$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.mft File: ba5859ff065527ea9359c240f3194fa4ef3813c4.mft (raw, json) Hash identifier: o8iZ5XPOv+c0L0dqq5W843XY1mplm/0BGWOZCynKg60= Subject key identifier: 57:FB:12:2C:38:2C:F2:30:31:73:3C:45:36:85:7A:CD:B6:C4:86:E8 Authority key identifier: CF:D8:04:AE:22:D3:B0:07:20:FD:1B:00:5B:54:B2:3B:99:0B:4C:39 Certificate issuer: /CN=ba5859ff065527ea9359c240f3194fa4ef3813c4 Certificate serial: 1B06A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba5859ff065527ea9359c240f3194fa4ef3813c4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.mft Manifest Number: 0940 Signing time: Sat 25 Mar 2023 14:16:09 +0000 Manifest this update: Sat 25 Mar 2023 13:15:42 +0000 Manifest next update: Tue 28 Mar 2023 15:03:42 +0000 Files and hashes: 1: ba5859ff065527ea9359c240f3194fa4ef3813c4.crl (hash: y3FsX6MbW2imCgS4ld9lmAV6zykfj6v6OPacmpXLtAA=) 2: e452e87e16116803e22ebd971241e0b3f5b185af.roa (hash: 2R1KNnnOSf/KdKRHOYEO2BmXCAHyzAjNHw5XLXeTQs4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.crl rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba5859ff065527ea9359c240f3194fa4ef3813c4.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Mar 2023 12:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771168 (0x1b06a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5859ff065527ea9359c240f3194fa4ef3813c4 Validity Not Before: Mar 25 13:15:42 2023 GMT Not After : Mar 28 15:03:42 2023 GMT Subject: CN=1f077f4cb3f35ec6bdfb5082f834c973fdec4c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:7c:54:f7:0a:fc:e0:32:03:85:9f:98:76: 6f:43:db:7d:13:38:9a:2e:0f:9c:17:08:10:67:c0: 70:75:85:2f:0d:99:d6:73:df:cd:4d:30:96:86:b0: 1b:24:9f:8d:3f:c5:18:bf:cd:d2:50:4b:02:3d:85: 84:ce:7c:30:8a:32:87:74:b8:0c:01:05:82:85:38: 4e:3c:f0:19:55:e1:b5:55:3a:e9:4f:f9:da:7b:7a: 96:36:6b:91:e0:a2:38:bb:b2:95:de:ee:2b:b4:1a: 35:50:a7:e3:86:c8:d4:ff:dd:67:6a:06:5d:ad:56: c3:7e:aa:7a:75:5c:89:c8:84:23:02:31:0b:ff:28: 43:cc:77:01:6e:81:63:0d:61:18:83:32:a4:a1:42: 2e:ce:ef:16:08:2f:3a:d0:8b:c4:b8:b6:78:4e:e6: 7b:b0:9d:9a:aa:de:11:d1:25:98:9d:f0:67:d4:6e: d6:ce:8b:fc:41:71:be:3a:d5:be:87:22:06:ed:81: 8d:b4:76:de:48:4a:66:db:00:31:19:d8:c2:06:69: 92:09:64:ac:5a:f7:1c:bd:46:04:06:2e:90:f6:89: 00:f6:c0:ed:16:30:3c:32:e4:f7:de:0c:c1:04:59: 1e:39:57:9f:ca:fb:14:00:6d:f2:5a:64:3b:11:b0: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FB:12:2C:38:2C:F2:30:31:73:3C:45:36:85:7A:CD:B6:C4:86:E8 X509v3 Authority Key Identifier: keyid:CF:D8:04:AE:22:D3:B0:07:20:FD:1B:00:5B:54:B2:3B:99:0B:4C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba5859ff065527ea9359c240f3194fa4ef3813c4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:bf:36:95:d9:07:52:33:d7:aa:1b:e7:7b:b5:ff:05:d9:92: 8f:f3:99:8d:c0:3e:c9:91:df:17:7e:ba:b0:d8:60:10:c3:20: 84:47:d3:e5:ad:74:6d:61:4f:da:74:77:b2:69:b4:be:82:4a: 66:63:7e:2a:e6:c8:fb:0b:f8:9b:6a:62:72:4e:32:7e:47:53: 38:0a:9b:a7:0f:19:79:70:81:20:2f:ff:59:04:5b:a6:0d:ba: 30:c7:47:74:d3:65:ae:be:34:4a:0f:e2:18:f9:ea:a3:e6:6b: a5:35:d3:f6:a1:6a:d8:9d:fe:3f:0e:66:cf:64:ff:b7:21:3e: fa:5e:4a:23:10:68:8a:3c:cd:f0:3e:53:47:97:94:88:4d:1c: 38:d3:c3:15:dd:cd:8a:43:71:b2:7d:e6:b4:80:ac:c6:c1:aa: f2:05:0b:e8:d8:66:f3:14:af:49:9a:8d:6a:da:19:0b:fd:30: 60:84:6a:69:a5:5b:0f:d4:58:17:c0:3c:05:d0:72:8f:f8:29: cf:03:9c:b2:e8:ff:ed:fe:b0:fc:6b:02:28:41:57:b2:d2:a6: 5d:ed:e2:d4:ee:e2:70:d8:ea:78:4c:cc:ce:89:bf:7a:cf:74: 55:3a:4e:2f:eb:62:d2:77:26:df:fb:85:4d:c2:cd:42:17:4f: 5e:c2:8e:93 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGwagMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh NTg1OWZmMDY1NTI3ZWE5MzU5YzI0MGYzMTk0ZmE0ZWYzODEzYzQwHhcNMjMwMzI1 MTMxNTQyWhcNMjMwMzI4MTUwMzQyWjAzMTEwLwYDVQQDEygxZjA3N2Y0Y2IzZjM1 ZWM2YmRmYjUwODJmODM0Yzk3M2ZkZWM0YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAyop8VPcK/OAyA4WfmHZvQ9t9EziaLg+cFwgQZ8BwdYUvDZnW c9/NTTCWhrAbJJ+NP8UYv83SUEsCPYWEznwwijKHdLgMAQWChThOPPAZVeG1VTrp T/nae3qWNmuR4KI4u7KV3u4rtBo1UKfjhsjU/91nagZdrVbDfqp6dVyJyIQjAjEL /yhDzHcBboFjDWEYgzKkoUIuzu8WCC860IvEuLZ4TuZ7sJ2aqt4R0SWYnfBn1G7W zov8QXG+OtW+hyIG7YGNtHbeSEpm2wAxGdjCBmmSCWSsWvccvUYEBi6Q9okA9sDt FjA8MuT33gzBBFkeOVefyvsUAG3yWmQ7EbApywIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFFf7Eiw4LPIwMXM8RTaFes22xIboMB8GA1UdIwQYMBaAFM/YBK4i07AHIP0b AFtUsjuZC0w5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmE1ODU5 ZmYwNjU1MjdlYTkzNTljMjQwZjMxOTRmYTRlZjM4MTNjNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOWJlMWViYzItYmUwMS00ZTU1LTlhNDgtZTY1Nzkw NTJiZWY5L2JhNTg1OWZmMDY1NTI3ZWE5MzU5YzI0MGYzMTk0ZmE0ZWYzODEzYzQu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85YmUxZWJjMi1iZTAxLTRlNTUtOWE0OC1lNjU3 OTA1MmJlZjkvYmE1ODU5ZmYwNjU1MjdlYTkzNTljMjQwZjMxOTRmYTRlZjM4MTNj NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAKW/NpXZB1Iz16ob53u1/wXZko/zmY3APsmR3xd+urDYYBDD IIRH0+WtdG1hT9p0d7JptL6CSmZjfirmyPsL+JtqYnJOMn5HUzgKm6cPGXlwgSAv /1kEW6YNujDHR3TTZa6+NEoP4hj56qPma6U10/ahatid/j8OZs9k/7chPvpeSiMQ aIo8zfA+U0eXlIhNHDjTwxXdzYpDcbJ95rSArMbBqvIFC+jYZvMUr0majWraGQv9 MGCEammlWw/UWBfAPAXQco/4Kc8DnLLo/+3+sPxrAihBV7LSpl3t4tTu4nDY6nhM zM6Jv3rPdFU6Ti/rYtJ3Jt/7hU3CzUIXT17CjpM= -----END CERTIFICATE-----Generated at Sat Mar 25 14:45:37 2023 by rpki-client on console-ams.rpki-client.org