$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.mft File: 6410162b16fe94fd0a84d5440b3138f11f80bb21.mft (raw, json) Hash identifier: finbTxC7HvnfDrFRRV7T9W876W6CXfAStuUjEfnTPmI= Subject key identifier: F4:35:BC:06:61:96:01:05:58:FC:23:B7:F6:D8:A9:37:7E:2F:F6:8A Authority key identifier: 45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F Certificate issuer: /CN=6410162b16fe94fd0a84d5440b3138f11f80bb21 Certificate serial: 285962 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.mft Manifest number: 0DCF Signing time: Thu 28 Mar 2024 19:21:08 +0000 Manifest this update: Thu 28 Mar 2024 18:20:16 +0000 Manifest next update: Sun 31 Mar 2024 19:26:16 +0000 Files and hashes: 1: 6410162b16fe94fd0a84d5440b3138f11f80bb21.crl (hash: 683q6F9UDVxvEPWVs8QvmxNiBQBNqSwHvwPiUrqvSdU=) 2: a16ce02b0ab3a4af0c847a5aa6dff2a758a61c30.roa (hash: teIVcXr7BvXNLJagpTLZc+mNR3ze+AOwH16JMsgJ89g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.crl rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2644322 (0x285962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410162b16fe94fd0a84d5440b3138f11f80bb21 Validity Not Before: Mar 28 18:20:16 2024 GMT Not After : Mar 31 19:26:16 2024 GMT Subject: CN=7a443724b5f3f6d348574a916cb72cfdaa8e5456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:69:63:00:ba:d0:c2:7d:22:60:dd:7a:c7: 61:3f:8c:34:14:43:dd:9d:56:7e:2d:ec:ff:27:08: 08:8b:c9:f2:08:ae:cc:ac:10:9d:1f:53:d7:e4:34: fd:af:dc:8f:6d:87:c0:f0:77:4a:ca:8f:6a:b0:68: 48:1f:79:5f:08:f9:9d:1f:69:84:ab:dc:76:fb:40: 70:35:8b:c2:75:3c:69:74:e6:9f:63:3f:d9:da:95: aa:43:d9:68:0f:d2:a9:46:05:11:5e:0e:e2:59:01: 79:ad:cb:4b:15:fa:35:75:a3:92:22:49:e8:ab:31: 78:f3:b9:94:f8:9b:be:b0:86:4e:31:01:08:2a:f5: 0e:a0:f7:fe:80:08:f9:e6:2e:50:1f:3e:02:d9:17: 47:23:b0:e8:4e:14:87:6d:02:79:ae:df:56:5f:9f: a7:77:10:b2:f6:cb:cb:93:30:14:6e:3c:d5:54:d0: 49:e7:63:61:4a:82:0d:e7:96:f2:28:5a:be:d0:3f: 9a:e1:35:96:63:54:58:74:83:34:75:71:1d:d4:3e: f8:d6:64:36:5e:8f:5e:a8:4f:96:52:b8:ad:1d:f3: 24:06:0e:ac:83:53:32:aa:ba:a6:5c:aa:4e:bc:c9: 6d:e2:e6:e1:fa:f7:5f:34:6c:fe:c3:23:4f:b8:ac: f5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:35:BC:06:61:96:01:05:58:FC:23:B7:F6:D8:A9:37:7E:2F:F6:8A X509v3 Authority Key Identifier: keyid:45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e2:aa:93:fa:a8:4a:3a:dd:73:1f:34:6f:00:53:0e:f4:90: 3c:2b:6c:58:d0:2d:4b:c6:ac:23:28:3b:a8:80:a1:3b:f6:77: 9e:c1:76:d6:88:b6:9e:58:49:03:c2:9d:2c:53:51:71:52:43: c3:f9:c6:00:37:bc:40:f0:c9:4a:96:35:a1:d9:37:0c:2f:e1: 51:81:af:72:a2:2b:ef:5d:7b:c9:2b:e7:7b:13:68:38:f1:5b: 09:c1:25:e8:dd:40:2c:69:98:b1:56:02:50:a0:02:84:03:18: 68:62:57:2c:cd:14:c6:35:7e:95:c6:6e:0b:27:ec:1c:e3:68: 49:32:f0:a3:7e:2e:96:2a:01:f5:95:fd:c5:81:eb:6e:6a:54: 70:91:33:9e:cc:5a:17:91:52:d7:ec:5f:38:96:1d:5b:f7:f5: dd:34:81:7a:8b:d4:1b:36:5e:49:be:df:76:10:81:88:c4:97: 2a:c9:6d:8e:ab:a0:83:a4:1b:44:c5:94:4d:96:c5:29:64:f0: d5:2e:da:33:49:e8:30:c8:13:c5:d2:56:6d:5c:d9:cf:8b:b3: 40:9b:f9:f3:d1:a2:50:47:45:9b:04:73:4b:a7:72:57:b6:5c: 4c:03:d6:d2:e1:6a:ad:9a:07:6b:47:bd:65:56:67:3b:c2:e5: 4a:8d:89:77 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKFliMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0 MTAxNjJiMTZmZTk0ZmQwYTg0ZDU0NDBiMzEzOGYxMWY4MGJiMjEwHhcNMjQwMzI4 MTgyMDE2WhcNMjQwMzMxMTkyNjE2WjAzMTEwLwYDVQQDEyg3YTQ0MzcyNGI1ZjNm NmQzNDg1NzRhOTE2Y2I3MmNmZGFhOGU1NDU2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzmdpYwC60MJ9ImDdesdhP4w0FEPdnVZ+Lez/JwgIi8nyCK7M rBCdH1PX5DT9r9yPbYfA8HdKyo9qsGhIH3lfCPmdH2mEq9x2+0BwNYvCdTxpdOaf Yz/Z2pWqQ9loD9KpRgURXg7iWQF5rctLFfo1daOSIknoqzF487mU+Ju+sIZOMQEI KvUOoPf+gAj55i5QHz4C2RdHI7DoThSHbQJ5rt9WX5+ndxCy9svLkzAUbjzVVNBJ 52NhSoIN55byKFq+0D+a4TWWY1RYdIM0dXEd1D741mQ2Xo9eqE+WUritHfMkBg6s g1MyqrqmXKpOvMlt4ubh+vdfNGz+wyNPuKz1VQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPQ1vAZhlgEFWPwjt/bYqTd+L/aKMB8GA1UdIwQYMBaAFEU4rGxweGGtYM/R clcppQXEABOPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjQxMDE2 MmIxNmZlOTRmZDBhODRkNTQ0MGIzMTM4ZjExZjgwYmIyMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNGNlZDk1NDgtNTFkMy00ZDkwLWE1ZWEtMTg4ZjEz YTU0OWRkLzY0MTAxNjJiMTZmZTk0ZmQwYTg0ZDU0NDBiMzEzOGYxMWY4MGJiMjEu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80Y2VkOTU0OC01MWQzLTRkOTAtYTVlYS0xODhm MTNhNTQ5ZGQvNjQxMDE2MmIxNmZlOTRmZDBhODRkNTQ0MGIzMTM4ZjExZjgwYmIy MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHTiqpP6qEo63XMfNG8AUw70kDwrbFjQLUvGrCMoO6iAoTv2 d57BdtaItp5YSQPCnSxTUXFSQ8P5xgA3vEDwyUqWNaHZNwwv4VGBr3KiK+9de8kr 53sTaDjxWwnBJejdQCxpmLFWAlCgAoQDGGhiVyzNFMY1fpXGbgsn7BzjaEky8KN+ LpYqAfWV/cWB625qVHCRM57MWheRUtfsXziWHVv39d00gXqL1Bs2Xkm+33YQgYjE lyrJbY6roIOkG0TFlE2WxSlk8NUu2jNJ6DDIE8XSVm1c2c+Ls0Cb+fPRolBHRZsE c0uncle2XEwD1tLhaq2aB2tHvWVWZzvC5UqNiXc= -----END CERTIFICATE-----Generated at Thu Mar 28 22:20:11 2024 by rpki-client on console-fra.rpki-client.org