$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6faeb9f5-d8d4-4a67-9808-5a5a228bfcc1/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.mft File: f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.mft (raw, json) Hash identifier: NMp4clCtmeV2pWbQmZjit2GRWvOjAJj7bRkVELvacFY= Subject key identifier: 8C:9E:07:B1:0E:9E:C8:6C:58:FC:AE:E9:3F:97:70:AD:83:CF:33:22 Authority key identifier: 53:D9:88:3D:9F:0A:B1:21:4E:1E:34:7B:63:D0:06:BD:DD:27:A4:61 Certificate issuer: /CN=f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a Certificate serial: 1ED79A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6faeb9f5-d8d4-4a67-9808-5a5a228bfcc1/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.mft Manifest Number: 0922 Signing time: Tue 28 Mar 2023 07:16:04 +0000 Manifest this update: Tue 28 Mar 2023 06:15:46 +0000 Manifest next update: Fri 31 Mar 2023 09:59:46 +0000 Files and hashes: 1: a5ddb00a535fcff382a189e388fb0e77bd8c91a4.roa (hash: m+mFrSkCVZ/OBMJUMte8oFdXeoODleLMGfEwzoFY1pY=) 2: f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.crl (hash: A/GcZR9vjDlQrecQL1/4Uz0D2DggxzekIaL5qwTpJGo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6faeb9f5-d8d4-4a67-9808-5a5a228bfcc1/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.crl rsync://repository.lacnic.net/rpki/lacnic/6faeb9f5-d8d4-4a67-9808-5a5a228bfcc1/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 31 Mar 2023 00:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021274 (0x1ed79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a Validity Not Before: Mar 28 06:15:46 2023 GMT Not After : Mar 31 09:59:46 2023 GMT Subject: CN=ef7f3c377e89ecc902afd608608c1913556e03d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:8a:b0:66:28:6c:72:11:a3:f8:a1:f1:7f: ac:1e:14:40:58:63:76:70:28:0e:40:76:a7:38:97: 0b:9c:29:65:b0:85:41:2a:96:9f:ea:c9:5e:cf:81: 2c:83:32:8c:94:c7:3b:c5:a6:1c:39:c3:5a:ea:ff: c1:1b:d6:d7:29:21:d0:a2:3d:07:a8:06:f2:43:e0: c6:03:2b:4c:fe:f4:46:7d:cd:3e:e9:c6:d8:9c:1d: 76:d7:38:6e:af:24:89:a9:be:32:6e:b9:04:ab:dd: 77:60:c3:c5:67:da:df:c2:03:e1:be:43:d3:a8:46: b1:37:43:61:35:47:23:c4:76:1f:09:7e:ac:c0:ba: 39:8d:57:d1:cf:b3:42:d9:ba:b8:b8:0e:44:14:f6: 75:94:b0:77:2d:f3:a8:c5:af:1c:e4:84:0a:65:9e: 0f:be:c6:c1:cb:8f:2a:84:87:43:29:2c:b3:f0:42: d5:0d:24:0c:d2:e9:bc:d1:b6:6f:84:19:ed:6c:29: b5:e2:23:13:b1:17:40:1a:c1:14:74:f3:bb:ff:b2: 52:d1:ec:3d:70:18:dd:3f:01:20:ed:5f:0f:92:8d: 3b:08:05:d4:b0:3e:45:45:7b:84:8c:dc:73:a8:c3: 38:c6:09:6a:d4:21:ef:31:80:b3:b9:bd:70:88:d4: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9E:07:B1:0E:9E:C8:6C:58:FC:AE:E9:3F:97:70:AD:83:CF:33:22 X509v3 Authority Key Identifier: keyid:53:D9:88:3D:9F:0A:B1:21:4E:1E:34:7B:63:D0:06:BD:DD:27:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6faeb9f5-d8d4-4a67-9808-5a5a228bfcc1/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6faeb9f5-d8d4-4a67-9808-5a5a228bfcc1/f7f9de7c5312f6d7014abab1435e88e2b5ed3a1a.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:18:33:8d:90:71:2b:65:7d:f2:c8:28:73:58:95:b6:08:e6: 6e:fb:c1:ac:37:6c:7b:9b:8e:6d:12:85:c3:94:bb:bb:0f:ca: 66:62:c8:a5:f4:5a:14:29:e5:2b:84:d7:75:f3:f7:83:30:15: 78:c3:8b:7e:7e:8f:df:02:71:d3:95:38:b3:fa:d9:27:49:b2: c8:d7:1a:f4:b0:c9:ca:94:6e:17:02:89:8e:5c:23:3f:51:f3: ba:ac:c8:31:7e:cf:68:96:8e:24:d1:e4:94:d7:37:38:bc:9f: ef:68:5a:22:65:44:a8:63:a9:42:e8:d1:1d:4f:f8:17:cd:7f: cf:e3:e0:09:b5:4e:9d:2d:7f:c3:ac:32:de:80:94:6c:bf:46: 86:0d:60:cb:bf:12:b2:34:f6:f7:f5:67:97:07:6b:0a:d6:6f: 3c:a3:3e:4f:d0:f9:ef:fd:72:7a:55:9e:ab:8b:12:14:64:5e: e3:a9:1b:a5:28:cc:cd:62:3f:41:cc:7c:7c:c3:04:3a:cb:47: 53:fa:da:c6:11:68:85:67:7a:ad:44:59:46:72:62:7f:3e:28: a0:82:59:3a:d3:db:8d:d6:65:77:1f:cf:5e:68:ef:7e:20:f4: 54:8a:69:6f:12:97:ca:7d:2d:4d:78:ce:bb:df:85:21:9b:01: 68:3d:bc:63 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHteaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY3 ZjlkZTdjNTMxMmY2ZDcwMTRhYmFiMTQzNWU4OGUyYjVlZDNhMWEwHhcNMjMwMzI4 MDYxNTQ2WhcNMjMwMzMxMDk1OTQ2WjAzMTEwLwYDVQQDEyhlZjdmM2MzNzdlODll Y2M5MDJhZmQ2MDg2MDhjMTkxMzU1NmUwM2QzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkvuKsGYobHIRo/ih8X+sHhRAWGN2cCgOQHanOJcLnCllsIVB Kpaf6slez4EsgzKMlMc7xaYcOcNa6v/BG9bXKSHQoj0HqAbyQ+DGAytM/vRGfc0+ 6cbYnB121zhurySJqb4ybrkEq913YMPFZ9rfwgPhvkPTqEaxN0NhNUcjxHYfCX6s wLo5jVfRz7NC2bq4uA5EFPZ1lLB3LfOoxa8c5IQKZZ4PvsbBy48qhIdDKSyz8ELV DSQM0um80bZvhBntbCm14iMTsRdAGsEUdPO7/7JS0ew9cBjdPwEg7V8Pko07CAXU sD5FRXuEjNxzqMM4xglq1CHvMYCzub1wiNRhHQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFIyeB7EOnshsWPyu6T+XcK2DzzMiMB8GA1UdIwQYMBaAFFPZiD2fCrEhTh40 e2PQBr3dJ6RhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjdmOWRl N2M1MzEyZjZkNzAxNGFiYWIxNDM1ZTg4ZTJiNWVkM2ExYS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNmZhZWI5ZjUtZDhkNC00YTY3LTk4MDgtNWE1YTIy OGJmY2MxL2Y3ZjlkZTdjNTMxMmY2ZDcwMTRhYmFiMTQzNWU4OGUyYjVlZDNhMWEu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82ZmFlYjlmNS1kOGQ0LTRhNjctOTgwOC01YTVh MjI4YmZjYzEvZjdmOWRlN2M1MzEyZjZkNzAxNGFiYWIxNDM1ZTg4ZTJiNWVkM2Ex YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAAsYM42QcStlffLIKHNYlbYI5m77waw3bHubjm0ShcOUu7sP ymZiyKX0WhQp5SuE13Xz94MwFXjDi35+j98CcdOVOLP62SdJssjXGvSwycqUbhcC iY5cIz9R87qsyDF+z2iWjiTR5JTXNzi8n+9oWiJlRKhjqULo0R1P+BfNf8/j4Am1 Tp0tf8OsMt6AlGy/RoYNYMu/ErI09vf1Z5cHawrWbzyjPk/Q+e/9cnpVnquLEhRk XuOpG6UozM1iP0HMfHzDBDrLR1P62sYRaIVneq1EWUZyYn8+KKCCWTrT243WZXcf z15o734g9FSKaW8Sl8p9LU14zrvfhSGbAWg9vGM= -----END CERTIFICATE-----Generated at Tue Mar 28 07:46:01 2023 by rpki-client on console-ams.rpki-client.org