$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft File: 21B9887060F924CDFF24C230D32A91B83A17CD97.mft (raw, json) Hash identifier: QKfZM9YJKsRljsh42ACmLa304YrAsILMX0QpDAvntPo= Subject key identifier: 0D:24:8F:CE:A4:40:09:9A:6F:0C:62:E3:F4:BD:C5:F2:D1:70:2B:34 Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Certificate serial: 157436D89A56A0041CF30640654FA82FA19CFBC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft Manifest number: 010E Signing time: Thu 21 Aug 2025 04:26:37 +0000 Manifest this update: Thu 21 Aug 2025 04:21:37 +0000 Manifest next update: Tue 26 Aug 2025 17:25:37 +0000 Files and hashes: 1: 21B9887060F924CDFF24C230D32A91B83A17CD97.crl (hash: PnXw8pcBcejp4m+xaob60EjA5mEk5yWlhLBESPnXeDc=) 2: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (hash: e7fwKCAwrJBOARxXUFeN2hPCUL05RIozWzYfyHXA7Ss=) 3: 323830303a3163303a3a2f33322d3332203d3e203237373730.roa (hash: 4FSJXV5thJKx6H5OTH8Mp5tqHztsrWOngAC7cBidY1k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 17:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:74:36:d8:9a:56:a0:04:1c:f3:06:40:65:4f:a8:2f:a1:9c:fb:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Validity Not Before: Aug 21 04:21:37 2025 GMT Not After : Aug 26 17:25:37 2025 GMT Subject: CN=0D248FCEA440099A6F0C62E3F4BDC5F2D1702B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:aa:59:03:1b:e5:92:43:89:9b:d9:52:c3: 92:d2:fd:45:b1:9e:ef:2f:46:81:dd:50:ae:26:ac: c8:18:80:0c:ef:b3:91:9b:1a:4b:c7:30:47:05:fb: 5f:c5:ff:76:4a:ef:d9:85:d9:b9:ae:c8:27:64:f7: 5d:5a:60:0f:ac:4a:61:c5:ff:5c:4e:db:e8:82:92: 33:a5:e3:81:8d:14:6f:35:c2:fa:4a:11:6f:d4:56: 61:16:fc:d1:ab:e0:3f:94:a6:b0:37:e8:d0:dc:6a: 84:2b:2c:7e:b9:77:1c:b4:49:5d:28:26:eb:61:b4: d6:bb:50:64:ed:e3:5c:00:3e:1d:c6:42:ca:7c:be: dd:11:57:ec:7c:b1:98:4e:1f:b6:45:81:9d:3f:e0: 5e:f4:bb:bd:0f:fe:1f:a3:2f:b4:48:bf:cd:38:db: 61:2a:fe:ce:a4:10:c2:72:98:0e:ed:f5:46:50:ab: 6a:3e:f0:d9:3c:bf:65:2e:24:20:67:e7:dd:7d:22: a4:a5:75:42:d9:ac:78:bc:0c:73:d4:c7:59:88:92: 4c:9d:86:7b:fe:36:f3:06:b0:31:3f:14:48:87:69: f4:d0:50:11:57:50:4c:72:6c:53:b3:82:05:27:e0: 94:36:72:d7:65:80:f3:ff:f2:74:a2:8c:97:fd:b3: 94:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:24:8F:CE:A4:40:09:9A:6F:0C:62:E3:F4:BD:C5:F2:D1:70:2B:34 X509v3 Authority Key Identifier: keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7a:27:48:99:c7:fc:a0:b0:d6:88:be:7b:38:d8:e7:76:76: ce:89:73:78:68:5e:80:65:90:3d:74:36:a3:5c:e8:a9:b9:cb: ed:b1:c7:df:b2:86:41:e4:38:47:1c:f5:bc:80:d2:92:03:cf: 17:59:31:2e:b6:13:2c:08:5b:ad:bc:72:9e:81:f4:dd:35:aa: 25:7e:eb:13:c3:0f:ed:90:6b:b6:f7:e6:60:ff:71:50:b1:8e: fc:32:52:4c:18:97:18:f7:c6:59:e8:b6:c5:ce:69:93:12:7d: b4:d5:6e:a0:72:0f:c9:3f:4e:8d:7f:ff:b4:8b:00:48:53:ac: 6d:3d:94:d2:02:c7:7f:36:f8:97:0c:7b:20:61:15:26:08:07: 4b:42:eb:e6:91:6a:06:ea:36:a7:bc:7b:e2:71:53:74:4b:4c: 41:31:13:19:24:3c:e5:47:3b:3e:7b:a6:30:72:16:b8:58:01: 0e:71:73:1d:02:33:a1:12:9d:17:2e:af:72:1e:d0:1e:a5:1c: 25:f2:c8:fe:6d:6d:c1:dc:04:82:24:d3:b1:bb:a9:e5:82:2f: 26:70:ba:74:23:a7:1d:8a:35:2e:5f:a3:6c:99:06:a9:65:f5: 8e:0c:28:bc:fe:d8:9b:4b:30:2d:d6:c1:47:21:1d:a0:8c:b5: 36:e9:84:dd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFXQ22JpWoAQc8wZAZU+oL6Gc+8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCOTg4NzA2MEY5MjRDREZGMjRDMjMwRDMyQTkxQjgz QTE3Q0Q5NzAeFw0yNTA4MjEwNDIxMzdaFw0yNTA4MjYxNzI1MzdaMDMxMTAvBgNV BAMTKDBEMjQ4RkNFQTQ0MDA5OUE2RjBDNjJFM0Y0QkRDNUYyRDE3MDJCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51apZAxvlkkOJm9lSw5LS/UWx nu8vRoHdUK4mrMgYgAzvs5GbGkvHMEcF+1/F/3ZK79mF2bmuyCdk911aYA+sSmHF /1xO2+iCkjOl44GNFG81wvpKEW/UVmEW/NGr4D+UprA36NDcaoQrLH65dxy0SV0o JuthtNa7UGTt41wAPh3GQsp8vt0RV+x8sZhOH7ZFgZ0/4F70u70P/h+jL7RIv804 22Eq/s6kEMJymA7t9UZQq2o+8Nk8v2UuJCBn5919IqSldULZrHi8DHPUx1mIkkyd hnv+NvMGsDE/FEiHafTQUBFXUExybFOzggUn4JQ2ctdlgPP/8nSijJf9s5TvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDSSPzqRACZpvDGLj9L3F8tFwKzQwHwYDVR0j BBgwFoAUIbmIcGD5JM3/JMIw0yqRuDoXzZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDM3Q0E4Q0Q5NTc4Qjg1MTZGRjMzRjI0NzY0QUYxREEy MDc4ODA5MzA4RUJGM0YzMERCRjRFRjEwNzdEMzZDLzAvMjFCOTg4NzA2MEY5MjRD REZGMjRDMjMwRDMyQTkxQjgzQTE3Q0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI5ODg3MDYwRjkyNENERkYy NEMyMzBEMzJBOTFCODNBMTdDRDk3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQzN0NBOENEOTU3OEI4NTE2RkYzM0YyNDc2NEFGMURBMjA3ODgwOTMw OEVCRjNGMzBEQkY0RUYxMDc3RDM2Qy8wLzIxQjk4ODcwNjBGOTI0Q0RGRjI0QzIz MEQzMkE5MUI4M0ExN0NEOTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAeidImcf8oLDWiL57ONjndnbO iXN4aF6AZZA9dDajXOipucvtscffsoZB5DhHHPW8gNKSA88XWTEuthMsCFutvHKe gfTdNaolfusTww/tkGu29+Zg/3FQsY78MlJMGJcY98ZZ6LbFzmmTEn201W6gcg/J P06Nf/+0iwBIU6xtPZTSAsd/NviXDHsgYRUmCAdLQuvmkWoG6janvHvicVN0S0xB MRMZJDzlRzs+e6Ywcha4WAEOcXMdAjOhEp0XLq9yHtAepRwl8sj+bW3B3ASCJNOx u6nlgi8mcLp0I6cdijUuX6NsmQapZfWODCi8/tibSzAt1sFHIR2gjLU26YTd -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:14 2025 by rpki-client