$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a72783dc-7986-4593-b07a-468bd5f15a5b/fd75b849c3cb6075a6629906aa03759c41ef5f34.mft File: fd75b849c3cb6075a6629906aa03759c41ef5f34.mft (raw, json) Hash identifier: jgxbRDdX4o7zra5XdpIawChh8ShJ9YuThd0jWcA7paE= Subject key identifier: 18:C5:B6:A7:57:E8:D7:A9:1C:70:B1:F4:38:16:E2:F6:E7:2C:A2:02 Authority key identifier: E8:8E:9E:30:36:46:1E:FE:13:02:5F:16:B5:2E:0B:95:56:3E:E7:51 Certificate issuer: /CN=fd75b849c3cb6075a6629906aa03759c41ef5f34 Certificate serial: 135E34 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd75b849c3cb6075a6629906aa03759c41ef5f34.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a72783dc-7986-4593-b07a-468bd5f15a5b/fd75b849c3cb6075a6629906aa03759c41ef5f34.mft Manifest number: 09E3 Signing time: Fri 29 Mar 2024 04:20:39 +0000 Manifest this update: Fri 29 Mar 2024 03:20:09 +0000 Manifest next update: Mon 01 Apr 2024 04:27:09 +0000 Files and hashes: 1: fd75b849c3cb6075a6629906aa03759c41ef5f34.crl (hash: oqR+w84768wOaVrJBkH66QXFdqksK+MgwMzMnc8Wy7A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a72783dc-7986-4593-b07a-468bd5f15a5b/fd75b849c3cb6075a6629906aa03759c41ef5f34.crl rsync://repository.lacnic.net/rpki/lacnic/a72783dc-7986-4593-b07a-468bd5f15a5b/fd75b849c3cb6075a6629906aa03759c41ef5f34.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd75b849c3cb6075a6629906aa03759c41ef5f34.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 04:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269300 (0x135e34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd75b849c3cb6075a6629906aa03759c41ef5f34 Validity Not Before: Mar 29 03:20:09 2024 GMT Not After : Apr 1 04:27:09 2024 GMT Subject: CN=ee32bf7adc22cfafda8d9ab7dacc1a6e9e3a4bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:9a:72:13:f9:cf:df:61:ff:22:88:99:d3: 16:cc:e9:2b:74:1f:67:50:7f:cd:9c:28:f3:6f:2a: fb:4b:a0:f8:1e:6b:94:41:4e:37:73:e0:73:2b:de: fa:10:f1:97:be:f7:29:7c:4b:59:50:a0:5d:3f:5c: 82:ed:8e:46:b3:c9:f8:ef:00:23:95:e4:75:7e:cd: 31:06:84:b5:54:0e:72:39:07:e3:82:3d:de:18:54: 9a:02:45:e1:3f:e5:95:c2:15:c4:7e:2a:3d:10:4c: f9:40:4b:43:d5:4c:0b:74:59:07:9b:41:11:1b:48: 3a:55:42:3d:f6:45:b7:1c:b8:01:0c:8e:cf:4f:45: 54:09:60:a6:dc:6c:55:20:73:34:18:cf:e4:90:b0: d9:1c:c5:01:22:03:b9:77:29:c1:f5:f6:cd:9a:13: 0d:e3:60:a6:fd:80:bc:d9:8c:d7:c7:64:83:37:49: 32:b2:28:62:89:a7:55:62:fd:2a:98:c4:80:07:ff: 55:9e:fa:4d:e6:25:56:a3:30:c1:41:b2:60:50:bf: c8:19:07:03:7a:13:4c:d4:06:31:e8:2f:a6:63:4f: d7:d1:ce:b0:04:81:e7:4f:8e:26:60:8b:e6:0a:ac: 82:41:a5:ed:ac:a4:c8:ba:91:cb:c0:b2:8a:7f:bc: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C5:B6:A7:57:E8:D7:A9:1C:70:B1:F4:38:16:E2:F6:E7:2C:A2:02 X509v3 Authority Key Identifier: keyid:E8:8E:9E:30:36:46:1E:FE:13:02:5F:16:B5:2E:0B:95:56:3E:E7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd75b849c3cb6075a6629906aa03759c41ef5f34.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a72783dc-7986-4593-b07a-468bd5f15a5b/fd75b849c3cb6075a6629906aa03759c41ef5f34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a72783dc-7986-4593-b07a-468bd5f15a5b/fd75b849c3cb6075a6629906aa03759c41ef5f34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c7:00:40:51:cd:52:36:9c:29:58:ae:b0:6f:c5:57:58:44: db:cb:f4:bf:5e:b5:a5:5e:16:d8:c7:5e:b2:2a:8c:2a:da:3e: f9:d3:93:bd:f7:d4:e0:7d:f2:5f:8d:56:70:d9:8a:47:b3:4e: 4d:84:4c:f1:59:61:3a:3b:41:4c:62:28:d8:88:3c:48:41:f5: b1:ba:53:75:0f:0d:63:9d:ab:e9:1d:30:68:8c:3f:32:eb:73: a7:73:ab:c7:e7:07:5c:9f:74:cf:a6:92:97:41:e0:d2:35:8c: ad:6f:95:17:a2:22:1e:b1:da:6f:93:78:3e:20:77:e4:fb:6c: 98:83:56:0e:dc:0d:22:14:95:2d:67:e8:98:75:19:1f:7e:47: 82:cc:53:89:55:62:60:d9:db:75:f4:08:6b:22:01:3f:41:b4: e3:38:c8:94:1a:74:73:ef:e5:4c:90:d5:84:df:5a:93:55:5b: f6:a2:cb:cf:f6:37:c3:da:15:23:e8:c4:be:d6:dd:a1:4c:6e: 7e:3a:2a:8f:85:46:47:87:98:c9:14:ff:cc:cc:20:d8:ca:a9: 5f:60:56:d4:6f:77:44:45:57:7a:e6:89:08:76:49:eb:ac:dc: 78:96:9f:2b:2d:e5:9d:ef:62:5b:1d:08:86:25:3d:12:0c:0c: 75:9a:3e:14 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDE140MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk NzViODQ5YzNjYjYwNzVhNjYyOTkwNmFhMDM3NTljNDFlZjVmMzQwHhcNMjQwMzI5 MDMyMDA5WhcNMjQwNDAxMDQyNzA5WjAzMTEwLwYDVQQDEyhlZTMyYmY3YWRjMjJj ZmFmZGE4ZDlhYjdkYWNjMWE2ZTllM2E0YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuvaachP5z99h/yKImdMWzOkrdB9nUH/NnCjzbyr7S6D4HmuU QU43c+BzK976EPGXvvcpfEtZUKBdP1yC7Y5Gs8n47wAjleR1fs0xBoS1VA5yOQfj gj3eGFSaAkXhP+WVwhXEfio9EEz5QEtD1UwLdFkHm0ERG0g6VUI99kW3HLgBDI7P T0VUCWCm3GxVIHM0GM/kkLDZHMUBIgO5dynB9fbNmhMN42Cm/YC82YzXx2SDN0ky sihiiadVYv0qmMSAB/9VnvpN5iVWozDBQbJgUL/IGQcDehNM1AYx6C+mY0/X0c6w BIHnT44mYIvmCqyCQaXtrKTIupHLwLKKf7w9hwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFBjFtqdX6NepHHCx9DgW4vbnLKICMB8GA1UdIwQYMBaAFOiOnjA2Rh7+EwJf FrUuC5VWPudRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQ3NWI4 NDljM2NiNjA3NWE2NjI5OTA2YWEwMzc1OWM0MWVmNWYzNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTcyNzgzZGMtNzk4Ni00NTkzLWIwN2EtNDY4YmQ1 ZjE1YTViL2ZkNzViODQ5YzNjYjYwNzVhNjYyOTkwNmFhMDM3NTljNDFlZjVmMzQu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hNzI3ODNkYy03OTg2LTQ1OTMtYjA3YS00Njhi ZDVmMTVhNWIvZmQ3NWI4NDljM2NiNjA3NWE2NjI5OTA2YWEwMzc1OWM0MWVmNWYz NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAF7HAEBRzVI2nClYrrBvxVdYRNvL9L9etaVeFtjHXrIqjCra PvnTk7331OB98l+NVnDZikezTk2ETPFZYTo7QUxiKNiIPEhB9bG6U3UPDWOdq+kd MGiMPzLrc6dzq8fnB1yfdM+mkpdB4NI1jK1vlReiIh6x2m+TeD4gd+T7bJiDVg7c DSIUlS1n6Jh1GR9+R4LMU4lVYmDZ23X0CGsiAT9BtOM4yJQadHPv5UyQ1YTfWpNV W/aiy8/2N8PaFSPoxL7W3aFMbn46Ko+FRkeHmMkU/8zMINjKqV9gVtRvd0RFV3rm iQh2Seus3HiWnyst5Z3vYlsdCIYlPRIMDHWaPhQ= -----END CERTIFICATE-----Generated at Fri Mar 29 05:45:45 2024 by rpki-client on console-ams.rpki-client.org