$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.mft File: 0a72f3a0cb28ade4042b9041eaf1e90253361ebc.mft (raw, json) Hash identifier: Qwu+TTEialthh9F/eyQFvEbRY6b3Q7v34JPXe/ZMUwA= Subject key identifier: 7B:53:C7:9D:DE:98:B4:D1:06:7B:47:B5:29:04:B9:3C:6B:DF:7C:1F Authority key identifier: 4F:AC:E6:33:FE:C2:99:0C:34:EB:7E:A8:71:AC:33:22:94:B8:0E:35 Certificate issuer: /CN=0a72f3a0cb28ade4042b9041eaf1e90253361ebc Certificate serial: 250B12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.mft Manifest number: 0CE1 Signing time: Tue 09 Jan 2024 11:20:02 +0000 Manifest this update: Tue 09 Jan 2024 10:19:16 +0000 Manifest next update: Fri 12 Jan 2024 12:37:16 +0000 Files and hashes: 1: 0a72f3a0cb28ade4042b9041eaf1e90253361ebc.crl (hash: kIJblabBbVrpRpX9y0XIERpf1bm0M/QvRCY70PEw27g=) 2: 774defaa21ad9aed2657cc42c5b31c9678157195.roa (hash: zJojUiz7//hHV8sFD56cm3ZMFkEoaygnZpnOpwTv5Io=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.crl rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427666 (0x250b12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a72f3a0cb28ade4042b9041eaf1e90253361ebc Validity Not Before: Jan 9 10:19:16 2024 GMT Not After : Jan 12 12:37:16 2024 GMT Subject: CN=6a22595f01ca75a3e03d9248b4f958e04c574b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:cd:f5:09:d2:df:79:f5:eb:30:c3:b1:f8: ab:de:c4:d1:f1:d0:4a:8b:be:e4:5d:22:41:eb:99: 95:5c:c0:f4:90:b3:76:e5:7b:49:b0:49:b9:8b:3c: 9b:87:58:78:40:1c:8d:f0:ea:a7:59:16:3e:e0:45: 14:ad:5e:07:64:0d:9d:70:33:fc:bd:60:3c:93:68: 94:8b:71:00:ab:c7:4f:93:89:08:57:6e:58:08:01: f7:c0:d3:58:c4:ac:04:c4:df:44:b8:db:53:13:60: a6:4e:bd:eb:ba:46:d9:f0:2b:78:b8:77:74:aa:c1: ae:1c:b4:85:a9:cf:c8:04:29:0c:0a:8f:28:8a:31: 8a:59:76:b7:31:16:39:c9:8a:7a:97:d6:fd:72:c9: fb:29:b7:6c:3f:a7:92:63:de:ca:a0:74:9e:a6:f0: 68:5e:c8:f5:dc:bf:f0:90:ae:f6:ae:6a:1d:b6:e6: ac:44:ab:b6:4a:88:e3:d3:50:db:c7:4b:d7:4d:c5: 55:f3:32:92:19:ca:1d:67:9b:dd:33:8c:33:0c:b3: aa:75:91:48:0e:db:7c:32:97:77:5e:fd:dc:34:8f: 28:4d:62:ae:97:3f:63:ed:86:15:bb:a4:f3:cc:7b: e0:f2:fc:70:8a:54:00:8f:d9:12:b8:ee:10:be:a3: f4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:53:C7:9D:DE:98:B4:D1:06:7B:47:B5:29:04:B9:3C:6B:DF:7C:1F X509v3 Authority Key Identifier: keyid:4F:AC:E6:33:FE:C2:99:0C:34:EB:7E:A8:71:AC:33:22:94:B8:0E:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f4:e7:ec:8c:55:95:a3:7c:95:39:b5:55:84:af:6e:62:35: 5e:67:8b:c7:50:4e:ff:a8:aa:7b:22:05:18:8d:6b:1d:79:c5: 1f:73:b1:96:bb:42:37:84:ba:a8:12:a6:77:8a:38:27:14:68: 7b:53:d4:c6:77:e1:21:0b:d5:bf:a3:c5:4e:0d:39:de:35:4d: 6c:6b:62:f9:7a:4e:a3:37:3d:f8:33:a2:05:6f:b8:e5:5e:57: e7:45:7e:af:74:c6:78:f7:c9:c1:92:01:ab:97:ae:ee:02:02: 92:ed:e4:52:a3:0a:69:c2:23:46:e7:85:d3:d4:85:60:34:19: dc:f0:c3:85:7e:b7:22:8b:e1:74:c2:ac:be:58:8b:70:12:46: 75:c6:c2:d7:ca:bb:7d:bc:83:f5:8b:f0:02:d4:99:0a:67:5e: 23:ed:8e:fd:5d:4b:11:a3:e0:78:11:98:ed:7b:03:f7:a9:63: 54:11:84:11:ad:41:f0:f8:26:4a:10:95:0c:54:d8:be:25:cd: 96:99:44:e8:d2:81:b6:91:b0:18:1c:55:7d:be:64:3d:02:75: 32:aa:ae:cd:85:bf:7f:2d:fe:70:5b:ff:eb:70:4a:3d:cf:89: 80:45:1e:5c:d8:7d:9f:c2:7a:71:3c:8b:03:88:1a:d4:22:51: 03:8d:7d:2f -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJQsSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh NzJmM2EwY2IyOGFkZTQwNDJiOTA0MWVhZjFlOTAyNTMzNjFlYmMwHhcNMjQwMTA5 MTAxOTE2WhcNMjQwMTEyMTIzNzE2WjAzMTEwLwYDVQQDEyg2YTIyNTk1ZjAxY2E3 NWEzZTAzZDkyNDhiNGY5NThlMDRjNTc0Yjg2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsl/N9QnS33n16zDDsfir3sTR8dBKi77kXSJB65mVXMD0kLN2 5XtJsEm5izybh1h4QByN8OqnWRY+4EUUrV4HZA2dcDP8vWA8k2iUi3EAq8dPk4kI V25YCAH3wNNYxKwExN9EuNtTE2CmTr3rukbZ8Ct4uHd0qsGuHLSFqc/IBCkMCo8o ijGKWXa3MRY5yYp6l9b9csn7KbdsP6eSY97KoHSepvBoXsj13L/wkK72rmodtuas RKu2Sojj01Dbx0vXTcVV8zKSGcodZ5vdM4wzDLOqdZFIDtt8Mpd3Xv3cNI8oTWKu lz9j7YYVu6TzzHvg8vxwilQAj9kSuO4QvqP0pwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFHtTx53emLTRBntHtSkEuTxr33wfMB8GA1UdIwQYMBaAFE+s5jP+wpkMNOt+ qHGsMyKUuA41MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGE3MmYz YTBjYjI4YWRlNDA0MmI5MDQxZWFmMWU5MDI1MzM2MWViYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWQxZmQwYmMtODE5Zi00NDk1LThkN2YtM2YyZWQ2 YjI1NDgwLzBhNzJmM2EwY2IyOGFkZTQwNDJiOTA0MWVhZjFlOTAyNTMzNjFlYmMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZDFmZDBiYy04MTlmLTQ0OTUtOGQ3Zi0zZjJl ZDZiMjU0ODAvMGE3MmYzYTBjYjI4YWRlNDA0MmI5MDQxZWFmMWU5MDI1MzM2MWVi Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAF/05+yMVZWjfJU5tVWEr25iNV5ni8dQTv+oqnsiBRiNax15 xR9zsZa7QjeEuqgSpneKOCcUaHtT1MZ34SEL1b+jxU4NOd41TWxrYvl6TqM3Pfgz ogVvuOVeV+dFfq90xnj3ycGSAauXru4CApLt5FKjCmnCI0bnhdPUhWA0Gdzww4V+ tyKL4XTCrL5Yi3ASRnXGwtfKu328g/WL8ALUmQpnXiPtjv1dSxGj4HgRmO17A/ep Y1QRhBGtQfD4JkoQlQxU2L4lzZaZROjSgbaRsBgcVX2+ZD0CdTKqrs2Fv38t/nBb /+twSj3PiYBFHlzYfZ/CenE8iwOIGtQiUQONfS8= -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:33 2024 by rpki-client on console.sobornost.net