$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft File: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft (raw, json) Hash identifier: lTbj/CGsHmbUxsmGV2OAy2A+t8GvlLLFlCj1W4/Okn0= Subject key identifier: 17:81:FF:20:0E:6D:5A:87:C8:58:33:74:67:4D:56:1E:09:13:94:4F Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56 Certificate issuer: /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156 Certificate serial: 585576212A2F8F70A9E972CDB88FAEB021285EA0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft Manifest number: CA Signing time: Thu 17 Apr 2025 09:08:35 +0000 Manifest this update: Thu 17 Apr 2025 09:03:35 +0000 Manifest next update: Tue 22 Apr 2025 22:19:35 +0000 Files and hashes: 1: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl (hash: nmAraSDVedAwg5BJNzczSTjX12C10gi1sA+FDYkD5uA=) 2: 34352e3232382e37362e302f32322d3234203d3e20323636363832.roa (hash: X8Sd9rr701dSiL89yNgvS6Q1b0L6cbaVNSkxdbqaPgY=) 3: 34352e3232382e37362e302f32322d3235203d3e20323636363832.roa (hash: Qj1LKzDil2G8jfRYcM+NQ5C78K436vCkYIuF6PD7p4c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:55:76:21:2a:2f:8f:70:a9:e9:72:cd:b8:8f:ae:b0:21:28:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156 Validity Not Before: Apr 17 09:03:35 2025 GMT Not After : Apr 22 22:19:35 2025 GMT Subject: CN=1781FF200E6D5A87C8583374674D561E0913944F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:38:c8:4f:f7:6e:50:94:05:25:84:bc:1f: 03:db:74:9a:ad:3a:74:c7:14:23:2d:e5:31:b0:4e: a6:d8:72:b4:39:16:df:a8:20:4d:e9:28:c8:31:2d: de:f0:22:c7:55:80:8f:dd:b3:72:76:54:34:ab:a7: 2b:01:1b:2c:05:bd:3b:e8:dd:31:b4:55:f2:18:17: d3:2f:82:33:76:12:b5:f7:6a:00:d6:03:6f:20:ac: 00:7f:e6:cb:63:56:ec:f3:ce:d2:6b:f4:17:3e:5d: d1:a8:d4:bb:f1:9e:c4:f7:61:a5:94:63:f6:21:48: 85:ea:90:df:25:78:47:e7:9b:d2:b7:dd:5e:80:77: d5:08:7d:7b:d4:d3:77:6d:4b:39:11:ad:eb:50:09: 43:e2:14:50:30:cd:b3:1f:b3:7c:6a:a7:d8:ce:84: e9:1f:1c:60:d3:b1:4f:4b:b6:9f:24:75:43:42:ae: 5d:96:9e:74:dc:1c:95:ac:2e:be:11:52:69:9a:11: d4:61:90:12:4a:65:fd:06:c1:ee:ed:7e:5c:1e:2f: eb:a3:d6:23:ce:2b:8f:d3:cc:ca:27:8e:3b:ca:84: 76:54:47:37:31:f2:3d:64:f7:40:d3:be:3e:02:6a: c9:c2:7d:0e:1a:42:f0:6f:b6:3d:4b:50:64:73:22: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:81:FF:20:0E:6D:5A:87:C8:58:33:74:67:4D:56:1E:09:13:94:4F X509v3 Authority Key Identifier: keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6d:55:04:22:7f:d2:62:38:76:08:1d:93:f5:c1:e8:ab:17: ac:87:60:87:ec:1f:e7:59:69:95:70:4a:00:f7:05:ae:69:20: f5:eb:c8:55:61:c1:a5:e2:74:ac:02:ec:82:5f:e5:e1:07:2b: f2:af:22:ea:62:54:8a:44:7c:9d:fd:17:c7:43:c5:f2:c0:75: 20:42:db:c1:01:8d:dc:b4:5e:fb:79:db:ff:2b:09:7e:9e:5d: 4d:78:e3:cb:00:e6:c7:fd:c6:86:66:81:bf:10:84:14:1f:a3: 8e:e7:8e:43:12:90:05:f2:65:a9:7b:4f:9a:2f:aa:2d:44:73: 51:df:8c:ee:19:f1:2f:d4:a3:af:5d:55:61:e5:db:ed:5f:c2: 9c:ef:6b:3c:5d:72:80:e8:8d:ec:69:fe:be:59:5e:e5:7d:3d: 0d:5f:12:10:2a:6d:4b:13:77:3c:3b:2d:b1:fe:49:44:0e:fe: 29:b0:43:82:d2:bc:74:ca:ea:6e:73:0b:ad:1f:99:fd:66:13: fd:28:63:21:fa:3f:28:29:66:33:bf:2e:61:d0:09:d0:6f:e1: 58:82:b7:3a:f9:4a:8c:ed:3b:99:c3:b1:64:33:10:d1:94:69: e8:1e:3a:b5:af:19:67:ef:62:df:25:bc:a6:08:96:d7:dd:91: 33:4c:18:62 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWFV2ISovj3Cp6XLNuI+usCEoXqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4QzUzMDhBOEFGMkQ0MjBDQjlBQzgxNjNDNjA2RDQz RDNBODE1NjAeFw0yNTA0MTcwOTAzMzVaFw0yNTA0MjIyMjE5MzVaMDMxMTAvBgNV BAMTKDE3ODFGRjIwMEU2RDVBODdDODU4MzM3NDY3NEQ1NjFFMDkxMzk0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yzjIT/duUJQFJYS8HwPbdJqt OnTHFCMt5TGwTqbYcrQ5Ft+oIE3pKMgxLd7wIsdVgI/ds3J2VDSrpysBGywFvTvo 3TG0VfIYF9MvgjN2ErX3agDWA28grAB/5stjVuzzztJr9Bc+XdGo1LvxnsT3YaWU Y/YhSIXqkN8leEfnm9K33V6Ad9UIfXvU03dtSzkRretQCUPiFFAwzbMfs3xqp9jO hOkfHGDTsU9Ltp8kdUNCrl2WnnTcHJWsLr4RUmmaEdRhkBJKZf0Gwe7tflweL+uj 1iPOK4/TzMonjjvKhHZURzcx8j1k90DTvj4CasnCfQ4aQvBvtj1LUGRzIhPdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUF4H/IA5tWofIWDN0Z01WHgkTlE8wHwYDVR0j BBgwFoAUU4xTCKivLUIMuayBY8YG1D06gVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTExRjkzMDU4MjZEMzYzMzRFNDREMTMxMzYzQkVDRTE1 OUY1QkYwNTJCMjFENDUzNzIzRDM1NTUxQTQwQ0I5LzAvNTM4QzUzMDhBOEFGMkQ0 MjBDQjlBQzgxNjNDNjA2RDQzRDNBODE1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MzhDNTMwOEE4QUYyRDQyMENC OUFDODE2M0M2MDZENDNEM0E4MTU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUExMUY5MzA1ODI2RDM2MzM0RTQ0RDEzMTM2M0JFQ0UxNTlGNUJGMDUy QjIxRDQ1MzcyM0QzNTU1MUE0MENCOS8wLzUzOEM1MzA4QThBRjJENDIwQ0I5QUM4 MTYzQzYwNkQ0M0QzQTgxNTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCObVUEIn/SYjh2CB2T9cHoqxes h2CH7B/nWWmVcEoA9wWuaSD168hVYcGl4nSsAuyCX+XhByvyryLqYlSKRHyd/RfH Q8XywHUgQtvBAY3ctF77edv/Kwl+nl1NeOPLAObH/caGZoG/EIQUH6OO545DEpAF 8mWpe0+aL6otRHNR34zuGfEv1KOvXVVh5dvtX8Kc72s8XXKA6I3saf6+WV7lfT0N XxIQKm1LE3c8Oy2x/klEDv4psEOC0rx0yupucwutH5n9ZhP9KGMh+j8oKWYzvy5h 0AnQb+FYgrc6+UqM7TuZw7FkMxDRlGnoHjq1rxln72LfJbymCJbX3ZEzTBhi -----END CERTIFICATE-----Generated at Fri Apr 18 21:05:25 2025 by rpki-client