$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft File: 85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft (raw, json) Hash identifier: CjyBTE3L8mO1oTKPQdjtWgvt5QyWs30V0dwJ7tbgZNc= Subject key identifier: B2:64:BE:9A:5C:F9:AC:D9:38:96:E1:9C:10:F0:86:54:80:A0:72:34 Authority key identifier: 2C:72:18:35:71:B0:C8:72:9F:62:E5:A0:DC:9F:FB:6D:49:D1:E0:B7 Certificate issuer: /CN=85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d Certificate serial: 1F2D01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft Manifest Number: 094D Signing time: Sat 25 Mar 2023 15:16:26 +0000 Manifest this update: Sat 25 Mar 2023 14:15:47 +0000 Manifest next update: Tue 28 Mar 2023 17:59:47 +0000 Files and hashes: 1: 1e25d8fc1ae704bf8a16c7a13ac4be548b73a6d8.roa (hash: fAStr3S8z+ZroGOa8lPpSkbeTMQ4gK92SCevjvadjAI=) 2: 85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.crl (hash: IwxN7LfxOZumf2arI5L6N8zRCOBdGd+G390D/O0RT+A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.crl rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Mar 2023 12:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043137 (0x1f2d01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d Validity Not Before: Mar 25 14:15:47 2023 GMT Not After : Mar 28 17:59:47 2023 GMT Subject: CN=7cc24a8415cc610c86b2d719767d432863f69243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ae:2f:b4:05:8e:87:f6:d3:1c:f9:47:03:2e: a8:d9:c6:ac:f4:56:85:00:ba:bd:93:b4:07:60:b1: cb:8e:4d:09:67:79:1e:56:d1:a2:33:27:af:b7:72: 18:a0:4f:05:be:48:12:51:25:e1:d7:a4:43:2c:49: 52:a0:a2:b0:3c:71:49:9a:31:5d:fe:7a:96:6d:32: 06:e7:21:6d:e8:7b:41:bb:8e:a2:d9:c8:da:df:11: e0:e1:df:04:84:5f:17:a8:c1:72:3a:bc:90:c8:0b: 6e:a9:58:ab:ab:66:7e:fb:bd:58:8f:a8:af:0d:e1: c6:93:e2:4e:b9:45:02:3e:b9:6b:88:99:73:ea:1a: 7a:02:28:cd:c2:33:b4:1a:1b:47:f7:f5:f2:01:07: 76:24:3e:81:b4:a6:37:fd:b9:00:1b:26:fb:35:d4: 3d:bb:9b:2c:25:05:94:1f:81:d5:85:c6:59:74:d5: e4:35:09:0c:bd:f5:8e:36:1a:62:a3:31:16:e1:27: 44:77:bf:d3:91:be:22:91:37:a1:8c:20:24:87:b9: 64:9c:4c:d6:db:06:54:69:87:47:d5:40:ab:f6:42: f3:82:46:33:81:df:b6:df:d1:8c:3b:44:b2:2f:3b: b1:39:d0:f8:2f:d2:47:78:f2:d4:6d:1d:4b:d5:84: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:64:BE:9A:5C:F9:AC:D9:38:96:E1:9C:10:F0:86:54:80:A0:72:34 X509v3 Authority Key Identifier: keyid:2C:72:18:35:71:B0:C8:72:9F:62:E5:A0:DC:9F:FB:6D:49:D1:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:cf:39:2f:4c:b3:4b:c8:95:04:74:9c:91:85:6b:d5:de: ec:7e:1c:9e:f5:1f:e6:f9:90:c7:2e:a2:33:2e:7c:1b:61:a5: 9f:70:19:a2:e2:fd:fd:5b:af:48:7c:7f:db:7e:22:a1:8f:fd: 5b:da:e5:01:9c:f9:f8:77:14:49:36:ed:9b:f9:a9:36:22:3c: fd:a7:e5:ec:a8:1b:c3:c0:ea:60:43:53:e8:80:c0:96:3b:bf: 6b:c0:c8:c5:0b:39:5a:a4:56:b3:e0:c0:be:0f:79:1f:31:00: 8d:41:ce:d1:f7:e9:41:7b:97:6d:5e:8f:de:c4:5d:dd:38:ad: 94:cc:b7:32:e6:74:8e:26:d8:68:08:e7:d5:f7:9c:68:d1:13: ea:dc:1d:dd:21:1e:59:c9:48:b1:71:51:4e:7a:b3:58:33:42: 39:1a:e3:27:fa:49:23:f0:19:b0:2a:03:0f:4a:31:e8:9c:0c: 9a:8c:32:06:08:ca:95:16:e1:ec:81:2b:ec:d9:92:f7:82:73: 46:06:af:eb:72:1e:c5:35:2e:30:8e:cd:e0:7a:cc:6f:24:b8: 4e:43:05:b3:bf:41:02:ec:e7:94:19:a9:c7:4b:8b:be:db:25: 9b:3f:1e:0c:5e:9a:30:81:08:21:8e:4f:30:4b:a1:5a:91:b5: 4a:be:a2:e5 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHy0BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1 ZTkwZWM0OTZhZmJkMGRmYWZkMWI3NmEwOWY5ZmIyY2M3YTc0OGQwHhcNMjMwMzI1 MTQxNTQ3WhcNMjMwMzI4MTc1OTQ3WjAzMTEwLwYDVQQDEyg3Y2MyNGE4NDE1Y2M2 MTBjODZiMmQ3MTk3NjdkNDMyODYzZjY5MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA8q4vtAWOh/bTHPlHAy6o2cas9FaFALq9k7QHYLHLjk0JZ3ke VtGiMyevt3IYoE8FvkgSUSXh16RDLElSoKKwPHFJmjFd/nqWbTIG5yFt6HtBu46i 2cja3xHg4d8EhF8XqMFyOryQyAtuqVirq2Z++71Yj6ivDeHGk+JOuUUCPrlriJlz 6hp6AijNwjO0GhtH9/XyAQd2JD6BtKY3/bkAGyb7NdQ9u5ssJQWUH4HVhcZZdNXk NQkMvfWONhpiozEW4SdEd7/Tkb4ikTehjCAkh7lknEzW2wZUaYdH1UCr9kLzgkYz gd+239GMO0SyLzuxOdD4L9JHePLUbR1L1YR5eQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFLJkvppc+azZOJbhnBDwhlSAoHI0MB8GA1UdIwQYMBaAFCxyGDVxsMhyn2Ll oNyf+21J0eC3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVlOTBl YzQ5NmFmYmQwZGZhZmQxYjc2YTA5ZjlmYjJjYzdhNzQ4ZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNWIwZmMyYWMtMmI0OS00NTZhLTg0NjUtYTA5YTUw YjQ2MTc2Lzg1ZTkwZWM0OTZhZmJkMGRmYWZkMWI3NmEwOWY5ZmIyY2M3YTc0OGQu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81YjBmYzJhYy0yYjQ5LTQ1NmEtODQ2NS1hMDlh NTBiNDYxNzYvODVlOTBlYzQ5NmFmYmQwZGZhZmQxYjc2YTA5ZjlmYjJjYzdhNzQ4 ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAB2azzkvTLNLyJUEdJyRhWvV3ux+HJ71H+b5kMcuojMufBth pZ9wGaLi/f1br0h8f9t+IqGP/Vva5QGc+fh3FEk27Zv5qTYiPP2n5eyoG8PA6mBD U+iAwJY7v2vAyMULOVqkVrPgwL4PeR8xAI1BztH36UF7l21ej97EXd04rZTMtzLm dI4m2GgI59X3nGjRE+rcHd0hHlnJSLFxUU56s1gzQjka4yf6SSPwGbAqAw9KMeic DJqMMgYIypUW4eyBK+zZkveCc0YGr+tyHsU1LjCOzeB6zG8kuE5DBbO/QQLs55QZ qcdLi77bJZs/HgxemjCBCCGOTzBLoVqRtUq+ouU= -----END CERTIFICATE-----Generated at Sat Mar 25 15:34:51 2023 by rpki-client on console-fra.rpki-client.org