRRch7 6C94cfiZqCVO5VJS0Fu5k2l0FPFU4dsvE249QTE= -----END CERTIFICATE-----Generated at Thu Mar 30 19:57:10 2023 by rpki-client on console-fra.rpki-client.org