$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft File: 1a4d699082fbffcb821d7f10efc5a80a2237b902.mft (raw, json) Hash identifier: as5bg41g8roeR9zdZwiFjuiwuiq8hTnImSVhPJyiVPU= Subject key identifier: 82:4E:DD:24:64:3D:E8:D5:06:90:DD:72:56:EE:0E:5F:78:04:34:2A Authority key identifier: A9:95:98:04:0E:5B:ED:D3:15:36:F8:EF:5B:31:4A:DC:D7:AD:7E:11 Certificate issuer: /CN=1a4d699082fbffcb821d7f10efc5a80a2237b902 Certificate serial: 1BE6B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4d699082fbffcb821d7f10efc5a80a2237b902.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft Manifest number: 0DBD Signing time: Fri 29 Mar 2024 03:21:18 +0000 Manifest this update: Fri 29 Mar 2024 02:20:08 +0000 Manifest next update: Mon 01 Apr 2024 06:07:08 +0000 Files and hashes: 1: 0fab787d89410a7c1b81e1b651dca2f882b001d6.roa (hash: 0WYSj7SZN3JeF6KSgQwPnCP4Ybu3+/kJmkE7CPA53U8=) 2: 1a4d699082fbffcb821d7f10efc5a80a2237b902.crl (hash: 3sPk0NRJOb65d/Wwjh9EUQ11zsJld6gnLDk2FKLqFpQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.crl rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4d699082fbffcb821d7f10efc5a80a2237b902.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828531 (0x1be6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4d699082fbffcb821d7f10efc5a80a2237b902 Validity Not Before: Mar 29 02:20:08 2024 GMT Not After : Apr 1 06:07:08 2024 GMT Subject: CN=3e8c3eac93c54938606dc03d962b02f38fa90d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:68:b0:2b:7d:ef:b5:02:aa:07:3b:39:c0: 3f:ec:c5:60:89:64:ff:b5:3f:f7:dd:57:90:4a:45: 46:8c:5e:c3:5d:33:89:dd:bd:ac:06:cb:66:29:f2: 2a:9c:e9:67:8a:0f:44:d5:a4:9e:ab:4d:29:99:a0: 7f:c7:96:f7:b9:8b:21:3d:51:3e:b2:dc:92:2e:5a: 3d:6b:b3:4f:b2:8b:8d:a9:fb:5a:38:eb:82:bc:df: 8e:44:b2:7e:ca:1d:8c:b1:eb:5c:f1:21:65:32:f5: 83:ad:e7:84:98:8e:fb:8e:3b:28:3b:51:5d:ad:23: 36:b6:ed:09:f2:2e:9a:ab:d7:37:13:d0:0b:bb:d4: 85:77:66:a3:77:b2:3e:8e:77:69:1e:66:a1:1a:cb: d9:2b:61:70:88:ba:7f:96:42:f1:24:e7:0f:59:73: ec:b0:d8:5f:30:2b:2c:22:6e:62:7b:57:b4:92:d5: 8c:1a:df:77:79:fc:11:18:50:75:31:62:7f:e5:78: 7e:e1:38:c5:08:84:83:1c:90:30:d2:db:72:34:60: b6:de:d8:e7:4c:29:77:2a:ee:3c:23:35:2a:3b:9c: ca:c6:30:94:c5:86:f2:85:4a:60:c4:cb:ff:a7:a0: fd:45:d2:34:69:02:cf:ef:73:26:aa:d5:63:c3:0d: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4E:DD:24:64:3D:E8:D5:06:90:DD:72:56:EE:0E:5F:78:04:34:2A X509v3 Authority Key Identifier: keyid:A9:95:98:04:0E:5B:ED:D3:15:36:F8:EF:5B:31:4A:DC:D7:AD:7E:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4d699082fbffcb821d7f10efc5a80a2237b902.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:8d:14:15:5d:fd:76:97:4b:0f:37:6b:3a:b7:6e:ca:9e:e5: f4:cd:8d:87:38:30:6e:70:e0:ef:9c:67:8b:cc:ca:33:47:cb: 2d:d5:27:36:8c:18:bc:c9:d2:0a:0c:ce:47:25:6e:00:40:c5: 7c:fc:a9:23:5e:f6:f7:71:50:1c:f2:d9:b1:d2:5f:c9:7b:07: 55:42:34:2a:20:7e:fc:a0:d9:40:3b:10:af:b7:cd:dd:02:6e: 21:79:7e:bb:7e:e2:af:5c:e1:ae:c2:73:d3:f9:d5:ad:a7:4c: b1:e8:2d:41:86:af:61:8a:3b:cd:e0:a1:e6:67:35:be:8f:33: 13:49:b3:99:b1:b1:46:e4:03:9a:46:09:77:ed:31:47:74:93: bd:b4:c0:5e:49:c5:fc:b8:96:41:16:d6:16:c6:4a:4c:f8:06: b3:95:b6:5f:2b:a2:bc:98:3c:32:55:31:25:c0:d5:0e:e2:af: 40:11:21:39:70:72:c6:a0:bb:d3:c2:47:11:74:01:94:92:a5: 0a:e0:9b:a1:00:5d:44:c2:f0:e1:e2:f3:64:da:54:10:88:38: bf:90:d5:2f:37:e1:5b:e3:a7:cf:51:b3:64:79:2a:f8:32:14: aa:76:aa:ea:9b:15:d7:53:7c:03:24:1c:f2:15:47:e8:40:b5: 3f:d1:b6:0e -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDG+azMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFh NGQ2OTkwODJmYmZmY2I4MjFkN2YxMGVmYzVhODBhMjIzN2I5MDIwHhcNMjQwMzI5 MDIyMDA4WhcNMjQwNDAxMDYwNzA4WjAzMTEwLwYDVQQDEygzZThjM2VhYzkzYzU0 OTM4NjA2ZGMwM2Q5NjJiMDJmMzhmYTkwZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgHdosCt977UCqgc7OcA/7MVgiWT/tT/33VeQSkVGjF7DXTOJ 3b2sBstmKfIqnOlnig9E1aSeq00pmaB/x5b3uYshPVE+stySLlo9a7NPsouNqfta OOuCvN+ORLJ+yh2Msetc8SFlMvWDreeEmI77jjsoO1FdrSM2tu0J8i6aq9c3E9AL u9SFd2ajd7I+jndpHmahGsvZK2FwiLp/lkLxJOcPWXPssNhfMCssIm5ie1e0ktWM Gt93efwRGFB1MWJ/5Xh+4TjFCISDHJAw0ttyNGC23tjnTCl3Ku48IzUqO5zKxjCU xYbyhUpgxMv/p6D9RdI0aQLP73MmqtVjww1K2QIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFIJO3SRkPejVBpDdclbuDl94BDQqMB8GA1UdIwQYMBaAFKmVmAQOW+3TFTb4 71sxStzXrX4RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWE0ZDY5 OTA4MmZiZmZjYjgyMWQ3ZjEwZWZjNWE4MGEyMjM3YjkwMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNWFmZTJjMTgtODVkNS00YjE5LWFkZjYtZjM2MGQy YmNiZTU2LzFhNGQ2OTkwODJmYmZmY2I4MjFkN2YxMGVmYzVhODBhMjIzN2I5MDIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81YWZlMmMxOC04NWQ1LTRiMTktYWRmNi1mMzYw ZDJiY2JlNTYvMWE0ZDY5OTA4MmZiZmZjYjgyMWQ3ZjEwZWZjNWE4MGEyMjM3Yjkw Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAJiNFBVd/XaXSw83azq3bsqe5fTNjYc4MG5w4O+cZ4vMyjNH yy3VJzaMGLzJ0goMzkclbgBAxXz8qSNe9vdxUBzy2bHSX8l7B1VCNCogfvyg2UA7 EK+3zd0CbiF5frt+4q9c4a7Cc9P51a2nTLHoLUGGr2GKO83goeZnNb6PMxNJs5mx sUbkA5pGCXftMUd0k720wF5Jxfy4lkEW1hbGSkz4BrOVtl8roryYPDJVMSXA1Q7i r0ARITlwcsagu9PCRxF0AZSSpQrgm6EAXUTC8OHi82TaVBCIOL+Q1S834Vvjp89R s2R5KvgyFKp2quqbFddTfAMkHPIVR+hAtT/Rtg4= -----END CERTIFICATE-----Generated at Fri Mar 29 04:03:26 2024 by rpki-client on console-ams.rpki-client.org