$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.mft File: bf38729659b3ab84a635f8b5534cde56fe622a7b.mft (raw, json) Hash identifier: WLIca5F1S7BpuJD28a1EjiCtL8x51PishU4jOS2+/oA= Subject key identifier: BF:E0:79:D2:EA:50:CF:01:56:C4:88:21:3D:C7:F5:15:C8:41:1F:30 Authority key identifier: A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E Certificate issuer: /CN=bf38729659b3ab84a635f8b5534cde56fe622a7b Certificate serial: 283CDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.mft Manifest number: 0D9D Signing time: Thu 28 Mar 2024 22:21:27 +0000 Manifest this update: Thu 28 Mar 2024 21:20:09 +0000 Manifest next update: Mon 01 Apr 2024 00:27:09 +0000 Files and hashes: 1: 13906d699cc6a88c2dd0e96a17f8c50746eabfc4.roa (hash: 8IphKWbiyV7D0WniX6adMQlrhogTsKL5eVj6xh8ClfM=) 2: bf38729659b3ab84a635f8b5534cde56fe622a7b.crl (hash: kltCY92eVT4p8kHnoG+HTAyggqq/z1FEfJFX3wajfvg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.crl rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637022 (0x283cde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf38729659b3ab84a635f8b5534cde56fe622a7b Validity Not Before: Mar 28 21:20:09 2024 GMT Not After : Apr 1 00:27:09 2024 GMT Subject: CN=dd6628fef4c53ec15ae115f4f3b4a8d39012275e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:b8:f6:9d:1e:c5:3a:79:14:1f:7e:48:d5: bb:22:31:32:7a:b9:b9:84:10:e6:70:71:18:0e:c4: 19:57:fb:9f:78:84:13:be:08:b0:ca:07:43:74:9e: 56:af:3a:de:2c:11:84:67:cc:24:9f:c7:e4:3d:c3: ae:96:c7:ca:3c:9c:46:14:9a:d6:fc:51:30:ed:5b: b2:b6:90:f7:73:e0:f7:53:1d:db:ec:e0:b6:ac:01: de:1c:ba:16:d6:e6:77:76:9e:52:4c:60:17:5f:b7: ea:ac:be:25:2f:57:86:53:6b:e5:04:23:57:ab:58: 05:b4:cb:e9:8a:70:62:d1:02:6b:fd:31:24:03:a0: e3:58:b1:4d:c9:18:15:e5:24:5b:cf:3a:e1:03:de: 7e:cb:73:99:7e:25:b4:15:41:74:1b:63:9f:0f:0a: 02:99:06:c1:68:8e:0a:4d:a1:4a:87:1b:c1:1c:16: a6:f7:ae:98:58:f2:67:39:08:f9:2b:07:7f:fe:14: ce:51:d5:41:4d:73:af:aa:43:ad:2c:07:ce:b4:34: 58:ce:58:47:a1:ad:c1:0c:09:00:65:40:40:d5:5c: 92:e9:16:a7:f4:47:93:43:c7:06:ef:45:a3:cd:1d: 3d:b3:f2:6d:5c:15:41:a3:d7:5b:c9:56:bd:44:50: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E0:79:D2:EA:50:CF:01:56:C4:88:21:3D:C7:F5:15:C8:41:1F:30 X509v3 Authority Key Identifier: keyid:A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ab:78:ea:c5:fe:63:06:15:6d:4c:45:6d:66:2e:b1:15:fe: 7a:54:ca:90:1a:5a:b0:2b:45:de:d4:87:0c:b4:0d:43:d4:51: bb:e8:f7:c6:73:c6:ea:c2:e0:42:2e:2d:8f:e1:55:59:80:63: ae:2d:68:64:fe:eb:9f:44:ec:eb:e0:8f:a5:45:48:4d:4e:64: c9:3e:60:75:c1:a8:fe:54:2b:4e:67:0c:e6:9d:57:26:6c:e3: 56:37:75:48:5f:75:29:43:2a:14:1a:2f:31:67:bb:df:0d:ee: 0d:7a:fb:53:8e:47:c9:e1:67:dd:8d:f4:61:0a:2c:e6:72:6b: c8:0e:69:2e:68:e5:05:70:fd:5f:1c:3b:68:95:68:c1:d0:a2: 96:d6:7e:44:17:bd:57:46:d4:60:42:b6:a0:e4:8c:0b:b1:5c: 02:49:db:65:14:28:4d:71:c5:7f:b0:ef:0f:62:58:c1:25:a2: 0a:99:54:33:51:e9:17:13:d6:39:e7:56:c6:95:85:4f:58:f0: 3e:1c:f0:88:90:ec:1f:5d:90:45:1e:d0:c6:20:49:63:65:8d: fa:de:b0:6c:35:0f:08:9a:36:7d:a8:18:13:07:59:69:d9:44: c5:85:d6:6d:9c:c5:e7:92:52:44:8c:ee:76:f8:64:ff:fd:41: e3:1a:9d:61 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKDzeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm Mzg3Mjk2NTliM2FiODRhNjM1ZjhiNTUzNGNkZTU2ZmU2MjJhN2IwHhcNMjQwMzI4 MjEyMDA5WhcNMjQwNDAxMDAyNzA5WjAzMTEwLwYDVQQDEyhkZDY2MjhmZWY0YzUz ZWMxNWFlMTE1ZjRmM2I0YThkMzkwMTIyNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgS+49p0exTp5FB9+SNW7IjEyerm5hBDmcHEYDsQZV/ufeIQT vgiwygdDdJ5WrzreLBGEZ8wkn8fkPcOulsfKPJxGFJrW/FEw7VuytpD3c+D3Ux3b 7OC2rAHeHLoW1uZ3dp5STGAXX7fqrL4lL1eGU2vlBCNXq1gFtMvpinBi0QJr/TEk A6DjWLFNyRgV5SRbzzrhA95+y3OZfiW0FUF0G2OfDwoCmQbBaI4KTaFKhxvBHBam 966YWPJnOQj5Kwd//hTOUdVBTXOvqkOtLAfOtDRYzlhHoa3BDAkAZUBA1VyS6Ran 9EeTQ8cG70WjzR09s/JtXBVBo9dbyVa9RFCWaQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFL/gedLqUM8BVsSIIT3H9RXIQR8wMB8GA1UdIwQYMBaAFKVdzxlyi+O4oqkc ajjrtT6GFgwOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmYzODcy OTY1OWIzYWI4NGE2MzVmOGI1NTM0Y2RlNTZmZTYyMmE3Yi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYWFjZjU4YzMtZjdmNi00NDM4LTliYzctNDk1MTIx MzMyNTk0L2JmMzg3Mjk2NTliM2FiODRhNjM1ZjhiNTUzNGNkZTU2ZmU2MjJhN2Iu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hYWNmNThjMy1mN2Y2LTQ0MzgtOWJjNy00OTUx MjEzMzI1OTQvYmYzODcyOTY1OWIzYWI4NGE2MzVmOGI1NTM0Y2RlNTZmZTYyMmE3 Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAGireOrF/mMGFW1MRW1mLrEV/npUypAaWrArRd7Uhwy0DUPU Ubvo98ZzxurC4EIuLY/hVVmAY64taGT+659E7Ovgj6VFSE1OZMk+YHXBqP5UK05n DOadVyZs41Y3dUhfdSlDKhQaLzFnu98N7g16+1OOR8nhZ92N9GEKLOZya8gOaS5o 5QVw/V8cO2iVaMHQopbWfkQXvVdG1GBCtqDkjAuxXAJJ22UUKE1xxX+w7w9iWMEl ogqZVDNR6RcT1jnnVsaVhU9Y8D4c8IiQ7B9dkEUe0MYgSWNljfresGw1DwiaNn2o GBMHWWnZRMWF1m2cxeeSUkSM7nb4ZP/9QeManWE= -----END CERTIFICATE-----Generated at Thu Mar 28 23:12:12 2024 by rpki-client on console-fra.rpki-client.org