$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json) Hash identifier: mJygJzYIPHCOh7tC/5cSg/HSyhqMn2/eqUolYFt76b4= Subject key identifier: 4A:A2:D5:12:EA:B2:5E:7E:97:F4:F7:26:BD:C6:5C:27:B7:ED:0B:57 Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 1ED96B21767A75554D187351A66FA231F8970459 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft Manifest number: 2F Signing time: Sat 01 Jun 2024 12:38:55 +0000 Manifest this update: Sat 01 Jun 2024 12:33:55 +0000 Manifest next update: Fri 07 Jun 2024 03:49:55 +0000 Files and hashes: 1: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: 8FbMXnA91x9emfcIP62zUZvHoMT0nRaLP6jGEtFdeXk=) 2: 323830333a346132303a3a2f33322d3332203d3e20323635383438.roa (hash: iTyJe7AegrCcukQ58mxM6kIcTNATZOiJkDz5d0aCh24=) 3: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: NrqsIxgdCado2iGBpc/ZX854EdIc2i65fzUIXEZ1+1k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d9:6b:21:76:7a:75:55:4d:18:73:51:a6:6f:a2:31:f8:97:04:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: Jun 1 12:33:55 2024 GMT Not After : Jun 7 03:49:55 2024 GMT Subject: CN=4AA2D512EAB25E7E97F4F726BDC65C27B7ED0B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:d2:fb:3d:b6:98:16:5d:4f:8e:8f:19:3f: c1:c2:81:49:89:a2:e2:66:de:a9:f4:ec:1f:a2:1c: 9d:41:81:5e:83:f3:1b:10:24:fb:3a:13:9a:3f:ed: c1:f2:b4:0e:e0:1b:95:4f:82:0f:7e:27:5d:45:27: 7f:ec:e9:30:2d:8a:7d:43:87:5b:e9:0c:01:e5:3f: 34:e3:a0:ae:35:ba:11:90:51:51:99:3c:eb:5b:8f: 37:f2:90:26:bd:c2:ad:bb:96:bc:85:40:e5:4a:bb: da:49:5c:a3:d3:c9:d1:45:53:c0:67:26:bb:b7:03: a9:91:f5:b4:69:8a:a4:54:59:41:75:71:60:25:39: 3f:25:79:09:2d:cb:0c:59:2a:35:38:fc:3f:cb:61: 91:93:77:6a:49:0c:8c:a3:97:42:07:2f:6a:26:6b: af:0e:37:93:1a:cd:e2:10:52:4b:e9:c5:1b:e0:09: 7b:56:f5:53:c2:ee:1d:c7:09:13:51:7b:8e:ab:56: 4c:03:76:62:0f:32:4e:f5:b5:b0:65:2d:b2:b8:e2: 29:37:d1:a2:57:24:5e:fe:0e:9b:24:74:d3:38:d0: 18:ae:1c:2a:8b:5f:4f:79:ad:f5:84:44:4f:06:bb: 3c:2f:36:7b:95:28:78:07:3b:8d:7a:bf:7e:d9:02: 23:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:D5:12:EA:B2:5E:7E:97:F4:F7:26:BD:C6:5C:27:B7:ED:0B:57 X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0e:4f:b4:38:3b:12:4a:f1:de:c2:34:0a:a5:25:85:33:13: 0e:85:a0:05:35:b9:08:44:dd:3e:b6:12:5c:d9:25:b9:27:1d: 67:cd:36:d8:71:63:32:81:09:e2:88:76:1a:8e:be:e8:ba:5c: c1:d1:07:90:19:42:35:ca:1f:a7:ba:1c:5a:be:88:cc:24:a6: 58:27:68:3d:58:98:79:2f:ed:85:54:c6:b2:48:ab:c1:4d:8e: 8c:ce:b4:ad:78:44:8f:3e:a5:0e:ea:f8:44:9d:b5:56:6b:57: db:1b:29:a0:22:d5:fc:96:78:c5:38:bd:12:1e:50:9d:13:7d: cc:e4:4d:d0:19:90:c8:60:0c:36:16:39:7d:54:fd:7c:6c:37: 03:d2:0a:5a:a0:f3:25:27:06:3a:37:04:94:c6:b2:cf:01:81: 02:c7:82:3f:1c:8b:e9:39:35:3a:29:1d:dd:3e:ae:9a:02:88: 2a:ea:19:b5:0d:e2:c8:60:7f:83:11:5b:b7:91:1e:bc:12:14: d6:28:2d:11:ee:34:b2:bf:ed:93:8e:e9:4a:62:9d:dd:96:78: af:62:b7:8b:0f:94:c7:d1:26:7d:bb:d0:a6:ed:46:4e:be:12: 84:d8:df:9b:b7:00:8a:ff:95:40:d3:86:9b:70:e7:b4:d4:5c: 8e:8c:58:5b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHtlrIXZ6dVVNGHNRpm+iMfiXBFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNDA2MDExMjMzNTVaFw0yNDA2MDcwMzQ5NTVaMDMxMTAvBgNV BAMTKDRBQTJENTEyRUFCMjVFN0U5N0Y0RjcyNkJEQzY1QzI3QjdFRDBCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnldL7PbaYFl1Pjo8ZP8HCgUmJ ouJm3qn07B+iHJ1BgV6D8xsQJPs6E5o/7cHytA7gG5VPgg9+J11FJ3/s6TAtin1D h1vpDAHlPzTjoK41uhGQUVGZPOtbjzfykCa9wq27lryFQOVKu9pJXKPTydFFU8Bn Jru3A6mR9bRpiqRUWUF1cWAlOT8leQktywxZKjU4/D/LYZGTd2pJDIyjl0IHL2om a68ON5MazeIQUkvpxRvgCXtW9VPC7h3HCRNRe46rVkwDdmIPMk71tbBlLbK44ik3 0aJXJF7+DpskdNM40BiuHCqLX095rfWERE8GuzwvNnuVKHgHO416v37ZAiNvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSqLVEuqyXn6X9PcmvcZcJ7ftC1cwHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzI4QTdENTNCQUM1MzEwNUNBOEEwQjNB MUM5NUMyRTZBNzE5ODE2NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNDk+0ODsSSvHewjQKpSWFMxMO haAFNbkIRN0+thJc2SW5Jx1nzTbYcWMygQniiHYajr7oulzB0QeQGUI1yh+nuhxa vojMJKZYJ2g9WJh5L+2FVMaySKvBTY6MzrSteESPPqUO6vhEnbVWa1fbGymgItX8 lnjFOL0SHlCdE33M5E3QGZDIYAw2Fjl9VP18bDcD0gpaoPMlJwY6NwSUxrLPAYEC x4I/HIvpOTU6KR3dPq6aAogq6hm1DeLIYH+DEVu3kR68EhTWKC0R7jSyv+2TjulK Yp3dlnivYreLD5TH0SZ9u9Cm7UZOvhKE2N+btwCK/5VA04abcOe01FyOjFhb -----END CERTIFICATE-----Generated at Sat Jun 1 15:53:01 2024 by rpki-client on console-ams.rpki-client.org