$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.mft File: 3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.mft (raw, json) Hash identifier: SJJaYarYpCB91gmArUo+J2oTB1pCVt6HASm5KX/NSHY= Subject key identifier: 50:E6:38:61:05:CD:25:8D:CE:C0:0A:02:75:FF:95:40:89:E8:5E:E1 Authority key identifier: 1A:71:DF:9A:5E:72:38:35:DC:82:02:55:D3:26:0A:01:8A:9E:55:7E Certificate issuer: /CN=3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae Certificate serial: 05C2AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.mft Manifest Number: 02D2 Signing time: Wed 29 Mar 2023 11:16:28 +0000 Manifest this update: Wed 29 Mar 2023 10:15:43 +0000 Manifest next update: Sat 01 Apr 2023 12:24:43 +0000 Files and hashes: 1: 366a451fcf917ec18e843a468ac601584e6b177c.roa (hash: 75/mDvGiRngrZVEQT3z0R/X32t7llDGvhOS7PgdLDsA=) 2: 3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.crl (hash: QKZ2w4A4eF2LUawG5AHIo4FHNKXxsn3ZOQ4CQvybLyM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.crl rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Apr 2023 09:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377518 (0x5c2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae Validity Not Before: Mar 29 10:15:43 2023 GMT Not After : Apr 1 12:24:43 2023 GMT Subject: CN=cb42db23588f6f0d2f1a52e364d12f7e79d97a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7a:32:9d:22:e0:6b:03:28:90:6c:c8:e0:c2: f7:bb:0c:63:8d:a0:37:46:00:7d:57:dc:78:13:61: 56:72:13:28:52:d5:69:13:05:a8:d5:54:b8:40:7a: 4f:6b:f7:3a:dc:18:76:b7:6c:95:3d:47:29:23:05: 3b:43:67:0a:17:eb:ba:dd:c2:3b:41:49:e1:16:57: 4b:3c:ba:45:f8:c9:83:7a:6d:07:c6:50:fa:e2:09: 56:23:88:2d:0c:53:7e:28:b7:0a:7f:9d:71:7d:c5: 74:d0:30:ad:d9:b0:8f:03:8f:8c:79:b3:73:22:2e: 51:34:c9:52:07:bf:ea:86:33:22:b1:98:0b:8b:4b: 0a:cd:23:79:c7:c5:e2:fb:6c:e6:4e:81:c1:96:91: 45:80:ea:e9:95:ac:ec:6a:83:3f:90:5c:e4:4e:89: 2b:d6:4d:78:c1:d8:27:9c:00:06:87:7c:7c:e1:b1: 0a:93:fe:92:a4:3b:c1:7d:a3:32:a7:bc:57:9a:3f: 47:db:79:74:75:1a:79:81:0f:32:7a:c8:7f:3c:d9: b5:29:ed:4c:0b:f5:80:4e:1c:c0:f1:91:43:67:30: 5a:d9:45:ae:9c:f9:01:8f:51:5e:47:a9:4b:d8:86: dd:e3:12:ed:ad:80:25:c4:15:7e:e1:62:18:c4:5c: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E6:38:61:05:CD:25:8D:CE:C0:0A:02:75:FF:95:40:89:E8:5E:E1 X509v3 Authority Key Identifier: keyid:1A:71:DF:9A:5E:72:38:35:DC:82:02:55:D3:26:0A:01:8A:9E:55:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:19:99:d8:76:c5:be:60:c6:06:5b:d3:15:2b:8c:68:12:16: b3:0b:57:ec:78:bf:af:d2:77:0f:b0:19:38:07:c1:54:b7:2f: 09:9b:14:ef:02:25:43:df:f2:12:22:96:8d:cb:53:e6:d6:93: 10:d7:22:9a:69:25:5b:10:db:da:7f:1d:fb:97:59:dd:f8:1d: 27:89:60:8b:61:7f:4e:03:76:61:62:d0:28:d5:e0:ac:ab:0c: df:be:41:b7:2f:4b:88:c4:83:1a:8a:f7:36:f0:8a:74:16:e1: 4d:ff:3a:f6:b0:dd:1e:af:e4:cf:4b:47:55:79:2a:14:54:86: ef:95:cd:b9:30:bd:17:cf:c5:54:c3:0d:41:b3:2e:9b:d4:cb: 8d:db:c0:4e:f7:3c:83:4d:36:a8:69:08:5a:b3:3f:07:87:71: ca:84:3e:4e:4d:3c:f6:0e:4f:6c:0e:a6:61:da:e8:6f:98:fb: 80:cf:ea:88:fb:23:3a:98:9e:aa:fa:da:5f:31:56:17:33:ec: 57:69:a3:34:7a:32:ba:cd:49:26:00:3b:6f:60:97:e9:20:b1: a1:d5:30:e7:66:48:2d:48:88:1f:bb:55:5e:58:f7:cb:6c:e2: 97:be:0c:5d:fc:3e:52:19:3a:c1:33:ac:b2:1a:a1:31:3e:d1: 1c:dc:e3:8d -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDBcKuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh NGZlOWI5YmQwOTVhMWViNzNiOWZkODkxMGQ1YTBjNjlkNTM4YWUwHhcNMjMwMzI5 MTAxNTQzWhcNMjMwNDAxMTIyNDQzWjAzMTEwLwYDVQQDEyhjYjQyZGIyMzU4OGY2 ZjBkMmYxYTUyZTM2NGQxMmY3ZTc5ZDk3YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgnoynSLgawMokGzI4ML3uwxjjaA3RgB9V9x4E2FWchMoUtVp EwWo1VS4QHpPa/c63Bh2t2yVPUcpIwU7Q2cKF+u63cI7QUnhFldLPLpF+MmDem0H xlD64glWI4gtDFN+KLcKf51xfcV00DCt2bCPA4+MebNzIi5RNMlSB7/qhjMisZgL i0sKzSN5x8Xi+2zmToHBlpFFgOrplazsaoM/kFzkTokr1k14wdgnnAAGh3x84bEK k/6SpDvBfaMyp7xXmj9H23l0dRp5gQ8yesh/PNm1Ke1MC/WAThzA8ZFDZzBa2UWu nPkBj1FeR6lL2Ibd4xLtrYAlxBV+4WIYxFw3cwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFFDmOGEFzSWNzsAKAnX/lUCJ6F7hMB8GA1UdIwQYMBaAFBpx35pecjg13IIC VdMmCgGKnlV+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E0ZmU5 YjliZDA5NWExZWI3M2I5ZmQ4OTEwZDVhMGM2OWQ1MzhhZS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYWI4OTNlOWYtODM1NS00YzliLWFiMzMtNmZlMDRh NGZmYzRmLzNhNGZlOWI5YmQwOTVhMWViNzNiOWZkODkxMGQ1YTBjNjlkNTM4YWUu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hYjg5M2U5Zi04MzU1LTRjOWItYWIzMy02ZmUw NGE0ZmZjNGYvM2E0ZmU5YjliZDA5NWExZWI3M2I5ZmQ4OTEwZDVhMGM2OWQ1Mzhh ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAE0Zmdh2xb5gxgZb0xUrjGgSFrMLV+x4v6/Sdw+wGTgHwVS3 LwmbFO8CJUPf8hIilo3LU+bWkxDXIpppJVsQ29p/HfuXWd34HSeJYIthf04DdmFi 0CjV4KyrDN++QbcvS4jEgxqK9zbwinQW4U3/Ovaw3R6v5M9LR1V5KhRUhu+Vzbkw vRfPxVTDDUGzLpvUy43bwE73PINNNqhpCFqzPweHccqEPk5NPPYOT2wOpmHa6G+Y +4DP6oj7IzqYnqr62l8xVhcz7FdpozR6MrrNSSYAO29gl+kgsaHVMOdmSC1IiB+7 VV5Y98ts4pe+DF38PlIZOsEzrLIaoTE+0Rzc440= -----END CERTIFICATE-----Generated at Wed Mar 29 12:10:06 2023 by rpki-client on console-ams.rpki-client.org