$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.mft File: 844cc8c5a2dc70311d998622d46309497c3d982c.mft (raw, json) Hash identifier: e1/2czzPDbJ5Lao0jasJKQ7bD5tMFmj06bbfC6nCCYk= Subject key identifier: 18:9B:11:4D:6C:91:C1:65:D0:EE:95:CB:F3:1B:51:A4:3A:EE:82:0B Authority key identifier: A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D Certificate issuer: /CN=844cc8c5a2dc70311d998622d46309497c3d982c Certificate serial: 0BE10A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.mft Manifest number: 0621 Signing time: Thu 28 Mar 2024 06:20:45 +0000 Manifest this update: Thu 28 Mar 2024 05:20:23 +0000 Manifest next update: Sun 31 Mar 2024 06:54:23 +0000 Files and hashes: 1: 844cc8c5a2dc70311d998622d46309497c3d982c.crl (hash: 9P9nvnCjP/2aKT6JNF3zjyyeWDpy7R7oqDoCwxv41dM=) 2: f7941be19c9600abd9571828a2fc5f1a404cae1c.roa (hash: fEj+SdmzGs549dyqUgyh/1U6dMEWKOqXOCfZIfJIMLc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.crl rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778506 (0xbe10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844cc8c5a2dc70311d998622d46309497c3d982c Validity Not Before: Mar 28 05:20:23 2024 GMT Not After : Mar 31 06:54:23 2024 GMT Subject: CN=9e90054050d5886d2a7338fa65f38f86e3f71e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6d:ce:ec:c0:02:ab:7e:74:fc:7b:4b:29:fa: 78:58:bd:bd:db:e3:f1:42:45:e3:20:14:e7:cd:20: 78:9c:59:7c:1b:80:5c:f7:71:24:e3:28:2c:d5:05: 46:13:6d:84:af:bf:64:d0:e9:2e:14:bc:bc:ff:3b: 4b:ee:78:1d:b7:65:07:19:57:8a:cf:c0:c0:dd:29: 3d:ad:94:ed:a3:5a:72:a5:91:59:8e:5c:3e:84:e3: 71:f0:50:12:5c:24:17:40:9e:06:3b:5f:57:5a:00: 46:48:93:6f:be:3d:3c:ea:66:06:04:a3:65:39:10: 55:2b:5f:9b:99:83:00:ba:41:89:41:02:f1:3b:ae: eb:d5:74:75:e0:e7:27:4e:ea:49:3b:42:74:65:65: d8:d4:fc:20:15:a6:4d:92:d4:ac:94:46:1d:03:6d: fb:65:b3:91:4f:51:14:74:65:2b:63:80:02:98:46: 53:42:b7:d7:0d:1e:22:1c:68:ad:26:0e:90:34:d4: 8e:a7:42:a4:f6:9f:c2:53:6d:5c:96:b3:2d:f6:e4: 4f:08:b8:7c:b2:2e:38:42:33:ec:99:e1:c3:c4:20: fa:de:be:67:88:e7:73:d9:51:f8:8a:a7:2c:84:5b: 47:6a:fb:e7:1a:d4:65:2c:60:38:5c:3f:07:21:ad: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9B:11:4D:6C:91:C1:65:D0:EE:95:CB:F3:1B:51:A4:3A:EE:82:0B X509v3 Authority Key Identifier: keyid:A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:54:2e:43:a1:df:e8:66:03:31:c1:9d:13:45:cd:30:c9:b6: ae:aa:c7:fe:94:ae:f6:4f:97:60:32:c2:28:57:25:50:40:f6: c9:ef:02:98:d9:90:86:02:95:9f:b4:ac:eb:b4:66:1a:dd:83: 77:c0:97:5b:0a:28:e1:8e:7a:df:ec:9f:bf:8a:71:7a:a0:23: ea:6c:7b:25:8c:84:02:8f:d9:e0:b7:1d:d4:b3:fc:67:a1:72: 2a:5a:d4:c1:72:2f:9d:fb:70:54:5f:f4:49:7d:45:01:05:2f: 6b:1f:6d:de:2b:43:94:df:2f:91:ec:e5:24:a4:6f:2e:53:c9: 28:d4:b1:23:43:9b:49:59:b2:45:7b:93:15:12:38:0a:22:ac: 7b:31:24:58:84:80:be:cc:40:ca:03:80:e4:d4:b8:24:a4:32: 37:3c:f2:f5:31:b6:26:e6:1f:cf:80:99:e2:8d:ab:08:54:58: ef:d2:9c:bd:6c:38:18:27:31:c4:67:ad:4b:16:13:4f:f4:ab: a5:13:c3:a9:94:52:03:9e:74:8a:c2:8c:40:45:2c:38:91:8a: 76:3e:4c:75:35:b5:51:46:99:20:62:45:8d:9c:16:70:d5:62: 48:df:56:70:87:ed:c8:46:13:c1:70:e5:36:b4:77:df:23:03: 43:fa:49:cc -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDC+EKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0 NGNjOGM1YTJkYzcwMzExZDk5ODYyMmQ0NjMwOTQ5N2MzZDk4MmMwHhcNMjQwMzI4 MDUyMDIzWhcNMjQwMzMxMDY1NDIzWjAzMTEwLwYDVQQDEyg5ZTkwMDU0MDUwZDU4 ODZkMmE3MzM4ZmE2NWYzOGY4NmUzZjcxZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAh23O7MACq350/HtLKfp4WL292+PxQkXjIBTnzSB4nFl8G4Bc 93Ek4ygs1QVGE22Er79k0OkuFLy8/ztL7ngdt2UHGVeKz8DA3Sk9rZTto1pypZFZ jlw+hONx8FASXCQXQJ4GO19XWgBGSJNvvj086mYGBKNlORBVK1+bmYMAukGJQQLx O67r1XR14OcnTupJO0J0ZWXY1PwgFaZNktSslEYdA237ZbORT1EUdGUrY4ACmEZT QrfXDR4iHGitJg6QNNSOp0Kk9p/CU21clrMt9uRPCLh8si44QjPsmeHDxCD63r5n iOdz2VH4iqcshFtHavvnGtRlLGA4XD8HIa1tvQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFBibEU1skcFl0O6Vy/MbUaQ67oILMB8GA1UdIwQYMBaAFKUVyjyK8NtAXdc8 kgOX+E+dKdQ9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODQ0Y2M4 YzVhMmRjNzAzMTFkOTk4NjIyZDQ2MzA5NDk3YzNkOTgyYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTRkOWI4NGEtZjQ3Mi00ZWJlLWIwZTItZWE5YTEy OGQxMTU3Lzg0NGNjOGM1YTJkYzcwMzExZDk5ODYyMmQ0NjMwOTQ5N2MzZDk4MmMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hNGQ5Yjg0YS1mNDcyLTRlYmUtYjBlMi1lYTlh MTI4ZDExNTcvODQ0Y2M4YzVhMmRjNzAzMTFkOTk4NjIyZDQ2MzA5NDk3YzNkOTgy Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAH5ULkOh3+hmAzHBnRNFzTDJtq6qx/6UrvZPl2AywihXJVBA 9snvApjZkIYClZ+0rOu0Zhrdg3fAl1sKKOGOet/sn7+KcXqgI+pseyWMhAKP2eC3 HdSz/Gehcipa1MFyL537cFRf9El9RQEFL2sfbd4rQ5TfL5Hs5SSkby5TySjUsSND m0lZskV7kxUSOAoirHsxJFiEgL7MQMoDgOTUuCSkMjc88vUxtibmH8+AmeKNqwhU WO/SnL1sOBgnMcRnrUsWE0/0q6UTw6mUUgOedIrCjEBFLDiRinY+THU1tVFGmSBi RY2cFnDVYkjfVnCH7chGE8Fw5Ta0d98jA0P6Scw= -----END CERTIFICATE-----Generated at Thu Mar 28 08:12:28 2024 by rpki-client on console-ams.rpki-client.org