$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft File: de0d914e3acec8ecbafe212675f0227f286f21e8.mft (raw, json) Hash identifier: 9wcWihQY7tCsUjAgjdGnqPO1KS+j4Y7rpbwZrEdAP2I= Subject key identifier: C9:EE:18:6E:C4:AD:57:87:A5:D5:1C:7E:7A:73:0A:EC:97:AC:C4:99 Authority key identifier: E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48 Certificate issuer: /CN=de0d914e3acec8ecbafe212675f0227f286f21e8 Certificate serial: 1E7383 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft Manifest Number: 0933 Signing time: Tue 28 Mar 2023 00:15:50 +0000 Manifest this update: Mon 27 Mar 2023 23:15:43 +0000 Manifest next update: Fri 31 Mar 2023 02:35:43 +0000 Files and hashes: 1: 9365247ec099e323ec60e076de3d49de59eb81ec.roa (hash: +7Xxnp+h+R1SHDOnvoEgBZMMHQhp5mY+71fBPadOEJQ=) 2: de0d914e3acec8ecbafe212675f0227f286f21e8.crl (hash: 6lGft8OIl8V4qPsnHFwK15OHmwCQfZAbVgUlvTIa5b0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.crl rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 31 Mar 2023 00:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995651 (0x1e7383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d914e3acec8ecbafe212675f0227f286f21e8 Validity Not Before: Mar 27 23:15:43 2023 GMT Not After : Mar 31 02:35:43 2023 GMT Subject: CN=501b8dc9921ce9291320e16d1d9135a0f3cdb4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:3f:ff:db:27:88:e1:f6:92:18:70:da:81: 4f:b2:51:2d:bc:5c:fb:7e:f4:41:91:b9:dd:df:a1: ac:96:07:d2:b2:50:f1:08:30:4b:7c:f6:7c:c3:2a: 58:17:a9:d5:bc:2a:1b:1b:48:70:0b:2b:90:e5:e7: 33:b3:44:3d:63:7d:d1:a9:2c:29:09:5a:81:0c:3f: 6f:b5:e1:2a:6d:31:ae:81:28:48:9d:c2:26:73:39: 58:7a:6e:92:1a:31:29:a1:e6:fd:17:f0:54:09:55: 64:3e:e7:aa:32:25:36:56:fa:c5:d0:15:32:a5:f3: 17:15:fb:cd:33:dd:35:28:c4:24:af:82:b9:b6:58: b1:74:17:83:64:3b:89:6f:4d:ba:6a:41:2b:d4:2e: a5:bf:a4:ae:8e:6c:6c:42:74:73:7b:98:c0:ba:5f: 1b:b4:b8:f8:74:1e:b6:10:14:2a:b1:64:17:f3:47: ee:c1:98:11:57:f5:27:0e:c8:87:ca:1d:21:e4:78: 2f:df:ff:bd:be:c4:bb:4b:6c:51:19:3b:80:4e:e0: c3:0c:c2:4e:a6:da:b1:71:9a:f6:5d:15:97:23:ca: 00:6e:0b:1a:11:ae:e1:4c:53:f1:b4:18:bf:62:da: e9:11:7d:12:52:27:89:e0:29:17:df:55:e5:a4:e6: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EE:18:6E:C4:AD:57:87:A5:D5:1C:7E:7A:73:0A:EC:97:AC:C4:99 X509v3 Authority Key Identifier: keyid:E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:42:d1:6c:44:32:23:36:f2:53:69:b1:1f:a3:2c:1f:b5:9a: 88:4a:30:7a:c5:6a:6e:e3:46:df:2d:d9:a9:f2:e2:e6:ec:10: 7f:66:98:c9:5c:8a:9b:df:e2:a5:31:11:ce:f6:e1:83:5f:dc: c2:1d:81:f5:38:11:1d:c5:e7:53:58:75:ef:5a:5f:8c:81:b5: 67:bd:75:92:49:6e:d8:f9:44:fc:92:72:a0:c1:17:db:4c:c5: 90:01:bd:17:56:ee:32:b6:c8:5b:d3:19:6c:4f:c9:86:64:aa: 1e:38:ec:9f:8d:29:31:eb:7c:b7:0f:fc:30:4b:a1:8c:5e:49: 1b:89:69:af:11:4f:4b:ac:27:e1:ce:98:90:55:f3:3a:cb:a4: 2b:ea:8c:9c:ea:bc:b1:14:d2:7c:74:4a:98:4d:15:cf:f8:67: 91:ad:b7:a3:c9:49:0e:38:70:8a:12:5c:82:83:7b:de:75:05: 91:28:e4:0e:9e:1c:f4:c0:75:ec:3b:1a:0a:5d:65:01:49:5b: f8:1a:e1:0c:02:17:1d:4f:53:41:14:31:f4:9f:aa:0e:17:ac: a7:2d:04:71:21:b0:c6:e3:d1:52:67:59:df:c5:66:98:26:0b: cc:8e:2a:92:54:d6:eb:11:92:a0:a1:5c:a5:28:fe:19:51:f0: b3:01:9d:d5 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHnODMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl MGQ5MTRlM2FjZWM4ZWNiYWZlMjEyNjc1ZjAyMjdmMjg2ZjIxZTgwHhcNMjMwMzI3 MjMxNTQzWhcNMjMwMzMxMDIzNTQzWjAzMTEwLwYDVQQDEyg1MDFiOGRjOTkyMWNl OTI5MTMyMGUxNmQxZDkxMzVhMGYzY2RiNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAj/Q//9sniOH2khhw2oFPslEtvFz7fvRBkbnd36GslgfSslDx CDBLfPZ8wypYF6nVvCobG0hwCyuQ5eczs0Q9Y33RqSwpCVqBDD9vteEqbTGugShI ncImczlYem6SGjEpoeb9F/BUCVVkPueqMiU2VvrF0BUypfMXFfvNM901KMQkr4K5 tlixdBeDZDuJb026akEr1C6lv6SujmxsQnRze5jAul8btLj4dB62EBQqsWQX80fu wZgRV/UnDsiHyh0h5Hgv3/+9vsS7S2xRGTuATuDDDMJOptqxcZr2XRWXI8oAbgsa Ea7hTFPxtBi/YtrpEX0SUieJ4CkX31XlpOaIcwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFMnuGG7ErVeHpdUcfnpzCuyXrMSZMB8GA1UdIwQYMBaAFOX/ZM4EvZ0RA/py a8LO8JPCcwdIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGUwZDkx NGUzYWNlYzhlY2JhZmUyMTI2NzVmMDIyN2YyODZmMjFlOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTUzMzBmMTQtMGUxZi00MTM0LTk4NjktNGJlOTJk ZThlMDVlL2RlMGQ5MTRlM2FjZWM4ZWNiYWZlMjEyNjc1ZjAyMjdmMjg2ZjIxZTgu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNTMzMGYxNC0wZTFmLTQxMzQtOTg2OS00YmU5 MmRlOGUwNWUvZGUwZDkxNGUzYWNlYzhlY2JhZmUyMTI2NzVmMDIyN2YyODZmMjFl OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAItC0WxEMiM28lNpsR+jLB+1mohKMHrFam7jRt8t2any4ubs EH9mmMlcipvf4qUxEc724YNf3MIdgfU4ER3F51NYde9aX4yBtWe9dZJJbtj5RPyS cqDBF9tMxZABvRdW7jK2yFvTGWxPyYZkqh447J+NKTHrfLcP/DBLoYxeSRuJaa8R T0usJ+HOmJBV8zrLpCvqjJzqvLEU0nx0SphNFc/4Z5Gtt6PJSQ44cIoSXIKDe951 BZEo5A6eHPTAdew7GgpdZQFJW/ga4QwCFx1PU0EUMfSfqg4XrKctBHEhsMbj0VJn Wd/FZpgmC8yOKpJU1usRkqChXKUo/hlR8LMBndU= -----END CERTIFICATE-----Generated at Tue Mar 28 00:59:49 2023 by rpki-client on console-ams.rpki-client.org