$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.mft File: a89862009d16e2b8523068bf28b5f041800a807f.mft (raw, json) Hash identifier: Ei75n5Zyd+vSiFxsM4/a5qrC+8hjrmo8a6/fyKypx58= Subject key identifier: 25:B9:9F:0B:A9:B9:80:F3:94:87:5B:15:18:8B:AA:27:2F:2C:D7:85 Authority key identifier: 97:93:F4:45:99:E6:5A:4B:86:42:C2:DD:13:6D:D1:4C:77:43:54:78 Certificate issuer: /CN=a89862009d16e2b8523068bf28b5f041800a807f Certificate serial: 2526AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a89862009d16e2b8523068bf28b5f041800a807f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.mft Manifest number: 0DB1 Signing time: Thu 28 Mar 2024 05:20:20 +0000 Manifest this update: Thu 28 Mar 2024 04:20:06 +0000 Manifest next update: Sun 31 Mar 2024 07:56:06 +0000 Files and hashes: 1: a89862009d16e2b8523068bf28b5f041800a807f.crl (hash: /oVHe5X1OyZtWZf1mQB0t2By9BWm+g/a1/lPt+ICLoE=) 2: d6a360d46a4bd5ab0203660b297077e8dbb224bf.roa (hash: eDOOxcPzrA1u/Cpc7cQGZmKykuDHi7i+vZFkI5HQ7vs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.crl rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a89862009d16e2b8523068bf28b5f041800a807f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434733 (0x2526ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a89862009d16e2b8523068bf28b5f041800a807f Validity Not Before: Mar 28 04:20:06 2024 GMT Not After : Mar 31 07:56:06 2024 GMT Subject: CN=2ba44c16e86c8256a7cbd71d0f207998b4eb7b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:b0:e0:d0:25:c2:15:90:ee:a8:63:7e:05: c6:d5:84:d8:fe:5b:ea:f6:c7:92:df:76:5d:3d:2c: dc:f0:be:d3:c4:4e:a1:79:21:3d:0d:62:b4:a9:dc: cf:a2:e8:d2:ec:4b:44:2a:63:60:be:26:c5:fe:93: 63:b7:4e:85:6b:4b:ee:c8:6c:5c:63:45:7d:e7:91: 6f:af:44:3f:36:c5:6e:03:34:f9:db:ce:3e:1c:f0: c4:53:e6:09:3b:28:81:6a:03:dc:9f:bf:42:63:91: ce:fc:ef:06:3e:79:1c:95:da:5a:7e:b2:fc:5b:5a: 57:0f:a1:32:34:79:1a:80:71:3b:a8:ba:a5:58:a8: 34:63:e3:f5:34:1f:7a:49:fe:42:5f:42:48:a3:07: 73:06:a1:db:93:d8:a9:a0:7d:6d:ee:dd:99:3b:d6: 38:90:3d:8f:4a:01:b4:7e:a3:e2:25:b2:fd:f2:37: 6a:54:b2:a9:2c:e8:1b:7e:ab:dd:95:45:58:4c:b9: 52:ba:ea:7d:bf:06:cd:ff:8c:e5:fc:52:d0:5a:40: b7:3c:15:92:9b:10:b4:c3:dc:7b:a3:11:97:3f:1b: b6:1d:7f:e0:66:f3:ab:5b:f5:e7:38:96:2b:00:c3: 1b:e6:03:95:f8:7e:7b:2d:38:5d:26:7c:92:66:91: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B9:9F:0B:A9:B9:80:F3:94:87:5B:15:18:8B:AA:27:2F:2C:D7:85 X509v3 Authority Key Identifier: keyid:97:93:F4:45:99:E6:5A:4B:86:42:C2:DD:13:6D:D1:4C:77:43:54:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a89862009d16e2b8523068bf28b5f041800a807f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a5:80:8a:dc:ff:78:e0:5e:f2:fb:be:57:f2:1b:b0:a5:35: bb:1f:aa:fa:06:56:54:fd:cc:a5:18:f4:06:1c:e1:d1:fc:3d: 0d:6b:9b:50:0c:fb:ce:04:96:aa:b5:45:f7:d3:9d:b2:9d:80: ee:f8:ad:d2:3c:e8:df:32:14:b8:6f:8b:dd:17:fc:2e:0e:1e: 23:bb:9c:c8:29:8f:ee:85:9f:5c:7f:0d:54:17:77:37:25:75: 30:40:23:34:fe:a4:37:cd:b8:28:88:84:27:aa:5e:21:ea:6e: 05:29:68:83:f1:68:50:21:f6:ac:d1:9a:a5:d8:42:72:76:9a: 47:81:e0:1b:4c:e2:7b:44:97:a1:52:8d:d9:66:c8:5e:74:ad: 99:47:fd:08:4c:0b:cc:37:4c:f5:6f:b2:50:25:66:af:43:8f: 1d:41:08:08:01:f5:03:ad:7d:c6:cd:1a:4d:38:62:eb:27:df: 66:6a:87:dc:e0:18:3e:b5:c4:4e:2b:8c:26:c9:27:f5:11:08: ac:ae:4c:cc:ae:4d:3e:8b:57:b5:eb:2e:41:f8:3e:fe:3b:ed: f7:03:73:d5:53:2e:7d:d7:28:90:5d:e9:ed:e5:52:40:92:30: f7:69:b9:1f:1c:4d:9d:19:26:fe:00:14:12:8e:39:ca:1f:b1: 0d:77:61:a7 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJSatMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE4 OTg2MjAwOWQxNmUyYjg1MjMwNjhiZjI4YjVmMDQxODAwYTgwN2YwHhcNMjQwMzI4 MDQyMDA2WhcNMjQwMzMxMDc1NjA2WjAzMTEwLwYDVQQDEygyYmE0NGMxNmU4NmM4 MjU2YTdjYmQ3MWQwZjIwNzk5OGI0ZWI3YjNkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmeCw4NAlwhWQ7qhjfgXG1YTY/lvq9seS33ZdPSzc8L7TxE6h eSE9DWK0qdzPoujS7EtEKmNgvibF/pNjt06Fa0vuyGxcY0V955Fvr0Q/NsVuAzT5 284+HPDEU+YJOyiBagPcn79CY5HO/O8GPnkcldpafrL8W1pXD6EyNHkagHE7qLql WKg0Y+P1NB96Sf5CX0JIowdzBqHbk9ipoH1t7t2ZO9Y4kD2PSgG0fqPiJbL98jdq VLKpLOgbfqvdlUVYTLlSuup9vwbN/4zl/FLQWkC3PBWSmxC0w9x7oxGXPxu2HX/g ZvOrW/XnOJYrAMMb5gOV+H57LThdJnySZpG2TwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFCW5nwupuYDzlIdbFRiLqicvLNeFMB8GA1UdIwQYMBaAFJeT9EWZ5lpLhkLC 3RNt0Ux3Q1R4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTg5ODYy MDA5ZDE2ZTJiODUyMzA2OGJmMjhiNWYwNDE4MDBhODA3Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOTkzZGZlZjYtMjljMy00YmEyLWE5YTQtZmRjYjg3 ZTk2NzE3L2E4OTg2MjAwOWQxNmUyYjg1MjMwNjhiZjI4YjVmMDQxODAwYTgwN2Yu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85OTNkZmVmNi0yOWMzLTRiYTItYTlhNC1mZGNi ODdlOTY3MTcvYTg5ODYyMDA5ZDE2ZTJiODUyMzA2OGJmMjhiNWYwNDE4MDBhODA3 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBALGlgIrc/3jgXvL7vlfyG7ClNbsfqvoGVlT9zKUY9AYc4dH8 PQ1rm1AM+84Elqq1RffTnbKdgO74rdI86N8yFLhvi90X/C4OHiO7nMgpj+6Fn1x/ DVQXdzcldTBAIzT+pDfNuCiIhCeqXiHqbgUpaIPxaFAh9qzRmqXYQnJ2mkeB4BtM 4ntEl6FSjdlmyF50rZlH/QhMC8w3TPVvslAlZq9Djx1BCAgB9QOtfcbNGk04Yusn 32Zqh9zgGD61xE4rjCbJJ/URCKyuTMyuTT6LV7XrLkH4Pv477fcDc9VTLn3XKJBd 6e3lUkCSMPdpuR8cTZ0ZJv4AFBKOOcofsQ13Yac= -----END CERTIFICATE-----Generated at Thu Mar 28 06:01:07 2024 by rpki-client on console-fra.rpki-client.org