$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft File: 215EF3A6C3425B383CEB59CE45AC9A7826229223.mft (raw, json) Hash identifier: R20y4mjWPcJDGW/wtRMwLwoZ8Wtd+WMZEHUGQu3iqdw= Subject key identifier: FC:9C:9D:B2:CD:89:56:7E:0B:45:54:1D:AA:5C:C3:CC:41:54:A4:39 Authority key identifier: 21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 Certificate issuer: /CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Certificate serial: 3138E065213E3517AC44A3D0928EF166E7503785 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft Manifest number: 0125 Signing time: Sun 19 Oct 2025 10:27:56 +0000 Manifest this update: Sun 19 Oct 2025 10:22:56 +0000 Manifest next update: Fri 24 Oct 2025 14:33:56 +0000 Files and hashes: 1: 3230302e302e31382e302f32342d3234203d3e203238303536.roa (hash: /R6TNDHkC7qrc3ejA5Ozx8e7s7rp/3h3zNI5TVz6S0w=) 2: 323030313a313363373a363030333a3a2f34382d3438203d3e203238303536.roa (hash: nawzzhum8MQWj7TXuzlCWw+jKq70TVRot/Zw7CNYRsE=) 3: 215EF3A6C3425B383CEB59CE45AC9A7826229223.crl (hash: pYXRHlhp8AF3rmRflHbTISL1soNOr3jv1zOCb1AEefI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:38:e0:65:21:3e:35:17:ac:44:a3:d0:92:8e:f1:66:e7:50:37:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Validity Not Before: Oct 19 10:22:56 2025 GMT Not After : Oct 24 14:33:56 2025 GMT Subject: CN=FC9C9DB2CD89567E0B45541DAA5CC3CC4154A439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:7c:21:e0:88:b0:7a:dd:38:7f:28:a0:55: 20:e8:90:61:f3:86:95:4b:f0:cb:ba:cb:09:02:41: 8a:da:04:44:3a:cd:24:f9:2a:ef:83:c6:1e:63:7e: e9:b9:ff:e5:e6:4a:67:39:3d:27:b8:93:10:63:a7: df:40:ec:68:03:a0:9d:1d:3c:ca:f3:30:1f:e1:1a: b8:c1:76:2c:e9:e6:5e:10:17:3e:bd:b5:9d:d6:c9: 71:eb:7e:b7:fe:8e:10:6d:09:32:7f:16:93:ef:9d: 3b:ba:5f:ce:00:21:ec:2f:d1:2f:62:15:7d:77:f6: e3:93:9f:2a:bf:bd:e6:0f:80:34:dd:5a:7e:8c:c1: cf:05:b1:b5:44:54:6b:a4:3c:aa:2d:c4:e0:f2:6b: 67:dd:71:0f:b8:fd:b4:bc:c9:53:03:f4:55:2c:39: 7a:a6:26:46:04:8d:14:64:6e:40:57:3a:0b:ae:09: bc:a3:de:90:b3:13:be:3f:77:36:c0:1c:f8:64:8d: e4:d4:4a:45:09:ab:1d:a0:fc:35:9e:d5:d1:19:39: ab:d3:17:52:b7:ad:1f:b5:b8:10:15:0a:5f:43:dd: 85:6e:36:0a:b9:d4:e9:25:14:2d:c9:f2:5d:1f:5e: e3:9e:d9:0f:44:75:12:2a:47:6e:15:95:56:7a:b1: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9C:9D:B2:CD:89:56:7E:0B:45:54:1D:AA:5C:C3:CC:41:54:A4:39 X509v3 Authority Key Identifier: keyid:21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5c:a8:d8:8a:a4:ed:12:c7:54:6d:b1:2c:f9:1a:3f:ac:aa: 72:a2:e8:2c:e3:eb:66:99:91:79:ec:8d:a9:dd:1e:3d:04:e6: 91:54:66:9d:db:e3:b5:2e:e9:d3:96:05:cb:ac:82:09:9d:e0: 71:76:25:ef:4a:84:7c:29:24:32:40:5c:ee:e3:7e:74:6f:ec: e6:b3:a7:b8:3d:0c:09:f0:99:61:f3:af:6f:c0:c6:23:33:63: 85:53:e3:37:0f:07:e1:5e:09:9c:9c:22:94:69:0c:6c:15:6b: e7:8c:2f:04:4f:db:de:ba:db:30:2d:06:97:f5:34:c6:c3:42: 7e:ca:18:16:a3:59:6a:ce:cc:8a:9f:49:83:72:13:ed:2f:f3: c0:39:95:e8:39:00:d5:b2:97:c9:7e:37:01:7d:a0:f1:85:d6: b2:99:ed:92:f8:f1:10:ec:43:d5:49:ad:9b:c4:80:d7:48:7d: c2:75:68:ff:10:06:3d:67:d5:ae:a3:3b:a0:e4:7e:c3:51:53: 74:71:96:a3:3f:ec:bf:26:88:49:91:8d:b2:c6:94:d0:03:44: f2:0b:5e:ca:c7:b0:fe:72:f8:30:81:4d:05:11:66:99:c2:7d: ee:10:22:f5:e5:3b:30:fa:96:ef:45:46:00:5c:61:ab:73:a3: 8a:dd:28:f3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMTjgZSE+NResRKPQko7xZudQN4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RUYzQTZDMzQyNUIzODNDRUI1OUNFNDVBQzlBNzgy NjIyOTIyMzAeFw0yNTEwMTkxMDIyNTZaFw0yNTEwMjQxNDMzNTZaMDMxMTAvBgNV BAMTKEZDOUM5REIyQ0Q4OTU2N0UwQjQ1NTQxREFBNUNDM0NDNDE1NEE0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/Xwh4Iiwet04fyigVSDokGHz hpVL8Mu6ywkCQYraBEQ6zST5Ku+Dxh5jfum5/+XmSmc5PSe4kxBjp99A7GgDoJ0d PMrzMB/hGrjBdizp5l4QFz69tZ3WyXHrfrf+jhBtCTJ/FpPvnTu6X84AIewv0S9i FX139uOTnyq/veYPgDTdWn6Mwc8FsbVEVGukPKotxODya2fdcQ+4/bS8yVMD9FUs OXqmJkYEjRRkbkBXOguuCbyj3pCzE74/dzbAHPhkjeTUSkUJqx2g/DWe1dEZOavT F1K3rR+1uBAVCl9D3YVuNgq51OklFC3J8l0fXuOe2Q9EdRIqR24VlVZ6sQEzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/Jydss2JVn4LRVQdqlzDzEFUpDkwHwYDVR0j BBgwFoAUIV7zpsNCWzg861nORayaeCYikiMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUZBMzJFNEE3MEZBNkQyODhGQjI2RDIwQ0VGN0E4RDAy ODdGMDA4RDY0RkI4MjY2QkY5OUEwOTRGMEI5QkM5LzAvMjE1RUYzQTZDMzQyNUIz ODNDRUI1OUNFNDVBQzlBNzgyNjIyOTIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTVFRjNBNkMzNDI1QjM4M0NF QjU5Q0U0NUFDOUE3ODI2MjI5MjIzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFGQTMyRTRBNzBGQTZEMjg4RkIyNkQyMENFRjdBOEQwMjg3RjAwOEQ2 NEZCODI2NkJGOTlBMDk0RjBCOUJDOS8wLzIxNUVGM0E2QzM0MjVCMzgzQ0VCNTlD RTQ1QUM5QTc4MjYyMjkyMjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtXKjYiqTtEsdUbbEs+Ro/rKpy ougs4+tmmZF57I2p3R49BOaRVGad2+O1LunTlgXLrIIJneBxdiXvSoR8KSQyQFzu 4350b+zms6e4PQwJ8Jlh869vwMYjM2OFU+M3DwfhXgmcnCKUaQxsFWvnjC8ET9ve utswLQaX9TTGw0J+yhgWo1lqzsyKn0mDchPtL/PAOZXoOQDVspfJfjcBfaDxhday me2S+PEQ7EPVSa2bxIDXSH3CdWj/EAY9Z9Wuozug5H7DUVN0cZajP+y/JohJkY2y xpTQA0TyC17Kx7D+cvgwgU0FEWaZwn3uECL15Tsw+pbvRUYAXGGrc6OK3Sjz -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:13 2025 by rpki-client