$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.mft File: 6c68514e340a0b39197cbb6d38d1378f39565c69.mft (raw, json) Hash identifier: r53n6PKLtxfe7BpDpSei08mS+WSEcNoSt24hc4FFVe4= Subject key identifier: A8:FE:24:6D:8E:66:A8:C9:4E:7E:74:96:3A:60:D2:CA:BC:DC:39:1F Authority key identifier: 84:E6:07:3F:42:95:21:DF:B2:35:D7:50:57:0F:EB:7F:22:50:04:98 Certificate issuer: /CN=6c68514e340a0b39197cbb6d38d1378f39565c69 Certificate serial: 285368 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c68514e340a0b39197cbb6d38d1378f39565c69.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.mft Manifest number: 0DB9 Signing time: Thu 28 Mar 2024 12:20:42 +0000 Manifest this update: Thu 28 Mar 2024 11:20:06 +0000 Manifest next update: Sun 31 Mar 2024 13:31:06 +0000 Files and hashes: 1: 6c68514e340a0b39197cbb6d38d1378f39565c69.crl (hash: V6+Nna3Zk0lkiLicO10QSlAKpTTM8bEhRJfIZcJRMNI=) 2: c95d2fff749f954a8c17c264c992a9c32ee48a53.roa (hash: p2ZiwJT1Qr/WXK2we7YLA7IZNa+elFTfWD/rx61hnX8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.crl rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c68514e340a0b39197cbb6d38d1378f39565c69.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642792 (0x285368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c68514e340a0b39197cbb6d38d1378f39565c69 Validity Not Before: Mar 28 11:20:06 2024 GMT Not After : Mar 31 13:31:06 2024 GMT Subject: CN=26e67c96dc246ceefee3537d4fa33af9d5305697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:6b:be:58:df:44:d5:65:1b:8a:ed:52:1c: b6:f6:9f:f2:2b:03:cf:bb:aa:e1:b7:c4:99:34:eb: 6c:f5:db:f8:6a:55:a9:c7:e0:a1:d0:83:ac:bf:10: c3:66:c2:14:54:0c:fe:d8:ad:6d:c9:45:61:8c:16: 9b:07:96:82:2a:15:87:f2:d9:f4:ca:30:b5:d0:ac: a4:b6:e3:28:f9:92:00:5e:d5:75:aa:8b:c8:7b:ec: 13:e7:fb:b5:06:5f:c4:17:65:3d:ac:8f:a8:b2:76: 09:3e:0d:a7:4c:1d:68:6f:7f:bf:8e:98:bc:55:b8: 32:29:09:48:38:d6:a1:ae:79:e4:36:1f:1d:b1:2d: 57:46:b7:57:56:0a:bf:d4:cb:34:74:2c:7f:0c:7f: db:92:36:15:18:97:37:d0:f7:d8:c8:1e:20:af:98: ac:c7:3c:29:26:fd:61:ab:08:a7:84:2f:43:44:d1: 6c:94:21:ab:7f:5c:72:26:6d:a3:c8:fe:e1:f0:d0: 17:6a:f0:fa:40:68:78:3c:e5:bf:5c:e7:17:b6:11: b8:e8:6f:42:fb:3c:b4:8d:9f:46:75:33:68:3b:91: b2:82:6c:39:7f:63:30:64:f6:ee:f8:b2:9e:cf:89: 95:13:50:cc:6c:1d:13:56:aa:a1:07:c2:ab:8c:b9: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:24:6D:8E:66:A8:C9:4E:7E:74:96:3A:60:D2:CA:BC:DC:39:1F X509v3 Authority Key Identifier: keyid:84:E6:07:3F:42:95:21:DF:B2:35:D7:50:57:0F:EB:7F:22:50:04:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c68514e340a0b39197cbb6d38d1378f39565c69.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/d1531c72-2e64-4361-9fb9-32da72319746/6c68514e340a0b39197cbb6d38d1378f39565c69.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2e:76:1b:97:3b:f5:f2:06:49:e0:bc:ae:d3:13:6f:be:cf: 2d:dd:e9:e8:db:2a:95:bf:83:17:e2:80:3e:2a:5b:75:d3:b8: c4:80:20:bf:b7:4d:77:a1:92:88:52:d3:4a:3a:6e:ae:31:21: e0:22:46:5b:a8:be:4a:8d:3d:bd:68:54:f1:a1:6d:84:ea:6d: 05:9f:12:2e:6f:36:9c:ac:60:62:c8:fe:97:63:70:34:0d:55: a7:0c:cf:6e:97:d1:32:75:06:9b:25:d6:a4:b1:41:9b:6a:96: 77:ce:30:9d:f0:c4:52:79:10:5f:cb:1a:ca:9f:2a:8c:66:23: 41:22:ef:ca:98:39:76:f0:40:32:68:50:99:43:8d:e8:d8:97: d0:8c:e5:4b:1f:00:54:de:36:04:ee:8f:cb:23:3c:aa:c4:56: de:b3:14:85:45:c6:b0:b6:17:78:66:54:dd:f4:bc:e1:1c:b1: f7:e1:f5:e8:f5:ae:29:41:c2:0e:ec:78:60:1f:63:28:3c:b6: 33:69:b8:c4:70:fc:51:36:48:f5:7c:3e:6a:09:fb:2b:f4:24: 43:ce:df:95:5e:22:a0:5e:42:df:d4:13:bd:84:bc:a4:5e:ff: a8:2d:7e:c4:9a:5c:08:01:8a:4e:b9:e7:cc:50:72:27:b8:c7: a5:c0:1e:29 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKFNoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj Njg1MTRlMzQwYTBiMzkxOTdjYmI2ZDM4ZDEzNzhmMzk1NjVjNjkwHhcNMjQwMzI4 MTEyMDA2WhcNMjQwMzMxMTMzMTA2WjAzMTEwLwYDVQQDEygyNmU2N2M5NmRjMjQ2 Y2VlZmVlMzUzN2Q0ZmEzM2FmOWQ1MzA1Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA4W5rvljfRNVlG4rtUhy29p/yKwPPu6rht8SZNOts9dv4alWp x+Ch0IOsvxDDZsIUVAz+2K1tyUVhjBabB5aCKhWH8tn0yjC10KyktuMo+ZIAXtV1 qovIe+wT5/u1Bl/EF2U9rI+osnYJPg2nTB1ob3+/jpi8VbgyKQlIONahrnnkNh8d sS1XRrdXVgq/1Ms0dCx/DH/bkjYVGJc30PfYyB4gr5isxzwpJv1hqwinhC9DRNFs lCGrf1xyJm2jyP7h8NAXavD6QGh4POW/XOcXthG46G9C+zy0jZ9GdTNoO5Gygmw5 f2MwZPbu+LKez4mVE1DMbB0TVqqhB8KrjLmtuQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFKj+JG2OZqjJTn50ljpg0sq83DkfMB8GA1UdIwQYMBaAFITmBz9ClSHfsjXX UFcP638iUASYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmM2ODUx NGUzNDBhMGIzOTE5N2NiYjZkMzhkMTM3OGYzOTU2NWM2OS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZDE1MzFjNzItMmU2NC00MzYxLTlmYjktMzJkYTcy MzE5NzQ2LzZjNjg1MTRlMzQwYTBiMzkxOTdjYmI2ZDM4ZDEzNzhmMzk1NjVjNjku bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kMTUzMWM3Mi0yZTY0LTQzNjEtOWZiOS0zMmRh NzIzMTk3NDYvNmM2ODUxNGUzNDBhMGIzOTE5N2NiYjZkMzhkMTM3OGYzOTU2NWM2 OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAKIudhuXO/XyBkngvK7TE2++zy3d6ejbKpW/gxfigD4qW3XT uMSAIL+3TXehkohS00o6bq4xIeAiRluovkqNPb1oVPGhbYTqbQWfEi5vNpysYGLI /pdjcDQNVacMz26X0TJ1Bpsl1qSxQZtqlnfOMJ3wxFJ5EF/LGsqfKoxmI0Ei78qY OXbwQDJoUJlDjejYl9CM5UsfAFTeNgTuj8sjPKrEVt6zFIVFxrC2F3hmVN30vOEc sffh9ej1rilBwg7seGAfYyg8tjNpuMRw/FE2SPV8PmoJ+yv0JEPO35VeIqBeQt/U E72EvKRe/6gtfsSaXAgBik6558xQcie4x6XAHik= -----END CERTIFICATE-----Generated at Thu Mar 28 13:29:30 2024 by rpki-client on console-ams.rpki-client.org