$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft File: 9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft (raw, json) Hash identifier: +kKUYJbZctJ10zAJAN0xwdXneyB8FkFyZTd035cVN0U= Subject key identifier: A1:E6:58:64:32:45:0B:19:84:03:A8:E8:04:BE:BA:33:91:DF:3D:05 Authority key identifier: 9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2 Certificate issuer: /CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2 Certificate serial: 6CF0ADB67093828C55DD06CB1A75F5F96CD911EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft Manifest number: CF Signing time: Tue 22 Apr 2025 02:25:46 +0000 Manifest this update: Tue 22 Apr 2025 02:20:46 +0000 Manifest next update: Sat 26 Apr 2025 03:31:46 +0000 Files and hashes: 1: 34352e3138372e3230382e302f32332d3234203d3e20323639393131.roa (hash: zDbXMpnyQYiZ6Us70ahGcIiZ1F1FGHLw1988EA8LiSY=) 2: 323830333a613065303a3a2f33322d3332203d3e20323639393131.roa (hash: czmjKJMijgcKcFxG66379lDfcnANxdsAiUVYYZ1Snbs=) 3: 9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl (hash: h3sbKRKCGGJRslIAQ3Z9msFe6rLSliCfiNeuE/zAlzE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 03:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f0:ad:b6:70:93:82:8c:55:dd:06:cb:1a:75:f5:f9:6c:d9:11:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2 Validity Not Before: Apr 22 02:20:46 2025 GMT Not After : Apr 26 03:31:46 2025 GMT Subject: CN=A1E6586432450B198403A8E804BEBA3391DF3D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:a9:0d:3f:b5:9f:7c:19:70:6a:85:db:ac: c2:e5:5c:3a:99:65:6d:be:db:39:37:eb:16:17:4b: 7b:f5:98:9c:a5:1c:41:98:f8:1d:c4:82:ee:8a:a9: cc:dd:38:e0:97:fe:05:3e:4d:06:d0:a0:ac:8e:02: d0:73:99:c7:2e:48:4e:53:fb:27:ee:f1:b3:4d:c6: b0:eb:ac:83:a1:df:08:f8:e6:af:4c:2f:f4:de:80: f6:ae:db:d9:d8:88:94:c8:59:04:c2:fb:32:6a:86: e1:a6:de:c3:a4:f1:3a:c0:d6:aa:a3:31:0a:db:1b: b6:bb:37:14:9e:0f:a6:27:3a:b9:2d:1e:a6:54:10: cc:8b:5e:3f:45:1a:f9:90:d2:74:b4:b4:11:bf:81: b6:59:60:f1:6e:36:ea:cc:30:e7:69:b9:a9:90:5f: b0:88:8c:f5:70:84:27:a0:38:1e:17:71:5a:f2:d8: a7:f5:8c:4c:1b:86:36:d8:2c:c4:ad:01:41:c6:4b: 34:dd:5c:62:41:cf:5d:bb:b5:16:2d:b0:f5:04:8c: 69:61:63:3b:93:4c:82:7f:36:c7:5c:ed:c3:7b:66: 2b:95:e6:e6:ce:f1:09:4b:dc:83:ee:08:c7:52:8c: 3a:d2:b7:69:6e:90:c7:7c:30:c1:50:16:52:10:f5: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:58:64:32:45:0B:19:84:03:A8:E8:04:BE:BA:33:91:DF:3D:05 X509v3 Authority Key Identifier: keyid:9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:36:f0:02:b1:f0:51:65:56:d8:2b:4d:85:e2:71:e6:06:05: d5:f3:eb:e1:c1:46:5e:c3:fe:a2:f6:25:f1:ef:c8:8e:f4:63: 3d:00:e5:57:2d:8b:ab:b9:ba:d9:cb:5a:1f:0f:c5:3d:d5:0b: 9f:37:d0:27:e4:c5:8c:1d:c5:03:11:97:3a:57:09:11:e7:22: ed:cf:e1:58:c2:77:ee:8d:00:09:16:83:e1:ca:51:54:0c:2d: 11:8a:8b:68:bd:b0:ca:32:fb:3a:bb:95:1d:d5:b7:26:18:47: 5d:30:7f:61:b7:a0:38:8e:24:d0:59:bd:e6:29:77:54:a4:a1: 67:9e:c4:eb:8f:63:3e:71:c3:31:5a:8e:77:af:b8:1a:2d:6e: 7a:32:21:3a:b7:31:48:a6:7b:69:36:96:d9:d9:2b:b6:33:35: 82:55:93:e2:00:c0:75:30:7b:37:6c:aa:12:ea:d9:6f:b3:26: 55:01:2c:6a:9f:39:79:6e:a5:65:7f:7e:b7:fa:60:6f:35:2c: 95:c3:61:56:82:0c:9a:9a:a2:a4:79:64:60:26:cc:26:26:15: 12:f9:b2:1b:0c:0b:27:49:59:0d:01:1b:70:8c:f9:cc:41:c9: 64:b4:9a:2e:d6:39:6d:11:67:c9:ec:c7:34:d4:05:81:57:c4: 6e:cf:97:d0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbPCttnCTgoxV3QbLGnX1+WzZEeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMzMTk4RTY1Qzc4M0FGOTlENkE3NDNEOTkzRTBDMzc3 MEI3NkVFMjAeFw0yNTA0MjIwMjIwNDZaFw0yNTA0MjYwMzMxNDZaMDMxMTAvBgNV BAMTKEExRTY1ODY0MzI0NTBCMTk4NDAzQThFODA0QkVCQTMzOTFERjNEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hqkNP7WffBlwaoXbrMLlXDqZ ZW2+2zk36xYXS3v1mJylHEGY+B3Egu6KqczdOOCX/gU+TQbQoKyOAtBzmccuSE5T +yfu8bNNxrDrrIOh3wj45q9ML/TegPau29nYiJTIWQTC+zJqhuGm3sOk8TrA1qqj MQrbG7a7NxSeD6YnOrktHqZUEMyLXj9FGvmQ0nS0tBG/gbZZYPFuNurMMOdpuamQ X7CIjPVwhCegOB4XcVry2Kf1jEwbhjbYLMStAUHGSzTdXGJBz127tRYtsPUEjGlh YzuTTIJ/Nsdc7cN7ZiuV5ubO8QlL3IPuCMdSjDrSt2lukMd8MMFQFlIQ9VWTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoeZYZDJFCxmEA6joBL66M5HfPQUwHwYDVR0j BBgwFoAUnDGY5lx4OvmdanQ9mT4MN3C3buIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMzNFRjUwQTc5QjA5MzhFNTVCQTMyRDEyREUyM0I5MUEx RDJDNzJGMjI3RjQyNDgzNDZGRDAyNzg1QzI0QTg3LzAvOUMzMTk4RTY1Qzc4M0FG OTlENkE3NDNEOTkzRTBDMzc3MEI3NkVFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzMxOThFNjVDNzgzQUY5OUQ2 QTc0M0Q5OTNFMEMzNzcwQjc2RUUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTMzRUY1MEE3OUIwOTM4RTU1QkEzMkQxMkRFMjNCOTFBMUQyQzcyRjIy N0Y0MjQ4MzQ2RkQwMjc4NUMyNEE4Ny8wLzlDMzE5OEU2NUM3ODNBRjk5RDZBNzQz RDk5M0UwQzM3NzBCNzZFRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDMNvACsfBRZVbYK02F4nHmBgXV 8+vhwUZew/6i9iXx78iO9GM9AOVXLYurubrZy1ofD8U91QufN9An5MWMHcUDEZc6 VwkR5yLtz+FYwnfujQAJFoPhylFUDC0RiotovbDKMvs6u5Ud1bcmGEddMH9ht6A4 jiTQWb3mKXdUpKFnnsTrj2M+ccMxWo53r7gaLW56MiE6tzFIpntpNpbZ2Su2MzWC VZPiAMB1MHs3bKoS6tlvsyZVASxqnzl5bqVlf363+mBvNSyVw2FWggyamqKkeWRg JswmJhUS+bIbDAsnSVkNARtwjPnMQclktJou1jltEWfJ7Mc01AWBV8Ruz5fQ -----END CERTIFICATE-----Generated at Wed Apr 23 04:47:44 2025 by rpki-client