$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.mft File: 4670db2847f3f5f45823175e7fcec0e67a763df2.mft (raw, json) Hash identifier: 9Kl3p1Dt0gbpuGVKzgHEEPPOaaQ1wdhBtWk9ouk7Zmk= Subject key identifier: DB:52:E6:60:89:22:26:22:0E:26:02:C8:A2:79:F7:A9:52:FA:2A:B6 Authority key identifier: B8:11:79:A9:78:D9:9B:49:1C:57:2B:74:C2:71:69:24:34:10:CB:69 Certificate issuer: /CN=4670db2847f3f5f45823175e7fcec0e67a763df2 Certificate serial: 279F82 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4670db2847f3f5f45823175e7fcec0e67a763df2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.mft Manifest number: 0DB1 Signing time: Thu 28 Mar 2024 22:21:03 +0000 Manifest this update: Thu 28 Mar 2024 21:20:09 +0000 Manifest next update: Mon 01 Apr 2024 00:39:09 +0000 Files and hashes: 1: 33bd23d1b75c4265348c3fa037f153d12a46db3c.roa (hash: 4RtHqWFtSMDEU1PFnUZCXpUlVgzFZzC8cDFboGFGY8M=) 2: 4670db2847f3f5f45823175e7fcec0e67a763df2.crl (hash: Zfh/sIRnWzx++rDMPBtfkjSMp4edbljSVSuUxfnVD64=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.crl rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4670db2847f3f5f45823175e7fcec0e67a763df2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596738 (0x279f82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4670db2847f3f5f45823175e7fcec0e67a763df2 Validity Not Before: Mar 28 21:20:09 2024 GMT Not After : Apr 1 00:39:09 2024 GMT Subject: CN=b052df9726d07bdeaaef1a610db85a4165496b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:0d:3b:5d:7c:62:38:6b:94:77:ea:9e:de: b7:0d:65:39:40:36:f2:9c:2d:c9:7f:60:a2:9e:6e: 15:06:bf:04:5a:12:7b:b2:fc:24:14:78:fe:75:71: 97:d8:78:19:66:e9:60:17:82:ff:9f:1a:a7:ec:21: de:5e:50:cc:e0:ee:4d:88:04:10:47:ba:ed:70:50: 74:25:0d:ac:2d:bd:66:9e:38:ba:db:9d:20:16:18: 7e:d8:cd:7c:6e:38:30:19:85:a8:18:4a:c3:f1:62: c9:37:ba:67:89:53:ef:4c:61:8b:06:f4:3b:66:cf: d7:0c:37:5d:0f:d6:de:cb:19:4b:02:a4:d7:30:26: 81:c8:fc:cf:f8:26:5c:ad:7d:a3:ea:6b:f2:57:fd: b1:21:53:89:76:4a:77:ce:17:d0:5f:2d:cc:14:55: b5:d5:3c:28:7a:58:ca:ce:09:30:14:a2:10:06:1c: ec:b2:fc:de:9e:ed:48:9d:66:69:82:f9:5e:fc:40: 06:f5:e3:de:98:a0:92:f9:82:5d:a2:d9:be:a9:ea: 7c:10:b8:5b:9c:21:d7:c1:94:75:99:84:7b:25:7d: 5c:83:72:a2:a7:2b:62:81:40:d5:fb:b0:e2:fd:64: a9:01:a7:44:80:6b:2e:72:23:2e:f2:08:43:0f:0c: b5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:E6:60:89:22:26:22:0E:26:02:C8:A2:79:F7:A9:52:FA:2A:B6 X509v3 Authority Key Identifier: keyid:B8:11:79:A9:78:D9:9B:49:1C:57:2B:74:C2:71:69:24:34:10:CB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4670db2847f3f5f45823175e7fcec0e67a763df2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:44:ec:4b:33:9f:ce:c8:63:a4:0a:02:61:6c:02:1f:9c:c3: 6d:79:45:07:c3:6c:b8:a0:1d:6b:d7:38:82:4f:5e:a5:92:67: 09:14:96:73:40:8c:6b:80:00:c9:39:20:de:44:87:74:1b:67: 11:1f:5e:3c:a3:4c:bb:e7:1e:96:c7:74:b5:3d:9a:d4:08:48: f0:d5:15:3a:ec:2b:28:94:8a:7a:db:c6:35:1c:84:3c:ef:ba: b1:66:10:65:7e:62:5b:24:a4:c8:51:c9:0a:39:c3:81:8a:3b: 40:46:29:d0:ae:e9:6b:5d:85:07:fb:4d:87:f3:76:d1:4e:83: 33:e2:b0:51:66:7b:c6:cf:49:ea:d5:85:dc:5f:a6:3a:ec:99: 69:fc:d9:af:0d:e5:bc:80:f7:b8:33:3b:30:54:49:9b:0c:22: 96:4b:d6:25:67:ca:98:88:6e:d0:b0:36:d7:07:52:49:2f:03: 3f:77:2c:fb:04:94:bc:32:35:9d:e3:1f:a9:bd:ff:54:5c:96: d7:51:dd:ca:e6:87:67:7d:d6:01:0b:0f:ff:40:ef:62:9f:52: 08:63:d2:f3:0f:61:25:ed:63:3f:d2:b3:02:44:a6:66:f0:de: 1f:18:f1:7b:48:8f:03:b6:d8:64:15:67:d5:e3:ed:d1:56:2f: 20:3a:29:89 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ5+CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2 NzBkYjI4NDdmM2Y1ZjQ1ODIzMTc1ZTdmY2VjMGU2N2E3NjNkZjIwHhcNMjQwMzI4 MjEyMDA5WhcNMjQwNDAxMDAzOTA5WjAzMTEwLwYDVQQDEyhiMDUyZGY5NzI2ZDA3 YmRlYWFlZjFhNjEwZGI4NWE0MTY1NDk2YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA0/gNO118YjhrlHfqnt63DWU5QDbynC3Jf2Cinm4VBr8EWhJ7 svwkFHj+dXGX2HgZZulgF4L/nxqn7CHeXlDM4O5NiAQQR7rtcFB0JQ2sLb1mnji6 250gFhh+2M18bjgwGYWoGErD8WLJN7pniVPvTGGLBvQ7Zs/XDDddD9beyxlLAqTX MCaByPzP+CZcrX2j6mvyV/2xIVOJdkp3zhfQXy3MFFW11TwoeljKzgkwFKIQBhzs svzenu1InWZpgvle/EAG9ePemKCS+YJdotm+qep8ELhbnCHXwZR1mYR7JX1cg3Ki pytigUDV+7Di/WSpAadEgGsuciMu8ghDDwy1wwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFNtS5mCJIiYiDiYCyKJ596lS+iq2MB8GA1UdIwQYMBaAFLgReal42ZtJHFcr dMJxaSQ0EMtpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY3MGRi Mjg0N2YzZjVmNDU4MjMxNzVlN2ZjZWMwZTY3YTc2M2RmMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZThmNzM1YzktNjRhNi00YTdkLTgzMjItNmMxM2Nm MzRlMzZmLzQ2NzBkYjI4NDdmM2Y1ZjQ1ODIzMTc1ZTdmY2VjMGU2N2E3NjNkZjIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lOGY3MzVjOS02NGE2LTRhN2QtODMyMi02YzEz Y2YzNGUzNmYvNDY3MGRiMjg0N2YzZjVmNDU4MjMxNzVlN2ZjZWMwZTY3YTc2M2Rm Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAGRE7Eszn87IY6QKAmFsAh+cw215RQfDbLigHWvXOIJPXqWS ZwkUlnNAjGuAAMk5IN5Eh3QbZxEfXjyjTLvnHpbHdLU9mtQISPDVFTrsKyiUinrb xjUchDzvurFmEGV+YlskpMhRyQo5w4GKO0BGKdCu6WtdhQf7TYfzdtFOgzPisFFm e8bPSerVhdxfpjrsmWn82a8N5byA97gzOzBUSZsMIpZL1iVnypiIbtCwNtcHUkkv Az93LPsElLwyNZ3jH6m9/1RcltdR3crmh2d91gELD/9A72KfUghj0vMPYSXtYz/S swJEpmbw3h8Y8XtIjwO22GQVZ9Xj7dFWLyA6KYk= -----END CERTIFICATE-----Generated at Thu Mar 28 23:49:06 2024 by rpki-client on console-ams.rpki-client.org