$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft File: 9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft (raw, json) Hash identifier: 1+twD5pGj/2LaIGIB95U0DhDUGt0ZF85+VUIoCJT22c= Subject key identifier: BF:93:5C:F5:37:23:8F:2F:D3:9A:86:A1:B5:E5:A9:C4:63:F1:E0:C5 Authority key identifier: 9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25 Certificate issuer: /CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25 Certificate serial: 4D029A872FD7562653D171C779E4B9B7B91CA0C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft Manifest number: D4 Signing time: Tue 06 May 2025 19:42:59 +0000 Manifest this update: Tue 06 May 2025 19:37:59 +0000 Manifest next update: Mon 12 May 2025 00:24:59 +0000 Files and hashes: 1: 9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl (hash: 2WupBkgeRI6tkWebyC5fBMiQR63qZgT+Yj0+V1VZQgE=) 2: 3139302e38332e37322e302f32322d3234203d3e20323731383233.roa (hash: naE0dlCIvwMaCYw7JwSsXke8sXgq4Jjc+kk5bSaU4ZA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:02:9a:87:2f:d7:56:26:53:d1:71:c7:79:e4:b9:b7:b9:1c:a0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25 Validity Not Before: May 6 19:37:59 2025 GMT Not After : May 12 00:24:59 2025 GMT Subject: CN=BF935CF537238F2FD39A86A1B5E5A9C463F1E0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:7a:c8:5f:13:40:1a:5f:9a:21:76:2c:8f: 8a:e1:5a:21:ce:30:46:e5:b1:66:c8:47:0f:99:7e: c3:a8:38:86:0b:03:4a:44:ed:b8:41:7d:6a:0e:a8: 17:28:02:f1:9f:b1:5a:f6:31:35:48:cc:e1:ac:f2: 00:57:03:b9:3d:45:bd:0a:f9:5f:c8:b4:9a:4d:97: a7:6d:d6:ca:4f:82:af:9e:6a:a6:98:fa:da:70:af: bc:3f:36:0e:4b:a9:d4:35:97:ff:12:f7:7e:92:47: 75:ed:21:ed:b9:ae:e5:cc:2a:c7:54:b2:47:19:a7: 2d:55:4f:12:d4:3a:48:16:93:42:a3:1e:38:51:1a: 3c:b1:45:a9:8f:1b:df:27:6b:fe:b9:ac:1b:e5:37: e1:5a:c2:51:6b:99:4f:25:49:ec:ae:63:3e:a6:16: c3:f0:30:46:0a:4e:c2:a4:b9:e5:20:05:7c:14:c7: 24:92:f4:95:f6:62:77:49:03:f8:0f:59:7b:20:0f: d6:fa:2f:2f:db:e4:15:90:4c:f7:64:b0:f8:c1:5e: 77:00:da:93:de:77:08:20:bf:62:18:99:99:a9:39: db:bd:5a:19:0f:6f:e9:d6:fa:08:8b:de:19:5a:0f: 48:62:34:a1:89:31:35:99:e0:98:fd:3a:bd:84:a1: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:93:5C:F5:37:23:8F:2F:D3:9A:86:A1:B5:E5:A9:C4:63:F1:E0:C5 X509v3 Authority Key Identifier: keyid:9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cc:7e:64:b3:5b:f7:1d:67:77:a1:3f:44:a0:2a:08:ee:77: 5a:f1:13:3f:da:6a:37:45:54:dc:91:be:4c:13:d3:c7:22:32: 71:21:2e:4d:24:dd:63:be:6f:26:3b:f9:af:8e:17:ff:c5:27: d4:f1:8f:e6:89:34:75:79:a7:50:ce:90:5e:f2:7e:65:8b:4e: 8e:38:76:fe:3d:7c:61:1c:06:08:d7:ea:28:46:e2:99:86:4a: 5f:4d:66:be:7b:da:3f:b9:05:55:87:b7:ff:f0:ba:e1:6a:14: 11:78:7e:82:e9:77:67:2b:9a:fa:1f:c6:16:f0:35:a9:a2:e3: e4:4e:3c:98:e9:49:8d:10:0b:a3:31:0d:18:6b:72:68:ca:a1: 07:f1:0b:2d:d2:a7:63:45:92:35:58:8b:a8:ba:23:92:61:88: 89:0e:26:22:d9:83:81:e3:31:1a:87:6b:e6:44:7a:20:cd:bf: 6e:93:88:86:49:70:15:62:63:85:5d:f6:bf:00:b4:af:81:11: 7e:43:49:08:14:fa:91:15:3a:4c:f5:3f:c2:0e:5c:f8:ba:5f: 83:33:6f:b5:4b:8c:5b:a8:5c:d5:7a:2e:93:80:9a:44:c0:85: 9c:47:2e:90:1b:5e:6f:f0:35:08:3a:9a:c3:4d:6c:e0:b5:74: 8a:e5:b3:04 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTQKahy/XViZT0XHHeeS5t7kcoMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNzZGNjdGOTgxMDdDMkQ2QjNGMTQ4Q0E2QTBGRjk1 M0Y3NEIyNTAeFw0yNTA1MDYxOTM3NTlaFw0yNTA1MTIwMDI0NTlaMDMxMTAvBgNV BAMTKEJGOTM1Q0Y1MzcyMzhGMkZEMzlBODZBMUI1RTVBOUM0NjNGMUUwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSnrIXxNAGl+aIXYsj4rhWiHO MEblsWbIRw+ZfsOoOIYLA0pE7bhBfWoOqBcoAvGfsVr2MTVIzOGs8gBXA7k9Rb0K +V/ItJpNl6dt1spPgq+eaqaY+tpwr7w/Ng5LqdQ1l/8S936SR3XtIe25ruXMKsdU skcZpy1VTxLUOkgWk0KjHjhRGjyxRamPG98na/65rBvlN+FawlFrmU8lSeyuYz6m FsPwMEYKTsKkueUgBXwUxySS9JX2YndJA/gPWXsgD9b6Ly/b5BWQTPdksPjBXncA 2pPedwggv2IYmZmpOdu9WhkPb+nW+giL3hlaD0hiNKGJMTWZ4Jj9Or2EobhzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUv5Nc9Tcjjy/TmoahteWpxGPx4MUwHwYDVR0j BBgwFoAUnKdvZ/mBB8LWs/FIymoP+VP3SyUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQURGOEI0QThENjI4NUEyMDMzRjE2MDIzMzdDQUZCM0My REQ5NEVEQzJFNUEyNTQ4MDAzM0ZFREZCNzc2QjJDLzAvOUNBNzZGNjdGOTgxMDdD MkQ2QjNGMTQ4Q0E2QTBGRjk1M0Y3NEIyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Q0E3NkY2N0Y5ODEwN0MyRDZC M0YxNDhDQTZBMEZGOTUzRjc0QjI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0FERjhCNEE4RDYyODVBMjAzM0YxNjAyMzM3Q0FGQjNDMkREOTRFREMy RTVBMjU0ODAwMzNGRURGQjc3NkIyQy8wLzlDQTc2RjY3Rjk4MTA3QzJENkIzRjE0 OENBNkEwRkY5NTNGNzRCMjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvzH5ks1v3HWd3oT9EoCoI7nda 8RM/2mo3RVTckb5ME9PHIjJxIS5NJN1jvm8mO/mvjhf/xSfU8Y/miTR1eadQzpBe 8n5li06OOHb+PXxhHAYI1+ooRuKZhkpfTWa+e9o/uQVVh7f/8LrhahQReH6C6Xdn K5r6H8YW8DWpouPkTjyY6UmNEAujMQ0Ya3JoyqEH8Qst0qdjRZI1WIuouiOSYYiJ DiYi2YOB4zEah2vmRHogzb9uk4iGSXAVYmOFXfa/ALSvgRF+Q0kIFPqRFTpM9T/C Dlz4ul+DM2+1S4xbqFzVei6TgJpEwIWcRy6QG15v8DUIOprDTWzgtXSK5bME -----END CERTIFICATE-----Generated at Wed May 7 21:03:28 2025 by rpki-client