$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json) Hash identifier: RdtrCt5sQYdOxRQ0tGBOYbRVytlAl4Cs97PnNMRBGBg= Subject key identifier: 18:8D:20:A6:03:59:24:B4:66:90:CE:39:40:36:CD:E1:C5:7E:8E:6C Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Certificate serial: 1B7D6B3A3A169E6394EB21B47CB0E864FDD2440A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft Manifest number: EE Signing time: Tue 01 Jul 2025 13:33:36 +0000 Manifest this update: Tue 01 Jul 2025 13:28:36 +0000 Manifest next update: Mon 07 Jul 2025 11:02:36 +0000 Files and hashes: 1: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: 4NG9sHJY7QRHGxIeb64zbA2sC32/7e3qcEMEpeebAF0=) 2: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: pt90BIyyUSHlZlm4AKVLe1Z6Moz1dZPbV9t+YfaClY0=) 3: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: Tv46jSL3jD0k1NXV0T/tAaiSDTR6TBPS4SWa9rtammU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 11:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7d:6b:3a:3a:16:9e:63:94:eb:21:b4:7c:b0:e8:64:fd:d2:44:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Validity Not Before: Jul 1 13:28:36 2025 GMT Not After : Jul 7 11:02:36 2025 GMT Subject: CN=188D20A6035924B46690CE394036CDE1C57E8E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:93:f8:ef:6f:d8:73:41:11:17:81:69:30:12: 9f:fb:08:b3:2e:92:fb:3e:2a:37:0a:d8:0a:98:1f: 6c:fe:7d:c4:b0:aa:42:0a:80:3b:85:db:dd:ce:8f: 74:8f:85:85:2e:8d:bb:8e:dd:d9:3e:d1:2f:56:54: 7a:24:41:64:48:c7:3c:f1:de:ca:04:dd:e5:45:cd: ae:4a:76:3f:35:1e:1a:7f:6a:48:6a:18:50:26:0f: 79:89:bb:56:d8:38:c5:13:3c:4d:e6:be:83:4c:14: 2e:c2:b6:9a:1e:d8:a8:ab:3c:0e:7d:cd:be:6d:e7: 6c:3e:ae:79:91:44:c5:4b:46:0f:58:63:72:af:98: de:97:88:6a:59:b8:38:c8:5b:59:07:46:1e:41:c0: bf:e2:17:6d:f1:17:67:fd:9c:34:7e:b6:26:21:ac: 9d:a2:79:75:2c:39:19:c0:50:ce:e4:8b:4b:3e:07: fd:54:51:2d:4a:39:54:80:7f:2c:cc:e5:04:b5:db: 2c:50:3b:43:70:90:f4:3b:1f:a2:b2:4c:1c:b3:6e: a4:62:ff:09:d7:ff:5d:cd:20:de:46:7b:c0:17:aa: d7:52:de:ad:bc:62:5f:6f:6a:ad:1c:f0:63:56:45: 91:8e:8a:93:fa:84:7a:a4:95:1c:1f:18:94:93:81: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8D:20:A6:03:59:24:B4:66:90:CE:39:40:36:CD:E1:C5:7E:8E:6C X509v3 Authority Key Identifier: keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c9:38:d5:f3:8b:27:e0:53:b1:48:b0:97:2a:6f:ea:d5:f0: c2:92:68:13:7b:06:ee:a8:2f:59:65:14:d9:62:81:9d:52:56: 75:58:0d:ae:cd:82:ff:64:f8:de:f1:64:4e:2d:fb:be:a5:24: 24:e6:1f:f7:d1:d3:13:ed:94:50:59:e8:91:6f:8d:1f:c9:d0: 99:ef:08:a1:98:cc:4f:17:7e:ea:00:62:18:83:d5:15:00:1d: 6e:87:5b:cb:46:25:10:6a:1f:a9:96:f6:65:bb:7f:e4:d4:c0: 26:56:e2:3b:66:c0:03:ca:8d:6f:12:ff:13:31:5e:da:65:4e: 58:ff:58:3c:33:26:5c:34:2a:d8:ca:b1:d5:1b:b6:4d:f9:de: 9a:91:22:34:e3:77:ce:4e:1d:8a:45:4f:32:19:cd:80:8b:39: c5:ce:b7:25:7e:54:ff:d7:7d:56:71:63:0d:59:93:1b:56:b1: d6:4b:34:e8:4a:0f:82:9c:6b:7b:c0:81:3b:09:e5:77:b5:9d: 9d:56:57:b7:3a:7a:a5:1a:89:17:15:94:2f:f5:36:f4:23:e1: e7:4e:31:19:2e:fc:0c:a1:44:b1:9c:bb:53:b3:ae:cd:7f:94: a1:e1:d3:dc:59:50:1d:01:46:04:a4:67:7f:e2:7b:31:84:05: 9b:13:d3:1f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG31rOjoWnmOU6yG0fLDoZP3SRAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD QkE5NTM2QTAeFw0yNTA3MDExMzI4MzZaFw0yNTA3MDcxMTAyMzZaMDMxMTAvBgNV BAMTKDE4OEQyMEE2MDM1OTI0QjQ2NjkwQ0UzOTQwMzZDREUxQzU3RThFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZk/jvb9hzQREXgWkwEp/7CLMu kvs+KjcK2AqYH2z+fcSwqkIKgDuF293Oj3SPhYUujbuO3dk+0S9WVHokQWRIxzzx 3soE3eVFza5Kdj81Hhp/akhqGFAmD3mJu1bYOMUTPE3mvoNMFC7Ctpoe2KirPA59 zb5t52w+rnmRRMVLRg9YY3KvmN6XiGpZuDjIW1kHRh5BwL/iF23xF2f9nDR+tiYh rJ2ieXUsORnAUM7ki0s+B/1UUS1KOVSAfyzM5QS12yxQO0NwkPQ7H6KyTByzbqRi /wnX/13NIN5Ge8AXqtdS3q28Yl9vaq0c8GNWRZGOipP6hHqklRwfGJSTgS6vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGI0gpgNZJLRmkM45QDbN4cV+jmwwHwYDVR0j BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4 MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1 OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0 RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAByTjV84sn4FOxSLCXKm/q1fDC kmgTewbuqC9ZZRTZYoGdUlZ1WA2uzYL/ZPje8WROLfu+pSQk5h/30dMT7ZRQWeiR b40fydCZ7wihmMxPF37qAGIYg9UVAB1uh1vLRiUQah+plvZlu3/k1MAmVuI7ZsAD yo1vEv8TMV7aZU5Y/1g8MyZcNCrYyrHVG7ZN+d6akSI043fOTh2KRU8yGc2AiznF zrclflT/131WcWMNWZMbVrHWSzToSg+CnGt7wIE7CeV3tZ2dVle3OnqlGokXFZQv 9Tb0I+HnTjEZLvwMoUSxnLtTs67Nf5Sh4dPcWVAdAUYEpGd/4nsxhAWbE9Mf -----END CERTIFICATE-----Generated at Fri Jul 4 05:25:52 2025 by rpki-client