$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: YiGM291NTrpX4kVU8qBEbx76ZcLUZSrZoXifWW6X5ew= Subject key identifier: 4E:38:FF:D1:DA:1B:BE:95:1B:64:CB:D7:E8:86:EA:16:0B:64:2F:BD Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 49DD0E81FE6A3B4DD071C23A679F61F8490A7820 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 0109 Signing time: Fri 22 Aug 2025 07:03:28 +0000 Manifest this update: Fri 22 Aug 2025 06:58:28 +0000 Manifest next update: Wed 27 Aug 2025 21:09:28 +0000 Files and hashes: 1: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: Axfi1vgCv2D0D6QqnuJcrPN9fByY9W/ouznL3Xg+MfY=) 2: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: QWFiLf1rv8E5dytIPCl1nEMvKgC6sucwx52ikOWBUCQ=) 3: 323830333a323231303a3a2f33362d3438203d3e20323731383936.roa (hash: fwMFuYTmneqYkrVV1PPwraanGPuBSlMGUI9BuNyUKqQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:dd:0e:81:fe:6a:3b:4d:d0:71:c2:3a:67:9f:61:f8:49:0a:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Aug 22 06:58:28 2025 GMT Not After : Aug 27 21:09:28 2025 GMT Subject: CN=4E38FFD1DA1BBE951B64CBD7E886EA160B642FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:af:c7:49:48:12:c9:40:c5:0d:17:8a:02: 68:af:ff:07:fc:61:23:4e:b5:b1:f8:4f:4d:5b:92: 20:f5:cc:0e:60:2d:a1:e2:fd:dd:fe:19:89:3b:01: c7:30:0b:6a:15:ca:e1:5e:1a:40:67:89:d1:58:50: 47:f5:85:6d:0f:c6:80:f3:83:6a:8c:fd:f1:3c:de: a3:94:70:da:80:13:e4:18:c6:1d:70:d6:2b:54:de: d5:4a:d3:7a:b0:8f:16:65:f5:2e:1e:5a:97:e2:52: 0b:42:14:45:7a:61:2f:ea:f4:9f:2d:61:ad:7d:95: ce:aa:52:d8:fa:e7:d9:42:01:b9:92:6a:45:1f:f2: 7f:4d:94:87:29:9f:b9:01:7f:da:1a:12:33:7e:0a: 78:f5:89:b7:9a:22:ff:a2:a1:76:bc:62:3c:c7:52: 79:19:ec:ee:46:66:cf:9e:4c:29:3f:48:70:34:59: 63:e0:ca:b8:14:2a:fa:d1:6e:44:b9:bf:f8:ec:5b: 67:e8:af:17:70:6c:f8:62:3b:1b:6f:3e:51:24:ff: de:bd:c1:1a:45:28:cb:88:26:2e:9d:1e:25:55:3e: 14:f5:af:f6:6f:1c:84:ec:a5:2f:39:38:19:67:38: 61:b7:6b:16:b8:6b:c0:7e:6f:23:54:c9:94:2d:f1: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:38:FF:D1:DA:1B:BE:95:1B:64:CB:D7:E8:86:EA:16:0B:64:2F:BD X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:04:02:5f:3b:90:f1:17:86:6d:9e:c6:8f:62:34:23:4e:28: d8:2c:60:88:a3:13:ee:41:cd:cb:c0:19:40:b7:9b:0d:8b:98: 47:ae:da:42:88:2d:d8:69:22:9d:4e:6b:b6:cb:56:9b:e7:63: 65:88:e9:8f:a5:be:72:fe:8c:0e:4d:57:78:5a:f0:d6:00:6e: e2:c1:fa:23:62:e1:53:de:7b:67:4b:0f:05:92:c0:57:82:94: d4:c4:fa:6b:f1:7e:d0:76:2a:5b:f3:63:d4:41:9a:6f:26:2c: f1:05:88:06:d0:da:77:c8:76:82:d9:bf:e2:80:42:fd:c7:74: 7c:83:b6:2c:13:8b:6a:05:b9:f8:19:42:3a:04:1a:35:9f:29: 3c:92:2b:0f:bb:24:3f:76:46:97:fa:6f:97:bf:55:c6:0c:d1: 23:e2:c9:4d:ce:63:a0:d6:ae:cd:1e:bf:be:94:21:11:88:87: e2:a0:78:bd:02:ce:be:b9:f4:07:b9:26:75:3e:85:66:43:5c: e0:51:36:41:04:05:2a:07:16:b2:c0:78:50:3c:be:f6:31:6e: eb:c5:ae:c5:ae:11:b8:17:51:96:65:1e:44:27:33:dd:ea:3f: 95:9f:01:5d:3b:26:3c:5b:4f:54:37:5a:7b:8f:70:09:36:88: 76:0f:3f:85 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSd0Ogf5qO03QccI6Z59h+EkKeCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNTA4MjIwNjU4MjhaFw0yNTA4MjcyMTA5MjhaMDMxMTAvBgNV BAMTKDRFMzhGRkQxREExQkJFOTUxQjY0Q0JEN0U4ODZFQTE2MEI2NDJGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Sq/HSUgSyUDFDReKAmiv/wf8 YSNOtbH4T01bkiD1zA5gLaHi/d3+GYk7AccwC2oVyuFeGkBnidFYUEf1hW0PxoDz g2qM/fE83qOUcNqAE+QYxh1w1itU3tVK03qwjxZl9S4eWpfiUgtCFEV6YS/q9J8t Ya19lc6qUtj659lCAbmSakUf8n9NlIcpn7kBf9oaEjN+Cnj1ibeaIv+ioXa8YjzH UnkZ7O5GZs+eTCk/SHA0WWPgyrgUKvrRbkS5v/jsW2forxdwbPhiOxtvPlEk/969 wRpFKMuIJi6dHiVVPhT1r/ZvHITspS85OBlnOGG3axa4a8B+byNUyZQt8RJhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTjj/0dobvpUbZMvX6IbqFgtkL70wHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUBAJfO5DxF4ZtnsaPYjQjTijY LGCIoxPuQc3LwBlAt5sNi5hHrtpCiC3YaSKdTmu2y1ab52NliOmPpb5y/owOTVd4 WvDWAG7iwfojYuFT3ntnSw8FksBXgpTUxPpr8X7Qdipb82PUQZpvJizxBYgG0Np3 yHaC2b/igEL9x3R8g7YsE4tqBbn4GUI6BBo1nyk8kisPuyQ/dkaX+m+Xv1XGDNEj 4slNzmOg1q7NHr++lCERiIfioHi9As6+ufQHuSZ1PoVmQ1zgUTZBBAUqBxaywHhQ PL72MW7rxa7FrhG4F1GWZR5EJzPd6j+VnwFdOyY8W09UN1p7j3AJNoh2Dz+F -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:58 2025 by rpki-client