$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3969047-a581-4c98-971e-2058e9b4796d/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.mft File: a30257a1a84a96ea9a2b812aec060f96dcf79ef4.mft (raw, json) Hash identifier: QWPElz1YTQsueRoYlugcVTpOZAtajAOoi0raNcw0zeA= Subject key identifier: C8:CB:CF:90:45:C1:76:3F:C6:1F:B0:80:B7:A0:71:FD:62:DF:9C:C2 Authority key identifier: B5:85:1E:3A:0D:24:3A:28:81:50:9F:20:E8:57:26:97:B4:88:49:4A Certificate issuer: /CN=a30257a1a84a96ea9a2b812aec060f96dcf79ef4 Certificate serial: 27FB19 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e3969047-a581-4c98-971e-2058e9b4796d/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.mft Manifest number: 0DB1 Signing time: Fri 29 Mar 2024 10:21:17 +0000 Manifest this update: Fri 29 Mar 2024 09:20:08 +0000 Manifest next update: Mon 01 Apr 2024 12:03:08 +0000 Files and hashes: 1: a30257a1a84a96ea9a2b812aec060f96dcf79ef4.crl (hash: Vwq8PBU5MogN3pmeZAYhWEijxpd4rQvAStMosixc6tQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e3969047-a581-4c98-971e-2058e9b4796d/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.crl rsync://repository.lacnic.net/rpki/lacnic/e3969047-a581-4c98-971e-2058e9b4796d/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620185 (0x27fb19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30257a1a84a96ea9a2b812aec060f96dcf79ef4 Validity Not Before: Mar 29 09:20:08 2024 GMT Not After : Apr 1 12:03:08 2024 GMT Subject: CN=28d2b3d5145f4d70991be098971e58098f791740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:34:db:ef:48:58:51:76:a0:37:ec:6a:20: 2a:59:a9:41:a2:de:b3:2e:9a:ff:64:77:eb:57:25: 3e:6f:10:6d:7a:94:9c:8a:82:96:b8:45:38:e5:3e: 9e:86:c1:a1:df:bb:ea:4c:62:88:ab:a2:57:f6:dd: e0:bc:11:c6:af:57:36:42:49:1b:70:fc:de:79:f3: 2b:aa:90:a6:f0:bc:ce:61:ba:40:cc:72:b1:83:7c: 2d:1f:b3:94:b6:81:12:3d:42:07:eb:4b:05:f0:d3: 7b:cd:68:ae:1a:5b:94:79:87:3c:b4:10:05:15:6c: a8:d4:97:22:54:b7:d7:4c:64:82:71:bb:c5:a1:4e: 60:2c:e8:49:7e:3f:4d:5e:99:7e:b0:d8:d9:da:a4: 1e:be:25:f9:de:ed:89:d8:ef:fa:da:1e:05:bd:fb: c7:0c:f1:16:7f:a9:23:52:52:fb:59:40:57:e4:6a: 7b:df:f3:e3:31:7f:c1:7d:f7:7e:58:f1:48:a8:56: 71:39:74:cf:48:9f:ec:d7:14:54:61:85:fb:96:78: 9d:fa:ee:b1:22:ce:15:d3:a4:22:a6:1c:f0:8a:a2: 9f:25:06:1c:cf:69:4a:3b:e4:83:c7:e1:f4:6b:3e: 15:08:0c:07:77:06:5c:2f:fc:c6:42:9d:27:55:7f: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CB:CF:90:45:C1:76:3F:C6:1F:B0:80:B7:A0:71:FD:62:DF:9C:C2 X509v3 Authority Key Identifier: keyid:B5:85:1E:3A:0D:24:3A:28:81:50:9F:20:E8:57:26:97:B4:88:49:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3969047-a581-4c98-971e-2058e9b4796d/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e3969047-a581-4c98-971e-2058e9b4796d/a30257a1a84a96ea9a2b812aec060f96dcf79ef4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b3:34:9d:7a:94:f1:4b:f8:79:cb:dc:9f:92:0e:52:d7:ff: a1:e8:b7:48:a4:9d:d0:bd:77:d8:6b:9c:1c:e4:6b:79:5c:8f: fe:e0:13:6f:5a:91:11:7b:f0:77:c3:f2:79:b8:08:ce:07:c9: 72:8c:47:ff:ff:59:58:9e:df:ac:ed:cc:e6:85:a0:ae:f9:c5: e8:b8:9c:81:8b:47:e5:d8:e8:d2:ba:91:5d:f2:a5:d7:c0:0f: fe:1e:ff:59:c4:e1:a6:e4:4f:45:69:c7:66:d3:93:a9:7a:bc: 8c:e9:91:0e:db:16:92:3f:09:d9:5c:06:7d:a8:0a:24:5f:10: 48:77:fc:39:e4:7a:b2:8f:12:75:16:d5:f4:da:d0:c8:f3:e6: 96:83:78:57:bf:f8:23:48:e1:85:da:a1:bc:04:8d:b3:03:6b: f9:c7:14:49:a8:cc:7c:ae:5e:16:a5:d1:bf:a3:5b:43:47:92: 8c:b5:2c:ed:9e:b1:b0:42:54:05:0f:00:e6:a3:f1:8d:bd:35: 53:61:75:60:ad:32:9d:a8:87:ba:af:8d:37:c0:7a:b2:1b:38: 13:b1:38:94:d0:9f:4d:8b:d6:b5:da:81:78:03:f0:76:5e:b9: a4:4a:ad:26:eb:c2:a7:2e:2f:c6:9e:1c:38:b7:64:a9:02:07: 4c:25:99:f0 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ/sZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEz MDI1N2ExYTg0YTk2ZWE5YTJiODEyYWVjMDYwZjk2ZGNmNzllZjQwHhcNMjQwMzI5 MDkyMDA4WhcNMjQwNDAxMTIwMzA4WjAzMTEwLwYDVQQDEygyOGQyYjNkNTE0NWY0 ZDcwOTkxYmUwOTg5NzFlNTgwOThmNzkxNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgyA02+9IWFF2oDfsaiAqWalBot6zLpr/ZHfrVyU+bxBtepSc ioKWuEU45T6ehsGh37vqTGKIq6JX9t3gvBHGr1c2QkkbcPzeefMrqpCm8LzOYbpA zHKxg3wtH7OUtoESPUIH60sF8NN7zWiuGluUeYc8tBAFFWyo1JciVLfXTGSCcbvF oU5gLOhJfj9NXpl+sNjZ2qQeviX53u2J2O/62h4FvfvHDPEWf6kjUlL7WUBX5Gp7 3/PjMX/Bffd+WPFIqFZxOXTPSJ/s1xRUYYX7lnid+u6xIs4V06QiphzwiqKfJQYc z2lKO+SDx+H0az4VCAwHdwZcL/zGQp0nVX9aHQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFMjLz5BFwXY/xh+wgLegcf1i35zCMB8GA1UdIwQYMBaAFLWFHjoNJDoogVCf IOhXJpe0iElKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTMwMjU3 YTFhODRhOTZlYTlhMmI4MTJhZWMwNjBmOTZkY2Y3OWVmNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTM5NjkwNDctYTU4MS00Yzk4LTk3MWUtMjA1OGU5 YjQ3OTZkL2EzMDI1N2ExYTg0YTk2ZWE5YTJiODEyYWVjMDYwZjk2ZGNmNzllZjQu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lMzk2OTA0Ny1hNTgxLTRjOTgtOTcxZS0yMDU4 ZTliNDc5NmQvYTMwMjU3YTFhODRhOTZlYTlhMmI4MTJhZWMwNjBmOTZkY2Y3OWVm NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAH2zNJ16lPFL+HnL3J+SDlLX/6Hot0ikndC9d9hrnBzka3lc j/7gE29akRF78HfD8nm4CM4HyXKMR///WVie36ztzOaFoK75xei4nIGLR+XY6NK6 kV3ypdfAD/4e/1nE4abkT0Vpx2bTk6l6vIzpkQ7bFpI/CdlcBn2oCiRfEEh3/Dnk erKPEnUW1fTa0Mjz5paDeFe/+CNI4YXaobwEjbMDa/nHFEmozHyuXhal0b+jW0NH koy1LO2esbBCVAUPAOaj8Y29NVNhdWCtMp2oh7qvjTfAerIbOBOxOJTQn02L1rXa gXgD8HZeuaRKrSbrwqcuL8aeHDi3ZKkCB0wlmfA= -----END CERTIFICATE-----Generated at Fri Mar 29 11:05:22 2024 by rpki-client on console-ams.rpki-client.org