$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73fd4b8e-b15d-4cf3-af19-f7f5ae9fee6d/25c0528268fef9de37dba60014f9d07309ee511f.mft File: 25c0528268fef9de37dba60014f9d07309ee511f.mft (raw, json) Hash identifier: jE21zFJxq/0r2K1bKVpzMh4R4pdHQ0t+b/rqHG3D1as= Subject key identifier: 46:1C:03:ED:2F:5E:51:6A:C1:2A:5B:09:6F:5D:DD:AD:B7:AB:04:B4 Authority key identifier: 2D:BA:30:60:21:4D:9C:86:B1:0A:F1:B3:F7:38:08:63:06:82:B5:E9 Certificate issuer: /CN=25c0528268fef9de37dba60014f9d07309ee511f Certificate serial: 27B316 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25c0528268fef9de37dba60014f9d07309ee511f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73fd4b8e-b15d-4cf3-af19-f7f5ae9fee6d/25c0528268fef9de37dba60014f9d07309ee511f.mft Manifest number: 0D95 Signing time: Thu 28 Mar 2024 05:20:31 +0000 Manifest this update: Thu 28 Mar 2024 04:20:06 +0000 Manifest next update: Sun 31 Mar 2024 06:21:06 +0000 Files and hashes: 1: 25c0528268fef9de37dba60014f9d07309ee511f.crl (hash: jEw8U4DOa3BoqDl/0RXrtk/UVhMVIYDqf4Ri0wZKYz0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/73fd4b8e-b15d-4cf3-af19-f7f5ae9fee6d/25c0528268fef9de37dba60014f9d07309ee511f.crl rsync://repository.lacnic.net/rpki/lacnic/73fd4b8e-b15d-4cf3-af19-f7f5ae9fee6d/25c0528268fef9de37dba60014f9d07309ee511f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25c0528268fef9de37dba60014f9d07309ee511f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601750 (0x27b316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c0528268fef9de37dba60014f9d07309ee511f Validity Not Before: Mar 28 04:20:06 2024 GMT Not After : Mar 31 06:21:06 2024 GMT Subject: CN=c4914895eb075792e5782439f29ad73de5e45dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:8b:1a:e1:37:61:23:c8:cc:e8:07:80:03: 44:8a:6f:b3:e2:3d:5d:2c:45:61:b3:39:e0:7b:d8: 01:0f:ad:08:d3:3b:32:e7:a3:80:8b:ec:f1:3f:43: 4c:d0:d3:f3:53:c8:d3:87:8a:50:3b:47:2c:66:b8: a4:65:1e:b3:99:2e:71:02:94:8f:1d:f3:34:45:7a: 60:24:04:b5:00:fd:e1:c2:cb:d2:64:65:a2:89:b0: 05:70:33:12:d5:ee:96:71:21:89:30:e8:39:96:8a: 3c:c5:a5:a5:e1:cf:e0:a5:51:1e:8d:e0:c8:d3:8b: a0:4f:7e:bf:eb:8a:8a:d2:79:bf:d1:47:3a:e4:48: 81:09:d4:2b:50:5d:c6:ab:7d:ba:83:9b:00:d4:f0: 1e:c6:79:f8:47:b3:ea:b7:e5:8f:5d:25:bd:e3:18: 4e:8b:59:bc:57:ee:e5:d6:75:98:22:19:03:c8:ea: b6:53:67:ac:2e:7e:76:76:f1:03:54:94:19:82:ec: 70:61:e9:11:23:34:c6:6c:61:90:60:13:fc:c9:a3: d9:11:39:d0:91:9c:af:6e:c5:a4:b7:60:e5:87:ef: d4:68:f4:82:62:ca:4d:78:65:7e:76:8a:65:fa:f1: 51:db:59:ae:6d:e4:94:38:08:e2:47:22:37:c1:94: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1C:03:ED:2F:5E:51:6A:C1:2A:5B:09:6F:5D:DD:AD:B7:AB:04:B4 X509v3 Authority Key Identifier: keyid:2D:BA:30:60:21:4D:9C:86:B1:0A:F1:B3:F7:38:08:63:06:82:B5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25c0528268fef9de37dba60014f9d07309ee511f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73fd4b8e-b15d-4cf3-af19-f7f5ae9fee6d/25c0528268fef9de37dba60014f9d07309ee511f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/73fd4b8e-b15d-4cf3-af19-f7f5ae9fee6d/25c0528268fef9de37dba60014f9d07309ee511f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:dd:fc:07:de:40:56:9a:92:5f:1a:f8:c2:f6:ab:40:e0:21: dc:c9:78:fc:4a:ea:78:6a:e0:c2:63:3c:06:7d:3a:75:0a:5d: 61:b1:ed:49:65:b4:66:05:df:5b:6e:45:fc:bc:c0:a0:4f:11: c4:26:4b:86:34:bc:24:09:7b:97:76:af:40:99:7d:1b:16:ac: dc:86:cd:e5:2c:d6:7f:20:dd:2c:81:fe:80:25:68:60:0f:d2: 4e:8b:b8:43:9e:87:3f:2e:47:af:1c:b6:46:8f:4b:d1:48:7d: 64:77:47:85:a1:fb:6a:1c:82:46:01:ae:39:59:ea:b6:f7:6e: db:59:ef:18:db:d0:82:4e:51:d2:28:b4:0d:9a:c0:0a:bf:47: c6:1a:11:2c:6e:a8:79:8a:19:70:6d:9c:67:ab:ae:df:23:5f: ca:a7:22:59:fa:8d:0c:60:1a:03:d9:58:37:22:ef:76:4a:ad: 38:8b:05:c4:58:83:58:fa:28:28:fb:ed:91:93:52:b0:94:54: a0:6c:22:de:e0:f1:ae:46:35:65:e1:41:be:22:fd:d4:a7:a6: be:43:58:0c:fe:ca:90:33:0a:40:8a:65:59:5d:f1:90:fc:82: e4:0b:ad:8c:e2:f5:41:58:d1:92:fc:e7:d2:77:4a:d5:d1:b7: a6:27:92:14 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ7MWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1 YzA1MjgyNjhmZWY5ZGUzN2RiYTYwMDE0ZjlkMDczMDllZTUxMWYwHhcNMjQwMzI4 MDQyMDA2WhcNMjQwMzMxMDYyMTA2WjAzMTEwLwYDVQQDEyhjNDkxNDg5NWViMDc1 NzkyZTU3ODI0MzlmMjlhZDczZGU1ZTQ1ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhKGLGuE3YSPIzOgHgANEim+z4j1dLEVhsznge9gBD60I0zsy 56OAi+zxP0NM0NPzU8jTh4pQO0csZrikZR6zmS5xApSPHfM0RXpgJAS1AP3hwsvS ZGWiibAFcDMS1e6WcSGJMOg5loo8xaWl4c/gpVEejeDI04ugT36/64qK0nm/0Uc6 5EiBCdQrUF3Gq326g5sA1PAexnn4R7Pqt+WPXSW94xhOi1m8V+7l1nWYIhkDyOq2 U2esLn52dvEDVJQZguxwYekRIzTGbGGQYBP8yaPZETnQkZyvbsWkt2Dlh+/UaPSC YspNeGV+dopl+vFR21mubeSUOAjiRyI3wZSaqwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFEYcA+0vXlFqwSpbCW9d3a23qwS0MB8GA1UdIwQYMBaAFC26MGAhTZyGsQrx s/c4CGMGgrXpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjVjMDUy ODI2OGZlZjlkZTM3ZGJhNjAwMTRmOWQwNzMwOWVlNTExZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNzNmZDRiOGUtYjE1ZC00Y2YzLWFmMTktZjdmNWFl OWZlZTZkLzI1YzA1MjgyNjhmZWY5ZGUzN2RiYTYwMDE0ZjlkMDczMDllZTUxMWYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83M2ZkNGI4ZS1iMTVkLTRjZjMtYWYxOS1mN2Y1 YWU5ZmVlNmQvMjVjMDUyODI2OGZlZjlkZTM3ZGJhNjAwMTRmOWQwNzMwOWVlNTEx Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBADHd/AfeQFaakl8a+ML2q0DgIdzJePxK6nhq4MJjPAZ9OnUK XWGx7UlltGYF31tuRfy8wKBPEcQmS4Y0vCQJe5d2r0CZfRsWrNyGzeUs1n8g3SyB /oAlaGAP0k6LuEOehz8uR68ctkaPS9FIfWR3R4Wh+2ocgkYBrjlZ6rb3bttZ7xjb 0IJOUdIotA2awAq/R8YaESxuqHmKGXBtnGerrt8jX8qnIln6jQxgGgPZWDci73ZK rTiLBcRYg1j6KCj77ZGTUrCUVKBsIt7g8a5GNWXhQb4i/dSnpr5DWAz+ypAzCkCK ZVld8ZD8guQLrYzi9UFY0ZL859J3StXRt6YnkhQ= -----END CERTIFICATE-----Generated at Thu Mar 28 06:01:05 2024 by rpki-client on console-fra.rpki-client.org