$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json) Hash identifier: Oaa0czLHdB3ARpNM6RryGhrUR/ajroOvIntPbotGgj4= Subject key identifier: 58:91:FA:A2:26:02:40:8F:5E:F9:D0:65:02:CC:D3:9A:13:24:28:FC Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Certificate serial: 475F66B388B75667F0CCD2B9FD87C656BB0C04DA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft Manifest number: 0106 Signing time: Fri 22 Aug 2025 09:30:00 +0000 Manifest this update: Fri 22 Aug 2025 09:25:00 +0000 Manifest next update: Tue 26 Aug 2025 21:44:00 +0000 Files and hashes: 1: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: pt90BIyyUSHlZlm4AKVLe1Z6Moz1dZPbV9t+YfaClY0=) 2: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: cFd3Q9EzWoVwAfQDbHTCOYUkPGl1+ByD2I/74Dh9144=) 3: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: Tv46jSL3jD0k1NXV0T/tAaiSDTR6TBPS4SWa9rtammU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5f:66:b3:88:b7:56:67:f0:cc:d2:b9:fd:87:c6:56:bb:0c:04:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Validity Not Before: Aug 22 09:25:00 2025 GMT Not After : Aug 26 21:44:00 2025 GMT Subject: CN=5891FAA22602408F5EF9D06502CCD39A132428FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:ad:52:48:43:e5:f3:11:01:04:c2:c2:0d: ad:e9:cc:47:ef:83:ca:00:a3:2b:7d:ec:76:7a:1e: d4:45:ec:5c:9f:ce:d9:64:da:3f:a5:66:7e:8b:cb: 3b:61:2c:c6:57:3c:23:5b:7e:c1:1d:3a:d8:26:25: 32:8e:de:10:fe:76:42:54:f6:b4:ca:72:3e:22:30: 95:92:46:9e:7e:c7:0d:c8:c4:51:a1:41:86:84:61: 3a:15:09:3c:87:6b:6d:66:25:e8:3e:25:f9:30:69: 5f:85:7a:c3:22:80:ed:11:d0:95:d7:4c:81:70:50: ed:26:d6:49:4d:7f:80:bc:36:ab:d9:71:35:59:cc: 52:c8:ad:1b:59:5d:f5:be:7d:2a:27:5b:26:f2:4d: 2a:3a:ef:49:8c:91:75:75:c9:bf:1c:89:cd:c6:2e: c2:a6:46:14:41:fc:dd:0d:9f:68:c2:be:0e:49:91: 01:5e:44:02:2c:28:4b:9f:b6:55:cc:82:66:68:1e: d2:76:eb:05:94:ae:44:59:cf:dc:f4:6d:82:88:36: 6b:09:0f:47:5c:4c:be:2f:82:06:16:69:f5:87:09: 52:8b:02:4d:6c:e1:f7:0a:c3:15:e8:07:29:e3:e3: 54:fe:11:56:59:73:f1:5b:b3:81:26:26:34:d2:89: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:91:FA:A2:26:02:40:8F:5E:F9:D0:65:02:CC:D3:9A:13:24:28:FC X509v3 Authority Key Identifier: keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1d:ac:79:af:6c:03:45:20:58:70:0c:ef:3b:69:54:67:6e: 6f:57:be:0f:b8:89:ac:e6:44:31:95:50:2c:4a:bd:9d:cc:b2: b2:31:00:2f:f2:66:06:97:37:86:ce:a3:48:bd:03:6c:4b:d5: 0d:b8:44:1e:59:de:ea:ba:a9:7e:02:79:34:4e:6b:2e:65:97: f4:c1:88:ed:19:f1:95:85:a5:34:8f:ee:69:79:7b:62:76:01: 8d:d5:9a:87:40:67:03:81:b3:6b:09:27:78:e0:e7:82:5a:81: fc:73:be:14:74:c4:f1:74:94:d7:ef:e2:63:61:de:64:fc:9a: a6:e2:dd:8f:5c:27:7a:a5:d1:71:06:0b:a2:35:ca:ff:6d:6c: d3:72:ec:73:9e:cd:a8:db:a7:7e:6c:31:21:8e:92:76:47:b7: 28:fa:d6:c9:77:0f:2f:56:6e:0d:e4:c7:96:7a:99:7c:7f:04: 08:14:42:6d:00:8a:53:0a:af:41:fe:4c:da:df:78:4e:fc:58: 65:89:cd:d6:b8:fb:98:27:89:c8:d2:a4:61:c6:eb:b4:27:6b: 6c:82:a8:53:0e:f1:9b:10:7e:0e:bc:1c:11:72:7f:83:82:a6: 73:21:51:69:aa:8b:db:b1:ad:96:8b:3f:c8:db:dc:d9:36:29: ed:b3:ed:5a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUR19ms4i3VmfwzNK5/YfGVrsMBNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD QkE5NTM2QTAeFw0yNTA4MjIwOTI1MDBaFw0yNTA4MjYyMTQ0MDBaMDMxMTAvBgNV BAMTKDU4OTFGQUEyMjYwMjQwOEY1RUY5RDA2NTAyQ0NEMzlBMTMyNDI4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKa1SSEPl8xEBBMLCDa3pzEfv g8oAoyt97HZ6HtRF7Fyfztlk2j+lZn6LyzthLMZXPCNbfsEdOtgmJTKO3hD+dkJU 9rTKcj4iMJWSRp5+xw3IxFGhQYaEYToVCTyHa21mJeg+JfkwaV+FesMigO0R0JXX TIFwUO0m1klNf4C8NqvZcTVZzFLIrRtZXfW+fSonWybyTSo670mMkXV1yb8cic3G LsKmRhRB/N0Nn2jCvg5JkQFeRAIsKEuftlXMgmZoHtJ26wWUrkRZz9z0bYKINmsJ D0dcTL4vggYWafWHCVKLAk1s4fcKwxXoBynj41T+EVZZc/Fbs4EmJjTSiZhhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWJH6oiYCQI9e+dBlAszTmhMkKPwwHwYDVR0j BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4 MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1 OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0 RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmHax5r2wDRSBYcAzvO2lUZ25v V74PuIms5kQxlVAsSr2dzLKyMQAv8mYGlzeGzqNIvQNsS9UNuEQeWd7quql+Ank0 TmsuZZf0wYjtGfGVhaU0j+5peXtidgGN1ZqHQGcDgbNrCSd44OeCWoH8c74UdMTx dJTX7+JjYd5k/Jqm4t2PXCd6pdFxBguiNcr/bWzTcuxzns2o26d+bDEhjpJ2R7co +tbJdw8vVm4N5MeWepl8fwQIFEJtAIpTCq9B/kza33hO/Fhlic3WuPuYJ4nI0qRh xuu0J2tsgqhTDvGbEH4OvBwRcn+DgqZzIVFpqovbsa2Wiz/I29zZNints+1a -----END CERTIFICATE-----Generated at Sat Aug 23 07:09:26 2025 by rpki-client