$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft File: fa838a953551009c19f610b9c5f2d235fe909d9f.mft (raw, json) Hash identifier: msAq+x1rOYOb61c0ym51u8edXJRaVoJrgwrwGuxeRQo= Subject key identifier: 3C:EE:E6:C0:9E:14:38:B0:AD:AD:D6:F0:65:4C:42:F5:26:3A:25:72 Authority key identifier: A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9 Certificate issuer: /CN=fa838a953551009c19f610b9c5f2d235fe909d9f Certificate serial: 22735B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft Manifest number: 0DDA Signing time: Thu 28 Mar 2024 14:21:27 +0000 Manifest this update: Thu 28 Mar 2024 13:20:08 +0000 Manifest next update: Sun 31 Mar 2024 15:22:08 +0000 Files and hashes: 1: c4b285286e319f6484a57d2e56b314c25d46267c.roa (hash: NDY9ik3N0/AqGi1DtRT0FvEdevszj4frNqwZs9JFuo4=) 2: fa838a953551009c19f610b9c5f2d235fe909d9f.crl (hash: qIyqWnn79jj5cUoPK4AWZeRHi7l2E83Hl0eDmUhC3o8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.crl rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257755 (0x22735b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa838a953551009c19f610b9c5f2d235fe909d9f Validity Not Before: Mar 28 13:20:08 2024 GMT Not After : Mar 31 15:22:08 2024 GMT Subject: CN=0a39cb36c9c9fb4f78ed4ac7d6891ef3ed375364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:95:91:b6:24:cb:f5:27:dc:46:fb:d9:a7: e1:41:88:47:6a:4b:6a:71:b7:01:90:ff:c4:ef:86: a5:a6:63:3d:b6:c4:4e:29:92:80:03:56:59:9b:70: c2:0c:92:ce:4e:8f:6a:8b:32:46:c1:71:79:da:7f: 17:8c:61:75:46:ff:1f:a2:3b:e3:58:8f:fc:09:c1: f9:f1:48:47:86:ea:99:8b:b7:e5:55:30:f3:53:b3: d5:88:12:e4:1f:6d:b8:5d:e0:45:32:66:99:07:24: 13:c1:b4:26:65:93:07:7d:e8:d7:c3:85:f6:25:77: 05:d8:06:02:c4:27:b7:42:be:9c:67:c6:b7:49:4a: cc:52:c1:44:e7:3b:9d:a7:20:28:a0:aa:ef:d9:38: 3c:4b:e0:b2:de:d8:0f:80:52:00:91:c0:e2:25:0a: 43:d1:81:15:29:a2:b7:e8:9a:b1:7a:19:9d:4f:64: bc:7a:3e:d6:27:04:53:59:60:36:0c:e0:29:2f:f9: cb:f0:ff:70:02:00:4f:03:93:b5:fd:be:36:66:fb: 1f:ab:30:5a:92:f2:df:13:61:f4:b1:86:60:4f:12: d7:a6:5d:45:06:4f:a0:f6:23:3b:39:2f:ba:a3:5a: 9e:4e:e4:98:83:67:b7:33:be:aa:4a:aa:5e:8d:a8: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EE:E6:C0:9E:14:38:B0:AD:AD:D6:F0:65:4C:42:F5:26:3A:25:72 X509v3 Authority Key Identifier: keyid:A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:8f:ed:16:e3:43:73:bf:d4:b2:ca:c5:b5:8f:e1:f7:73: 4e:87:18:43:b6:d0:75:48:92:63:05:41:99:1c:0e:c1:a1:05: e0:3b:fc:d0:6f:4e:d9:68:0d:66:74:cb:2d:71:fc:20:99:89: 2d:a3:ff:3e:c2:95:19:ca:84:4f:0a:9f:d1:87:06:de:c1:65: 7a:fa:37:b0:c4:11:db:65:c0:60:b0:82:84:26:1a:a1:f1:15: 31:7d:d9:7f:30:b9:52:c0:da:35:f3:f5:84:4d:49:b2:f4:8b: 64:26:b3:54:ed:99:14:e7:68:6f:d6:1e:66:39:13:cd:f9:59: 8b:14:61:93:ef:5f:ac:b0:56:d1:bb:91:04:40:95:e6:da:4e: c5:a8:62:1b:1e:52:d9:7d:bb:49:71:9d:70:18:5f:d1:ec:49: fa:43:50:9d:71:c5:16:84:85:03:c1:a7:92:68:da:53:6c:43: 95:15:ed:44:87:12:f5:f6:2c:c7:79:5d:00:87:29:4d:da:12: f0:10:fc:a0:1a:5e:31:f0:d1:3f:4b:19:7b:8b:01:40:9a:84: a9:b7:78:0f:66:57:24:b8:81:17:b7:02:9a:65:73:e5:db:61: 99:a6:71:a0:51:56:d8:f1:0b:7c:c2:09:b9:44:49:b0:2b:b7: d9:6f:d1:3a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDInNbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZh ODM4YTk1MzU1MTAwOWMxOWY2MTBiOWM1ZjJkMjM1ZmU5MDlkOWYwHhcNMjQwMzI4 MTMyMDA4WhcNMjQwMzMxMTUyMjA4WjAzMTEwLwYDVQQDEygwYTM5Y2IzNmM5Yzlm YjRmNzhlZDRhYzdkNjg5MWVmM2VkMzc1MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAu2GVkbYky/Un3Eb72afhQYhHaktqcbcBkP/E74alpmM9tsRO KZKAA1ZZm3DCDJLOTo9qizJGwXF52n8XjGF1Rv8fojvjWI/8CcH58UhHhuqZi7fl VTDzU7PViBLkH224XeBFMmaZByQTwbQmZZMHfejXw4X2JXcF2AYCxCe3Qr6cZ8a3 SUrMUsFE5zudpyAooKrv2Tg8S+Cy3tgPgFIAkcDiJQpD0YEVKaK36JqxehmdT2S8 ej7WJwRTWWA2DOApL/nL8P9wAgBPA5O1/b42ZvsfqzBakvLfE2H0sYZgTxLXpl1F Bk+g9iM7OS+6o1qeTuSYg2e3M76qSqpejahiHwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFDzu5sCeFDiwra3W8GVMQvUmOiVyMB8GA1UdIwQYMBaAFKitii5UM7u02pE7 rX440lmpVk35MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmE4Mzhh OTUzNTUxMDA5YzE5ZjYxMGI5YzVmMmQyMzVmZTkwOWQ5Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNTJjYzU0MjgtMmY5Mi00ODhmLWJjZWQtZDYwZmE4 OGVhMmUyL2ZhODM4YTk1MzU1MTAwOWMxOWY2MTBiOWM1ZjJkMjM1ZmU5MDlkOWYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81MmNjNTQyOC0yZjkyLTQ4OGYtYmNlZC1kNjBm YTg4ZWEyZTIvZmE4MzhhOTUzNTUxMDA5YzE5ZjYxMGI5YzVmMmQyMzVmZTkwOWQ5 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAFSfj+0W40Nzv9SyysW1j+H3c06HGEO20HVIkmMFQZkcDsGh BeA7/NBvTtloDWZ0yy1x/CCZiS2j/z7ClRnKhE8Kn9GHBt7BZXr6N7DEEdtlwGCw goQmGqHxFTF92X8wuVLA2jXz9YRNSbL0i2Qms1TtmRTnaG/WHmY5E835WYsUYZPv X6ywVtG7kQRAlebaTsWoYhseUtl9u0lxnXAYX9HsSfpDUJ1xxRaEhQPBp5Jo2lNs Q5UV7USHEvX2LMd5XQCHKU3aEvAQ/KAaXjHw0T9LGXuLAUCahKm3eA9mVyS4gRe3 Applc+XbYZmmcaBRVtjxC3zCCblESbArt9lv0To= -----END CERTIFICATE-----Generated at Thu Mar 28 16:43:48 2024 by rpki-client on console-fra.rpki-client.org