$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft File: a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft (raw, json) Hash identifier: d4x4haSrORIRSjmL1mTFXA50YJZOrysnE8PfsTBAF3c= Subject key identifier: AC:E7:D1:0F:12:BF:8B:8D:D2:1C:6C:BE:AF:B1:55:91:5B:B5:36:F3 Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7 Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7 Certificate serial: 1DD208 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft Manifest Number: 0944 Signing time: Thu 30 Mar 2023 22:16:44 +0000 Manifest this update: Thu 30 Mar 2023 21:15:51 +0000 Manifest next update: Sun 02 Apr 2023 23:30:51 +0000 Files and hashes: 1: a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl (hash: nYdotTSrGI9HJ19TH/d1EulkGq/b9rwR9wfZaTYwtWw=) 2: da12f04d4dc254243b374556c7efd3afa54982c0.roa (hash: dawca/TAqxDo2BTrcU9LIX7NNREMqFxZEYF9brUmRSQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Apr 2023 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954312 (0x1dd208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7 Validity Not Before: Mar 30 21:15:51 2023 GMT Not After : Apr 2 23:30:51 2023 GMT Subject: CN=618cee7fc30790fc178ea8858b615c9e5ca28b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:f6:be:2f:d4:63:23:f5:6c:71:74:79:d0: ca:85:76:85:1b:03:aa:df:0e:32:8b:f4:3e:c1:6c: 15:85:2d:db:45:23:cc:bf:cb:d5:af:eb:12:17:42: 64:5c:61:f4:19:18:0f:56:c6:e4:69:37:69:83:93: cf:00:23:6a:75:c7:50:cd:93:8e:9f:d8:39:03:48: 75:5e:44:91:33:d6:55:72:c4:00:f7:71:b2:09:d5: 4f:06:63:b8:95:7d:bb:e1:e9:d2:49:3c:d4:18:57: c8:ee:28:97:30:4d:42:a2:ad:11:23:c3:41:89:39: a1:6e:2c:e5:b4:25:4f:06:9c:3d:2b:2b:b0:52:c6: 16:53:c6:ac:42:34:61:a9:79:42:15:37:37:ef:2f: 32:90:cd:df:aa:ce:0d:2f:bc:00:e9:96:f1:87:21: eb:9c:ce:14:81:06:3c:de:5c:b2:31:e1:3b:87:24: ea:41:c0:5a:33:10:79:c5:e6:f1:67:6b:6f:d3:3b: 30:aa:d1:2d:be:f6:fe:31:e2:80:68:fd:2f:55:1f: 6d:c0:93:e1:28:b0:b3:6f:99:cc:b9:77:dd:cf:c6: ea:8e:84:da:75:97:18:46:77:f4:33:25:52:99:97: d8:18:1e:88:09:c4:4a:09:7f:ef:98:81:cc:e4:36: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:D1:0F:12:BF:8B:8D:D2:1C:6C:BE:AF:B1:55:91:5B:B5:36:F3 X509v3 Authority Key Identifier: keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a5:c1:b5:e3:15:91:01:2f:ba:cd:c2:aa:11:70:b5:1a:80: c1:b3:6d:22:59:09:03:1d:24:cd:b3:90:97:eb:15:6f:4f:45: ff:02:c4:68:eb:01:a7:d7:b6:63:5d:91:f2:c0:6c:4c:24:dd: 4f:e6:44:03:10:a9:70:14:99:93:a0:0c:24:05:0d:9c:54:78: 6c:24:c1:5f:92:84:a0:e3:b8:3a:6f:c6:7c:0b:ca:95:7c:40: b3:b4:b2:1f:d7:75:c3:b7:25:e1:25:ae:6c:22:70:ae:8e:97: 74:09:9e:f8:b6:b3:52:97:fb:65:57:06:76:f9:59:60:23:17: cc:8a:1f:d5:0f:c3:73:d0:b6:51:6e:70:f9:1f:4f:ac:cb:53: 19:7d:e9:68:a9:59:6f:7b:39:23:d2:f1:42:4e:55:f3:fb:c7: 3b:ff:2f:7f:65:78:c0:85:c4:83:d5:aa:b4:d9:99:2e:11:bc: b4:46:f5:df:89:57:97:46:8b:c7:6d:11:e2:7e:21:0c:e9:28: fb:dd:37:91:08:32:9e:62:29:5d:86:8a:a3:cf:91:de:b0:b0: d6:4e:74:6d:a9:2b:b1:d5:f2:ec:95:64:43:b9:5c:f5:b6:9d: 55:b3:74:ec:53:41:ac:c0:b2:f1:d4:96:2f:29:d9:61:75:b4: aa:3a:ee:36 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHdIIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5 YTZjZmU4MmEyYzM4OWI1ZTNmY2U4MTUxM2QzYmEwZGRmM2E4ZTcwHhcNMjMwMzMw MjExNTUxWhcNMjMwNDAyMjMzMDUxWjAzMTEwLwYDVQQDEyg2MThjZWU3ZmMzMDc5 MGZjMTc4ZWE4ODU4YjYxNWM5ZTVjYTI4YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqlT2vi/UYyP1bHF0edDKhXaFGwOq3w4yi/Q+wWwVhS3bRSPM v8vVr+sSF0JkXGH0GRgPVsbkaTdpg5PPACNqdcdQzZOOn9g5A0h1XkSRM9ZVcsQA 93GyCdVPBmO4lX274enSSTzUGFfI7iiXME1Coq0RI8NBiTmhbizltCVPBpw9Kyuw UsYWU8asQjRhqXlCFTc37y8ykM3fqs4NL7wA6ZbxhyHrnM4UgQY83lyyMeE7hyTq QcBaMxB5xebxZ2tv0zswqtEtvvb+MeKAaP0vVR9twJPhKLCzb5nMuXfdz8bqjoTa dZcYRnf0MyVSmZfYGB6ICcRKCX/vmIHM5DY6EQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFKzn0Q8Sv4uN0hxsvq+xVZFbtTbzMB8GA1UdIwQYMBaAFFqUMHnHoXRoE1gO GANZ3oDZpsO3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlhNmNm ZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThlNy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTQ0ZWYzNTktZDM3Ny00YjViLWI2OGMtMjZlZmJi ZDdlYmZjL2E5YTZjZmU4MmEyYzM4OWI1ZTNmY2U4MTUxM2QzYmEwZGRmM2E4ZTcu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNDRlZjM1OS1kMzc3LTRiNWItYjY4Yy0yNmVm YmJkN2ViZmMvYTlhNmNmZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThl Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAJelwbXjFZEBL7rNwqoRcLUagMGzbSJZCQMdJM2zkJfrFW9P Rf8CxGjrAafXtmNdkfLAbEwk3U/mRAMQqXAUmZOgDCQFDZxUeGwkwV+ShKDjuDpv xnwLypV8QLO0sh/XdcO3JeElrmwicK6Ol3QJnvi2s1KX+2VXBnb5WWAjF8yKH9UP w3PQtlFucPkfT6zLUxl96WipWW97OSPS8UJOVfP7xzv/L39leMCFxIPVqrTZmS4R vLRG9d+JV5dGi8dtEeJ+IQzpKPvdN5EIMp5iKV2GiqPPkd6wsNZOdG2pK7HV8uyV ZEO5XPW2nVWzdOxTQazAsvHUli8p2WF1tKo67jY= -----END CERTIFICATE-----Generated at Thu Mar 30 22:43:18 2023 by rpki-client on console-fra.rpki-client.org