$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft File: e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft (raw, json) Hash identifier: sZdccZGfPnFupWk5bOgLK/60EAT0tqKOQ/p9uMqnNo4= Subject key identifier: 42:40:C9:06:BF:37:FB:C3:8D:25:D5:E9:8D:5C:F4:C5:5B:1F:49:03 Authority key identifier: 71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63 Certificate issuer: /CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf Certificate serial: 1E1FB3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft Manifest Number: 0943 Signing time: Fri 31 Mar 2023 04:16:28 +0000 Manifest this update: Fri 31 Mar 2023 03:15:56 +0000 Manifest next update: Mon 03 Apr 2023 06:27:56 +0000 Files and hashes: 1: 370f118922072584f5eebe8a3dbae438bdf847f8.roa (hash: gk/U5i7gTKq5ehssFjud5S8NltnvmWLbjdzJCSJPQo0=) 2: e8b953b12842ffe0d97ca6fedbe7550e5a400acf.crl (hash: 5BJZl7RmerpEeOYEwSJ1gbAdoC18Tt2YvEN0PYAjLRQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.crl rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Apr 2023 04:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974195 (0x1e1fb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf Validity Not Before: Mar 31 03:15:56 2023 GMT Not After : Apr 3 06:27:56 2023 GMT Subject: CN=c66be15a956489b9bee9a749c367e10a6523336f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:55:b6:2b:c2:21:e4:4b:42:01:4b:89:d8: b4:99:3c:fa:ad:71:ea:a9:1b:87:a8:63:57:87:5b: 2f:73:4c:43:c1:15:26:9d:be:6a:dd:98:2a:74:c4: 23:f4:b0:4b:ad:fd:24:4b:3b:ce:0d:24:73:8a:e6: 53:fb:c2:e4:c8:6d:bd:50:1c:73:b2:f4:47:43:d5: 1a:46:0e:f5:f8:f2:82:90:57:38:6b:c5:3f:73:fd: a2:84:80:99:77:c0:e9:fb:24:8d:2f:c3:f9:23:a1: 30:dd:53:86:fb:3a:01:39:d4:6e:0a:d2:40:a1:5f: 01:13:92:cd:b0:0b:4e:ac:ab:a9:90:a8:c4:ec:dd: 23:8c:b0:4e:f9:67:ed:34:81:83:f0:09:8d:d2:cd: 7c:87:1c:74:9a:fb:ea:d8:85:32:9c:53:d6:28:88: a8:a6:78:0f:6d:ec:7e:42:85:93:10:ca:b2:85:55: 5b:52:ff:79:f9:33:f1:e0:a4:63:84:d9:11:4c:e2: ab:f8:c9:b9:e1:ef:23:e2:43:dd:57:80:ef:c4:19: 62:38:c5:84:c6:96:19:bd:be:56:a4:1e:cf:26:08: 01:dd:17:ff:38:cf:fd:31:11:d7:ad:af:50:1c:1a: b4:40:5b:4d:59:10:3c:46:72:2e:92:27:c3:d2:ff: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:40:C9:06:BF:37:FB:C3:8D:25:D5:E9:8D:5C:F4:C5:5B:1F:49:03 X509v3 Authority Key Identifier: keyid:71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:80:e6:5b:e0:9e:11:65:d0:a7:33:83:db:7c:04:4d:34:61: 24:b7:f4:86:78:78:92:a5:0d:55:11:09:5b:36:1b:08:3b:30: fe:a7:82:94:40:ee:b5:58:4c:d5:37:66:8b:2f:e8:58:7a:a9: 90:2e:1f:fa:ac:b5:b1:85:e9:1d:9c:ac:fd:e1:9c:14:bb:0b: 81:bf:bd:f9:b7:39:2b:9b:cd:e3:76:3f:cb:86:5b:8d:9e:61: bb:7b:e2:1b:ee:37:fa:0e:68:8a:66:6f:60:d0:87:e9:c4:bb: b4:84:ae:ba:f2:8f:8b:58:66:78:64:77:c5:e8:98:f0:67:4a: a2:de:95:d8:03:6e:ee:d8:c1:2b:c5:42:70:ae:bf:9a:c6:76: 40:f2:33:e2:5f:d0:c4:5e:7e:58:43:ee:c8:6c:c3:84:85:6a: 89:9b:1c:81:3d:64:0a:6e:c1:5d:25:42:4a:66:8e:bf:79:8d: b8:7f:14:84:0e:b9:68:8a:93:10:3e:0c:ba:2c:9f:a9:42:3d: 41:84:fa:ad:3b:70:1c:b2:d8:47:36:c3:ed:2a:80:11:08:7b: 5b:fb:17:95:d7:fb:b1:8b:32:e2:8e:d9:28:ea:3f:47:7b:75: 95:12:f4:1a:44:7e:cc:f2:4b:cd:07:2c:22:a5:79:a6:2a:19: 30:27:f1:1b -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHh+zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4 Yjk1M2IxMjg0MmZmZTBkOTdjYTZmZWRiZTc1NTBlNWE0MDBhY2YwHhcNMjMwMzMx MDMxNTU2WhcNMjMwNDAzMDYyNzU2WjAzMTEwLwYDVQQDEyhjNjZiZTE1YTk1NjQ4 OWI5YmVlOWE3NDljMzY3ZTEwYTY1MjMzMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApj5VtivCIeRLQgFLidi0mTz6rXHqqRuHqGNXh1svc0xDwRUm nb5q3ZgqdMQj9LBLrf0kSzvODSRziuZT+8LkyG29UBxzsvRHQ9UaRg71+PKCkFc4 a8U/c/2ihICZd8Dp+ySNL8P5I6Ew3VOG+zoBOdRuCtJAoV8BE5LNsAtOrKupkKjE 7N0jjLBO+WftNIGD8AmN0s18hxx0mvvq2IUynFPWKIiopngPbex+QoWTEMqyhVVb Uv95+TPx4KRjhNkRTOKr+Mm54e8j4kPdV4DvxBliOMWExpYZvb5WpB7PJggB3Rf/ OM/9MRHXra9QHBq0QFtNWRA8RnIukifD0v9vSQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFEJAyQa/N/vDjSXV6Y1c9MVbH0kDMB8GA1UdIwQYMBaAFHGF6/uoC1NB2FI9 SKD9UpQu5U5jMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThiOTUz YjEyODQyZmZlMGQ5N2NhNmZlZGJlNzU1MGU1YTQwMGFjZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOTU4YzkyYzgtYTM4Ni00OWMzLTk2OTEtOGVlM2M0 ZmYxN2VlL2U4Yjk1M2IxMjg0MmZmZTBkOTdjYTZmZWRiZTc1NTBlNWE0MDBhY2Yu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85NThjOTJjOC1hMzg2LTQ5YzMtOTY5MS04ZWUz YzRmZjE3ZWUvZThiOTUzYjEyODQyZmZlMGQ5N2NhNmZlZGJlNzU1MGU1YTQwMGFj Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAAKA5lvgnhFl0Kczg9t8BE00YSS39IZ4eJKlDVURCVs2Gwg7 MP6ngpRA7rVYTNU3Zosv6Fh6qZAuH/qstbGF6R2crP3hnBS7C4G/vfm3OSubzeN2 P8uGW42eYbt74hvuN/oOaIpmb2DQh+nEu7SErrryj4tYZnhkd8XomPBnSqLeldgD bu7YwSvFQnCuv5rGdkDyM+Jf0MReflhD7shsw4SFaombHIE9ZApuwV0lQkpmjr95 jbh/FIQOuWiKkxA+DLosn6lCPUGE+q07cByy2Ec2w+0qgBEIe1v7F5XX+7GLMuKO 2SjqP0d7dZUS9BpEfszyS80HLCKleaYqGTAn8Rs= -----END CERTIFICATE-----Generated at Fri Mar 31 05:09:02 2023 by rpki-client on console-ams.rpki-client.org