$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft File: 21FD9011B33FD9996D9085D654F9943A95C37269.mft (raw, json) Hash identifier: Nc7813Etw5fLZbXQwPffSqJNsjAFyvB8CzYM2OvsEHg= Subject key identifier: 4C:16:28:7C:CF:E8:68:03:F0:14:5F:37:DC:C6:D5:1A:EA:C0:00:A1 Authority key identifier: 21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69 Certificate issuer: /CN=21FD9011B33FD9996D9085D654F9943A95C37269 Certificate serial: 439B1B54256121ACB46543D03AB19177E35C59C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft Manifest number: 0123 Signing time: Sat 18 Oct 2025 23:14:55 +0000 Manifest this update: Sat 18 Oct 2025 23:09:55 +0000 Manifest next update: Fri 24 Oct 2025 23:09:55 +0000 Files and hashes: 1: 323830363a3363303a3a2f33322d3332203d3e20323635353233.roa (hash: xNEheoQ7Eju9cbHTPDU2kysDJLRlFUorSa3dPia/xuM=) 2: 3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa (hash: m7CwULIfhxlFDZTFDGl2RKFUpt0QDAud3A4YNlhNMRE=) 3: 21FD9011B33FD9996D9085D654F9943A95C37269.crl (hash: M8VEdYxl5fuAWvjlAcT+15DWLZtcIYq8qG5MdSBeytg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9b:1b:54:25:61:21:ac:b4:65:43:d0:3a:b1:91:77:e3:5c:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21FD9011B33FD9996D9085D654F9943A95C37269 Validity Not Before: Oct 18 23:09:55 2025 GMT Not After : Oct 24 23:09:55 2025 GMT Subject: CN=4C16287CCFE86803F0145F37DCC6D51AEAC000A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:95:5a:0e:b7:ac:7b:4b:67:26:f6:75:59: 6f:7b:4e:6a:77:b1:a0:bd:ae:e4:bf:28:60:76:bb: b6:e7:5c:d4:03:e9:c2:2c:92:7b:c3:4d:eb:af:cd: 39:20:48:2c:6e:aa:bf:4a:b5:2f:93:32:95:0e:9d: e9:03:f4:bc:33:7f:d2:1d:52:d8:b6:a7:67:9d:c1: 24:91:f2:96:fb:12:d0:bf:00:12:bb:be:0c:38:aa: 35:cf:e0:a1:52:e5:24:e9:28:38:6b:3d:06:72:6c: 1b:7e:9c:f0:13:d3:4b:02:e7:63:f4:27:d4:98:5f: d7:55:45:b3:2a:72:cc:b1:c4:3d:fc:fa:6a:28:c0: 08:f3:cb:25:74:0b:52:aa:2b:fc:56:ad:a9:e5:49: 0e:9e:c0:05:38:2b:3e:3a:53:d3:52:94:49:c2:73: 84:56:8d:cb:d6:95:aa:70:ca:be:37:32:15:3b:11: e0:e0:86:9d:4e:43:bc:2c:50:9e:4f:de:28:68:1e: e0:18:b8:90:b6:89:b9:3f:29:34:26:a8:40:08:60: a5:5b:99:1e:25:4b:e3:58:64:76:0e:0e:5b:f8:74: c7:a3:de:4b:67:81:43:8c:b7:65:68:7b:55:9f:24: 4b:7e:85:af:9d:24:b3:e1:4e:1c:a0:cc:28:8e:7a: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:28:7C:CF:E8:68:03:F0:14:5F:37:DC:C6:D5:1A:EA:C0:00:A1 X509v3 Authority Key Identifier: keyid:21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7d:0a:ea:27:1a:ca:71:c3:0a:08:91:d7:cc:cc:bf:af:fc: 6a:e3:e2:96:e4:03:d8:6a:2f:2c:fb:27:66:22:c4:7e:fa:57: b2:77:e5:99:c2:b2:dd:15:81:a3:b2:a4:28:b4:99:70:54:0b: f3:83:51:1f:f3:cb:08:fb:ec:5b:9b:f8:f5:d8:d6:b6:95:83: 51:71:de:f5:6f:cb:a4:d8:d7:da:e5:01:7c:71:a8:1e:bc:a1: 43:de:9d:45:d0:c8:23:84:75:11:0f:c7:ee:69:44:58:71:ed: 38:ee:0b:96:06:f4:96:87:ec:4c:b4:0d:d8:1c:e0:cc:08:3f: 10:89:9a:5c:13:67:d9:51:6d:32:04:b7:a4:bb:23:b8:f8:d5: ff:39:f6:88:7e:f1:60:76:42:3b:b6:e4:31:e6:94:0d:64:50: d4:e8:49:f6:17:e8:19:07:b4:ef:0a:75:bc:8a:89:34:ac:30: c5:ff:13:1b:30:34:ce:f2:1f:ec:e6:24:b1:22:be:d2:d4:3e: 7e:6a:71:61:3b:07:9c:72:4d:41:62:b4:3f:44:ce:a2:f4:61: f5:56:34:cb:11:89:da:e7:1d:58:31:af:84:9a:3e:c5:a1:38: 66:6d:ac:25:4e:c3:8b:83:98:39:d7:c0:36:9d:4c:60:7c:5a: 7b:c3:ef:c7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQ5sbVCVhIay0ZUPQOrGRd+NcWckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGRDkwMTFCMzNGRDk5OTZEOTA4NUQ2NTRGOTk0M0E5 NUMzNzI2OTAeFw0yNTEwMTgyMzA5NTVaFw0yNTEwMjQyMzA5NTVaMDMxMTAvBgNV BAMTKDRDMTYyODdDQ0ZFODY4MDNGMDE0NUYzN0RDQzZENTFBRUFDMDAwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyaZVaDrese0tnJvZ1WW97Tmp3 saC9ruS/KGB2u7bnXNQD6cIsknvDTeuvzTkgSCxuqr9KtS+TMpUOnekD9Lwzf9Id Uti2p2edwSSR8pb7EtC/ABK7vgw4qjXP4KFS5STpKDhrPQZybBt+nPAT00sC52P0 J9SYX9dVRbMqcsyxxD38+moowAjzyyV0C1KqK/xWranlSQ6ewAU4Kz46U9NSlEnC c4RWjcvWlapwyr43MhU7EeDghp1OQ7wsUJ5P3ihoHuAYuJC2ibk/KTQmqEAIYKVb mR4lS+NYZHYODlv4dMej3ktngUOMt2Voe1WfJEt+ha+dJLPhThygzCiOemvzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTBYofM/oaAPwFF833MbVGurAAKEwHwYDVR0j BBgwFoAUIf2QEbM/2ZltkIXWVPmUOpXDcmkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83OUQxOTAxODk5NjVEQTFBQUQ4NjcwNjNDQjY1MzM0MDA0 ODdBNjg3MzZFQzk3MUY1MEYzNEMyMjUyNEZDMEZGLzAvMjFGRDkwMTFCMzNGRDk5 OTZEOTA4NUQ2NTRGOTk0M0E5NUMzNzI2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUZEOTAxMUIzM0ZEOTk5NkQ5 MDg1RDY1NEY5OTQzQTk1QzM3MjY5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzlEMTkwMTg5OTY1REExQUFEODY3MDYzQ0I2NTMzNDAwNDg3QTY4NzM2 RUM5NzFGNTBGMzRDMjI1MjRGQzBGRi8wLzIxRkQ5MDExQjMzRkQ5OTk2RDkwODVE NjU0Rjk5NDNBOTVDMzcyNjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzfQrqJxrKccMKCJHXzMy/r/xq 4+KW5APYai8s+ydmIsR++leyd+WZwrLdFYGjsqQotJlwVAvzg1Ef88sI++xbm/j1 2Na2lYNRcd71b8uk2Nfa5QF8cagevKFD3p1F0MgjhHURD8fuaURYce047guWBvSW h+xMtA3YHODMCD8QiZpcE2fZUW0yBLekuyO4+NX/OfaIfvFgdkI7tuQx5pQNZFDU 6En2F+gZB7TvCnW8iok0rDDF/xMbMDTO8h/s5iSxIr7S1D5+anFhOwecck1BYrQ/ RM6i9GH1VjTLEYna5x1YMa+Emj7FoThmbawlTsOLg5g518A2nUxgfFp7w+/H -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:31 2025 by rpki-client