$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft File: 40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft (raw, json) Hash identifier: FvBFB1p0vtEi3pPy2s6areoD5yqibzK8WC4SsIt8Aq4= Subject key identifier: 52:65:F4:6E:B6:A4:AD:96:A7:67:76:73:89:A0:39:94:3C:D6:7B:BA Authority key identifier: 07:E4:F5:CC:98:88:E6:E0:7E:A5:E1:DB:C6:D9:1E:58:B0:EA:69:45 Certificate issuer: /CN=40a89bc6ce1028b2fb8b3f3c58b22060364675c3 Certificate serial: 27655F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft Manifest number: 0DC2 Signing time: Fri 29 Mar 2024 01:20:59 +0000 Manifest this update: Fri 29 Mar 2024 00:20:07 +0000 Manifest next update: Mon 01 Apr 2024 02:14:07 +0000 Files and hashes: 1: 40a89bc6ce1028b2fb8b3f3c58b22060364675c3.crl (hash: eBbeJffr6dNdPsCV2dWEHHh94pulfXNrQv4R5FmQJSY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.crl rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581855 (0x27655f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a89bc6ce1028b2fb8b3f3c58b22060364675c3 Validity Not Before: Mar 29 00:20:07 2024 GMT Not After : Apr 1 02:14:07 2024 GMT Subject: CN=d3b759613d0cf09487dbb3d3822ba58944cdef9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:62:56:bd:73:dd:c0:c3:73:65:76:d9:a7: 62:15:f8:37:65:a1:43:b1:70:90:ae:8b:56:10:5e: 3d:fa:d4:1c:2b:70:cf:e6:35:84:52:8a:47:d1:1a: 82:92:f4:aa:a8:74:80:3a:0d:7d:be:de:21:c7:7a: ec:12:eb:f9:69:48:f2:94:f2:29:cd:8f:ae:8b:a6: 3e:a3:09:e7:7f:03:6b:9c:08:3b:af:95:c9:f8:4e: 70:be:c6:90:54:cc:16:4a:dd:b1:4a:08:11:28:f3: 43:fe:73:51:b2:70:76:ce:9d:e5:a2:3b:af:ee:a1: 3e:93:ec:49:f2:82:0e:59:82:aa:2d:04:69:8e:c5: db:8d:e9:d8:8f:d2:db:eb:09:50:a9:dc:b6:fb:32: f2:f7:02:2b:e5:73:86:86:c1:d1:63:8b:58:f1:90: 1b:4a:0c:db:be:fd:7a:33:d6:e3:b3:1e:c8:ab:82: cf:54:f6:10:3e:6b:c0:88:79:d6:40:26:5d:44:7d: b9:fd:4a:e1:91:56:79:61:39:cc:4a:98:a7:0e:2f: 1a:b1:a8:b2:6f:9d:3e:fc:3c:4b:70:36:e5:fd:14: 43:2a:3b:fa:fc:a5:77:b8:f7:79:ad:8a:30:ab:ae: b6:a0:13:51:e4:e2:28:df:88:9e:72:6e:a5:c6:f7: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:65:F4:6E:B6:A4:AD:96:A7:67:76:73:89:A0:39:94:3C:D6:7B:BA X509v3 Authority Key Identifier: keyid:07:E4:F5:CC:98:88:E6:E0:7E:A5:E1:DB:C6:D9:1E:58:B0:EA:69:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:25:ac:c8:b2:07:a5:f2:8c:bb:53:c8:be:43:26:c5:8b:91: 58:d5:31:c2:c5:c0:82:87:c6:e0:80:a3:89:5d:7d:ef:90:40: 7e:c8:e5:9a:af:47:60:19:66:61:f6:38:0f:59:ad:c6:5a:22: d2:42:12:a6:dc:64:11:05:4f:aa:73:38:7c:be:fc:72:5b:06: d1:ea:4c:00:c4:48:6d:78:a4:a1:9a:e5:c9:7f:36:2c:40:69: 0b:bb:87:db:08:03:1c:f1:62:2e:b5:3a:0a:62:8e:08:b4:ff: fc:f1:63:d7:c0:e9:1b:a0:9a:57:f7:e5:fe:0b:4e:7f:db:86: e9:fe:f9:82:ae:75:bb:cc:7a:eb:b4:8b:3f:ff:79:bf:94:e3: 0c:a2:05:94:39:f0:f7:bf:df:e3:ed:00:d0:a1:86:df:04:5e: 1f:ad:8a:c8:31:78:64:59:93:f2:7a:2c:36:9e:d9:cb:8b:10: b5:6e:7e:13:67:0b:fa:c5:51:f8:cd:92:31:fe:e4:e5:62:dd: e9:26:4f:93:63:f4:f5:b1:52:43:f1:25:af:72:dc:2b:86:5b: 70:c0:ea:a6:84:7b:0b:51:a2:d3:e6:9f:9d:88:17:11:bd:3d: 5f:ca:86:59:21:39:58:00:b5:b8:bf:d0:1b:d8:1b:d1:e2:76: 39:4b:2d:32 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ2VfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQw YTg5YmM2Y2UxMDI4YjJmYjhiM2YzYzU4YjIyMDYwMzY0Njc1YzMwHhcNMjQwMzI5 MDAyMDA3WhcNMjQwNDAxMDIxNDA3WjAzMTEwLwYDVQQDEyhkM2I3NTk2MTNkMGNm MDk0ODdkYmIzZDM4MjJiYTU4OTQ0Y2RlZjljMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAu/RiVr1z3cDDc2V22adiFfg3ZaFDsXCQrotWEF49+tQcK3DP 5jWEUopH0RqCkvSqqHSAOg19vt4hx3rsEuv5aUjylPIpzY+ui6Y+ownnfwNrnAg7 r5XJ+E5wvsaQVMwWSt2xSggRKPND/nNRsnB2zp3lojuv7qE+k+xJ8oIOWYKqLQRp jsXbjenYj9Lb6wlQqdy2+zLy9wIr5XOGhsHRY4tY8ZAbSgzbvv16M9bjsx7Iq4LP VPYQPmvAiHnWQCZdRH25/UrhkVZ5YTnMSpinDi8asaiyb50+/DxLcDbl/RRDKjv6 /KV3uPd5rYowq662oBNR5OIo34iecm6lxvdr4wIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFFJl9G62pK2Wp2d2c4mgOZQ81nu6MB8GA1UdIwQYMBaAFAfk9cyYiObgfqXh 28bZHliw6mlFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDBhODli YzZjZTEwMjhiMmZiOGIzZjNjNThiMjIwNjAzNjQ2NzVjMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYzNjYjEyMWItNWM3MS00NzllLWE4Y2QtYTM0YTdk NzY5ZmRlLzQwYTg5YmM2Y2UxMDI4YjJmYjhiM2YzYzU4YjIyMDYwMzY0Njc1YzMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jM2NiMTIxYi01YzcxLTQ3OWUtYThjZC1hMzRh N2Q3NjlmZGUvNDBhODliYzZjZTEwMjhiMmZiOGIzZjNjNThiMjIwNjAzNjQ2NzVj My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAGElrMiyB6XyjLtTyL5DJsWLkVjVMcLFwIKHxuCAo4ldfe+Q QH7I5ZqvR2AZZmH2OA9ZrcZaItJCEqbcZBEFT6pzOHy+/HJbBtHqTADESG14pKGa 5cl/NixAaQu7h9sIAxzxYi61Ogpijgi0//zxY9fA6Rugmlf35f4LTn/bhun++YKu dbvMeuu0iz//eb+U4wyiBZQ58Pe/3+PtANChht8EXh+tisgxeGRZk/J6LDae2cuL ELVufhNnC/rFUfjNkjH+5OVi3ekmT5Nj9PWxUkPxJa9y3CuGW3DA6qaEewtRotPm n52IFxG9PV/KhlkhOVgAtbi/0BvYG9HidjlLLTI= -----END CERTIFICATE-----Generated at Fri Mar 29 02:14:25 2024 by rpki-client on console-ams.rpki-client.org