$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.mft File: 04C9538FA5038299A42B9882163AF36632AD588F.mft (raw, json) Hash identifier: LpAE3ifWyebTHZaGJO98m0r+HkLcoQe9+TSGcGzkVlI= Subject key identifier: 6D:5D:2F:33:86:A3:9F:8F:D1:91:D6:28:CC:F2:8B:40:17:84:10:58 Authority key identifier: 04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F Certificate issuer: /CN=04C9538FA5038299A42B9882163AF36632AD588F Certificate serial: 6E0C859633C297042ABCACD97E1D457B66AA85C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.mft Manifest number: CA Signing time: Mon 07 Apr 2025 16:35:22 +0000 Manifest this update: Mon 07 Apr 2025 16:30:22 +0000 Manifest next update: Sun 13 Apr 2025 01:50:22 +0000 Files and hashes: 1: 34352e372e3133322e302f32322d3232203d3e20323637383537.roa (hash: YX1T91khgavvwRIlitBNTLSPQFsddLobE98XyqJSi/Q=) 2: 04C9538FA5038299A42B9882163AF36632AD588F.crl (hash: FQVPKbhHrOT4m7gFGlzEqNBxLXvKCjAYIfcYaSopRXE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 01:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0c:85:96:33:c2:97:04:2a:bc:ac:d9:7e:1d:45:7b:66:aa:85:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C9538FA5038299A42B9882163AF36632AD588F Validity Not Before: Apr 7 16:30:22 2025 GMT Not After : Apr 13 01:50:22 2025 GMT Subject: CN=6D5D2F3386A39F8FD191D628CCF28B4017841058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:ba:4d:08:bd:7b:03:9c:68:a0:8a:92:ac: 96:9f:b8:b6:27:16:b7:bb:c5:ee:40:3c:9b:e5:2f: f3:4d:96:ca:23:10:98:57:cc:4a:d3:82:c3:f4:11: db:e2:cf:94:87:de:db:f7:0e:65:32:b3:c8:a6:bc: f5:58:af:f6:f2:7e:9a:a5:d3:65:d6:c0:0d:a3:0a: 72:f9:65:47:ef:6d:dd:f5:f1:0a:ae:74:7d:fd:16: 90:94:df:14:ed:f3:26:3c:47:9f:e3:9e:d3:fe:c1: 91:f2:34:1e:72:8a:29:c6:b3:2b:2b:08:9d:4b:26: 8e:a7:77:2a:5e:e7:05:34:31:6e:7c:4b:a1:7e:74: a8:1c:26:01:10:2f:78:29:f0:5d:5f:b3:63:e9:e6: df:fb:eb:97:16:4d:1d:4b:e3:59:8e:86:d0:76:74: e5:2f:39:d0:bd:1c:aa:52:36:81:26:78:a4:89:b0: 90:18:63:ca:b5:20:be:bc:d4:49:10:0e:63:da:ec: 6d:dc:fb:e7:c4:53:35:7b:83:d7:24:de:d0:36:92: 3c:15:07:09:25:97:cd:45:ef:a8:e5:68:d2:5c:46: f6:83:b5:ca:75:68:10:b1:dd:e9:bb:e7:18:07:4e: b1:cc:d1:85:4f:bc:50:e6:10:af:a5:b0:af:9f:e9: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:2F:33:86:A3:9F:8F:D1:91:D6:28:CC:F2:8B:40:17:84:10:58 X509v3 Authority Key Identifier: keyid:04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:46:ae:5b:c5:98:13:47:ab:29:ca:0e:2e:f0:58:86:e1:89: 80:3b:4c:25:96:84:0b:42:10:83:e4:29:17:37:e9:8c:ac:fe: bf:60:03:25:5a:aa:fe:f4:d7:ef:ad:e1:a3:b6:ed:4b:68:bd: 82:4f:46:5d:8e:ad:56:bc:cb:8c:d5:58:d1:fa:fb:db:f8:cd: 33:15:17:21:8a:47:f3:02:36:20:ae:6e:9c:10:80:c9:32:d4: ab:fc:ce:c2:79:5b:5c:20:24:b4:81:3b:f9:a4:9b:d9:bb:1f: f3:c5:7a:9d:5c:02:4f:a7:df:5f:30:d8:ab:ba:a9:9d:18:15: 0d:90:0b:e4:37:54:5b:0e:49:2c:53:1f:d5:b3:9a:37:45:85: a5:46:1c:87:b7:a0:93:ed:53:7f:ff:9d:c3:cb:f8:03:1c:d3: d5:82:af:25:db:91:88:bf:20:96:7c:ff:50:b8:5a:cd:65:01: fe:45:ea:cd:30:3a:c9:d6:e3:04:31:8a:85:84:be:76:7c:fb: 5c:28:5d:f9:f0:ac:8e:a8:e1:36:75:c5:95:7d:22:da:14:3f: b5:5b:bd:66:c8:e8:12:c9:d9:62:61:a5:da:83:ff:a2:b5:cd: 0f:73:ce:43:db:f6:ab:af:e0:5b:38:60:7a:a8:28:3c:36:09: 9c:69:39:ef -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbgyFljPClwQqvKzZfh1Fe2aqhckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOTUzOEZBNTAzODI5OUE0MkI5ODgyMTYzQUYzNjYz MkFENTg4RjAeFw0yNTA0MDcxNjMwMjJaFw0yNTA0MTMwMTUwMjJaMDMxMTAvBgNV BAMTKDZENUQyRjMzODZBMzlGOEZEMTkxRDYyOENDRjI4QjQwMTc4NDEwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsr7pNCL17A5xooIqSrJafuLYn Fre7xe5APJvlL/NNlsojEJhXzErTgsP0Edviz5SH3tv3DmUys8imvPVYr/byfpql 02XWwA2jCnL5ZUfvbd318QqudH39FpCU3xTt8yY8R5/jntP+wZHyNB5yiinGsysr CJ1LJo6ndype5wU0MW58S6F+dKgcJgEQL3gp8F1fs2Pp5t/765cWTR1L41mOhtB2 dOUvOdC9HKpSNoEmeKSJsJAYY8q1IL681EkQDmPa7G3c++fEUzV7g9ck3tA2kjwV Bwkll81F76jlaNJcRvaDtcp1aBCx3em75xgHTrHM0YVPvFDmEK+lsK+f6R3JAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbV0vM4ajn4/RkdYozPKLQBeEEFgwHwYDVR0j BBgwFoAUBMlTj6UDgpmkK5iCFjrzZjKtWI8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NEM4NTc5NEY4ODVGQ0MyN0Q1MzdCMjA0QTVCQkFEMjVG RTYxMTdFQTYxREUyODFGN0Y4M0Y4ODMzRDg1QTlCLzAvMDRDOTUzOEZBNTAzODI5 OUE0MkI5ODgyMTYzQUYzNjYzMkFENTg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNEM5NTM4RkE1MDM4Mjk5QTQy Qjk4ODIxNjNBRjM2NjMyQUQ1ODhGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzRDODU3OTRGODg1RkNDMjdENTM3QjIwNEE1QkJBRDI1RkU2MTE3RUE2 MURFMjgxRjdGODNGODgzM0Q4NUE5Qi8wLzA0Qzk1MzhGQTUwMzgyOTlBNDJCOTg4 MjE2M0FGMzY2MzJBRDU4OEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPRq5bxZgTR6spyg4u8FiG4YmA O0wlloQLQhCD5CkXN+mMrP6/YAMlWqr+9NfvreGjtu1LaL2CT0Zdjq1WvMuM1VjR +vvb+M0zFRchikfzAjYgrm6cEIDJMtSr/M7CeVtcICS0gTv5pJvZux/zxXqdXAJP p99fMNiruqmdGBUNkAvkN1RbDkksUx/Vs5o3RYWlRhyHt6CT7VN//53Dy/gDHNPV gq8l25GIvyCWfP9QuFrNZQH+RerNMDrJ1uMEMYqFhL52fPtcKF358KyOqOE2dcWV fSLaFD+1W71myOgSydliYaXag/+itc0Pc85D2/arr+BbOGB6qCg8NgmcaTnv -----END CERTIFICATE-----Generated at Wed Apr 9 10:00:57 2025 by rpki-client