$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.mft File: fd27aaa53c78abaf8042781fb063418e78442bcb.mft (raw, json) Hash identifier: kS96xfcF4+Oc1ccNZeT0X9wGIpO1fHW/U9GmKChpRZE= Subject key identifier: 21:BE:9D:B1:A4:1C:09:6A:5E:F7:47:60:9A:2C:58:8A:4C:21:D4:54 Authority key identifier: 1D:56:B7:C7:F8:CD:1C:28:8D:85:4E:C1:89:2B:4A:9E:AF:B9:4F:69 Certificate issuer: /CN=fd27aaa53c78abaf8042781fb063418e78442bcb Certificate serial: 1EDAC8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd27aaa53c78abaf8042781fb063418e78442bcb.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.mft Manifest Number: 093C Signing time: Tue 28 Mar 2023 05:16:06 +0000 Manifest this update: Tue 28 Mar 2023 04:15:42 +0000 Manifest next update: Fri 31 Mar 2023 07:12:42 +0000 Files and hashes: 1: c6085d3410319662515183d34c500a206a4aa300.roa (hash: KRAhE8BmGr5W9kXn7ZvRuk2zqz4obbRmzBfcA/JURdI=) 2: fd27aaa53c78abaf8042781fb063418e78442bcb.crl (hash: PiPK5nMlY9uyHqh/OoL5r1+UDf5cYZaAme0+Gg2+K4Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.crl rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd27aaa53c78abaf8042781fb063418e78442bcb.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 31 Mar 2023 00:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022088 (0x1edac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd27aaa53c78abaf8042781fb063418e78442bcb Validity Not Before: Mar 28 04:15:42 2023 GMT Not After : Mar 31 07:12:42 2023 GMT Subject: CN=a7cf6ec9cb2481dc22853650a6c5261a4a94e2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:46:5e:48:8f:64:ae:0c:f1:9d:55:1e:d9: f9:7a:48:a4:7f:fd:59:79:17:e8:ee:c6:3a:8e:5e: aa:47:e7:3d:3a:b9:ff:74:9f:db:31:15:0a:23:77: 5c:06:87:1a:6d:15:26:73:04:79:67:bf:e3:b4:0a: 5a:66:0a:56:a2:51:f9:d7:cc:05:c7:f4:b9:cb:e0: 7f:28:aa:66:95:0f:3c:1e:be:03:f0:44:83:e1:64: 73:84:7a:96:45:ac:5f:bb:44:66:f2:cc:c4:73:f5: 4d:c7:3e:49:65:0e:7f:61:80:36:3a:3a:d0:57:1c: d8:2f:cd:70:98:cb:94:e8:89:34:c6:84:08:f9:9a: fa:1a:59:82:81:09:f9:5d:da:94:57:34:52:c9:99: 1e:47:a4:6b:5c:4d:c6:b9:bc:e5:8b:e2:0d:9f:1c: 21:41:cb:0b:7f:a1:29:d3:b2:bd:cf:78:7f:60:b1: a8:83:e9:4d:00:c6:4c:1b:88:7c:f3:96:0f:89:c4: 5b:f3:6e:44:4e:3f:ae:62:93:2c:b3:fb:e1:7c:e2: bf:74:2f:9f:d6:79:09:ac:50:c2:8d:95:f9:04:8f: dd:68:f2:a4:7e:ed:92:a7:a6:82:10:8a:9a:47:84: c2:3d:cf:da:f2:c2:86:08:d3:fe:80:0c:c0:3f:8c: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:9D:B1:A4:1C:09:6A:5E:F7:47:60:9A:2C:58:8A:4C:21:D4:54 X509v3 Authority Key Identifier: keyid:1D:56:B7:C7:F8:CD:1C:28:8D:85:4E:C1:89:2B:4A:9E:AF:B9:4F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd27aaa53c78abaf8042781fb063418e78442bcb.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d5:9c:da:ac:bc:e3:20:fa:f2:0c:22:ac:5a:78:88:17:e6: 2d:36:e3:95:5f:2a:73:b5:30:04:42:8a:85:c8:95:d4:62:67: ea:52:9f:c4:a6:c5:ac:ad:a1:9e:8d:d9:91:79:bb:81:56:bf: 0d:09:35:df:2d:ed:d4:b9:2d:c7:8a:e7:38:30:0b:cc:ea:42: 9b:00:0a:64:a6:d4:ac:c3:62:2a:40:98:66:f4:72:cb:6a:29: 76:c2:96:88:49:7e:65:d1:42:e7:ef:c8:c6:a2:a2:48:7c:5c: 20:17:fc:15:e3:5a:68:b8:c9:b2:0d:7f:65:20:cf:38:26:a4: d2:a3:02:a9:b0:dc:f2:50:96:14:32:fb:d9:1a:c0:11:40:9a: 8d:7c:33:ef:06:80:08:74:45:4b:45:5f:03:21:ca:9d:aa:47: c8:83:0c:df:85:31:2c:b8:47:e7:a3:b8:f0:13:ab:10:1e:1a: 55:b0:a3:38:47:32:e2:7d:f0:65:53:d3:99:7f:0f:96:21:a1: 46:13:2a:4a:3c:fd:36:e4:67:3d:be:d7:72:45:67:39:48:2f: 1b:cd:b3:0f:24:33:e7:66:22:5d:2d:5a:cc:4c:5d:6c:b3:e8: 36:0c:63:b8:a3:c6:16:4b:a5:70:aa:fa:44:d2:32:f7:a8:9b: be:4b:cf:0c -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHtrIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk MjdhYWE1M2M3OGFiYWY4MDQyNzgxZmIwNjM0MThlNzg0NDJiY2IwHhcNMjMwMzI4 MDQxNTQyWhcNMjMwMzMxMDcxMjQyWjAzMTEwLwYDVQQDEyhhN2NmNmVjOWNiMjQ4 MWRjMjI4NTM2NTBhNmM1MjYxYTRhOTRlMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA3F9GXkiPZK4M8Z1VHtn5ekikf/1ZeRfo7sY6jl6qR+c9Orn/ dJ/bMRUKI3dcBocabRUmcwR5Z7/jtApaZgpWolH518wFx/S5y+B/KKpmlQ88Hr4D 8ESD4WRzhHqWRaxfu0Rm8szEc/VNxz5JZQ5/YYA2OjrQVxzYL81wmMuU6Ik0xoQI +Zr6GlmCgQn5XdqUVzRSyZkeR6RrXE3Gubzli+INnxwhQcsLf6Ep07K9z3h/YLGo g+lNAMZMG4h885YPicRb825ETj+uYpMss/vhfOK/dC+f1nkJrFDCjZX5BI/daPKk fu2Sp6aCEIqaR4TCPc/a8sKGCNP+gAzAP4yTvwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFCG+nbGkHAlqXvdHYJosWIpMIdRUMB8GA1UdIwQYMBaAFB1Wt8f4zRwojYVO wYkrSp6vuU9pMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyN2Fh YTUzYzc4YWJhZjgwNDI3ODFmYjA2MzQxOGU3ODQ0MmJjYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZGM1OGJkNWMtZDI1NS00MDA3LTgwY2UtZjcwZDUy YzRjN2Q0L2ZkMjdhYWE1M2M3OGFiYWY4MDQyNzgxZmIwNjM0MThlNzg0NDJiY2Iu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kYzU4YmQ1Yy1kMjU1LTQwMDctODBjZS1mNzBk NTJjNGM3ZDQvZmQyN2FhYTUzYzc4YWJhZjgwNDI3ODFmYjA2MzQxOGU3ODQ0MmJj Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAB/VnNqsvOMg+vIMIqxaeIgX5i0245VfKnO1MARCioXIldRi Z+pSn8SmxaytoZ6N2ZF5u4FWvw0JNd8t7dS5LceK5zgwC8zqQpsACmSm1KzDYipA mGb0cstqKXbClohJfmXRQufvyMaiokh8XCAX/BXjWmi4ybINf2UgzzgmpNKjAqmw 3PJQlhQy+9kawBFAmo18M+8GgAh0RUtFXwMhyp2qR8iDDN+FMSy4R+ejuPATqxAe GlWwozhHMuJ98GVT05l/D5YhoUYTKko8/TbkZz2+13JFZzlILxvNsw8kM+dmIl0t WsxMXWyz6DYMY7ijxhZLpXCq+kTSMveom75Lzww= -----END CERTIFICATE-----Generated at Tue Mar 28 05:57:00 2023 by rpki-client on console-fra.rpki-client.org