$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.mft File: a7656fd167ae72596f765a4f9b74e1606a1dea00.mft (raw, json) Hash identifier: Yin9tnfJepLaYE8Z4n3KrWeAJyxbUKnOElIjQ8NZ8z0= Subject key identifier: FE:06:AD:F8:68:3F:88:D8:3C:6D:A2:58:45:94:28:70:B4:C2:4C:D9 Authority key identifier: 94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE Certificate issuer: /CN=a7656fd167ae72596f765a4f9b74e1606a1dea00 Certificate serial: 1B27E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.mft Manifest number: 0DCC Signing time: Thu 28 Mar 2024 14:21:29 +0000 Manifest this update: Thu 28 Mar 2024 13:20:08 +0000 Manifest next update: Sun 31 Mar 2024 14:25:08 +0000 Files and hashes: 1: a756d6ad3482bf52200dd6edf2fdae1f748311b7.roa (hash: mRCPtNZ1LnsUS97FiMsaIceq/S/fM6erWOrCv242Tq0=) 2: a7656fd167ae72596f765a4f9b74e1606a1dea00.crl (hash: ARhbn9nNJRo4IjI5vXJrKAwfXxiR/vTsODfCriZOEAs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.crl rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779684 (0x1b27e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7656fd167ae72596f765a4f9b74e1606a1dea00 Validity Not Before: Mar 28 13:20:08 2024 GMT Not After : Mar 31 14:25:08 2024 GMT Subject: CN=49ed3f9faf1021f93cbea67464785600b5cd89f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:89:8b:5e:55:7c:54:96:55:32:9f:7f:d1:d4: 22:44:16:1d:86:35:19:ef:1b:a3:44:9a:6d:dd:59: 4f:3e:07:14:47:2a:19:43:ef:76:67:98:0c:1c:fa: d4:55:c7:78:2d:1d:2e:67:4d:96:46:6d:72:89:8c: f5:a1:8a:99:7e:80:c1:81:72:51:36:73:24:92:a8: bf:c7:18:ed:82:b3:6f:78:bf:d4:39:50:52:41:95: 81:13:4c:5a:c5:bf:50:f3:dc:5f:95:20:c9:96:9e: d0:b4:72:a3:b1:de:49:40:0f:3c:9c:1a:70:86:2c: d3:99:b0:6e:2a:20:ae:9c:40:1b:99:f7:ca:2d:12: 3b:4b:75:ac:2a:bf:2f:fc:23:27:81:e0:7f:60:b3: 27:e5:61:b0:69:98:40:ac:4a:fc:ca:db:77:93:ed: fe:de:3c:65:d9:95:c8:e2:ac:25:f8:f1:2f:3c:4f: e9:da:4b:dd:ac:13:55:23:6e:66:42:6d:a0:a5:c8: bf:d6:73:0d:69:bd:f8:59:48:57:0d:01:73:ba:94: da:b6:1a:e1:8b:58:15:a6:5d:a3:8e:e4:14:c0:b8: 36:79:6e:bc:4d:2b:c4:8d:d9:a5:65:02:97:9e:6c: 3e:6c:aa:43:bf:49:b2:1a:97:7b:7d:26:40:46:04: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:AD:F8:68:3F:88:D8:3C:6D:A2:58:45:94:28:70:B4:C2:4C:D9 X509v3 Authority Key Identifier: keyid:94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ba:b5:7e:f6:b3:32:91:d4:b4:fd:dd:b5:8a:ff:66:b6:03: b6:25:b1:96:11:27:71:28:f6:0d:e9:67:e9:c8:1e:20:bf:77: 4d:6a:58:fa:43:4b:d3:a6:5e:b7:3b:23:1a:3e:3e:db:4e:80: 78:61:d9:c7:0d:c5:53:4a:3b:83:cc:79:a9:71:1e:f5:17:eb: 87:44:20:a8:cd:37:76:88:82:88:60:34:ab:ed:1f:64:c2:54: 5e:18:95:dc:83:1c:ef:0b:ea:9d:45:86:f3:8d:49:a0:65:85: b9:e9:ab:b0:99:9e:50:20:33:df:73:58:09:43:49:57:15:48: 57:72:da:cc:f0:71:15:27:23:d4:74:20:af:c2:c9:34:be:36: bf:bf:13:74:d0:0c:40:95:54:2e:dc:fb:d7:a2:eb:3e:bd:44: 3e:79:f6:ae:49:06:8d:d7:ba:3b:6d:71:41:46:23:00:99:2f: 72:9e:fe:e6:61:31:d7:bc:ae:ab:a2:b1:cf:c5:06:b5:2d:86: 3d:72:a3:b6:ff:92:60:af:d7:12:78:e4:73:16:f0:67:4c:81: 3a:e2:66:cc:9b:64:7d:f9:c5:61:aa:f2:b2:d3:57:f1:be:ca: f2:78:37:c8:06:00:c7:36:ef:c7:0b:2f:61:a3:33:34:df:32: 85:68:1d:3b -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGyfkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3 NjU2ZmQxNjdhZTcyNTk2Zjc2NWE0ZjliNzRlMTYwNmExZGVhMDAwHhcNMjQwMzI4 MTMyMDA4WhcNMjQwMzMxMTQyNTA4WjAzMTEwLwYDVQQDEyg0OWVkM2Y5ZmFmMTAy MWY5M2NiZWE2NzQ2NDc4NTYwMGI1Y2Q4OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAiYmLXlV8VJZVMp9/0dQiRBYdhjUZ7xujRJpt3VlPPgcURyoZ Q+92Z5gMHPrUVcd4LR0uZ02WRm1yiYz1oYqZfoDBgXJRNnMkkqi/xxjtgrNveL/U OVBSQZWBE0xaxb9Q89xflSDJlp7QtHKjsd5JQA88nBpwhizTmbBuKiCunEAbmffK LRI7S3WsKr8v/CMngeB/YLMn5WGwaZhArEr8ytt3k+3+3jxl2ZXI4qwl+PEvPE/p 2kvdrBNVI25mQm2gpci/1nMNab34WUhXDQFzupTathrhi1gVpl2jjuQUwLg2eW68 TSvEjdmlZQKXnmw+bKpDv0myGpd7fSZARgRSUwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFP4GrfhoP4jYPG2iWEWUKHC0wkzZMB8GA1UdIwQYMBaAFJQAjcB5SkkxXO0U g5A2K89+XPneMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTc2NTZm ZDE2N2FlNzI1OTZmNzY1YTRmOWI3NGUxNjA2YTFkZWEwMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYWM4Yjg5YTAtZDgwNS00MzQxLTgzNDYtNDQzMzFh ZGM2NjFjL2E3NjU2ZmQxNjdhZTcyNTk2Zjc2NWE0ZjliNzRlMTYwNmExZGVhMDAu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hYzhiODlhMC1kODA1LTQzNDEtODM0Ni00NDMz MWFkYzY2MWMvYTc2NTZmZDE2N2FlNzI1OTZmNzY1YTRmOWI3NGUxNjA2YTFkZWEw MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAFu6tX72szKR1LT93bWK/2a2A7YlsZYRJ3Eo9g3pZ+nIHiC/ d01qWPpDS9OmXrc7Ixo+PttOgHhh2ccNxVNKO4PMealxHvUX64dEIKjNN3aIgohg NKvtH2TCVF4YldyDHO8L6p1FhvONSaBlhbnpq7CZnlAgM99zWAlDSVcVSFdy2szw cRUnI9R0IK/CyTS+Nr+/E3TQDECVVC7c+9ei6z69RD559q5JBo3XujttcUFGIwCZ L3Ke/uZhMde8rquisc/FBrUthj1yo7b/kmCv1xJ45HMW8GdMgTriZsybZH35xWGq 8rLTV/G+yvJ4N8gGAMc278cLL2GjMzTfMoVoHTs= -----END CERTIFICATE-----Generated at Thu Mar 28 16:04:19 2024 by rpki-client on console-ams.rpki-client.org