$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.mft File: f90d909fa68d1db2acc878e7da541eae84a44c95.mft (raw, json) Hash identifier: 738yqA/xO48+l8dot1t2IR7rgWFmwUiibBBEdJW+iss= Subject key identifier: 01:4C:2B:B1:C5:30:92:0C:36:1F:5A:6E:39:2B:E1:E5:46:F4:06:BC Authority key identifier: 38:B0:83:1A:A3:BC:E6:95:1E:96:81:62:2F:FA:63:79:F0:97:F8:B7 Certificate issuer: /CN=f90d909fa68d1db2acc878e7da541eae84a44c95 Certificate serial: 1D320A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f90d909fa68d1db2acc878e7da541eae84a44c95.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.mft Manifest number: 0DBE Signing time: Thu 28 Mar 2024 10:21:11 +0000 Manifest this update: Thu 28 Mar 2024 09:20:07 +0000 Manifest next update: Sun 31 Mar 2024 12:51:07 +0000 Files and hashes: 1: 10d1ad08a73e7c2b57805d80735a7c23a03a78f3.roa (hash: XCMoX/ikgrXebuHN7wLmosys3iwLY6Bb9rmtvf7nLGA=) 2: f90d909fa68d1db2acc878e7da541eae84a44c95.crl (hash: UWMtMQP1v/0a7D+K3Z/KPEXJkCsAvmU3EmVZv5U9WTw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.crl rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f90d909fa68d1db2acc878e7da541eae84a44c95.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913354 (0x1d320a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90d909fa68d1db2acc878e7da541eae84a44c95 Validity Not Before: Mar 28 09:20:07 2024 GMT Not After : Mar 31 12:51:07 2024 GMT Subject: CN=21d5bd02a9c352ce1b0fb06b4fb01373025a8d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:18:10:77:c8:19:03:aa:59:b4:5c:96:a8: d0:8b:2e:74:31:3d:ae:e8:e1:33:42:5c:fa:1a:82: dc:9a:a4:d2:b3:e0:c8:e6:db:a9:cc:73:96:a8:62: 3a:35:47:94:15:48:77:63:3c:9b:3f:ee:94:a2:35: ab:d4:5e:ac:4e:92:21:b7:97:f4:8f:da:6f:64:be: 11:8b:a0:c4:65:a1:9e:a6:75:15:1e:ca:12:4b:0f: 39:f5:b9:26:2e:f1:c4:11:2c:34:31:51:9c:21:38: 6a:b9:86:1f:0f:d4:a7:81:a5:f7:95:e9:d6:3a:74: 4b:e3:c2:8c:7b:2d:b9:07:5f:23:72:ea:76:a7:c8: 26:d8:5b:a5:58:cc:b2:f7:14:33:53:48:66:95:e7: 2c:02:fb:a2:23:af:c7:a2:a8:47:d1:cb:d7:a2:aa: ab:a9:2d:1a:dd:63:1c:a0:2a:4c:ce:c4:5a:78:95: 29:72:f1:ef:23:96:27:ad:24:a8:69:0a:a0:6e:b3: 60:39:30:95:71:9e:ff:e9:45:16:25:e0:33:d8:88: 8c:af:56:91:74:a4:49:70:0b:e5:5a:98:75:b4:15: 56:59:3a:8f:dd:b7:45:b9:e7:af:fa:f1:68:2d:ad: 30:4f:bf:66:75:43:6d:2c:65:1e:98:35:7f:c2:cf: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4C:2B:B1:C5:30:92:0C:36:1F:5A:6E:39:2B:E1:E5:46:F4:06:BC X509v3 Authority Key Identifier: keyid:38:B0:83:1A:A3:BC:E6:95:1E:96:81:62:2F:FA:63:79:F0:97:F8:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f90d909fa68d1db2acc878e7da541eae84a44c95.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6a:7b:4a:d3:3d:fd:b5:13:55:69:60:96:5c:20:f7:0e:e4: 3f:1b:99:dc:53:33:f7:dc:0d:ee:94:b2:09:13:c1:38:ce:51: 09:c6:9a:18:e9:a8:5a:d6:35:ed:15:c9:17:11:fa:b1:55:2d: db:d5:db:13:7c:0c:13:93:c2:b0:41:44:94:17:df:5d:61:f4: 84:12:bb:9e:71:f7:5e:69:e4:f3:41:83:23:f2:9b:3f:ed:7b: 2b:bb:c2:2b:73:f5:a1:ad:73:2d:d8:b2:50:8e:ce:97:a7:d0: 6f:f7:9c:3d:e8:9a:56:a0:92:3b:af:93:13:c6:6a:63:b2:b3: 15:9d:f0:b3:06:61:90:e5:89:47:f0:2b:43:a5:bc:51:f4:bb: 37:24:84:31:c6:4e:f9:08:e3:f9:30:a6:6f:07:be:3f:43:f3: 35:8f:1a:be:51:e5:a0:9c:07:ae:ea:71:f1:28:b7:6a:80:24: 1a:cd:49:e5:61:cb:e3:40:f7:f3:1a:2d:f6:06:26:0c:4f:d6: 90:8b:aa:f2:1b:5f:07:d3:7f:64:99:77:e5:3f:8b:7c:46:18: 5c:3c:cb:6a:2a:14:fb:fc:40:05:11:2f:57:3d:56:3f:c6:7d: f5:2c:18:fb:f3:53:b6:99:c2:9e:ca:6e:90:f9:70:6c:4e:47: c9:8e:b6:b2 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHTIKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5 MGQ5MDlmYTY4ZDFkYjJhY2M4NzhlN2RhNTQxZWFlODRhNDRjOTUwHhcNMjQwMzI4 MDkyMDA3WhcNMjQwMzMxMTI1MTA3WjAzMTEwLwYDVQQDEygyMWQ1YmQwMmE5YzM1 MmNlMWIwZmIwNmI0ZmIwMTM3MzAyNWE4ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgD4YEHfIGQOqWbRclqjQiy50MT2u6OEzQlz6GoLcmqTSs+DI 5tupzHOWqGI6NUeUFUh3YzybP+6UojWr1F6sTpIht5f0j9pvZL4Ri6DEZaGepnUV HsoSSw859bkmLvHEESw0MVGcIThquYYfD9SngaX3lenWOnRL48KMey25B18jcup2 p8gm2FulWMyy9xQzU0hmlecsAvuiI6/HoqhH0cvXoqqrqS0a3WMcoCpMzsRaeJUp cvHvI5YnrSSoaQqgbrNgOTCVcZ7/6UUWJeAz2IiMr1aRdKRJcAvlWph1tBVWWTqP 3bdFueev+vFoLa0wT79mdUNtLGUemDV/ws9zvwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFAFMK7HFMJIMNh9abjkr4eVG9Aa8MB8GA1UdIwQYMBaAFDiwgxqjvOaVHpaB Yi/6Y3nwl/i3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjkwZDkw OWZhNjhkMWRiMmFjYzg3OGU3ZGE1NDFlYWU4NGE0NGM5NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZGVhNGNlMDctMWExYi00YjkzLTg3YzItNDIzYWZj MmQ5Yzk0L2Y5MGQ5MDlmYTY4ZDFkYjJhY2M4NzhlN2RhNTQxZWFlODRhNDRjOTUu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kZWE0Y2UwNy0xYTFiLTRiOTMtODdjMi00MjNh ZmMyZDljOTQvZjkwZDkwOWZhNjhkMWRiMmFjYzg3OGU3ZGE1NDFlYWU4NGE0NGM5 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBABtqe0rTPf21E1VpYJZcIPcO5D8bmdxTM/fcDe6UsgkTwTjO UQnGmhjpqFrWNe0VyRcR+rFVLdvV2xN8DBOTwrBBRJQX311h9IQSu55x915p5PNB gyPymz/teyu7witz9aGtcy3YslCOzpen0G/3nD3omlagkjuvkxPGamOysxWd8LMG YZDliUfwK0OlvFH0uzckhDHGTvkI4/kwpm8Hvj9D8zWPGr5R5aCcB67qcfEot2qA JBrNSeVhy+NA9/MaLfYGJgxP1pCLqvIbXwfTf2SZd+U/i3xGGFw8y2oqFPv8QAUR L1c9Vj/GffUsGPvzU7aZwp7KbpD5cGxOR8mOtrI= -----END CERTIFICATE-----Generated at Thu Mar 28 11:18:03 2024 by rpki-client on console-fra.rpki-client.org