$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft File: bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft (raw, json) Hash identifier: 3pYT6GM/6pXUX5A9GpLcD/1IYKbFzOIaf6UmclbfxZE= Subject key identifier: F9:B1:1C:EF:5B:2B:B5:2C:56:96:40:18:89:48:0E:0D:55:6B:B5:CC Authority key identifier: C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB Certificate issuer: /CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06 Certificate serial: 27D3D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft Manifest number: 0DC3 Signing time: Fri 29 Mar 2024 06:21:07 +0000 Manifest this update: Fri 29 Mar 2024 05:20:07 +0000 Manifest next update: Mon 01 Apr 2024 07:08:07 +0000 Files and hashes: 1: ae26b22127d1456115845337980547dc295ea554.roa (hash: b48MZKz74QPInBCl6TjZwlhEPKXzCiAc6s+PmosA0j4=) 2: bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl (hash: eits5cRKF+E9W/3tmeiSQyg3BfiXlsi7S5XUrdHYkmU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610133 (0x27d3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06 Validity Not Before: Mar 29 05:20:07 2024 GMT Not After : Apr 1 07:08:07 2024 GMT Subject: CN=1009d41456ee0e7241389c7f79761e6e3b5b4924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1b:65:ff:16:ee:b3:9d:d6:47:42:3b:90:3e: 4b:b4:dd:e4:e8:9f:f5:f3:6b:b5:3a:52:b1:57:87: 51:1d:40:69:88:51:7b:c0:03:11:35:fa:37:b5:cb: 51:05:e4:09:0c:b7:8f:84:45:04:f3:85:37:91:d5: 1e:dc:65:bd:3e:ad:c4:77:36:6c:d8:dd:6f:a5:5d: 50:df:f8:83:0b:f2:e0:fc:f4:9b:05:2b:47:f3:3b: 7a:d3:30:f0:d6:d8:2e:2f:56:5d:b6:54:82:20:ca: e2:ac:17:91:77:f9:03:83:26:5c:62:b3:b3:b9:11: fa:97:90:89:ed:66:ef:74:8d:92:7d:8d:1a:a1:f4: 7f:8f:c6:ea:e6:da:02:13:76:d9:5c:00:1f:52:43: 5b:75:56:0a:78:5f:dc:56:69:ea:ba:fa:93:bc:ea: ad:8f:52:9f:52:bc:e9:3b:9f:c5:fd:3b:51:0c:22: 4e:92:9f:d0:04:39:74:ff:11:4f:96:4e:57:f7:bf: ad:83:27:17:21:16:67:38:36:10:39:fe:35:2b:bd: 77:2c:43:f6:aa:2a:19:20:40:89:f9:1d:63:1a:a9: 11:25:79:dd:1b:4a:10:89:91:fb:31:33:90:e3:ce: 7f:24:a6:0f:87:2b:c2:1d:8d:45:b8:59:ca:25:da: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B1:1C:EF:5B:2B:B5:2C:56:96:40:18:89:48:0E:0D:55:6B:B5:CC X509v3 Authority Key Identifier: keyid:C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bb:d5:24:bc:df:5c:84:04:f6:c1:60:ae:55:5f:1e:2e:53: 64:ef:77:49:eb:c7:a0:01:4e:98:b6:93:cd:b1:24:71:e9:3c: 41:d3:e1:25:99:6c:8f:02:5a:79:8e:11:e5:eb:73:bd:7c:2e: 5b:fd:60:56:c0:ca:cc:0c:bc:8f:08:04:71:04:a6:09:4c:cf: 5f:88:25:45:7f:56:44:12:d5:cb:27:a2:c3:64:44:7f:01:20: 94:06:27:3a:64:b7:f7:61:3d:e8:2d:c2:47:aa:3b:65:68:0d: 05:d5:bb:a5:7b:3f:ad:c7:fd:ca:74:3d:d5:75:53:e0:62:7b: 3b:9b:00:71:73:38:47:39:77:18:00:05:7b:99:2b:49:86:c5: 11:8a:68:10:e0:93:7a:49:bc:9c:42:25:b1:44:20:fe:84:9a: fb:d0:bb:01:c1:8a:e9:80:0e:0c:d2:a1:c5:cf:39:c5:d0:ef: b4:5c:a3:4c:7e:ce:11:b4:6c:05:ac:c3:93:8c:18:5f:a1:9f: e0:57:5f:bc:8e:4b:bd:59:36:0e:f4:33:b1:ad:40:1f:17:30: 1e:ae:65:a8:03:cd:60:20:2b:dc:21:8f:fd:85:18:ae:58:3b: 4b:83:dd:f5:32:1d:ca:a3:b1:06:1b:06:a2:88:b0:f5:0a:ad: cb:43:31:ca -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ9PVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm OWFkMDE5NTVhYmQ1ZGM1M2ViYzNhYzc3YTlkOTZjYTdmNThkMDYwHhcNMjQwMzI5 MDUyMDA3WhcNMjQwNDAxMDcwODA3WjAzMTEwLwYDVQQDEygxMDA5ZDQxNDU2ZWUw ZTcyNDEzODljN2Y3OTc2MWU2ZTNiNWI0OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkRtl/xbus53WR0I7kD5LtN3k6J/182u1OlKxV4dRHUBpiFF7 wAMRNfo3tctRBeQJDLePhEUE84U3kdUe3GW9Pq3EdzZs2N1vpV1Q3/iDC/Lg/PSb BStH8zt60zDw1tguL1ZdtlSCIMrirBeRd/kDgyZcYrOzuRH6l5CJ7WbvdI2SfY0a ofR/j8bq5toCE3bZXAAfUkNbdVYKeF/cVmnquvqTvOqtj1KfUrzpO5/F/TtRDCJO kp/QBDl0/xFPlk5X97+tgycXIRZnODYQOf41K713LEP2qioZIECJ+R1jGqkRJXnd G0oQiZH7MTOQ485/JKYPhyvCHY1FuFnKJdorAwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPmxHO9bK7UsVpZAGIlIDg1Va7XMMB8GA1UdIwQYMBaAFMXDz6zzqvHaIS8Y zC3ra6ls0HHrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmY5YWQw MTk1NWFiZDVkYzUzZWJjM2FjNzdhOWQ5NmNhN2Y1OGQwNi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNzMxMjhkZWQtNTAwZC00ZjRmLWFhNjUtZjExM2E3 ZTUwODVkL2JmOWFkMDE5NTVhYmQ1ZGM1M2ViYzNhYzc3YTlkOTZjYTdmNThkMDYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83MzEyOGRlZC01MDBkLTRmNGYtYWE2NS1mMTEz YTdlNTA4NWQvYmY5YWQwMTk1NWFiZDVkYzUzZWJjM2FjNzdhOWQ5NmNhN2Y1OGQw Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHq71SS831yEBPbBYK5VXx4uU2Tvd0nrx6ABTpi2k82xJHHp PEHT4SWZbI8CWnmOEeXrc718Llv9YFbAyswMvI8IBHEEpglMz1+IJUV/VkQS1csn osNkRH8BIJQGJzpkt/dhPegtwkeqO2VoDQXVu6V7P63H/cp0PdV1U+BiezubAHFz OEc5dxgABXuZK0mGxRGKaBDgk3pJvJxCJbFEIP6EmvvQuwHBiumADgzSocXPOcXQ 77Rco0x+zhG0bAWsw5OMGF+hn+BXX7yOS71ZNg70M7GtQB8XMB6uZagDzWAgK9wh j/2FGK5YO0uD3fUyHcqjsQYbBqKIsPUKrctDMco= -----END CERTIFICATE-----Generated at Fri Mar 29 07:06:36 2024 by rpki-client on console-ams.rpki-client.org