$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.mft File: 256a73d54cc1652afe409fc35e8303e2f394eee0.mft (raw, json) Hash identifier: v7Y1TZIiSdaLFD/c+QUITVuk0Aa/YMfz2RXyD57k+dk= Subject key identifier: 92:36:3A:C8:12:DC:9C:DF:25:7B:56:B0:0E:99:AC:57:A9:6B:20:77 Authority key identifier: E0:D7:61:A7:7D:05:2A:25:FE:E4:9F:C1:BC:88:8C:8A:35:6B:AE:6F Certificate issuer: /CN=256a73d54cc1652afe409fc35e8303e2f394eee0 Certificate serial: 0EB3C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/256a73d54cc1652afe409fc35e8303e2f394eee0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.mft Manifest number: 0796 Signing time: Fri 29 Mar 2024 04:20:38 +0000 Manifest this update: Fri 29 Mar 2024 03:20:09 +0000 Manifest next update: Mon 01 Apr 2024 05:33:09 +0000 Files and hashes: 1: 256a73d54cc1652afe409fc35e8303e2f394eee0.crl (hash: de1phIMXAKD7BqUkSaRjPKrTZs4+IfWNu1nQU973US8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.crl rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/256a73d54cc1652afe409fc35e8303e2f394eee0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963523 (0xeb3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256a73d54cc1652afe409fc35e8303e2f394eee0 Validity Not Before: Mar 29 03:20:09 2024 GMT Not After : Apr 1 05:33:09 2024 GMT Subject: CN=7431908cb8c297c6e72d9ff72ec849add53b1a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:3e:4b:c5:11:83:b0:27:bd:6b:55:0e:92: 25:8b:49:33:15:b0:b8:2a:cc:82:8c:c7:b7:ba:14: 67:d4:c3:4b:e5:58:1c:e3:84:77:90:de:a9:0d:72: 69:12:e2:9a:a0:ed:2d:e0:65:ad:ac:c4:98:ef:bf: 06:3e:88:1f:c4:34:29:9a:ef:7a:28:d6:89:fa:fa: 39:0c:e7:bb:6c:6e:d3:4a:48:c0:07:f3:13:72:98: 71:b8:25:ef:4d:af:5a:88:94:c5:be:76:aa:f7:b6: 9e:f3:ff:6c:60:69:3f:2b:15:2a:9d:d2:3f:5c:24: 0c:c0:cb:fd:54:7c:47:3f:09:ab:fa:ba:3c:e8:46: 01:9c:47:a2:7e:0b:3d:82:02:8d:b6:16:e4:2d:b9: 6c:fd:6b:7a:32:23:12:1c:44:6c:19:e5:ed:95:0f: ab:ec:aa:c7:51:18:f2:52:93:fd:60:da:ad:25:59: c7:af:e6:e4:a0:9a:3c:07:58:66:22:c9:88:9b:de: 71:eb:e1:94:44:b8:c2:9f:ed:dd:35:06:b5:1e:d0: 6f:18:9f:3b:c9:61:2a:76:8e:f3:7f:63:ea:8d:18: 2c:5a:9c:b8:e2:f9:df:ec:ff:c3:2e:19:3b:97:72: d3:be:31:1f:06:1f:ae:41:9d:f9:b7:67:6c:77:81: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:3A:C8:12:DC:9C:DF:25:7B:56:B0:0E:99:AC:57:A9:6B:20:77 X509v3 Authority Key Identifier: keyid:E0:D7:61:A7:7D:05:2A:25:FE:E4:9F:C1:BC:88:8C:8A:35:6B:AE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/256a73d54cc1652afe409fc35e8303e2f394eee0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:76:3e:1a:8c:a8:13:21:e2:41:66:47:bb:a5:93:61:28:8f: d6:aa:c5:6b:a0:6b:1a:6f:b5:4f:b8:35:5c:a5:75:b9:bd:9a: 10:e2:ab:85:2a:c0:db:34:bb:b7:d3:4a:d0:59:c3:2a:6b:c2: 90:68:4e:48:50:1d:57:65:19:e1:a3:29:0c:36:62:f2:f6:9b: 36:bc:b7:05:37:26:91:66:f5:3d:70:16:f4:fd:1f:7c:66:a7: ef:93:f1:6d:21:1d:40:5a:5b:7b:88:3e:d5:eb:ea:0e:ef:44: 02:dc:b9:fe:c8:84:7e:65:f2:83:b5:09:46:3d:db:a1:02:1f: 73:fc:bc:b7:1b:52:27:07:1e:80:f3:31:4b:26:64:5b:1b:c6: 68:0a:c7:db:71:c1:97:54:83:23:7a:2d:af:c8:5f:42:71:0d: 14:b8:82:20:bc:36:4c:4c:e8:23:d9:01:79:9b:aa:e2:22:61: bf:da:ed:d6:d4:03:39:56:6c:c8:09:33:56:18:7d:84:ad:b9: 79:52:c6:17:c5:5f:18:08:d3:3c:6f:19:53:c6:23:98:db:ad: 8a:20:08:bf:b8:2f:f5:d9:e5:88:1f:87:71:d8:39:7c:4a:60: 36:79:58:1e:3c:42:1b:c8:54:f2:b6:e1:fe:9b:38:2c:6e:02: aa:e4:af:7a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDDrPDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1 NmE3M2Q1NGNjMTY1MmFmZTQwOWZjMzVlODMwM2UyZjM5NGVlZTAwHhcNMjQwMzI5 MDMyMDA5WhcNMjQwNDAxMDUzMzA5WjAzMTEwLwYDVQQDEyg3NDMxOTA4Y2I4YzI5 N2M2ZTcyZDlmZjcyZWM4NDlhZGQ1M2IxYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkP4+S8URg7AnvWtVDpIli0kzFbC4KsyCjMe3uhRn1MNL5Vgc 44R3kN6pDXJpEuKaoO0t4GWtrMSY778GPogfxDQpmu96KNaJ+vo5DOe7bG7TSkjA B/MTcphxuCXvTa9aiJTFvnaq97ae8/9sYGk/KxUqndI/XCQMwMv9VHxHPwmr+ro8 6EYBnEeifgs9ggKNthbkLbls/Wt6MiMSHERsGeXtlQ+r7KrHURjyUpP9YNqtJVnH r+bkoJo8B1hmIsmIm95x6+GURLjCn+3dNQa1HtBvGJ87yWEqdo7zf2PqjRgsWpy4 4vnf7P/DLhk7l3LTvjEfBh+uQZ35t2dsd4HjSQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFJI2OsgS3JzfJXtWsA6ZrFepayB3MB8GA1UdIwQYMBaAFODXYad9BSol/uSf wbyIjIo1a65vMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjU2YTcz ZDU0Y2MxNjUyYWZlNDA5ZmMzNWU4MzAzZTJmMzk0ZWVlMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZmJmNTIyMGItNzQ3My00NDdlLWJiNmMtYWVkYTJi MGFiNTg3LzI1NmE3M2Q1NGNjMTY1MmFmZTQwOWZjMzVlODMwM2UyZjM5NGVlZTAu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mYmY1MjIwYi03NDczLTQ0N2UtYmI2Yy1hZWRh MmIwYWI1ODcvMjU2YTczZDU0Y2MxNjUyYWZlNDA5ZmMzNWU4MzAzZTJmMzk0ZWVl MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAAZ2PhqMqBMh4kFmR7ulk2Eoj9aqxWugaxpvtU+4NVyldbm9 mhDiq4UqwNs0u7fTStBZwyprwpBoTkhQHVdlGeGjKQw2YvL2mza8twU3JpFm9T1w FvT9H3xmp++T8W0hHUBaW3uIPtXr6g7vRALcuf7IhH5l8oO1CUY926ECH3P8vLcb UicHHoDzMUsmZFsbxmgKx9txwZdUgyN6La/IX0JxDRS4giC8NkxM6CPZAXmbquIi Yb/a7dbUAzlWbMgJM1YYfYStuXlSxhfFXxgI0zxvGVPGI5jbrYogCL+4L/XZ5Ygf h3HYOXxKYDZ5WB48QhvIVPK24f6bOCxuAqrkr3o= -----END CERTIFICATE-----Generated at Fri Mar 29 05:45:48 2024 by rpki-client on console-ams.rpki-client.org