$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.mft File: a736ecb08742dd36c47f8758266a50eba82e7909.mft (raw, json) Hash identifier: L/gu1DijZKJ9eKWZp3MUHj6Dt5136LiTng1m2cQ2RMQ= Subject key identifier: 7B:CB:5A:C5:69:7D:1D:A1:A0:C1:3B:50:7D:CF:F2:EC:E5:C6:18:CE Authority key identifier: F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27 Certificate issuer: /CN=a736ecb08742dd36c47f8758266a50eba82e7909 Certificate serial: 1EB831 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.mft Manifest Number: 092F Signing time: Tue 21 Mar 2023 12:16:10 +0000 Manifest this update: Tue 21 Mar 2023 11:15:34 +0000 Manifest next update: Fri 24 Mar 2023 13:52:34 +0000 Files and hashes: 1: a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa (hash: GRoDB96REdIVmarf8Gduubxbn3O73T3GKiSg3xgagGE=) 2: a736ecb08742dd36c47f8758266a50eba82e7909.crl (hash: MYx8TZmserXY36DUd32/zj3B8XH7MAxefeLYhDBW7dE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Mar 2023 09:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013233 (0x1eb831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a736ecb08742dd36c47f8758266a50eba82e7909 Validity Not Before: Mar 21 11:15:34 2023 GMT Not After : Mar 24 13:52:34 2023 GMT Subject: CN=a2696edd839b73051c4f5204813e98392a407cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:d3:25:3d:23:f1:89:6d:72:da:26:10:76: 1c:11:33:6e:d1:80:20:f4:cd:1e:e0:eb:2c:4f:74: ad:8f:47:d9:32:e7:09:23:10:b4:72:f3:28:61:58: 7c:f1:b1:27:da:19:5f:a3:e9:22:76:19:d8:72:fc: 21:5c:77:90:12:0f:79:28:9d:cd:32:f1:33:84:69: e6:c1:b1:ae:91:25:e5:4e:e3:ca:9c:d1:f4:0d:95: a0:dc:e0:e2:a4:f4:c3:00:d3:cf:42:7d:84:64:8c: 9e:36:7d:f9:64:ba:c3:9c:c9:c0:85:61:9c:68:11: c2:b4:e8:d5:a8:4e:d0:c9:ba:06:bd:74:bb:a1:9c: ef:85:59:d5:4a:0e:d9:e0:f8:bf:8c:22:28:02:d1: 6c:55:f3:65:9a:7f:ce:5d:1a:59:7c:ef:cf:8e:e6: 48:d1:d8:4b:7c:48:c2:e5:7d:5a:27:fe:3b:ac:1a: b1:98:bd:72:4c:a5:57:78:1e:9b:58:e3:32:11:06: d4:6d:9f:ed:90:b7:9b:cd:93:58:5e:00:23:4d:d1: 06:4d:4b:4f:0d:0a:7b:6b:0c:57:da:4f:ac:a5:a5: 96:dd:39:e0:9b:8d:8e:01:7e:0f:8e:ef:f4:61:92: 66:89:1d:e2:66:19:57:c7:d9:63:31:92:30:28:3b: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CB:5A:C5:69:7D:1D:A1:A0:C1:3B:50:7D:CF:F2:EC:E5:C6:18:CE X509v3 Authority Key Identifier: keyid:F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2b:fc:1f:db:48:60:26:10:79:1a:06:b0:cd:b0:d0:88:33: 68:d0:ee:ce:0c:b0:af:fc:ba:25:4d:25:48:6f:3a:b8:77:48: 71:31:c5:ea:0e:1f:be:40:b6:fa:8d:06:f7:e4:b2:c8:af:53: 3e:52:b5:e8:09:f8:96:f2:a7:1f:18:b6:93:51:40:d6:bb:cf: bc:8d:4b:e8:ba:08:af:22:5f:6a:49:93:d2:8c:a0:7c:9f:cf: 83:db:9d:d1:cf:13:fa:b1:f8:fb:e1:49:00:6e:fd:f2:e0:43: a7:70:02:2e:ef:a1:1c:52:56:e0:18:06:5b:81:33:8c:5b:4b: cd:52:32:d6:7d:62:69:e3:02:26:83:ef:12:74:d0:84:ae:cd: 9f:15:0a:e4:95:ac:c4:2e:64:ed:64:8f:f5:cd:e5:5d:c5:5e: d6:f1:09:1d:5d:ae:39:eb:0d:ef:4c:0f:c9:dd:7e:37:2f:ce: ca:ab:6c:3c:ca:ef:9d:ce:5c:4f:1c:dc:82:a9:f3:71:aa:14: e3:ae:28:50:1b:a0:d8:a1:80:71:c7:38:e4:e8:9b:51:8a:ba: 9c:97:97:f5:6f:a6:ac:24:a8:dc:70:16:61:50:b8:88:7f:66: 0e:f4:69:06:b3:9d:b5:80:48:36:e9:0d:e4:fa:77:87:d6:5a: 18:c1:92:a5 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHrgxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3 MzZlY2IwODc0MmRkMzZjNDdmODc1ODI2NmE1MGViYTgyZTc5MDkwHhcNMjMwMzIx MTExNTM0WhcNMjMwMzI0MTM1MjM0WjAzMTEwLwYDVQQDEyhhMjY5NmVkZDgzOWI3 MzA1MWM0ZjUyMDQ4MTNlOTgzOTJhNDA3Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAl7PTJT0j8YltctomEHYcETNu0YAg9M0e4OssT3Stj0fZMucJ IxC0cvMoYVh88bEn2hlfo+kidhnYcvwhXHeQEg95KJ3NMvEzhGnmwbGukSXlTuPK nNH0DZWg3ODipPTDANPPQn2EZIyeNn35ZLrDnMnAhWGcaBHCtOjVqE7QyboGvXS7 oZzvhVnVSg7Z4Pi/jCIoAtFsVfNlmn/OXRpZfO/PjuZI0dhLfEjC5X1aJ/47rBqx mL1yTKVXeB6bWOMyEQbUbZ/tkLebzZNYXgAjTdEGTUtPDQp7awxX2k+spaWW3Tng m42OAX4Pju/0YZJmiR3iZhlXx9ljMZIwKDv9bwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFHvLWsVpfR2hoME7UH3P8uzlxhjOMB8GA1UdIwQYMBaAFPbr3Jf4BZeJAhCo If6ZdNihf/YnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTczNmVj YjA4NzQyZGQzNmM0N2Y4NzU4MjY2YTUwZWJhODJlNzkwOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNWI5ODZlMWUtNTRkZi00ZmNhLWEwOGQtNWY5NjRh ZDc5ZmRjL2E3MzZlY2IwODc0MmRkMzZjNDdmODc1ODI2NmE1MGViYTgyZTc5MDku bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81Yjk4NmUxZS01NGRmLTRmY2EtYTA4ZC01Zjk2 NGFkNzlmZGMvYTczNmVjYjA4NzQyZGQzNmM0N2Y4NzU4MjY2YTUwZWJhODJlNzkw OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHMr/B/bSGAmEHkaBrDNsNCIM2jQ7s4MsK/8uiVNJUhvOrh3 SHExxeoOH75AtvqNBvfkssivUz5StegJ+Jbypx8YtpNRQNa7z7yNS+i6CK8iX2pJ k9KMoHyfz4PbndHPE/qx+PvhSQBu/fLgQ6dwAi7voRxSVuAYBluBM4xbS81SMtZ9 YmnjAiaD7xJ00ISuzZ8VCuSVrMQuZO1kj/XN5V3FXtbxCR1drjnrDe9MD8ndfjcv zsqrbDzK753OXE8c3IKp83GqFOOuKFAboNihgHHHOOTom1GKupyXl/VvpqwkqNxw FmFQuIh/Zg70aQaznbWASDbpDeT6d4fWWhjBkqU= -----END CERTIFICATE-----Generated at Tue Mar 21 13:04:57 2023 by rpki-client on console-ams.rpki-client.org