$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft File: 921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft (raw, json) Hash identifier: 6fmVWUzd4TofMcVESlovBK6PHTSSlLZwuJIIUaTivTM= Subject key identifier: 15:1C:66:CC:C2:15:75:6A:8F:10:B1:AA:7D:E8:97:76:E4:02:BE:02 Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78 Certificate issuer: /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78 Certificate serial: 3D34ABD675B14A75500DDB7DC3652946E55F9BBA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft Manifest number: 0134 Signing time: Mon 20 Oct 2025 20:40:10 +0000 Manifest this update: Mon 20 Oct 2025 20:35:10 +0000 Manifest next update: Sat 25 Oct 2025 18:17:10 +0000 Files and hashes: 1: 323830333a663031303a3a2f33322d3332203d3e20323731383133.roa (hash: qqaslk0sU9AVspa6G1XMiSSBA6ctOLUE9WOLUGr6ebk=) 2: 921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl (hash: Zgu9WcfxJP6gclLKlVNMB04Kh8qreGEr2zGroVYslL4=) 3: 3139302e3132332e36362e302f32332d3234203d3e20323731383133.roa (hash: lGqiVOySeA88pTskmceKH2mr63xGVaLP3uK4+dUdJ3U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:34:ab:d6:75:b1:4a:75:50:0d:db:7d:c3:65:29:46:e5:5f:9b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78 Validity Not Before: Oct 20 20:35:10 2025 GMT Not After : Oct 25 18:17:10 2025 GMT Subject: CN=151C66CCC215756A8F10B1AA7DE89776E402BE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:25:bf:0e:fa:3e:a8:f2:f7:2f:dd:00:79: 79:e6:f2:e2:b8:a6:81:67:ac:1b:38:81:ea:9e:fb: 37:db:68:01:fd:bd:9b:bd:54:fd:8d:5e:fe:b5:67: a8:7d:6f:cb:27:86:30:ec:3c:1e:29:dd:a6:fc:ee: 02:c6:a0:96:a0:ea:42:82:37:57:82:2b:a1:4e:f1: be:96:8b:78:3f:eb:d0:4f:b6:7c:4c:4e:45:4f:01: aa:12:cf:51:4d:59:c8:e8:34:8b:fb:b7:a3:b8:cf: 50:59:f5:1e:2a:26:7c:8e:40:b1:64:70:ec:fc:49: 58:ed:33:2b:07:a3:bd:7c:18:d6:df:1e:4e:22:0f: b4:96:28:e1:46:e8:06:70:f9:27:8e:e9:30:8d:17: 85:bb:43:17:59:c0:d5:c5:b7:ba:f6:69:17:87:1c: 38:91:34:5c:88:dc:08:6f:9e:d9:05:99:61:2f:29: ca:ea:e6:7b:f8:74:e4:d9:f9:ae:aa:53:bb:cb:34: 8e:22:68:d1:f4:ff:87:8b:f5:12:a5:6c:7b:01:18: 28:3f:ee:83:7b:72:0a:16:f3:12:10:4c:ee:7d:62: c5:55:91:3d:54:b4:02:c0:02:29:29:2c:32:c2:b6: 04:28:7e:c5:cb:d0:fd:3d:1b:e4:45:7e:48:d5:6b: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:66:CC:C2:15:75:6A:8F:10:B1:AA:7D:E8:97:76:E4:02:BE:02 X509v3 Authority Key Identifier: keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3c:a4:5f:4c:93:9f:08:27:a9:62:17:21:d8:91:54:8f:72: 3e:50:88:29:a0:fa:d9:55:99:ba:18:a7:20:cd:44:8a:f3:f4: fd:ae:ea:57:3a:2a:ed:fd:1f:3a:dc:9b:a2:b2:69:4d:98:d4: 93:17:80:bf:40:d5:47:ba:11:e8:69:4f:aa:7d:0d:2a:b9:09: 5d:51:cb:24:58:87:5a:38:65:ee:37:74:ff:24:32:74:ec:3c: b5:74:aa:f7:b7:36:ef:d7:be:9f:49:ca:53:79:d7:6c:ef:ef: 41:51:bc:64:4f:b9:b7:ca:d2:a1:4d:6a:d0:a1:04:70:95:db: bb:2d:2c:43:99:f2:0c:53:a9:6b:db:34:d5:07:58:9e:3a:dc: 04:29:fc:59:fa:8f:0f:c3:c0:5b:de:0f:02:6c:a2:93:ed:08: 54:dc:55:f3:50:b8:fb:d9:e7:1f:36:ce:de:a4:21:76:e2:35: ce:1f:dc:01:8b:61:8a:cf:ad:ea:34:9f:48:ea:7b:03:44:bf: 2d:b2:65:d8:84:3b:b2:1e:c9:18:d1:bc:62:cc:c2:00:6d:26: 52:e7:3d:58:6a:e5:c4:a1:71:19:42:80:01:22:ed:a1:21:33: 45:3d:57:36:09:5f:c5:f3:25:ae:7c:d4:19:5c:6d:58:77:fc: 31:ec:b6:c5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPTSr1nWxSnVQDdt9w2UpRuVfm7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxOTM1RURENjdFOUMxODE2RTcwM0YxREFCRkZCRjg2 Q0ZBMUI3ODAeFw0yNTEwMjAyMDM1MTBaFw0yNTEwMjUxODE3MTBaMDMxMTAvBgNV BAMTKDE1MUM2NkNDQzIxNTc1NkE4RjEwQjFBQTdERTg5Nzc2RTQwMkJFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5SW/Dvo+qPL3L90AeXnm8uK4 poFnrBs4geqe+zfbaAH9vZu9VP2NXv61Z6h9b8snhjDsPB4p3ab87gLGoJag6kKC N1eCK6FO8b6Wi3g/69BPtnxMTkVPAaoSz1FNWcjoNIv7t6O4z1BZ9R4qJnyOQLFk cOz8SVjtMysHo718GNbfHk4iD7SWKOFG6AZw+SeO6TCNF4W7QxdZwNXFt7r2aReH HDiRNFyI3AhvntkFmWEvKcrq5nv4dOTZ+a6qU7vLNI4iaNH0/4eL9RKlbHsBGCg/ 7oN7cgoW8xIQTO59YsVVkT1UtALAAikpLDLCtgQofsXL0P09G+RFfkjVazyjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFRxmzMIVdWqPELGqfeiXduQCvgIwHwYDVR0j BBgwFoAUkhk17dZ+nBgW5wPx2r/7+Gz6G3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MzgzNThBNDQ2N0VFQzNDMERBN0NGMkU1RDNGM0E0MkIy QTIyQjNENEFCNjMxQThENjlFOUVFMDg4NEYxQzAzLzAvOTIxOTM1RURENjdFOUMx ODE2RTcwM0YxREFCRkZCRjg2Q0ZBMUI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjE5MzVFREQ2N0U5QzE4MTZF NzAzRjFEQUJGRkJGODZDRkExQjc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTM4MzU4QTQ0NjdFRUMzQzBEQTdDRjJFNUQzRjNBNDJCMkEyMkIzRDRB QjYzMUE4RDY5RTlFRTA4ODRGMUMwMy8wLzkyMTkzNUVERDY3RTlDMTgxNkU3MDNG MURBQkZGQkY4NkNGQTFCNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjPKRfTJOfCCepYhch2JFUj3I+ UIgpoPrZVZm6GKcgzUSK8/T9rupXOirt/R863JuismlNmNSTF4C/QNVHuhHoaU+q fQ0quQldUcskWIdaOGXuN3T/JDJ07Dy1dKr3tzbv176fScpTedds7+9BUbxkT7m3 ytKhTWrQoQRwldu7LSxDmfIMU6lr2zTVB1ieOtwEKfxZ+o8Pw8Bb3g8CbKKT7QhU 3FXzULj72ecfNs7epCF24jXOH9wBi2GKz63qNJ9I6nsDRL8tsmXYhDuyHskY0bxi zMIAbSZS5z1YauXEoXEZQoABIu2hITNFPVc2CV/F8yWufNQZXG1Yd/wx7LbF -----END CERTIFICATE-----Generated at Tue Oct 21 02:37:02 2025 by rpki-client