$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.mft File: dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.mft (raw, json) Hash identifier: k/pjsGcTWOUbHLW2RboNkHZX1nZL2vvznwvQtbPCtRY= Subject key identifier: 1E:DC:8F:2C:E1:20:78:1A:5A:E3:8F:97:E8:34:FA:19:26:BC:56:2F Authority key identifier: 09:24:7C:63:8E:C7:6E:41:FF:85:DB:B7:22:97:75:DD:B5:96:CC:8E Certificate issuer: /CN=dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2 Certificate serial: 1C332A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.mft Manifest number: 0DCF Signing time: Fri 29 Mar 2024 05:21:15 +0000 Manifest this update: Fri 29 Mar 2024 04:20:08 +0000 Manifest next update: Mon 01 Apr 2024 07:09:08 +0000 Files and hashes: 1: 1e40c20bab48fb14759ea1e6dbda3eaa94c9f03a.roa (hash: 89QoRdTFfgL6hB2XbosaDeBlBMPPZJi/9IfQoPqRb8E=) 2: dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.crl (hash: pzfHI9kp3prsItoHrLHQEZCZ4pCRk3ojdF18CHu+B/c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.crl rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848106 (0x1c332a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2 Validity Not Before: Mar 29 04:20:08 2024 GMT Not After : Apr 1 07:09:08 2024 GMT Subject: CN=c56934a8d0e7cd7b3cebe72b0be674e5829bd6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:41:df:b8:8f:c5:4d:76:4f:5d:16:81:79: 39:7b:87:47:25:15:e1:d3:1e:cd:61:10:cd:46:b9: 7e:10:ac:05:d7:70:a6:23:a0:f3:50:87:6f:43:03: 63:37:50:92:88:99:16:df:69:69:e1:cb:a3:75:2f: 15:81:de:b1:cd:11:60:f0:a0:5e:3f:53:fb:5c:4a: 8d:0d:45:3b:9b:aa:e9:60:40:ed:4f:fc:9f:a2:e7: 1f:63:34:a2:36:c3:1c:5c:64:59:b2:b2:41:87:bb: 8a:09:c4:fb:0f:80:91:85:59:18:7c:5e:b5:79:65: aa:01:45:aa:c1:95:fb:a4:71:68:77:ae:70:38:88: e5:1a:38:fb:d7:7d:12:96:19:3a:54:af:0d:2f:5f: 12:43:97:ab:fa:fb:ec:ea:07:37:1a:70:32:37:c1: 7b:09:de:70:83:6e:43:9f:f6:d7:d8:91:1b:f0:8b: 2d:37:c1:d8:75:3a:26:33:50:b7:27:4f:e5:7a:4e: 96:71:19:6f:72:b1:e5:11:4c:62:d4:4e:56:07:bb: 32:dd:fc:14:ad:ec:a6:69:bc:63:e8:15:ee:ac:5f: 6a:14:b4:7f:1c:22:e2:3b:cc:48:25:03:bf:76:9c: a9:34:d6:03:b4:11:5d:34:5d:68:f0:8c:1f:64:04: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:8F:2C:E1:20:78:1A:5A:E3:8F:97:E8:34:FA:19:26:BC:56:2F X509v3 Authority Key Identifier: keyid:09:24:7C:63:8E:C7:6E:41:FF:85:DB:B7:22:97:75:DD:B5:96:CC:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0e:0b:54:71:fd:88:76:42:4b:31:d0:6d:91:a2:b8:97:8b: 61:4f:0a:2c:8f:de:4a:61:ac:91:43:de:fa:6d:ac:e1:fd:fb: ed:44:cc:10:ce:c3:fe:90:01:e5:16:a8:11:29:f7:20:88:84: bc:6c:d0:68:87:1c:23:66:06:a1:9a:9b:d6:2f:41:21:6f:e7: 36:fb:45:23:e2:fd:69:7b:7c:0e:bd:e9:b1:96:1e:af:63:02: 74:23:a2:a2:77:f1:4f:75:dc:5c:08:44:77:7a:14:49:23:65: dc:e8:03:fb:aa:78:64:ef:d0:6a:ed:9f:c1:30:e7:8c:75:06: f1:9b:64:b0:08:91:a4:13:3c:3e:73:ce:4e:c8:02:8c:2f:52: 34:47:7a:6a:ca:53:d4:69:56:12:15:ed:f8:c6:6a:e0:ab:ff: 67:7c:82:b5:5c:9c:4f:c7:0e:8b:19:45:fb:5a:d0:1e:4c:41: dd:ce:69:bc:f2:81:85:ce:26:ff:57:05:4d:a9:fb:0d:51:68: 22:fc:ce:ff:ea:19:a0:c6:cc:14:60:3a:9e:ae:39:ce:33:39: ab:e1:99:13:51:ff:3b:92:3b:0f:41:d6:e2:07:86:d3:31:3a: 63:10:ee:a8:fe:74:73:2e:4e:be:4e:f4:c4:88:1e:d5:55:11: 78:d9:cf:4a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHDMqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRh ZmFiMWZlMDFjZWE1YTJiNTNiMWIxNGNiODdiYTRiZWYyN2Q3YzIwHhcNMjQwMzI5 MDQyMDA4WhcNMjQwNDAxMDcwOTA4WjAzMTEwLwYDVQQDEyhjNTY5MzRhOGQwZTdj ZDdiM2NlYmU3MmIwYmU2NzRlNTgyOWJkNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAn1RB37iPxU12T10WgXk5e4dHJRXh0x7NYRDNRrl+EKwF13Cm I6DzUIdvQwNjN1CSiJkW32lp4cujdS8Vgd6xzRFg8KBeP1P7XEqNDUU7m6rpYEDt T/yfoucfYzSiNsMcXGRZsrJBh7uKCcT7D4CRhVkYfF61eWWqAUWqwZX7pHFod65w OIjlGjj7130Slhk6VK8NL18SQ5er+vvs6gc3GnAyN8F7Cd5wg25Dn/bX2JEb8Ist N8HYdTomM1C3J0/lek6WcRlvcrHlEUxi1E5WB7sy3fwUreymabxj6BXurF9qFLR/ HCLiO8xIJQO/dpypNNYDtBFdNF1o8IwfZARh9QIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFB7cjyzhIHgaWuOPl+g0+hkmvFYvMB8GA1UdIwQYMBaAFAkkfGOOx25B/4Xb tyKXdd21lsyOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGFmYWIx ZmUwMWNlYTVhMmI1M2IxYjE0Y2I4N2JhNGJlZjI3ZDdjMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvODIzY2ZlMjItOTQ1ZS00OTAzLThiMzgtZTU2NmFh MzlhNzAyL2RhZmFiMWZlMDFjZWE1YTJiNTNiMWIxNGNiODdiYTRiZWYyN2Q3YzIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84MjNjZmUyMi05NDVlLTQ5MDMtOGIzOC1lNTY2 YWEzOWE3MDIvZGFmYWIxZmUwMWNlYTVhMmI1M2IxYjE0Y2I4N2JhNGJlZjI3ZDdj Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBABAOC1Rx/Yh2Qksx0G2RoriXi2FPCiyP3kphrJFD3vptrOH9 ++1EzBDOw/6QAeUWqBEp9yCIhLxs0GiHHCNmBqGam9YvQSFv5zb7RSPi/Wl7fA69 6bGWHq9jAnQjoqJ38U913FwIRHd6FEkjZdzoA/uqeGTv0Grtn8Ew54x1BvGbZLAI kaQTPD5zzk7IAowvUjRHemrKU9RpVhIV7fjGauCr/2d8grVcnE/HDosZRfta0B5M Qd3OabzygYXOJv9XBU2p+w1RaCL8zv/qGaDGzBRgOp6uOc4zOavhmRNR/zuSOw9B 1uIHhtMxOmMQ7qj+dHMuTr5O9MSIHtVVEXjZz0o= -----END CERTIFICATE-----Generated at Fri Mar 29 06:00:46 2024 by rpki-client on console-fra.rpki-client.org