$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft File: 71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft (raw, json) Hash identifier: S0QGY6p9mVMICTFoNsCEWkrZA7RWrhCULAIqvUcdmt4= Subject key identifier: 6A:B5:74:FC:7C:DC:93:A1:C4:F5:B2:52:AC:A6:5F:AA:0D:52:F9:57 Authority key identifier: CE:14:46:CA:A7:8D:4D:B5:E2:1E:18:91:41:4C:A1:C6:C1:77:14:08 Certificate issuer: /CN=71e4bab784aeb677606a6aabe1d8ca53de9167ac Certificate serial: 10EF4B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71e4bab784aeb677606a6aabe1d8ca53de9167ac.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft Manifest Number: 08BA Signing time: Fri 31 Mar 2023 15:16:24 +0000 Manifest this update: Fri 31 Mar 2023 14:16:01 +0000 Manifest next update: Mon 03 Apr 2023 15:49:01 +0000 Files and hashes: 1: 085653a18713073e7ad6bfec84364c80d6b67500.roa (hash: hRu5IHqsJLp4kHzEYLAHwNuwq7lHoorh+epcqOHG15g=) 2: 71e4bab784aeb677606a6aabe1d8ca53de9167ac.crl (hash: +5d2JtYfIiCnhbgWMcEBMqvnJrGjloCKLBTFdGK8klk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.crl rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71e4bab784aeb677606a6aabe1d8ca53de9167ac.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Apr 2023 15:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109835 (0x10ef4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e4bab784aeb677606a6aabe1d8ca53de9167ac Validity Not Before: Mar 31 14:16:01 2023 GMT Not After : Apr 3 15:49:01 2023 GMT Subject: CN=b1165092b8c570eb25ddcae3a8127c45b52d1b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:96:a1:77:4a:6f:cd:d8:a2:45:2d:df:40: 5c:e1:a2:47:84:51:6b:7d:a0:32:c1:c1:e8:9d:b1: 2a:52:77:9b:c9:71:49:a6:2e:ec:96:d1:db:5f:3a: cb:00:5c:de:84:33:13:bb:a1:48:45:a6:d3:44:21: 24:bd:38:05:e8:c7:50:67:2c:b7:a1:32:da:79:4b: 31:bf:67:dd:25:c5:a7:89:da:0d:8c:f3:b2:eb:5f: cc:92:2d:57:b6:34:6a:3e:54:30:81:c5:8b:84:cd: 57:e3:68:ee:69:cb:43:ef:fb:1f:3d:66:ce:bc:0e: 5b:08:95:fa:82:32:02:6a:9f:bd:8a:9a:1e:2f:e1: ee:3b:a6:15:41:df:b9:b8:d4:dd:f6:bc:06:b4:a7: 64:0a:be:01:14:db:7c:3b:e3:53:9d:b6:8e:78:59: a9:74:6d:f7:83:04:02:64:ba:57:33:72:9f:bf:fa: e3:e6:5c:61:60:d4:dd:23:02:99:ff:05:36:6d:11: 44:5c:fc:7a:71:88:f7:2e:be:29:7a:dc:0d:6e:52: 0c:31:24:eb:de:74:b5:b0:e7:10:60:67:2e:06:13: 65:bb:97:92:ab:8b:26:81:bf:84:05:3f:e8:8f:8c: b9:0b:c5:ef:38:d9:8b:36:c6:1c:23:96:25:2a:d6: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B5:74:FC:7C:DC:93:A1:C4:F5:B2:52:AC:A6:5F:AA:0D:52:F9:57 X509v3 Authority Key Identifier: keyid:CE:14:46:CA:A7:8D:4D:B5:E2:1E:18:91:41:4C:A1:C6:C1:77:14:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71e4bab784aeb677606a6aabe1d8ca53de9167ac.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c2:d5:b6:5d:0c:d6:4a:52:17:b9:ef:9a:d1:8a:a4:2a:62: d4:8f:d1:ea:8a:82:a3:2a:1d:e1:d6:1d:12:75:ae:aa:19:15: 29:de:10:90:43:c7:5a:05:ec:bd:f4:5b:ff:68:11:cd:37:e2: 07:6c:25:93:46:63:dd:64:47:7b:13:29:ab:cd:09:f5:eb:fd: ab:45:77:61:61:db:8d:bb:de:90:27:7e:84:d3:58:ce:26:56: 46:6a:cb:3b:26:6d:b5:02:ce:c7:7a:da:13:11:1c:58:a4:f2: ff:27:a6:b1:d1:4c:68:9e:8f:66:be:56:98:b6:2e:85:ad:2a: ac:61:cc:ec:bd:66:8a:e7:8a:34:87:2c:03:d7:f6:b2:2f:69: 4a:a6:a3:b7:8a:60:5d:df:63:7a:d5:8c:c9:f7:34:2e:bf:71: e5:e4:dc:9f:5f:66:ec:4e:5f:4f:dc:a7:19:82:64:80:3d:69: df:5c:e2:ff:bc:54:fe:d9:6e:6a:6c:a3:16:76:f4:c2:a1:dd: 37:86:bd:20:fe:5f:0c:3b:1d:19:d6:00:ed:96:06:fb:ac:0a: 83:b7:f7:99:b6:b7:47:96:90:d6:c9:aa:82:4f:f6:bb:c1:68: 83:1d:ae:a1:9e:f2:b8:79:58:af:fc:f4:4f:60:f3:42:46:8f: 73:ec:ad:5d -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDEO9LMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx ZTRiYWI3ODRhZWI2Nzc2MDZhNmFhYmUxZDhjYTUzZGU5MTY3YWMwHhcNMjMwMzMx MTQxNjAxWhcNMjMwNDAzMTU0OTAxWjAzMTEwLwYDVQQDEyhiMTE2NTA5MmI4YzU3 MGViMjVkZGNhZTNhODEyN2M0NWI1MmQxYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAopuWoXdKb83YokUt30Bc4aJHhFFrfaAywcHonbEqUnebyXFJ pi7sltHbXzrLAFzehDMTu6FIRabTRCEkvTgF6MdQZyy3oTLaeUsxv2fdJcWnidoN jPOy61/Mki1XtjRqPlQwgcWLhM1X42juactD7/sfPWbOvA5bCJX6gjICap+9ipoe L+HuO6YVQd+5uNTd9rwGtKdkCr4BFNt8O+NTnbaOeFmpdG33gwQCZLpXM3Kfv/rj 5lxhYNTdIwKZ/wU2bRFEXPx6cYj3Lr4petwNblIMMSTr3nS1sOcQYGcuBhNlu5eS q4smgb+EBT/oj4y5C8XvONmLNsYcI5YlKtblywIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFGq1dPx83JOhxPWyUqymX6oNUvlXMB8GA1UdIwQYMBaAFM4URsqnjU214h4Y kUFMocbBdxQIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFlNGJh Yjc4NGFlYjY3NzYwNmE2YWFiZTFkOGNhNTNkZTkxNjdhYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZGMxYTE5ZmUtODkxNS00ZmMzLWI2NTEtMjYxOTMw MzYzMDM1LzcxZTRiYWI3ODRhZWI2Nzc2MDZhNmFhYmUxZDhjYTUzZGU5MTY3YWMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kYzFhMTlmZS04OTE1LTRmYzMtYjY1MS0yNjE5 MzAzNjMwMzUvNzFlNGJhYjc4NGFlYjY3NzYwNmE2YWFiZTFkOGNhNTNkZTkxNjdh Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEzC1bZdDNZKUhe575rRiqQqYtSP0eqKgqMqHeHWHRJ1rqoZ FSneEJBDx1oF7L30W/9oEc034gdsJZNGY91kR3sTKavNCfXr/atFd2Fh24273pAn foTTWM4mVkZqyzsmbbUCzsd62hMRHFik8v8nprHRTGiej2a+Vpi2LoWtKqxhzOy9 ZornijSHLAPX9rIvaUqmo7eKYF3fY3rVjMn3NC6/ceXk3J9fZuxOX0/cpxmCZIA9 ad9c4v+8VP7ZbmpsoxZ29MKh3TeGvSD+Xww7HRnWAO2WBvusCoO395m2t0eWkNbJ qoJP9rvBaIMdrqGe8rh5WK/89E9g80JGj3PsrV0= -----END CERTIFICATE-----Generated at Fri Mar 31 15:58:30 2023 by rpki-client on console-fra.rpki-client.org