$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: F0j7HgcSUrhJAZGMX++d3rWoc2Ak2obeV+70ycarD3o= Subject key identifier: 89:DD:97:19:DD:B3:F1:8B:D1:79:A5:E6:88:B4:D3:DF:23:D0:EE:DA Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 28B10584AE101CFBE6A60B095C85404A9F9EF058 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 0125 Signing time: Sun 19 Oct 2025 16:26:36 +0000 Manifest this update: Sun 19 Oct 2025 16:21:36 +0000 Manifest next update: Sat 25 Oct 2025 04:06:36 +0000 Files and hashes: 1: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: Axfi1vgCv2D0D6QqnuJcrPN9fByY9W/ouznL3Xg+MfY=) 2: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: tzzQX/z84aDcEf8NspMvX6OKXuxDP6XwPlZlD3WxfBM=) 3: 323830333a323231303a3a2f33362d3438203d3e20323731383936.roa (hash: fwMFuYTmneqYkrVV1PPwraanGPuBSlMGUI9BuNyUKqQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b1:05:84:ae:10:1c:fb:e6:a6:0b:09:5c:85:40:4a:9f:9e:f0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Oct 19 16:21:36 2025 GMT Not After : Oct 25 04:06:36 2025 GMT Subject: CN=89DD9719DDB3F18BD179A5E688B4D3DF23D0EEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:62:e9:7b:83:14:d3:0c:46:74:f1:cc:f0: 7c:59:9a:8f:22:b5:ca:04:e4:dc:51:d5:79:07:bb: 5d:a2:33:f1:cb:7b:79:75:23:5e:9c:b3:83:87:8f: ec:84:07:59:30:96:79:cf:1d:9c:77:52:29:47:cd: bd:d3:c3:78:48:8a:5d:8e:ac:2c:94:f7:0a:1e:0d: 34:6c:ce:e4:f4:71:cd:a6:73:88:a9:6f:fe:3c:43: 05:6f:60:2c:b5:56:c6:19:df:a4:a7:87:f0:b3:70: fb:f6:0a:f4:1d:47:6a:9f:73:c7:d8:62:8b:69:de: 2c:c8:29:bd:1d:32:23:a1:85:d8:67:81:f4:31:b7: 63:b6:f4:41:56:49:ae:d2:3c:e4:62:f2:41:3c:48: 22:c5:be:f6:8b:1f:c8:e2:72:d5:e9:79:c1:a7:bf: 42:dd:fc:f2:ce:e9:95:30:9e:25:34:31:54:c0:c7: e4:e0:73:d5:48:c2:44:8f:bb:55:8b:fa:ca:47:fc: bf:1d:de:fb:2b:4d:e7:2b:db:f9:49:77:8c:ac:ac: ea:29:d2:12:14:ad:32:aa:1b:df:5f:cc:03:05:26: c9:fb:7e:5a:43:25:76:15:d6:16:e9:1f:cc:f8:88: de:3a:74:76:5c:df:91:c9:93:e6:4f:79:67:69:c5: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DD:97:19:DD:B3:F1:8B:D1:79:A5:E6:88:B4:D3:DF:23:D0:EE:DA X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:1b:5a:8d:d2:5a:a9:ad:7c:c9:19:13:1a:86:ef:4a:97:a2: a4:7c:f1:8a:27:45:d2:65:31:16:9d:6f:1f:25:07:22:bc:a8: 9f:3c:b1:0a:df:70:6c:99:e3:2e:74:7c:5a:0b:68:14:c0:2c: bd:51:e7:3e:dc:5d:02:67:86:13:b8:10:6a:9f:9d:ea:70:19: d6:fe:6b:b5:e8:ac:58:65:59:07:2f:7a:72:eb:28:5a:dd:79: 97:6a:3b:a1:7d:5b:13:81:2b:bc:f9:3e:1b:45:2e:c8:6e:de: fb:5b:8d:78:78:21:f1:4e:cd:79:49:83:9d:c5:1a:54:7e:ee: c1:99:89:89:22:35:af:d6:28:5a:ff:ae:68:55:ca:33:3c:2b: 1d:ff:37:0e:e9:68:7d:f9:54:fb:a9:86:ef:48:12:e9:fe:f9: 4b:7b:4c:b0:66:66:d0:cf:15:1b:af:f6:42:36:c3:c6:6a:14: 3d:25:e5:34:d0:ef:4e:06:84:e3:fe:b7:33:d9:c1:23:0f:82: b4:df:d8:90:62:51:8e:4e:ee:b2:5b:99:df:27:e5:c9:ae:c3: f2:8e:c5:4d:be:9e:af:6f:c4:74:7f:f6:25:95:3f:b5:33:bd: 14:75:06:bd:90:fd:64:b4:35:b4:d7:74:0b:7e:ec:ea:67:5c: cf:3e:7f:65 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKLEFhK4QHPvmpgsJXIVASp+e8FgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNTEwMTkxNjIxMzZaFw0yNTEwMjUwNDA2MzZaMDMxMTAvBgNV BAMTKDg5REQ5NzE5RERCM0YxOEJEMTc5QTVFNjg4QjREM0RGMjNEMEVFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRmLpe4MU0wxGdPHM8HxZmo8i tcoE5NxR1XkHu12iM/HLe3l1I16cs4OHj+yEB1kwlnnPHZx3UilHzb3Tw3hIil2O rCyU9woeDTRszuT0cc2mc4ipb/48QwVvYCy1VsYZ36Snh/CzcPv2CvQdR2qfc8fY Yotp3izIKb0dMiOhhdhngfQxt2O29EFWSa7SPORi8kE8SCLFvvaLH8jictXpecGn v0Ld/PLO6ZUwniU0MVTAx+Tgc9VIwkSPu1WL+spH/L8d3vsrTecr2/lJd4ysrOop 0hIUrTKqG99fzAMFJsn7flpDJXYV1hbpH8z4iN46dHZc35HJk+ZPeWdpxfA9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUid2XGd2z8YvReaXmiLTT3yPQ7towHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+G1qN0lqprXzJGRMahu9Kl6Kk fPGKJ0XSZTEWnW8fJQcivKifPLEK33BsmeMudHxaC2gUwCy9Uec+3F0CZ4YTuBBq n53qcBnW/mu16KxYZVkHL3py6yha3XmXajuhfVsTgSu8+T4bRS7Ibt77W414eCHx Ts15SYOdxRpUfu7BmYmJIjWv1iha/65oVcozPCsd/zcO6Wh9+VT7qYbvSBLp/vlL e0ywZmbQzxUbr/ZCNsPGahQ9JeU00O9OBoTj/rcz2cEjD4K039iQYlGOTu6yW5nf J+XJrsPyjsVNvp6vb8R0f/YllT+1M70UdQa9kP1ktDW013QLfuzqZ1zPPn9l -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:58 2025 by rpki-client