$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft File: 21711620AC4F377630443FF5BDD3C78255256F48.mft (raw, json) Hash identifier: BQV7cGDPSZIDTeHXhgDBkNKKv4W352SEMYdUyHHfVxU= Subject key identifier: 33:FC:6C:C8:70:EC:58:B7:E5:3F:66:C6:66:4C:A6:B5:CA:E5:ED:6E Authority key identifier: 21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48 Certificate issuer: /CN=21711620AC4F377630443FF5BDD3C78255256F48 Certificate serial: 68F0626DA918CFAFF19507D3469B87A8A0C91469 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft Manifest number: 010E Signing time: Wed 20 Aug 2025 12:16:20 +0000 Manifest this update: Wed 20 Aug 2025 12:11:19 +0000 Manifest next update: Tue 26 Aug 2025 10:41:19 +0000 Files and hashes: 1: 3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa (hash: scAoKsLBSoCi8yX9v8A273F4Oet0EIbJYC5yBKPFXkQ=) 2: 323830333a633438303a3a2f33322d3634203d3e20323633313934.roa (hash: Yp4gDVnO3OwG/In2sf5lV/vU/OXPQ67QnAPNDL/ySO0=) 3: 21711620AC4F377630443FF5BDD3C78255256F48.crl (hash: BrcyxDGjqdlY2fxWTmqqXlBPZ2cQfdle5P43ELbntIk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 10:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f0:62:6d:a9:18:cf:af:f1:95:07:d3:46:9b:87:a8:a0:c9:14:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21711620AC4F377630443FF5BDD3C78255256F48 Validity Not Before: Aug 20 12:11:19 2025 GMT Not After : Aug 26 10:41:19 2025 GMT Subject: CN=33FC6CC870EC58B7E53F66C6664CA6B5CAE5ED6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:d7:82:6a:8f:2d:5c:4b:2f:91:ca:36:66: e0:eb:55:e3:85:c7:b8:3b:86:56:6c:bd:6e:5b:e7: 35:41:b4:a2:18:b2:2f:d2:8f:77:60:d7:61:fa:8e: ff:aa:e9:f2:51:a4:02:84:fb:c9:96:76:9a:dd:96: fb:e4:9e:f0:83:0d:92:35:bb:58:13:39:cf:4f:a5: 5e:ab:f9:93:7d:be:7c:b3:c1:62:22:f7:7d:e9:5c: ea:52:a2:15:b8:1f:f3:9c:f0:dd:79:8c:16:ec:32: 0a:1d:db:c2:fa:36:b5:fc:4e:73:48:38:21:f1:33: 17:02:a2:78:26:0d:a2:08:39:0d:de:f9:b2:85:47: d2:db:9d:42:4d:74:1e:5f:04:5c:77:82:72:a6:b4: b6:ba:89:22:0d:76:d1:6e:60:ba:30:78:10:b3:08: 18:1b:5d:41:f0:81:e0:b3:8b:ea:21:8d:d3:d3:07: fc:12:75:76:26:60:1d:32:d4:a7:31:28:50:8d:a4: 37:ed:a3:61:bb:a3:86:a6:d9:c2:0b:87:7a:98:6c: ed:cb:59:e4:44:9e:27:bb:d3:81:e1:50:ae:f1:83: 5c:55:23:f0:f6:c4:e0:2d:de:bb:74:ef:6c:2b:bc: ab:b7:d5:be:dc:f5:e7:b5:b3:b9:88:bc:3d:0f:07: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FC:6C:C8:70:EC:58:B7:E5:3F:66:C6:66:4C:A6:B5:CA:E5:ED:6E X509v3 Authority Key Identifier: keyid:21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:44:c4:4d:9f:c5:ab:55:4e:55:cd:7f:79:c8:02:f9:47:03: 75:5c:88:4a:b2:a5:2e:45:99:ab:05:d6:ca:77:e8:fa:2f:82: 88:80:ed:f0:0f:4a:4a:7c:a8:22:28:f7:9c:3d:d5:49:dd:9f: 9d:9a:da:1d:84:d3:d5:e4:22:77:e0:5a:10:33:1b:a6:28:ae: 44:e1:0e:4d:33:cf:02:c9:57:f9:bb:93:69:b4:8d:ca:16:1f: e6:4a:74:0f:49:d7:d5:55:0a:c2:5b:7e:7c:ee:78:f0:c9:00: d5:ec:0e:df:f4:6d:3a:5a:9f:30:e0:05:c4:0f:6a:e6:6d:9d: 65:69:80:b3:ea:99:aa:5a:56:88:da:63:24:f0:b4:29:c7:cd: de:dd:32:4d:95:26:0d:9d:16:70:21:96:00:6a:fa:eb:e9:fe: 60:16:05:d1:c3:c6:e9:0c:e4:68:4f:ee:83:ed:54:cb:2a:a8: 18:cd:34:7f:3e:3a:dd:43:5f:42:1e:d9:ff:8c:b8:dc:7c:37: 58:d9:91:7d:a5:20:d7:47:76:54:0b:03:18:9b:e0:83:69:74: ef:c8:d7:f8:e4:29:c4:28:90:7e:b7:c3:f2:af:52:7a:19:2b: 3d:3b:55:d1:ad:58:f1:ae:d1:15:44:d2:97:0a:df:bf:b7:5e: c8:c0:12:04 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaPBibakYz6/xlQfTRpuHqKDJFGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE3MTE2MjBBQzRGMzc3NjMwNDQzRkY1QkREM0M3ODI1 NTI1NkY0ODAeFw0yNTA4MjAxMjExMTlaFw0yNTA4MjYxMDQxMTlaMDMxMTAvBgNV BAMTKDMzRkM2Q0M4NzBFQzU4QjdFNTNGNjZDNjY2NENBNkI1Q0FFNUVENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nNeCao8tXEsvkco2ZuDrVeOF x7g7hlZsvW5b5zVBtKIYsi/Sj3dg12H6jv+q6fJRpAKE+8mWdprdlvvknvCDDZI1 u1gTOc9PpV6r+ZN9vnyzwWIi933pXOpSohW4H/Oc8N15jBbsMgod28L6NrX8TnNI OCHxMxcCongmDaIIOQ3e+bKFR9LbnUJNdB5fBFx3gnKmtLa6iSINdtFuYLoweBCz CBgbXUHwgeCzi+ohjdPTB/wSdXYmYB0y1KcxKFCNpDfto2G7o4am2cILh3qYbO3L WeREnie704HhUK7xg1xVI/D2xOAt3rt072wrvKu31b7c9ee1s7mIvD0PBz3BAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUM/xsyHDsWLflP2bGZkymtcrl7W4wHwYDVR0j BBgwFoAUIXEWIKxPN3YwRD/1vdPHglUlb0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FMDJCMEM2ODk1ODk0QjZCQ0EyMUQzRTdFMDlBOUQ3RDMw NDg4Njk5OEEzRTMzMEY3RkNEMTY2NTU1MENERjIxLzAvMjE3MTE2MjBBQzRGMzc3 NjMwNDQzRkY1QkREM0M3ODI1NTI1NkY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTcxMTYyMEFDNEYzNzc2MzA0 NDNGRjVCREQzQzc4MjU1MjU2RjQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTAyQjBDNjg5NTg5NEI2QkNBMjFEM0U3RTA5QTlEN0QzMDQ4ODY5OThB M0UzMzBGN0ZDRDE2NjU1NTBDREYyMS8wLzIxNzExNjIwQUM0RjM3NzYzMDQ0M0ZG NUJERDNDNzgyNTUyNTZGNDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjRMRNn8WrVU5VzX95yAL5RwN1 XIhKsqUuRZmrBdbKd+j6L4KIgO3wD0pKfKgiKPecPdVJ3Z+dmtodhNPV5CJ34FoQ MxumKK5E4Q5NM88CyVf5u5NptI3KFh/mSnQPSdfVVQrCW3587njwyQDV7A7f9G06 Wp8w4AXED2rmbZ1laYCz6pmqWlaI2mMk8LQpx83e3TJNlSYNnRZwIZYAavrr6f5g FgXRw8bpDORoT+6D7VTLKqgYzTR/PjrdQ19CHtn/jLjcfDdY2ZF9pSDXR3ZUCwMY m+CDaXTvyNf45CnEKJB+t8Pyr1J6GSs9O1XRrVjxrtEVRNKXCt+/t17IwBIE -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:38 2025 by rpki-client