$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json) Hash identifier: 8nKDFQSLaWx6GS+k7DMPaeGHJnnNQpmk1dX+YYzl7w0= Subject key identifier: 46:91:BA:42:A5:AF:00:86:98:37:A8:65:45:9C:C6:E2:E0:CC:BC:BD Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Certificate serial: 25F020754406289F969D7780C52874237E5F0547 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft Manifest number: 0128 Signing time: Sat 18 Oct 2025 20:38:16 +0000 Manifest this update: Sat 18 Oct 2025 20:33:16 +0000 Manifest next update: Fri 24 Oct 2025 10:08:16 +0000 Files and hashes: 1: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: ECt8mCr+B8y9Wi4ZsrAQFHIb+wmNM4mOlm/WNHTm2uU=) 2: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: 2oSwKrz6vwox7aQCuIM+FoLcJChYMj4MeA8HE/N/tRY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f0:20:75:44:06:28:9f:96:9d:77:80:c5:28:74:23:7e:5f:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Validity Not Before: Oct 18 20:33:16 2025 GMT Not After : Oct 24 10:08:16 2025 GMT Subject: CN=4691BA42A5AF00869837A865459CC6E2E0CCBCBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:3f:05:24:56:0a:c4:ca:71:b0:8b:84:33: 48:a5:df:10:10:30:66:93:79:3d:0a:89:56:a0:e6: de:40:83:88:08:13:b3:d0:64:e6:99:ac:82:97:d3: f9:1f:2a:8e:b6:d6:a4:b3:ff:7f:bd:23:10:66:2c: 51:68:fa:76:36:b3:bb:0f:99:6b:a3:b9:0b:9b:4d: bd:55:46:3d:60:32:14:1f:63:e4:2a:43:a5:05:39: 42:20:00:45:4d:c3:e9:6d:c2:47:9f:13:71:4d:ab: a5:23:d0:ba:b8:06:de:a7:f6:f0:e7:d4:c4:dd:57: e8:1f:2d:5b:06:97:00:03:95:d1:b7:d6:62:6d:40: 3a:be:20:49:71:4e:2c:b5:cd:52:23:e8:08:43:9a: ad:43:12:03:cf:de:a7:35:a9:f6:cf:93:42:0f:9d: 4b:29:ea:b2:e1:43:f6:9c:8e:9c:e2:4a:d7:33:09: 7c:11:04:6d:9f:ef:2e:e3:32:6e:a3:46:f4:17:30: cc:44:52:c0:4d:0a:b1:ed:04:b9:b3:ba:59:99:40: de:74:80:de:c1:ad:e4:48:15:3b:bf:31:ac:95:49: 78:bd:ff:a2:e3:8f:5f:99:dc:02:28:cf:8f:d4:bf: 22:7d:d1:49:3f:6e:9b:14:db:23:0a:4c:d4:ac:e2: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:91:BA:42:A5:AF:00:86:98:37:A8:65:45:9C:C6:E2:E0:CC:BC:BD X509v3 Authority Key Identifier: keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:69:2d:49:17:65:07:6e:60:78:61:9f:e0:5c:e4:b1:c8:45: 69:9c:a5:2a:41:f7:fd:19:82:6b:0d:15:ee:ef:c7:db:46:af: 47:b1:df:df:a0:3c:32:00:79:3a:4c:b5:17:87:41:20:3c:b4: 7a:55:c9:31:19:a2:19:c7:3c:e6:44:3a:04:13:ff:01:d5:e4: 87:d6:96:59:45:e3:67:06:28:06:6a:5c:23:be:21:4a:2c:d3: 9e:c6:22:94:24:68:b9:68:54:52:8a:29:27:99:e5:bf:bb:99: b7:27:3a:63:85:d3:e8:4b:ac:bb:39:09:33:17:62:f0:ec:5f: 1a:e4:3e:72:78:13:29:e6:89:de:4f:59:3e:9c:6e:79:51:d8: c9:39:81:de:62:9f:c1:b8:b1:11:bb:e9:36:75:0a:69:c8:0d: 76:47:cd:c7:17:a7:fc:5c:a2:8b:7f:b3:f1:30:fc:f2:aa:30: c1:98:a9:b9:94:50:77:51:f2:fc:61:72:1a:c0:a4:3b:40:ec: 90:d3:98:8d:ca:84:2c:b6:e0:53:0d:13:a4:77:42:c1:59:b1: 2e:5b:ed:3d:e5:4a:72:b0:ae:fe:dc:23:8c:ef:e1:3d:e7:08: 39:1f:d6:f5:02:fa:78:91:c7:bf:45:48:2b:8a:3e:f4:81:e8: 64:90:93:5b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJfAgdUQGKJ+WnXeAxSh0I35fBUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAyMTcxNkRCODcyQUZFQTMwMkU4ODE3MzRDM0QwM0Ix RENFMTM4NDAeFw0yNTEwMTgyMDMzMTZaFw0yNTEwMjQxMDA4MTZaMDMxMTAvBgNV BAMTKDQ2OTFCQTQyQTVBRjAwODY5ODM3QTg2NTQ1OUNDNkUyRTBDQ0JDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjT8FJFYKxMpxsIuEM0il3xAQ MGaTeT0KiVag5t5Ag4gIE7PQZOaZrIKX0/kfKo621qSz/3+9IxBmLFFo+nY2s7sP mWujuQubTb1VRj1gMhQfY+QqQ6UFOUIgAEVNw+ltwkefE3FNq6Uj0Lq4Bt6n9vDn 1MTdV+gfLVsGlwADldG31mJtQDq+IElxTiy1zVIj6AhDmq1DEgPP3qc1qfbPk0IP nUsp6rLhQ/acjpziStczCXwRBG2f7y7jMm6jRvQXMMxEUsBNCrHtBLmzulmZQN50 gN7BreRIFTu/MayVSXi9/6Ljj1+Z3AIoz4/UvyJ90Uk/bpsU2yMKTNSs4niVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURpG6QqWvAIaYN6hlRZzG4uDMvL0wHwYDVR0j BBgwFoAUUCFxbbhyr+owLogXNMPQOx3OE4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Mjk3QjcwNzhGQjFCNTIxMDA2RDc1MUEzMkEyQUMzNUY2 MTQ2MTc1MjI0ODRGODg3RTVFNzdBMkNGQzc1MjU3LzAvNTAyMTcxNkRCODcyQUZF QTMwMkU4ODE3MzRDM0QwM0IxRENFMTM4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDIxNzE2REI4NzJBRkVBMzAy RTg4MTczNEMzRDAzQjFEQ0UxMzg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTI5N0I3MDc4RkIxQjUyMTAwNkQ3NTFBMzJBMkFDMzVGNjE0NjE3NTIy NDg0Rjg4N0U1RTc3QTJDRkM3NTI1Ny8wLzUwMjE3MTZEQjg3MkFGRUEzMDJFODgx NzM0QzNEMDNCMURDRTEzODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlaS1JF2UHbmB4YZ/gXOSxyEVp nKUqQff9GYJrDRXu78fbRq9Hsd/foDwyAHk6TLUXh0EgPLR6VckxGaIZxzzmRDoE E/8B1eSH1pZZReNnBigGalwjviFKLNOexiKUJGi5aFRSiiknmeW/u5m3JzpjhdPo S6y7OQkzF2Lw7F8a5D5yeBMp5oneT1k+nG55UdjJOYHeYp/BuLERu+k2dQppyA12 R83HF6f8XKKLf7PxMPzyqjDBmKm5lFB3UfL8YXIawKQ7QOyQ05iNyoQstuBTDROk d0LBWbEuW+095UpysK7+3COM7+E95wg5H9b1Avp4kce/RUgrij70gehkkJNb -----END CERTIFICATE-----Generated at Mon Oct 20 17:40:33 2025 by rpki-client