$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.mft File: a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.mft (raw, json) Hash identifier: 4F5WVy6irVJ6Cfsa7fWAk6mClWlHhGd7ZWRwFGLD3TY= Subject key identifier: CC:01:2E:20:FD:65:85:27:6B:B4:61:B9:23:12:E1:19:C0:4C:A5:81 Authority key identifier: 13:B4:B0:35:1C:F2:60:E5:CF:98:AC:BF:77:5D:04:A3:D5:8B:98:41 Certificate issuer: /CN=a05ae00c04ca47c24a21d30b0dd9eeac75d31f58 Certificate serial: 1FE23B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.mft Manifest number: 0DD0 Signing time: Fri 29 Mar 2024 08:21:12 +0000 Manifest this update: Fri 29 Mar 2024 07:20:10 +0000 Manifest next update: Mon 01 Apr 2024 09:28:10 +0000 Files and hashes: 1: a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.crl (hash: pVt/g2HG/5+WjsPkgzwViIjJZvJNIAHKMflHCqNv7g4=) 2: d51acbb85d2f261585388d89b5fb5853985d4cd5.roa (hash: BFM3U5ni7MoVb4EGRipVZoJhpw/0NLmEP7y7Z76XZE8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.crl rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089531 (0x1fe23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a05ae00c04ca47c24a21d30b0dd9eeac75d31f58 Validity Not Before: Mar 29 07:20:10 2024 GMT Not After : Apr 1 09:28:10 2024 GMT Subject: CN=dcb36c4906d183d7306996c8a6ee5028bcaa1c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:95:18:12:8e:41:4d:e3:b0:2c:08:f4:85:04: a6:f0:3d:71:08:bf:f5:df:9f:aa:0c:fb:b6:c3:13: 85:47:cb:14:ee:74:18:53:9b:07:5a:a2:95:0c:8e: 85:cd:50:96:64:eb:62:d9:4c:42:96:bb:14:fa:15: e5:b7:07:10:70:f5:a4:36:21:83:45:d9:47:21:f7: 00:8a:55:28:8b:ae:eb:9a:24:14:28:39:e7:9e:22: f8:b1:75:ea:2f:70:db:b7:2d:07:e1:b6:06:e2:91: 22:56:38:e4:39:51:f6:9d:cd:98:ca:8c:c7:d5:91: 7d:90:45:c2:1a:f0:7d:20:4a:11:b0:b7:dc:bd:09: 3a:d9:7a:68:3e:61:d7:c2:b9:8c:bc:bf:13:50:94: 3d:ef:c4:e6:cb:fa:a0:26:f7:a1:98:da:b6:1d:6d: ca:71:8b:9d:13:82:f1:64:ec:84:81:9d:df:92:78: 07:60:5e:d0:d5:6d:f4:65:86:ed:6b:4b:33:1f:46: c9:87:27:31:ea:bc:21:3b:46:c3:eb:7a:1f:f7:07: 09:f0:51:a0:13:85:02:c4:86:a0:39:6f:d7:dd:d5: 4a:b5:54:3e:b6:58:15:17:23:28:12:69:c2:6f:70: 4b:07:e1:13:98:8e:a8:a0:a5:ac:70:c5:5f:97:9f: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:01:2E:20:FD:65:85:27:6B:B4:61:B9:23:12:E1:19:C0:4C:A5:81 X509v3 Authority Key Identifier: keyid:13:B4:B0:35:1C:F2:60:E5:CF:98:AC:BF:77:5D:04:A3:D5:8B:98:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:63:7e:0d:f2:56:7f:5a:55:ea:9d:ad:d1:c2:f3:ad:cf:1f: 2e:d3:21:af:8c:54:80:b4:31:78:15:88:d0:2a:b6:7e:44:3b: 1d:ce:4d:7c:e3:29:1f:bb:9e:21:72:d7:ac:58:a2:0d:02:c0: 2f:9f:47:8b:35:d8:82:c9:c5:b3:ee:72:a3:93:bc:18:04:39: 4a:36:e4:02:1d:95:e0:d5:46:d3:45:25:f5:46:8c:21:4c:e6: de:7a:6b:a9:b7:da:30:17:60:c9:2b:0b:3a:17:cc:bb:5c:30: 19:58:a7:a9:89:e1:32:71:98:da:07:3e:37:c2:a1:09:08:aa: ab:54:9c:63:9b:31:0f:b8:3e:36:24:6a:34:4d:63:ca:bf:1b: 57:6f:7d:22:6c:8a:53:bb:17:90:2a:22:a4:08:ff:2e:05:b5: 8b:6b:5c:c2:6b:ff:aa:16:b9:56:dc:9a:f9:26:f8:7e:91:01: bf:1e:66:19:3e:9d:00:6d:40:69:00:0f:2d:71:7f:cd:c5:e9: b5:fd:6a:1e:61:e0:53:1f:40:ed:bf:81:ca:9c:3c:c4:94:c8: 0f:e7:e7:ac:02:d6:65:93:4e:f6:d3:48:0f:5a:1a:bf:9b:7e: 8e:72:5e:94:d4:be:d2:d4:33:96:81:a2:39:e2:5a:84:ac:50: 6f:27:91:ab -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDH+I7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw NWFlMDBjMDRjYTQ3YzI0YTIxZDMwYjBkZDllZWFjNzVkMzFmNTgwHhcNMjQwMzI5 MDcyMDEwWhcNMjQwNDAxMDkyODEwWjAzMTEwLwYDVQQDEyhkY2IzNmM0OTA2ZDE4 M2Q3MzA2OTk2YzhhNmVlNTAyOGJjYWExYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAi5UYEo5BTeOwLAj0hQSm8D1xCL/135+qDPu2wxOFR8sU7nQY U5sHWqKVDI6FzVCWZOti2UxClrsU+hXltwcQcPWkNiGDRdlHIfcAilUoi67rmiQU KDnnniL4sXXqL3Dbty0H4bYG4pEiVjjkOVH2nc2YyozH1ZF9kEXCGvB9IEoRsLfc vQk62XpoPmHXwrmMvL8TUJQ978Tmy/qgJvehmNq2HW3KcYudE4LxZOyEgZ3fkngH YF7Q1W30ZYbta0szH0bJhycx6rwhO0bD63of9wcJ8FGgE4UCxIagOW/X3dVKtVQ+ tlgVFyMoEmnCb3BLB+ETmI6ooKWscMVfl58NKQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFMwBLiD9ZYUna7RhuSMS4RnATKWBMB8GA1UdIwQYMBaAFBO0sDUc8mDlz5is v3ddBKPVi5hBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTA1YWUw MGMwNGNhNDdjMjRhMjFkMzBiMGRkOWVlYWM3NWQzMWY1OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNGYxYzM4MjUtM2MxMy00MjhiLWFlNDgtOWI1YmQz MTI0NzMxL2EwNWFlMDBjMDRjYTQ3YzI0YTIxZDMwYjBkZDllZWFjNzVkMzFmNTgu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80ZjFjMzgyNS0zYzEzLTQyOGItYWU0OC05YjVi ZDMxMjQ3MzEvYTA1YWUwMGMwNGNhNDdjMjRhMjFkMzBiMGRkOWVlYWM3NWQzMWY1 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEljfg3yVn9aVeqdrdHC863PHy7TIa+MVIC0MXgViNAqtn5E Ox3OTXzjKR+7niFy16xYog0CwC+fR4s12ILJxbPucqOTvBgEOUo25AIdleDVRtNF JfVGjCFM5t56a6m32jAXYMkrCzoXzLtcMBlYp6mJ4TJxmNoHPjfCoQkIqqtUnGOb MQ+4PjYkajRNY8q/G1dvfSJsilO7F5AqIqQI/y4FtYtrXMJr/6oWuVbcmvkm+H6R Ab8eZhk+nQBtQGkADy1xf83F6bX9ah5h4FMfQO2/gcqcPMSUyA/n56wC1mWTTvbT SA9aGr+bfo5yXpTUvtLUM5aBojniWoSsUG8nkas= -----END CERTIFICATE-----Generated at Fri Mar 29 08:55:27 2024 by rpki-client on console-fra.rpki-client.org