$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft File: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft (raw, json) Hash identifier: PhINEcrhPtrz10idHkB+H4fafldswS1QTeUYsynzYxs= Subject key identifier: DD:2F:9B:A0:09:C4:62:3E:F9:84:36:F4:27:70:7D:C2:91:FE:E1:DF Authority key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37 Certificate issuer: /CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437 Certificate serial: 595E4EA70AF131030127C109749AD429C83D4C0C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft Manifest number: BF Signing time: Sat 18 Oct 2025 22:49:39 +0000 Manifest this update: Sat 18 Oct 2025 22:44:38 +0000 Manifest next update: Fri 24 Oct 2025 02:12:38 +0000 Files and hashes: 1: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl (hash: 59uF1xIn2DdwaUFg1iKDzj0TNjMez5RU1rhJbhtARVM=) 2: 3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa (hash: a+WL1Tzck2mH2oJapuBeuDDD68+EX/IRs+ee+XJh0fo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5e:4e:a7:0a:f1:31:03:01:27:c1:09:74:9a:d4:29:c8:3d:4c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437 Validity Not Before: Oct 18 22:44:38 2025 GMT Not After : Oct 24 02:12:38 2025 GMT Subject: CN=DD2F9BA009C4623EF98436F427707DC291FEE1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:03:bf:ae:2d:09:55:a5:ae:e1:ea:17:23: f6:88:14:f4:84:3b:73:66:06:6c:9c:1a:ae:09:dd: 4a:87:4e:fc:bd:7a:47:61:b1:49:53:47:02:42:11: 76:19:c4:53:b4:6e:48:19:73:2d:4c:6f:28:5a:33: ad:21:0e:ca:be:da:00:dc:00:80:a7:a5:6c:d7:8a: de:b6:f2:cb:af:12:b3:31:12:cc:0a:46:76:1a:ae: e1:6e:e3:47:ad:ec:5f:b3:c9:af:08:c9:a3:fe:c4: e2:50:08:f1:cb:92:ba:3c:4a:ef:92:97:bd:c4:87: 3c:71:a2:9b:3e:f1:19:73:5e:fb:31:03:e9:82:c3: b3:07:79:99:1e:69:5d:aa:f9:24:c2:b9:a6:38:c2: e3:7c:5c:ad:29:b6:27:a9:d8:13:83:5b:7e:09:1d: 97:0a:0b:a8:e0:5d:29:a0:ea:7c:fa:37:9b:51:48: 8b:77:5a:b4:98:58:6e:d0:aa:3f:f2:f0:62:2f:43: 6d:89:aa:62:0c:15:5e:16:73:8e:8f:a1:f4:46:3e: b3:97:8c:c5:12:b9:3c:d0:90:d2:a0:92:83:9d:3e: 4e:4f:54:1a:55:4c:17:50:bd:15:cb:93:f4:02:10: c1:37:b7:ff:7c:bb:b8:91:e8:ac:f9:fd:5e:27:df: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:9B:A0:09:C4:62:3E:F9:84:36:F4:27:70:7D:C2:91:FE:E1:DF X509v3 Authority Key Identifier: keyid:92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0b:0d:eb:4f:ed:78:86:0e:39:d4:02:53:eb:58:57:35:c5: e7:c3:52:08:a5:39:da:05:7f:d4:d2:77:85:98:2e:eb:83:43: d7:29:5f:5c:13:c0:7f:9d:1b:1f:83:30:6c:a5:71:52:7c:da: fd:2c:b4:f4:f4:74:25:00:ef:ce:a9:30:62:50:94:40:65:f8: c9:f5:96:1c:5d:ca:da:8c:42:93:93:f1:a1:93:29:e5:02:c7: 81:ff:a9:5a:16:43:ac:c5:78:a1:fa:58:a3:fb:8f:2a:bd:ce: 50:b5:21:21:0d:5c:1a:c2:68:04:4d:87:54:1b:6d:e5:9f:67: 95:7b:63:81:ef:64:34:0c:07:40:2d:19:15:29:13:2a:3a:c9: ea:e8:a1:ba:7e:aa:99:bf:f7:71:d9:1b:89:66:80:8e:2e:cc: 66:a5:ce:88:0e:52:37:7f:be:5c:23:1a:a6:1b:81:8f:7a:75: 1b:ff:80:26:7a:4d:41:4a:cc:a9:ca:14:d0:65:ee:4d:87:78: 83:4b:39:95:54:bf:6a:16:13:bf:39:47:59:51:a1:2b:ca:5a: 0e:c9:ca:30:11:41:f8:17:a9:ba:bb:b1:dc:36:77:4d:78:42: 46:42:75:b1:9b:4f:79:0d:ce:d6:2e:dd:85:0a:f3:10:e4:d8: 46:09:e0:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWV5OpwrxMQMBJ8EJdJrUKcg9TAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRUUxMkJBNUQ4NTNGQjVDQUQ3NjdFRjQ3RDJFMEU2 MkEyRDQzNzAeFw0yNTEwMTgyMjQ0MzhaFw0yNTEwMjQwMjEyMzhaMDMxMTAvBgNV BAMTKEREMkY5QkEwMDlDNDYyM0VGOTg0MzZGNDI3NzA3REMyOTFGRUUxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczgO/ri0JVaWu4eoXI/aIFPSE O3NmBmycGq4J3UqHTvy9ekdhsUlTRwJCEXYZxFO0bkgZcy1MbyhaM60hDsq+2gDc AICnpWzXit628suvErMxEswKRnYaruFu40et7F+zya8IyaP+xOJQCPHLkro8Su+S l73Ehzxxops+8RlzXvsxA+mCw7MHeZkeaV2q+STCuaY4wuN8XK0ptiep2BODW34J HZcKC6jgXSmg6nz6N5tRSIt3WrSYWG7Qqj/y8GIvQ22JqmIMFV4Wc46PofRGPrOX jMUSuTzQkNKgkoOdPk5PVBpVTBdQvRXLk/QCEME3t/98u7iR6Kz5/V4n33FrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3S+boAnEYj75hDb0J3B9wpH+4d8wHwYDVR0j BBgwFoAUkh7hK6XYU/tcrXZ+9H0uDmKi1DcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Q0VFNkE0OTk4MDJGMDgzNjg2OTgwMTBCQjVGMTcyRjUy NjgwRDI2MzFFNEJFMjQ0QUUxREMxNEJGOEYyNjdCLzAvOTIxRUUxMkJBNUQ4NTNG QjVDQUQ3NjdFRjQ3RDJFMEU2MkEyRDQzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjFFRTEyQkE1RDg1M0ZCNUNB RDc2N0VGNDdEMkUwRTYyQTJENDM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUNFRTZBNDk5ODAyRjA4MzY4Njk4MDEwQkI1RjE3MkY1MjY4MEQyNjMx RTRCRTI0NEFFMURDMTRCRjhGMjY3Qi8wLzkyMUVFMTJCQTVEODUzRkI1Q0FENzY3 RUY0N0QyRTBFNjJBMkQ0MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMCw3rT+14hg451AJT61hXNcXn w1IIpTnaBX/U0neFmC7rg0PXKV9cE8B/nRsfgzBspXFSfNr9LLT09HQlAO/OqTBi UJRAZfjJ9ZYcXcrajEKTk/GhkynlAseB/6laFkOsxXih+lij+48qvc5QtSEhDVwa wmgETYdUG23ln2eVe2OB72Q0DAdALRkVKRMqOsnq6KG6fqqZv/dx2RuJZoCOLsxm pc6IDlI3f75cIxqmG4GPenUb/4Amek1BSsypyhTQZe5Nh3iDSzmVVL9qFhO/OUdZ UaEryloOycowEUH4F6m6u7HcNndNeEJGQnWxm095Dc7WLt2FCvMQ5NhGCeCj -----END CERTIFICATE-----Generated at Mon Oct 20 10:49:52 2025 by rpki-client