$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/d8386eb3d3b562f2b2011d72b49e14398471a201.mft File: d8386eb3d3b562f2b2011d72b49e14398471a201.mft (raw, json) Hash identifier: uKIlvxPVuc/ihKwXn0Frrk71sEJFAJUxSdv3nb7tWe0= Subject key identifier: FE:EF:01:F3:35:01:32:BC:13:81:9E:CC:94:29:2D:03:20:A3:2C:51 Authority key identifier: 9C:39:B1:50:DD:8C:40:99:10:1D:EC:FC:F5:D5:47:6D:1C:10:17:31 Certificate issuer: /CN=d8386eb3d3b562f2b2011d72b49e14398471a201 Certificate serial: 27C1BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8386eb3d3b562f2b2011d72b49e14398471a201.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/d8386eb3d3b562f2b2011d72b49e14398471a201.mft Manifest number: 0DCA Signing time: Thu 28 Mar 2024 10:21:21 +0000 Manifest this update: Thu 28 Mar 2024 09:20:07 +0000 Manifest next update: Sun 31 Mar 2024 11:05:07 +0000 Files and hashes: 1: 1dcbe6d8dcf4207a187ba76dea06308802ed039a.roa (hash: ShIlo21oyY8ou/GvD0UYLz9w6iyGDhD2f9ygUo9bVjY=) 2: d8386eb3d3b562f2b2011d72b49e14398471a201.crl (hash: aaQX/8jn2YHgw8QkN0A1wwuat3f904vsjxBAL56NWcs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/d8386eb3d3b562f2b2011d72b49e14398471a201.crl rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/d8386eb3d3b562f2b2011d72b49e14398471a201.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8386eb3d3b562f2b2011d72b49e14398471a201.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605501 (0x27c1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8386eb3d3b562f2b2011d72b49e14398471a201 Validity Not Before: Mar 28 09:20:07 2024 GMT Not After : Mar 31 11:05:07 2024 GMT Subject: CN=5c4915b5fcafd0c80b37a07782442d06afef1954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:83:02:d1:de:7c:c7:ec:14:5d:14:55:84: 66:c1:8f:24:e8:d7:09:4b:94:58:e5:a1:db:d2:8a: 89:9b:94:4e:6e:0e:46:54:87:79:06:6d:ae:12:c5: 40:11:b4:04:c5:a6:a1:d0:8d:f0:d0:e5:33:1a:cb: 3a:a9:cc:bf:47:e9:5d:7e:22:f0:bb:00:6b:bc:27: 06:b9:f1:38:88:22:39:a6:b4:d8:10:38:c5:8d:c0: 81:e2:44:81:8c:2a:f3:54:7a:b6:f5:77:17:7a:bb: 0e:0c:54:20:d8:83:2f:76:bd:a9:b6:88:2d:f8:62: bb:0b:c2:2c:e4:9d:69:e8:9e:79:f4:0c:f0:26:5b: c4:ed:a9:87:c1:37:78:5b:34:b4:cb:2d:8c:12:4c: 1b:6d:14:0c:98:b2:1c:47:9d:56:8c:41:30:27:99: 38:0a:90:36:e4:58:88:49:de:77:9f:bb:6a:3d:ab: b5:6b:48:2c:05:7f:ba:66:a9:40:f6:36:16:69:89: 31:d9:2c:dc:c6:6f:af:1d:77:a3:c2:d8:3d:1e:5f: 37:2f:f5:7c:90:86:67:30:1c:da:97:83:5f:ee:df: ff:f4:67:11:51:62:45:46:c8:e7:a3:41:d6:af:24: 42:a6:72:87:04:ed:7b:2b:a8:de:18:d2:fc:51:96: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EF:01:F3:35:01:32:BC:13:81:9E:CC:94:29:2D:03:20:A3:2C:51 X509v3 Authority Key Identifier: keyid:9C:39:B1:50:DD:8C:40:99:10:1D:EC:FC:F5:D5:47:6D:1C:10:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8386eb3d3b562f2b2011d72b49e14398471a201.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/d8386eb3d3b562f2b2011d72b49e14398471a201.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/d8386eb3d3b562f2b2011d72b49e14398471a201.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cd:12:f1:7d:a2:0f:8f:d2:6a:b2:50:6d:7e:96:11:45:3b: 14:b7:8e:d6:b3:3c:b6:4f:95:d2:07:3f:93:ca:13:ce:3c:25: 42:4a:0a:19:39:b6:cb:0d:0c:d0:7d:37:ea:54:91:5b:c7:c0: 7c:5f:98:7c:14:0c:09:b9:78:d5:71:b5:4e:22:8c:b1:23:9e: bd:1a:cc:b9:2e:fd:b3:2f:a6:dc:d5:82:6d:5c:54:64:b0:50: bc:59:3c:76:5d:8b:3f:82:4a:73:54:aa:7f:16:f6:7c:24:cb: e4:63:db:5e:9e:4d:39:49:4c:65:8f:ad:8b:79:35:a7:2f:7b: bd:8e:ee:13:19:b6:f7:7f:25:ee:d0:96:fc:f2:20:89:02:79: 02:2e:08:ad:f1:ea:11:d1:bf:63:85:49:67:b9:29:48:50:17: 9b:74:87:f9:62:f8:78:ec:7c:47:a8:9b:f5:09:d2:db:e5:78: e0:12:33:4f:07:08:cd:50:6c:6e:03:d1:d2:d1:6b:52:c4:1d: 60:8b:cf:72:b3:31:e7:77:ed:cc:2a:04:e3:54:1a:e6:7b:1e: 4e:11:ab:f0:f3:21:3b:b5:3f:62:b4:de:82:ff:73:c8:d7:07: 50:94:27:98:36:81:20:c2:38:16:8a:aa:13:cb:3b:c7:c8:43: c2:32:86:be -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ8G9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4 Mzg2ZWIzZDNiNTYyZjJiMjAxMWQ3MmI0OWUxNDM5ODQ3MWEyMDEwHhcNMjQwMzI4 MDkyMDA3WhcNMjQwMzMxMTEwNTA3WjAzMTEwLwYDVQQDEyg1YzQ5MTViNWZjYWZk MGM4MGIzN2EwNzc4MjQ0MmQwNmFmZWYxOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAn9GDAtHefMfsFF0UVYRmwY8k6NcJS5RY5aHb0oqJm5RObg5G VId5Bm2uEsVAEbQExaah0I3w0OUzGss6qcy/R+ldfiLwuwBrvCcGufE4iCI5prTY EDjFjcCB4kSBjCrzVHq29XcXersODFQg2IMvdr2ptogt+GK7C8Is5J1p6J559Azw JlvE7amHwTd4WzS0yy2MEkwbbRQMmLIcR51WjEEwJ5k4CpA25FiISd53n7tqPau1 a0gsBX+6ZqlA9jYWaYkx2Szcxm+vHXejwtg9Hl83L/V8kIZnMBzal4Nf7t//9GcR UWJFRsjno0HWryRCpnKHBO17K6jeGNL8UZYMOQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFP7vAfM1ATK8E4GezJQpLQMgoyxRMB8GA1UdIwQYMBaAFJw5sVDdjECZEB3s /PXVR20cEBcxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDgzODZl YjNkM2I1NjJmMmIyMDExZDcyYjQ5ZTE0Mzk4NDcxYTIwMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvODM0ZTAzZTUtMTZjMy00OTEzLWEzOTQtYzM4Nzdm Y2Y2MDBkL2Q4Mzg2ZWIzZDNiNTYyZjJiMjAxMWQ3MmI0OWUxNDM5ODQ3MWEyMDEu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84MzRlMDNlNS0xNmMzLTQ5MTMtYTM5NC1jMzg3 N2ZjZjYwMGQvZDgzODZlYjNkM2I1NjJmMmIyMDExZDcyYjQ5ZTE0Mzk4NDcxYTIw MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBADnNEvF9og+P0mqyUG1+lhFFOxS3jtazPLZPldIHP5PKE848 JUJKChk5tssNDNB9N+pUkVvHwHxfmHwUDAm5eNVxtU4ijLEjnr0azLku/bMvptzV gm1cVGSwULxZPHZdiz+CSnNUqn8W9nwky+Rj216eTTlJTGWPrYt5Nacve72O7hMZ tvd/Je7QlvzyIIkCeQIuCK3x6hHRv2OFSWe5KUhQF5t0h/li+HjsfEeom/UJ0tvl eOASM08HCM1QbG4D0dLRa1LEHWCLz3KzMed37cwqBONUGuZ7Hk4Rq/DzITu1P2K0 3oL/c8jXB1CUJ5g2gSDCOBaKqhPLO8fIQ8Iyhr4= -----END CERTIFICATE-----Generated at Thu Mar 28 11:17:51 2024 by rpki-client on console-fra.rpki-client.org