$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json) Hash identifier: autdrUot29CQ4pIc0BavzovyP6lJ9dXKW0vgiMLD3uo= Subject key identifier: AF:61:BB:02:51:DA:51:F7:4C:57:F6:DD:4C:31:83:C4:F8:D1:79:42 Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Certificate serial: 2CFA6A34BB87B123355AF1A3A558F640C6B1AB2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft Manifest number: 0122 Signing time: Mon 20 Oct 2025 01:22:07 +0000 Manifest this update: Mon 20 Oct 2025 01:17:07 +0000 Manifest next update: Fri 24 Oct 2025 17:17:07 +0000 Files and hashes: 1: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: Tv46jSL3jD0k1NXV0T/tAaiSDTR6TBPS4SWa9rtammU=) 2: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: 8A9FHfP6NN9cWk1oIwdDRuYrRstMjNYIhDIs21D/zB4=) 3: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: pt90BIyyUSHlZlm4AKVLe1Z6Moz1dZPbV9t+YfaClY0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fa:6a:34:bb:87:b1:23:35:5a:f1:a3:a5:58:f6:40:c6:b1:ab:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Validity Not Before: Oct 20 01:17:07 2025 GMT Not After : Oct 24 17:17:07 2025 GMT Subject: CN=AF61BB0251DA51F74C57F6DD4C3183C4F8D17942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5c:86:76:d9:24:16:80:9b:7b:f7:16:5a:c7: c1:0f:4a:1f:26:a1:a1:0b:d2:22:47:c5:7c:ec:78: 71:37:d4:0d:62:3e:2e:5e:04:e0:ff:ed:b2:f1:70: 3e:69:83:40:5f:6f:66:38:a7:28:19:a7:2f:05:05: 12:a7:c5:a3:49:b6:9d:ea:fd:d4:35:ef:e8:e4:18: cd:04:6b:5b:90:b6:1a:ae:6c:26:0f:45:fb:96:dc: b0:af:09:33:a4:0f:cf:03:96:0e:69:d1:2c:3f:66: 67:9f:0c:8a:99:b3:87:16:23:fb:f4:25:59:0f:92: 0c:1c:1a:da:ba:7e:eb:8c:fb:64:22:46:c4:82:03: a4:4c:31:03:f7:f7:8e:6c:f9:e8:a3:01:e1:33:52: 62:4b:00:0f:f8:a1:c0:57:e2:58:8e:f9:90:bf:49: fa:04:39:ea:e6:25:43:35:c6:47:05:02:37:45:15: d1:c7:ea:63:68:cf:e1:3c:89:0a:e9:a2:b3:96:f7: b7:4a:2f:a0:f0:2c:13:a7:1c:4d:03:9f:3d:8c:1b: bc:9f:6f:e1:07:c4:3b:1d:b7:f4:fb:2c:14:de:b1: 53:45:40:48:59:26:d7:ab:f3:b7:60:6b:56:30:73: 6a:83:70:bf:05:4a:b7:44:d9:a2:ca:a5:d4:3c:e4: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:BB:02:51:DA:51:F7:4C:57:F6:DD:4C:31:83:C4:F8:D1:79:42 X509v3 Authority Key Identifier: keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f1:da:92:cf:5f:fe:7e:a1:58:bf:51:fb:74:56:f0:0f:8c: bc:0a:e8:bd:fa:a6:05:2c:fb:58:3c:7d:22:aa:bb:fd:ee:30: b9:e4:c5:85:ad:44:73:89:28:28:f1:41:42:df:9d:0d:3e:92: 8d:f2:0c:d1:ca:69:5f:f1:98:aa:9e:d7:8e:36:d4:cc:c1:b2: 7b:8b:4e:71:94:72:2c:18:3c:80:b8:7e:fc:f8:ef:f9:c8:db: 20:e5:89:7e:8c:34:02:bf:0b:ee:53:95:80:44:75:65:7d:98: f3:8c:09:ca:dc:bf:bc:d7:dd:b1:fe:1b:a3:ff:10:09:70:50: c9:4d:26:7b:0b:f8:5e:ba:a2:7a:da:69:f3:6b:72:a1:e8:59: 10:49:56:50:81:0c:5a:ad:6b:7e:1a:08:7f:c4:ce:7c:8e:83: f8:8b:9c:3b:7c:85:fd:47:f0:f2:70:3b:ce:8d:2e:2d:4a:c5: 6e:ef:91:70:85:6c:d9:0c:f2:59:22:34:67:71:d6:8c:1d:27: ab:44:cc:8e:46:2b:5e:3e:22:9c:b6:a3:8f:07:b1:9c:13:a8: 3c:93:bd:38:fe:7a:c2:7e:6d:e3:78:03:85:dd:1a:22:65:32: 2b:a4:97:22:f2:d7:8e:06:dd:b4:83:cf:a2:88:07:c8:21:fa: f2:50:69:9d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULPpqNLuHsSM1WvGjpVj2QMaxqyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD QkE5NTM2QTAeFw0yNTEwMjAwMTE3MDdaFw0yNTEwMjQxNzE3MDdaMDMxMTAvBgNV BAMTKEFGNjFCQjAyNTFEQTUxRjc0QzU3RjZERDRDMzE4M0M0RjhEMTc5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXIZ22SQWgJt79xZax8EPSh8m oaEL0iJHxXzseHE31A1iPi5eBOD/7bLxcD5pg0Bfb2Y4pygZpy8FBRKnxaNJtp3q /dQ17+jkGM0Ea1uQthqubCYPRfuW3LCvCTOkD88Dlg5p0Sw/ZmefDIqZs4cWI/v0 JVkPkgwcGtq6fuuM+2QiRsSCA6RMMQP3945s+eijAeEzUmJLAA/4ocBX4liO+ZC/ SfoEOermJUM1xkcFAjdFFdHH6mNoz+E8iQrporOW97dKL6DwLBOnHE0Dnz2MG7yf b+EHxDsdt/T7LBTesVNFQEhZJter87dga1Ywc2qDcL8FSrdE2aLKpdQ85OkJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUr2G7AlHaUfdMV/bdTDGDxPjReUIwHwYDVR0j BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4 MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1 OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0 RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCp8dqSz1/+fqFYv1H7dFbwD4y8 Cui9+qYFLPtYPH0iqrv97jC55MWFrURziSgo8UFC350NPpKN8gzRymlf8ZiqnteO NtTMwbJ7i05xlHIsGDyAuH78+O/5yNsg5Yl+jDQCvwvuU5WARHVlfZjzjAnK3L+8 192x/huj/xAJcFDJTSZ7C/heuqJ62mnza3Kh6FkQSVZQgQxarWt+Ggh/xM58joP4 i5w7fIX9R/DycDvOjS4tSsVu75FwhWzZDPJZIjRncdaMHSerRMyORitePiKctqOP B7GcE6g8k704/nrCfm3jeAOF3RoiZTIrpJci8teOBt20g8+iiAfIIfryUGmd -----END CERTIFICATE-----Generated at Mon Oct 20 17:39:55 2025 by rpki-client