$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft File: 921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft (raw, json) Hash identifier: SHXj/sSuCbbcbbWpCjBe9n4Q+ZY8wj3T5XBs5NEkhdY= Subject key identifier: FF:60:C0:E4:62:0A:BD:A1:F7:89:34:AC:A5:51:1B:C6:AA:A7:25:79 Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78 Certificate issuer: /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78 Certificate serial: 4ED909F21198AC916129B6315C25054E873BFFD7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft Manifest number: 0115 Signing time: Fri 22 Aug 2025 10:10:25 +0000 Manifest this update: Fri 22 Aug 2025 10:05:25 +0000 Manifest next update: Tue 26 Aug 2025 17:28:25 +0000 Files and hashes: 1: 323830333a663031303a3a2f33322d3332203d3e20323731383133.roa (hash: qqaslk0sU9AVspa6G1XMiSSBA6ctOLUE9WOLUGr6ebk=) 2: 921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl (hash: xguXRT6FSlJ9WxOa2E2KTFDVkVRfbnp0fdOhhhYDmzo=) 3: 3139302e3132332e36362e302f32332d3234203d3e20323731383133.roa (hash: NpOLpLhTWwA3mmDv+1931kKCv3F50MsqFYLUK+57Sdc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 17:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:09:f2:11:98:ac:91:61:29:b6:31:5c:25:05:4e:87:3b:ff:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78 Validity Not Before: Aug 22 10:05:25 2025 GMT Not After : Aug 26 17:28:25 2025 GMT Subject: CN=FF60C0E4620ABDA1F78934ACA5511BC6AAA72579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:71:8d:19:22:ce:2e:38:70:4d:d9:56:91: 76:55:ae:ce:fa:68:35:af:12:09:58:de:81:96:d9: cf:4c:7e:10:9e:08:83:4f:6b:d2:52:ea:4b:26:63: 35:64:4d:42:b0:9c:60:5c:aa:06:2e:cc:b1:4c:99: 63:da:76:78:1a:55:c8:e3:a9:92:28:7b:a2:fd:4b: f3:0c:00:10:2e:81:bb:68:7a:24:5f:44:0d:e4:0d: 78:e9:5b:1b:cf:62:9b:bd:5a:92:e7:2f:6d:17:19: 8b:e3:bc:9a:5e:4f:d2:e6:a8:53:70:33:ac:bd:c6: bd:6c:b6:42:49:8a:d7:b0:57:b9:a0:ae:1f:b7:a0: 96:c2:b1:be:34:a3:3b:3a:06:cd:96:da:92:a8:18: c3:48:63:41:d3:da:d2:a4:27:45:1e:2e:fb:63:0e: 11:2c:ca:2e:cb:a7:1f:e4:75:40:d7:03:49:81:1f: ca:09:1e:69:d2:eb:d5:4b:28:1a:e2:d1:84:22:85: f1:44:30:48:f7:1d:17:10:ae:97:6f:d1:6e:11:89: a0:f5:f7:8b:3e:3f:28:57:45:5b:e9:10:98:5a:bc: aa:74:bb:e5:59:0d:83:f9:40:bd:35:d5:68:99:ad: c5:bc:63:65:da:93:75:41:ef:10:18:02:a9:74:7a: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:60:C0:E4:62:0A:BD:A1:F7:89:34:AC:A5:51:1B:C6:AA:A7:25:79 X509v3 Authority Key Identifier: keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:72:46:91:51:00:e8:8a:ed:b7:d2:ec:13:f4:47:f3:a8:e2: 0e:d5:03:1e:ab:90:74:2b:ef:a1:78:a3:85:de:b9:94:7b:19: ed:13:0b:69:98:cc:94:3c:50:9b:17:4c:2f:f8:aa:d1:43:dd: 93:c0:09:61:5e:02:9c:36:ea:d1:f7:f4:ac:31:96:89:f8:df: b0:b9:21:b0:70:67:9a:da:46:4f:4f:e2:ee:7a:da:7e:ab:da: bd:3d:3b:32:3b:10:e7:c1:0b:16:b5:5c:c7:22:9f:76:2c:0a: fa:df:23:fc:8c:b9:20:14:26:06:bc:13:9a:13:b8:01:94:7c: 59:46:fd:46:d8:cb:ba:fc:fe:7f:38:0d:0f:2e:0f:d0:64:3b: 3f:97:41:c0:6d:54:8b:74:b7:f9:75:2c:66:55:72:d0:a7:da: fa:bd:4a:65:c9:f5:31:0f:15:f3:92:fe:3a:1e:dc:42:db:1d: 7f:17:42:ec:06:89:88:11:54:5e:b3:8d:b0:8e:97:df:2c:e9: 0b:87:ef:26:ba:c1:9f:f5:81:7a:a2:ed:b5:de:04:99:0d:c4: 91:10:0e:a7:11:6d:51:b0:c2:c8:cd:80:97:ce:de:99:8a:e6: 01:b5:7a:84:e0:fe:56:45:c0:ce:d1:b4:53:74:b3:9a:87:36: 43:ea:c3:25 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTtkJ8hGYrJFhKbYxXCUFToc7/9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxOTM1RURENjdFOUMxODE2RTcwM0YxREFCRkZCRjg2 Q0ZBMUI3ODAeFw0yNTA4MjIxMDA1MjVaFw0yNTA4MjYxNzI4MjVaMDMxMTAvBgNV BAMTKEZGNjBDMEU0NjIwQUJEQTFGNzg5MzRBQ0E1NTExQkM2QUFBNzI1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoV3GNGSLOLjhwTdlWkXZVrs76 aDWvEglY3oGW2c9MfhCeCINPa9JS6ksmYzVkTUKwnGBcqgYuzLFMmWPadngaVcjj qZIoe6L9S/MMABAugbtoeiRfRA3kDXjpWxvPYpu9WpLnL20XGYvjvJpeT9LmqFNw M6y9xr1stkJJitewV7mgrh+3oJbCsb40ozs6Bs2W2pKoGMNIY0HT2tKkJ0UeLvtj DhEsyi7Lpx/kdUDXA0mBH8oJHmnS69VLKBri0YQihfFEMEj3HRcQrpdv0W4RiaD1 94s+PyhXRVvpEJhavKp0u+VZDYP5QL011WiZrcW8Y2Xak3VB7xAYAql0erwTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/2DA5GIKvaH3iTSspVEbxqqnJXkwHwYDVR0j BBgwFoAUkhk17dZ+nBgW5wPx2r/7+Gz6G3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MzgzNThBNDQ2N0VFQzNDMERBN0NGMkU1RDNGM0E0MkIy QTIyQjNENEFCNjMxQThENjlFOUVFMDg4NEYxQzAzLzAvOTIxOTM1RURENjdFOUMx ODE2RTcwM0YxREFCRkZCRjg2Q0ZBMUI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjE5MzVFREQ2N0U5QzE4MTZF NzAzRjFEQUJGRkJGODZDRkExQjc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTM4MzU4QTQ0NjdFRUMzQzBEQTdDRjJFNUQzRjNBNDJCMkEyMkIzRDRB QjYzMUE4RDY5RTlFRTA4ODRGMUMwMy8wLzkyMTkzNUVERDY3RTlDMTgxNkU3MDNG MURBQkZGQkY4NkNGQTFCNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPckaRUQDoiu230uwT9EfzqOIO 1QMeq5B0K++heKOF3rmUexntEwtpmMyUPFCbF0wv+KrRQ92TwAlhXgKcNurR9/Ss MZaJ+N+wuSGwcGea2kZPT+Luetp+q9q9PTsyOxDnwQsWtVzHIp92LAr63yP8jLkg FCYGvBOaE7gBlHxZRv1G2Mu6/P5/OA0PLg/QZDs/l0HAbVSLdLf5dSxmVXLQp9r6 vUplyfUxDxXzkv46HtxC2x1/F0LsBomIEVRes42wjpffLOkLh+8musGf9YF6ou21 3gSZDcSREA6nEW1RsMLIzYCXzt6ZiuYBtXqE4P5WRcDO0bRTdLOahzZD6sMl -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:45 2025 by rpki-client