$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft File: 254bebd96f7e069ee36566fd9821930de6b2d7ad.mft (raw, json) Hash identifier: cq8Cs/qoeld4iDw0WPQTZAj7nYxwZc3N5t4fYbZXOLc= Subject key identifier: A8:90:A9:B1:5D:3F:F3:87:7E:10:12:41:F0:8E:EF:37:E5:92:0A:DE Authority key identifier: 03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A Certificate issuer: /CN=254bebd96f7e069ee36566fd9821930de6b2d7ad Certificate serial: 287B19 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft Manifest number: 0DB1 Signing time: Fri 29 Mar 2024 02:20:27 +0000 Manifest this update: Fri 29 Mar 2024 01:20:08 +0000 Manifest next update: Mon 01 Apr 2024 02:35:08 +0000 Files and hashes: 1: 254bebd96f7e069ee36566fd9821930de6b2d7ad.crl (hash: RlD3Ptha7hC6WaIgkBaQm+8WD9Ed4czHXXPSYEwShK0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.crl rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652953 (0x287b19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254bebd96f7e069ee36566fd9821930de6b2d7ad Validity Not Before: Mar 29 01:20:08 2024 GMT Not After : Apr 1 02:35:08 2024 GMT Subject: CN=a00c6767fee1acff3fcfa950798bf2e1213c6e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:e2:bd:86:cb:c2:9a:0e:65:6a:4e:53:12: a3:72:30:4c:4b:85:a6:5c:5c:47:d2:b0:08:ca:8b: 33:f2:76:97:3d:7c:e5:7c:10:ff:38:5a:3c:4f:40: 38:25:c7:e5:0f:b9:18:3d:c2:fe:c6:96:c5:60:59: 60:cd:eb:4b:83:68:8f:d4:63:a2:5a:31:a6:ae:a0: bb:05:04:1b:a6:4a:c2:d6:71:81:e4:4e:ed:1b:f4: 57:c9:e0:e1:5e:a6:df:ac:0a:c6:0f:87:99:41:7a: 8b:fe:6b:7f:94:c0:e4:b7:19:c5:04:e0:4d:4e:08: 5b:d8:e7:c4:ee:42:bd:66:ac:0c:71:5c:30:c8:9b: 4e:08:a7:7e:e3:58:ad:31:c8:e5:cd:0a:7c:47:20: 69:8c:19:e4:1e:d8:9c:0a:70:f1:eb:00:e8:e2:7e: 5b:02:14:70:98:06:40:fa:a5:a4:f8:32:79:ce:e8: 73:08:63:5e:0b:0a:90:bd:a7:5d:57:a7:62:7d:d0: 17:a8:c4:0a:12:e3:36:40:19:bf:02:72:71:98:09: ba:d5:4e:14:fb:f9:18:0a:20:8d:93:02:09:72:e8: 29:cd:ab:1c:c9:cf:2a:41:e7:e0:82:ee:81:7f:5e: da:41:69:26:72:17:2a:79:b3:9d:68:d9:9c:d5:c1: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:90:A9:B1:5D:3F:F3:87:7E:10:12:41:F0:8E:EF:37:E5:92:0A:DE X509v3 Authority Key Identifier: keyid:03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:79:8e:8e:e2:0d:8e:9e:e0:00:61:a2:1f:18:aa:27:18:48: 5a:0c:11:4f:41:b4:ef:05:d5:f5:18:95:1a:5f:3e:0b:7c:be: a6:8d:0c:08:30:66:1b:07:95:40:e5:86:7c:66:87:a3:93:93: b5:1d:c4:06:3a:40:6a:0d:b7:c9:d7:cc:90:a8:0d:8d:af:4e: 5e:da:12:67:3b:f8:6f:b8:e4:f0:90:cc:0e:9b:f9:8b:af:ce: 39:5c:cd:fd:88:90:33:d4:e0:f3:ab:6f:60:f7:c0:6e:e7:b4: 73:cf:39:9a:7d:d7:78:94:64:c0:0c:1c:b4:1e:ec:2a:02:12: 7f:dd:02:2b:eb:5f:1a:55:c2:f7:7c:f2:8a:18:9c:b9:89:f7: 60:3b:55:cd:e8:a8:84:01:c2:50:47:6b:a5:d6:4d:4a:10:51: de:67:7c:81:13:16:ae:73:fe:b3:88:8e:68:b8:d4:a8:68:6d: a1:1f:d0:6b:c5:1b:f9:1c:03:76:f1:56:4f:1a:5a:49:a0:c5: dc:97:7f:8e:98:e7:30:0f:49:28:1d:67:54:88:7c:63:3d:79: a5:31:ae:8e:e9:38:8a:de:24:1f:1c:9e:5c:34:f0:f0:ab:10: 89:92:35:3f:c6:b3:99:5f:0d:38:57:f0:4e:84:eb:96:34:ec: 54:d1:77:ce -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKHsZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1 NGJlYmQ5NmY3ZTA2OWVlMzY1NjZmZDk4MjE5MzBkZTZiMmQ3YWQwHhcNMjQwMzI5 MDEyMDA4WhcNMjQwNDAxMDIzNTA4WjAzMTEwLwYDVQQDEyhhMDBjNjc2N2ZlZTFh Y2ZmM2ZjZmE5NTA3OThiZjJlMTIxM2M2ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAom/ivYbLwpoOZWpOUxKjcjBMS4WmXFxH0rAIyosz8naXPXzl fBD/OFo8T0A4JcflD7kYPcL+xpbFYFlgzetLg2iP1GOiWjGmrqC7BQQbpkrC1nGB 5E7tG/RXyeDhXqbfrArGD4eZQXqL/mt/lMDktxnFBOBNTghb2OfE7kK9ZqwMcVww yJtOCKd+41itMcjlzQp8RyBpjBnkHticCnDx6wDo4n5bAhRwmAZA+qWk+DJ5zuhz CGNeCwqQvaddV6difdAXqMQKEuM2QBm/AnJxmAm61U4U+/kYCiCNkwIJcugpzasc yc8qQefggu6Bf17aQWkmchcqebOdaNmc1cHTmwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFKiQqbFdP/OHfhASQfCO7zflkgreMB8GA1UdIwQYMBaAFAMBEp17z2Ijnn9Y HdbJ5XbyD29aMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjU0YmVi ZDk2ZjdlMDY5ZWUzNjU2NmZkOTgyMTkzMGRlNmIyZDdhZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYWE4NTU5MzItNmNiNS00MTk4LWFkM2UtNDc2NGYx YWNmOWI0LzI1NGJlYmQ5NmY3ZTA2OWVlMzY1NjZmZDk4MjE5MzBkZTZiMmQ3YWQu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hYTg1NTkzMi02Y2I1LTQxOTgtYWQzZS00NzY0 ZjFhY2Y5YjQvMjU0YmViZDk2ZjdlMDY5ZWUzNjU2NmZkOTgyMTkzMGRlNmIyZDdh ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAIx5jo7iDY6e4ABhoh8YqicYSFoMEU9BtO8F1fUYlRpfPgt8 vqaNDAgwZhsHlUDlhnxmh6OTk7UdxAY6QGoNt8nXzJCoDY2vTl7aEmc7+G+45PCQ zA6b+Yuvzjlczf2IkDPU4POrb2D3wG7ntHPPOZp913iUZMAMHLQe7CoCEn/dAivr XxpVwvd88ooYnLmJ92A7Vc3oqIQBwlBHa6XWTUoQUd5nfIETFq5z/rOIjmi41Kho baEf0GvFG/kcA3bxVk8aWkmgxdyXf46Y5zAPSSgdZ1SIfGM9eaUxro7pOIreJB8c nlw08PCrEImSNT/Gs5lfDThX8E6E65Y07FTRd84= -----END CERTIFICATE-----Generated at Fri Mar 29 03:23:56 2024 by rpki-client on console-ams.rpki-client.org