$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.mft File: df9aafb4685260f2a007f3af752ec897edf667c9.mft (raw, json) Hash identifier: hMUw08A1NWz3TY9ygv6kWL0O1ycED0conIYM2YLLQpg= Subject key identifier: 0B:8A:FF:C4:8D:88:25:5B:4B:9A:64:38:03:2B:0D:7A:81:73:E5:9A Authority key identifier: 21:42:2F:8E:53:39:7D:CF:51:4F:D8:FE:EF:50:2A:E3:60:40:EE:41 Certificate issuer: /CN=df9aafb4685260f2a007f3af752ec897edf667c9 Certificate serial: 0F5BBA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df9aafb4685260f2a007f3af752ec897edf667c9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.mft Manifest number: 07D9 Signing time: Fri 29 Mar 2024 05:21:04 +0000 Manifest this update: Fri 29 Mar 2024 04:20:08 +0000 Manifest next update: Mon 01 Apr 2024 07:08:08 +0000 Files and hashes: 1: 059bb14ae58f204bd427e522654c557bac06a9b9.roa (hash: da59AtpwgdCD9+L/3+7wapaOgFh0mDnJNOkjLj34Dzk=) 2: df9aafb4685260f2a007f3af752ec897edf667c9.crl (hash: +TYbma9axh48tUVVD0G7B8iYXMgSwcfvRNyIF3eNqOU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.crl rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df9aafb4685260f2a007f3af752ec897edf667c9.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006522 (0xf5bba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9aafb4685260f2a007f3af752ec897edf667c9 Validity Not Before: Mar 29 04:20:08 2024 GMT Not After : Apr 1 07:08:08 2024 GMT Subject: CN=bd602296c38a604a195367ed15a10589eb45a4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:65:e1:5e:bd:e3:4e:dc:ea:aa:9b:ac:29: 23:10:0d:21:de:d2:2e:31:64:66:72:25:f2:d2:0a: 32:a0:53:ca:23:cc:30:bc:dc:84:4d:f7:38:45:1f: a0:8f:d5:af:d0:11:8b:f5:89:37:6d:13:4a:bd:54: ad:90:51:6e:cf:4a:e7:31:32:28:d1:1b:20:b9:36: e2:d5:16:b4:c1:53:27:a1:69:10:7c:74:9e:23:33: 45:86:bc:08:05:66:2b:f6:e7:61:fa:b1:11:10:72: dd:00:ce:2d:2c:d2:71:55:8f:07:d0:1a:a6:d3:99: 92:90:4f:38:57:08:6a:b0:19:74:ad:6e:70:39:f7: ee:2d:08:4b:6e:81:c8:30:5d:53:cb:db:5a:cb:5e: 8b:35:ba:d5:79:1a:75:15:d0:9e:67:19:f7:ce:dc: 10:7b:6a:73:82:8b:cf:36:2b:ec:4d:81:52:f2:5f: fd:05:9d:70:0d:8f:af:14:a4:d5:99:36:d1:23:6f: 6b:e0:c5:b2:32:1b:e3:27:4f:27:aa:c8:e6:fb:d2: 87:52:b9:38:06:32:c9:f4:15:fe:ba:7c:62:d9:80: 2c:14:6e:e2:bf:4d:cc:6d:9f:78:62:8a:43:b5:5d: a2:76:0e:75:28:1e:6d:4a:39:90:1f:66:c6:ab:36: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8A:FF:C4:8D:88:25:5B:4B:9A:64:38:03:2B:0D:7A:81:73:E5:9A X509v3 Authority Key Identifier: keyid:21:42:2F:8E:53:39:7D:CF:51:4F:D8:FE:EF:50:2A:E3:60:40:EE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df9aafb4685260f2a007f3af752ec897edf667c9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:af:fa:4e:dd:62:a2:72:86:e1:31:18:48:ed:8d:e4:c6:c4: 72:5f:09:fa:e1:09:f8:77:6f:2b:0c:be:8f:3e:9c:c2:9a:f9: 0d:f3:df:00:d6:ff:ee:a1:b3:dc:db:31:44:e7:38:18:f1:1f: ea:34:74:ca:42:a0:75:42:c5:34:17:83:1e:cf:be:74:51:7a: ba:92:0f:76:f1:09:b6:cc:35:79:85:98:9b:79:2d:eb:82:04: 8a:22:35:3d:c6:e8:97:ca:67:09:52:ab:50:8e:eb:53:0b:95: 2d:0d:7b:f5:27:db:30:19:60:ff:d7:26:c9:bd:e4:6a:41:64: eb:18:7e:2d:d3:74:53:de:9f:72:31:7f:bb:6e:25:e3:b5:26: 9d:d8:59:cb:f3:c9:70:9a:fc:f5:e9:d2:d4:c9:aa:a5:82:3d: 70:83:a9:6c:f9:48:e8:d6:b2:82:c3:d7:a1:2a:49:97:cf:9d: 6f:01:9f:2b:76:b4:23:ef:47:11:0c:bb:c3:44:55:89:b8:dc: 2e:7a:a0:99:f1:dd:8e:aa:b8:a3:6d:1c:b7:e5:16:2d:4d:0c: c8:a2:0e:06:b7:56:ad:12:06:a0:f7:a4:fd:a4:b3:c8:99:e5: b3:73:ca:03:a5:f9:9b:30:d2:c6:2d:8b:2f:bb:fe:3c:c2:91: 8e:6d:ee:c3 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDD1u6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm OWFhZmI0Njg1MjYwZjJhMDA3ZjNhZjc1MmVjODk3ZWRmNjY3YzkwHhcNMjQwMzI5 MDQyMDA4WhcNMjQwNDAxMDcwODA4WjAzMTEwLwYDVQQDEyhiZDYwMjI5NmMzOGE2 MDRhMTk1MzY3ZWQxNWExMDU4OWViNDVhNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhehl4V69407c6qqbrCkjEA0h3tIuMWRmciXy0goyoFPKI8ww vNyETfc4RR+gj9Wv0BGL9Yk3bRNKvVStkFFuz0rnMTIo0RsguTbi1Ra0wVMnoWkQ fHSeIzNFhrwIBWYr9udh+rEREHLdAM4tLNJxVY8H0Bqm05mSkE84VwhqsBl0rW5w OffuLQhLboHIMF1Ty9tay16LNbrVeRp1FdCeZxn3ztwQe2pzgovPNivsTYFS8l/9 BZ1wDY+vFKTVmTbRI29r4MWyMhvjJ08nqsjm+9KHUrk4BjLJ9BX+unxi2YAsFG7i v03MbZ94YopDtV2idg51KB5tSjmQH2bGqzYjXwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFAuK/8SNiCVbS5pkOAMrDXqBc+WaMB8GA1UdIwQYMBaAFCFCL45TOX3PUU/Y /u9QKuNgQO5BMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGY5YWFm YjQ2ODUyNjBmMmEwMDdmM2FmNzUyZWM4OTdlZGY2NjdjOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZmI2YTMyMWItZjVkOS00NTZhLTg3ZDMtNTQyOTZl MWZiYmEzL2RmOWFhZmI0Njg1MjYwZjJhMDA3ZjNhZjc1MmVjODk3ZWRmNjY3Yzku bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mYjZhMzIxYi1mNWQ5LTQ1NmEtODdkMy01NDI5 NmUxZmJiYTMvZGY5YWFmYjQ2ODUyNjBmMmEwMDdmM2FmNzUyZWM4OTdlZGY2Njdj OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBACyv+k7dYqJyhuExGEjtjeTGxHJfCfrhCfh3bysMvo8+nMKa +Q3z3wDW/+6hs9zbMUTnOBjxH+o0dMpCoHVCxTQXgx7PvnRRerqSD3bxCbbMNXmF mJt5LeuCBIoiNT3G6JfKZwlSq1CO61MLlS0Ne/Un2zAZYP/XJsm95GpBZOsYfi3T dFPen3Ixf7tuJeO1Jp3YWcvzyXCa/PXp0tTJqqWCPXCDqWz5SOjWsoLD16EqSZfP nW8Bnyt2tCPvRxEMu8NEVYm43C56oJnx3Y6quKNtHLflFi1NDMiiDga3Vq0SBqD3 pP2ks8iZ5bNzygOl+Zsw0sYtiy+7/jzCkY5t7sM= -----END CERTIFICATE-----Generated at Fri Mar 29 06:25:38 2024 by rpki-client on console-ams.rpki-client.org