$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.mft File: 3f82c3ad9e5010fae8956f061f054fe6125c235c.mft (raw, json) Hash identifier: KJHejfVty+GJJF6COTyO9r9gmnGYbvFSIf5M0MPjb4I= Subject key identifier: 0E:55:54:F7:3D:A2:25:84:AE:1D:70:27:F8:0F:1E:74:1C:E4:33:9D Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6 Certificate issuer: /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c Certificate serial: 21EFFD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.mft Manifest number: 0DD4 Signing time: Thu 28 Mar 2024 03:20:20 +0000 Manifest this update: Thu 28 Mar 2024 02:20:09 +0000 Manifest next update: Sun 31 Mar 2024 05:38:09 +0000 Files and hashes: 1: 3f82c3ad9e5010fae8956f061f054fe6125c235c.crl (hash: V0PLJZj2+EvfNxHOTtUu3Amqyb+Zf7ZCoLXbfvoL8Cc=) 2: cac83bd8bc70568565809926a2a5e86d7f438b53.roa (hash: Q03vgnfLPSZUQZgFQM2lfbVmoiJKMHxH0Z/kg5jJsHo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224125 (0x21effd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c Validity Not Before: Mar 28 02:20:09 2024 GMT Not After : Mar 31 05:38:09 2024 GMT Subject: CN=552ab858ca2fcc3d70904ea8245b58ea66bdd420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:a6:24:d6:4a:d1:51:03:b1:9d:a2:a7:22: 79:c9:d8:26:66:1e:ea:d7:be:e8:32:83:aa:bc:d9: 7a:9f:44:f7:51:63:d8:02:d2:90:b5:c2:ec:86:6b: 2d:4d:37:07:5e:2e:70:de:d9:66:24:4a:92:cd:d5: f8:6c:5d:73:ce:c9:ae:6d:77:3f:0a:4b:31:40:c6: 5e:82:f1:35:22:55:bd:7f:ce:00:45:dd:83:42:d7: 16:d4:53:16:40:67:94:ba:6a:8b:4e:e2:71:91:87: 1d:1c:8b:aa:e2:96:54:e9:97:50:4e:1f:16:da:3b: 79:3b:cf:f9:7f:b9:b9:43:79:e5:b6:67:fe:5a:0a: 1b:bf:f7:5a:8b:68:89:a5:d3:22:e1:07:df:6c:24: 69:77:d3:0f:5f:62:62:88:30:35:cf:a6:e2:7b:34: 9f:63:a7:e4:4d:ce:f9:6a:24:9b:d4:c3:6c:c4:0f: 2f:ee:62:58:a4:24:a8:0d:ff:85:cd:35:a1:2a:63: bd:fc:5d:1d:94:e7:87:b6:a8:eb:13:95:e7:7c:a1: 41:e7:be:c7:6e:cc:16:01:72:bb:50:0c:77:d0:b6: 7d:03:81:4f:b5:aa:84:d5:d7:3b:97:3a:f9:b3:36: a5:7b:12:77:d7:f9:73:c7:7c:c2:11:d2:05:0e:61: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:55:54:F7:3D:A2:25:84:AE:1D:70:27:F8:0F:1E:74:1C:E4:33:9D X509v3 Authority Key Identifier: keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9b:4e:77:53:9e:e4:5f:4b:5c:1b:24:a3:83:c7:10:5d:c2: a4:93:df:ed:d5:e1:08:d7:22:9a:55:27:2f:4d:72:61:a9:4a: ab:ee:f8:af:5e:06:94:df:99:df:cb:7b:fc:a0:d9:52:4a:69: a5:38:46:ca:45:0b:10:0d:a4:b7:67:ab:3c:ca:c9:c8:3e:0f: 57:dc:40:ac:49:05:ab:d5:63:ab:5e:ad:9d:76:29:3a:02:b5: f5:a0:c8:a9:1f:28:59:9d:b8:c8:22:c3:1a:d2:1c:45:bb:47: ae:2a:37:04:d3:15:a0:7f:9a:1f:30:88:bd:c9:19:40:80:0e: 0c:d2:32:bc:2c:f9:cc:f5:a7:b9:17:02:0e:9a:bd:3f:69:da: a2:74:2b:32:58:40:7b:0e:3f:a1:00:05:ef:44:78:0b:cf:02: af:4f:d9:e4:7c:03:22:da:f2:3d:fc:3a:ba:a2:12:72:bd:06: 3d:be:0c:73:93:3a:e3:5b:9b:0e:aa:4c:78:79:61:a7:6f:05: 19:6d:3b:b2:b8:59:e9:46:c8:15:2e:4a:52:d0:a9:68:ac:f6: f0:e1:6d:da:92:9d:20:24:ca:b9:e3:58:4d:44:58:e0:7c:3f: a4:70:e8:3a:b2:b0:2a:95:1d:54:08:61:b7:88:ad:3e:83:34: f3:0e:2c:ec -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDIe/9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm ODJjM2FkOWU1MDEwZmFlODk1NmYwNjFmMDU0ZmU2MTI1YzIzNWMwHhcNMjQwMzI4 MDIyMDA5WhcNMjQwMzMxMDUzODA5WjAzMTEwLwYDVQQDEyg1NTJhYjg1OGNhMmZj YzNkNzA5MDRlYTgyNDViNThlYTY2YmRkNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtFKmJNZK0VEDsZ2ipyJ5ydgmZh7q177oMoOqvNl6n0T3UWPY AtKQtcLshmstTTcHXi5w3tlmJEqSzdX4bF1zzsmubXc/CksxQMZegvE1IlW9f84A Rd2DQtcW1FMWQGeUumqLTuJxkYcdHIuq4pZU6ZdQTh8W2jt5O8/5f7m5Q3nltmf+ Wgobv/dai2iJpdMi4QffbCRpd9MPX2JiiDA1z6biezSfY6fkTc75aiSb1MNsxA8v 7mJYpCSoDf+FzTWhKmO9/F0dlOeHtqjrE5XnfKFB577HbswWAXK7UAx30LZ9A4FP taqE1dc7lzr5szalexJ31/lzx3zCEdIFDmH4SQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFA5VVPc9oiWErh1wJ/gPHnQc5DOdMB8GA1UdIwQYMBaAFCtFN2ZfnchX4LXg NWmy6HNlvb7GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2Y4MmMz YWQ5ZTUwMTBmYWU4OTU2ZjA2MWYwNTRmZTYxMjVjMjM1Yy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2U4ZGQwMzYtOTcxMi00MzEzLThhMjYtY2NjNTZm N2NjMDJlLzNmODJjM2FkOWU1MDEwZmFlODk1NmYwNjFmMDU0ZmU2MTI1YzIzNWMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83ZThkZDAzNi05NzEyLTQzMTMtOGEyNi1jY2M1 NmY3Y2MwMmUvM2Y4MmMzYWQ5ZTUwMTBmYWU4OTU2ZjA2MWYwNTRmZTYxMjVjMjM1 Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAAqbTndTnuRfS1wbJKODxxBdwqST3+3V4QjXIppVJy9NcmGp Sqvu+K9eBpTfmd/Le/yg2VJKaaU4RspFCxANpLdnqzzKycg+D1fcQKxJBavVY6te rZ12KToCtfWgyKkfKFmduMgiwxrSHEW7R64qNwTTFaB/mh8wiL3JGUCADgzSMrws +cz1p7kXAg6avT9p2qJ0KzJYQHsOP6EABe9EeAvPAq9P2eR8AyLa8j38OrqiEnK9 Bj2+DHOTOuNbmw6qTHh5YadvBRltO7K4WelGyBUuSlLQqWis9vDhbdqSnSAkyrnj WE1EWOB8P6Rw6DqysCqVHVQIYbeIrT6DNPMOLOw= -----END CERTIFICATE-----Generated at Thu Mar 28 04:37:43 2024 by rpki-client on console-fra.rpki-client.org