$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft File: 7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft (raw, json) Hash identifier: qldlJ5D693PzzE4EvCIug2cT3tY3mQ5B1HDrEOkq9A4= Subject key identifier: A8:EB:63:7D:59:47:A9:82:CC:6E:8C:2E:02:80:1A:14:BE:2F:78:FE Authority key identifier: 7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C Certificate issuer: /CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C Certificate serial: 67B41E08E16A9AFB50E1F556287F213AA06B1AED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft Manifest number: 0126 Signing time: Sun 19 Oct 2025 21:29:46 +0000 Manifest this update: Sun 19 Oct 2025 21:24:46 +0000 Manifest next update: Sat 25 Oct 2025 18:50:46 +0000 Files and hashes: 1: 7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl (hash: lp+Renczrd0QOMcns1XcYzbrkmflIxh2XQqZb0cnoRY=) 2: 323830333a363931303a3a2f33322d3332203d3e20323732303034.roa (hash: ROGYJ2QMB2QstVFiwK0hBAdafhWbr5n5RjyNgIyPrBA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b4:1e:08:e1:6a:9a:fb:50:e1:f5:56:28:7f:21:3a:a0:6b:1a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C Validity Not Before: Oct 19 21:24:46 2025 GMT Not After : Oct 25 18:50:46 2025 GMT Subject: CN=A8EB637D5947A982CC6E8C2E02801A14BE2F78FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:38:56:d8:89:92:2b:f7:1c:c0:75:f4:9a: 12:35:c3:8c:84:cb:ae:66:18:af:bd:c3:62:39:e9: f6:b8:0c:c9:2d:96:c3:a2:83:6f:c2:f9:d7:76:c0: 6d:08:14:c4:01:3f:06:37:0a:86:7e:13:cb:e4:57: e3:23:0e:0c:5e:0a:77:76:4e:22:17:a0:26:f7:be: f8:6d:c4:31:0f:76:8e:19:5a:f9:8e:f2:34:5d:65: e6:5e:05:00:33:36:a0:f5:55:b8:fc:78:c7:7c:d9: 82:22:43:bc:f2:8c:08:c6:0e:2f:e5:7a:63:3d:b7: a7:cc:3a:2f:0f:02:84:8b:af:8d:fb:92:0d:96:37: f9:ca:27:34:bf:2d:95:e7:1e:b9:54:bf:9f:43:5a: d1:02:b4:5c:4e:76:4a:88:c9:2d:87:f0:a0:37:d1: af:a6:1f:32:4e:2a:76:dc:0e:5e:12:38:80:df:a7: b6:ed:45:59:0c:12:37:1c:d7:4e:18:de:40:c9:80: 05:26:f3:19:ee:e7:eb:ab:d3:bb:cb:1a:56:b3:aa: aa:17:55:d8:a6:ef:23:79:8d:b9:86:2c:f9:ba:90: ba:f9:51:d5:b5:11:55:77:6e:fa:fb:e2:d7:90:80: f7:0a:72:db:8a:d9:1f:1d:cf:99:e3:e0:dd:79:5d: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:63:7D:59:47:A9:82:CC:6E:8C:2E:02:80:1A:14:BE:2F:78:FE X509v3 Authority Key Identifier: keyid:7D:2B:B7:E5:CE:DF:B7:0C:3C:52:61:F6:75:61:FA:D8:4A:29:45:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDFDC3176AFB230DC0D7C0C8879BA1A0D4E5191CE2FC9B0C1667FA3CAE7953FB/0/7D2BB7E5CEDFB70C3C5261F67561FAD84A29457C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:79:e3:8c:c6:0a:da:a6:40:27:f9:aa:c7:3c:60:f3:a7:5d: 45:36:05:98:e2:32:94:92:e1:b2:dc:fd:30:63:85:87:2e:8c: c7:30:96:8c:be:65:c6:57:fa:aa:54:81:e0:27:ec:fb:ab:05: 6e:5f:c0:d4:6e:e6:bc:0a:e4:cd:21:56:61:76:ef:df:34:20: 3b:fa:d4:cf:d1:08:29:61:ef:14:e5:b1:57:08:09:1b:ad:73: 88:74:1a:fe:d5:cd:ec:9c:23:2c:d0:26:21:9d:89:51:2d:ad: ba:62:12:79:36:93:3a:b2:c5:d9:29:98:19:15:cc:9c:eb:70: 84:26:72:09:45:16:72:d7:3a:c1:be:4e:27:b8:55:05:6c:ef: e8:8f:17:78:f5:3b:3e:ee:3e:15:86:3a:57:7e:7f:15:97:5e: 14:5e:3a:c7:0d:0f:35:3d:eb:68:68:f1:1d:0a:9f:b1:00:01: 91:16:63:d7:7d:47:f3:bd:d7:50:f4:86:26:2e:04:67:d8:5a: 8a:df:8a:6e:d9:c9:7f:a9:13:85:fd:e5:04:45:d0:de:70:c0: 76:02:dc:2d:d5:c8:a8:db:99:f8:23:3f:36:75:ad:04:a4:50: 59:04:fc:80:90:41:d3:d5:b5:88:61:97:7d:70:5a:b3:2f:cc: 66:2f:7a:fc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZ7QeCOFqmvtQ4fVWKH8hOqBrGu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyQkI3RTVDRURGQjcwQzNDNTI2MUY2NzU2MUZBRDg0 QTI5NDU3QzAeFw0yNTEwMTkyMTI0NDZaFw0yNTEwMjUxODUwNDZaMDMxMTAvBgNV BAMTKEE4RUI2MzdENTk0N0E5ODJDQzZFOEMyRTAyODAxQTE0QkUyRjc4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVThW2ImSK/ccwHX0mhI1w4yE y65mGK+9w2I56fa4DMktlsOig2/C+dd2wG0IFMQBPwY3CoZ+E8vkV+MjDgxeCnd2 TiIXoCb3vvhtxDEPdo4ZWvmO8jRdZeZeBQAzNqD1Vbj8eMd82YIiQ7zyjAjGDi/l emM9t6fMOi8PAoSLr437kg2WN/nKJzS/LZXnHrlUv59DWtECtFxOdkqIyS2H8KA3 0a+mHzJOKnbcDl4SOIDfp7btRVkMEjcc104Y3kDJgAUm8xnu5+ur07vLGlazqqoX Vdim7yN5jbmGLPm6kLr5UdW1EVV3bvr74teQgPcKctuK2R8dz5nj4N15XXShAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqOtjfVlHqYLMbowuAoAaFL4veP4wHwYDVR0j BBgwFoAUfSu35c7ftww8UmH2dWH62EopRXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DREZEQzMxNzZBRkIyMzBEQzBEN0MwQzg4NzlCQTFBMEQ0 RTUxOTFDRTJGQzlCMEMxNjY3RkEzQ0FFNzk1M0ZCLzAvN0QyQkI3RTVDRURGQjcw QzNDNTI2MUY2NzU2MUZBRDg0QTI5NDU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RDJCQjdFNUNFREZCNzBDM0M1 MjYxRjY3NTYxRkFEODRBMjk0NTdDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0RGREMzMTc2QUZCMjMwREMwRDdDMEM4ODc5QkExQTBENEU1MTkxQ0Uy RkM5QjBDMTY2N0ZBM0NBRTc5NTNGQi8wLzdEMkJCN0U1Q0VERkI3MEMzQzUyNjFG Njc1NjFGQUQ4NEEyOTQ1N0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaeeOMxgrapkAn+arHPGDzp11F NgWY4jKUkuGy3P0wY4WHLozHMJaMvmXGV/qqVIHgJ+z7qwVuX8DUbua8CuTNIVZh du/fNCA7+tTP0QgpYe8U5bFXCAkbrXOIdBr+1c3snCMs0CYhnYlRLa26YhJ5NpM6 ssXZKZgZFcyc63CEJnIJRRZy1zrBvk4nuFUFbO/ojxd49Ts+7j4VhjpXfn8Vl14U XjrHDQ81PetoaPEdCp+xAAGRFmPXfUfzvddQ9IYmLgRn2FqK34pu2cl/qROF/eUE RdDecMB2Atwt1cio25n4Iz82da0EpFBZBPyAkEHT1bWIYZd9cFqzL8xmL3r8 -----END CERTIFICATE-----Generated at Mon Oct 20 00:21:23 2025 by rpki-client