$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft File: 21711620AC4F377630443FF5BDD3C78255256F48.mft (raw, json) Hash identifier: QOLsrBUvjw0fF9uA/HJVHKNMttJti1J/hFirX4n8ZVE= Subject key identifier: 0C:96:44:5D:B3:3D:F0:74:81:65:8F:02:74:4D:E6:4D:72:AA:30:80 Authority key identifier: 21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48 Certificate issuer: /CN=21711620AC4F377630443FF5BDD3C78255256F48 Certificate serial: 3ADC95966FBDBE39B201203D477D8BF28910282C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft Manifest number: 012D Signing time: Mon 20 Oct 2025 08:01:53 +0000 Manifest this update: Mon 20 Oct 2025 07:56:53 +0000 Manifest next update: Sat 25 Oct 2025 21:28:53 +0000 Files and hashes: 1: 21711620AC4F377630443FF5BDD3C78255256F48.crl (hash: t9YHEqU5waG08CleL1HkDL8rqa6kZCKniBS384w1V2U=) 2: 3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa (hash: scAoKsLBSoCi8yX9v8A273F4Oet0EIbJYC5yBKPFXkQ=) 3: 323830333a633438303a3a2f33322d3634203d3e20323633313934.roa (hash: Yp4gDVnO3OwG/In2sf5lV/vU/OXPQ67QnAPNDL/ySO0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:95:96:6f:bd:be:39:b2:01:20:3d:47:7d:8b:f2:89:10:28:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21711620AC4F377630443FF5BDD3C78255256F48 Validity Not Before: Oct 20 07:56:53 2025 GMT Not After : Oct 25 21:28:53 2025 GMT Subject: CN=0C96445DB33DF07481658F02744DE64D72AA3080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:78:fd:84:dc:2f:f8:ae:5f:54:40:bc:c3: c1:7e:a2:cd:a3:f5:cd:d8:d2:c6:33:39:9d:40:68: 95:ad:67:30:c7:00:61:27:92:69:be:83:d8:8b:1e: fb:05:7a:aa:30:50:8a:0b:61:2d:bd:3c:2b:65:19: f1:07:be:9f:ff:b1:ee:ef:ee:fb:f5:e4:61:70:b8: 5a:8d:35:30:47:a8:c7:20:8f:3c:35:a8:03:9c:b5: b5:9e:c3:4d:4f:3c:8a:f5:fd:e1:b9:98:4d:a8:f4: 4c:68:a0:45:28:91:bc:dd:74:04:e3:e3:50:d6:3b: bc:8d:66:8b:8d:7e:c3:3f:eb:24:2d:8b:e7:a7:9d: e5:37:ed:bd:b4:ec:b9:e3:60:08:91:bc:55:05:26: f1:f2:7b:b3:6c:ae:62:b5:92:75:d0:4a:ba:71:41: 88:19:fa:d0:48:b2:d4:29:f8:99:ba:d5:fd:e6:f7: 96:ae:4a:65:0e:d8:fe:00:f3:28:b6:7f:31:c1:27: 3b:db:1b:79:b5:ab:8a:d4:21:d5:f0:45:da:04:1e: aa:1e:ca:25:08:e0:50:8d:de:95:0c:72:54:c9:7d: 6e:f6:06:49:7a:6b:27:0f:c4:25:f1:f1:7e:e0:ef: 50:07:bb:a0:86:43:f7:71:c2:25:9b:5b:9a:9f:33: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:44:5D:B3:3D:F0:74:81:65:8F:02:74:4D:E6:4D:72:AA:30:80 X509v3 Authority Key Identifier: keyid:21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:aa:5b:c3:67:77:e5:60:94:56:cb:f9:86:1e:e8:b8:c6:f0: f5:08:42:dd:88:a2:4e:3a:2f:03:81:92:10:a0:78:6c:0a:23: b6:70:6b:f5:40:6a:9e:43:9c:0b:9e:59:02:6e:89:75:56:54: ab:a7:b8:1d:43:58:b4:cf:cd:b3:29:57:d7:ca:54:28:bd:df: 53:0d:54:78:eb:62:49:c1:16:0b:68:82:65:df:4d:64:3d:e9: ff:93:78:a6:8a:cf:cc:24:ea:13:29:2c:20:cb:70:c2:c9:dd: 72:f8:d4:ea:5c:9d:49:dc:9b:28:2f:bd:48:3c:83:ed:fe:c5: 75:7d:d3:47:ad:a3:fb:be:33:df:c3:a9:93:73:d8:b6:0f:1b: 28:db:18:08:3c:b4:7d:5f:39:2e:2d:4d:0f:6e:ee:93:96:0b: 2e:b5:1a:ab:20:72:7f:6a:9a:0e:f7:50:d1:f0:c5:81:57:41: c0:25:0e:63:a9:a8:37:3b:29:ff:42:e5:a5:d6:a3:9c:b2:86: 81:53:35:70:9f:4c:ec:a0:1c:f1:90:74:55:a8:b5:d2:3e:51: 0a:8f:2b:02:56:7f:13:13:d6:55:be:b3:02:c5:08:6e:20:0b: ed:29:72:2b:48:f3:e6:f7:d6:14:e6:9a:09:76:90:11:09:c3: a7:b3:40:e1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOtyVlm+9vjmyASA9R32L8okQKCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE3MTE2MjBBQzRGMzc3NjMwNDQzRkY1QkREM0M3ODI1 NTI1NkY0ODAeFw0yNTEwMjAwNzU2NTNaFw0yNTEwMjUyMTI4NTNaMDMxMTAvBgNV BAMTKDBDOTY0NDVEQjMzREYwNzQ4MTY1OEYwMjc0NERFNjRENzJBQTMwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrnj9hNwv+K5fVEC8w8F+os2j 9c3Y0sYzOZ1AaJWtZzDHAGEnkmm+g9iLHvsFeqowUIoLYS29PCtlGfEHvp//se7v 7vv15GFwuFqNNTBHqMcgjzw1qAOctbWew01PPIr1/eG5mE2o9ExooEUokbzddATj 41DWO7yNZouNfsM/6yQti+enneU37b207LnjYAiRvFUFJvHye7NsrmK1knXQSrpx QYgZ+tBIstQp+Jm61f3m95auSmUO2P4A8yi2fzHBJzvbG3m1q4rUIdXwRdoEHqoe yiUI4FCN3pUMclTJfW72Bkl6aycPxCXx8X7g71AHu6CGQ/dxwiWbW5qfM0ZVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDJZEXbM98HSBZY8CdE3mTXKqMIAwHwYDVR0j BBgwFoAUIXEWIKxPN3YwRD/1vdPHglUlb0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FMDJCMEM2ODk1ODk0QjZCQ0EyMUQzRTdFMDlBOUQ3RDMw NDg4Njk5OEEzRTMzMEY3RkNEMTY2NTU1MENERjIxLzAvMjE3MTE2MjBBQzRGMzc3 NjMwNDQzRkY1QkREM0M3ODI1NTI1NkY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTcxMTYyMEFDNEYzNzc2MzA0 NDNGRjVCREQzQzc4MjU1MjU2RjQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTAyQjBDNjg5NTg5NEI2QkNBMjFEM0U3RTA5QTlEN0QzMDQ4ODY5OThB M0UzMzBGN0ZDRDE2NjU1NTBDREYyMS8wLzIxNzExNjIwQUM0RjM3NzYzMDQ0M0ZG NUJERDNDNzgyNTUyNTZGNDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmqlvDZ3flYJRWy/mGHui4xvD1 CELdiKJOOi8DgZIQoHhsCiO2cGv1QGqeQ5wLnlkCbol1VlSrp7gdQ1i0z82zKVfX ylQovd9TDVR462JJwRYLaIJl301kPen/k3imis/MJOoTKSwgy3DCyd1y+NTqXJ1J 3JsoL71IPIPt/sV1fdNHraP7vjPfw6mTc9i2Dxso2xgIPLR9XzkuLU0Pbu6Tlgsu tRqrIHJ/apoO91DR8MWBV0HAJQ5jqag3Oyn/QuWl1qOcsoaBUzVwn0zsoBzxkHRV qLXSPlEKjysCVn8TE9ZVvrMCxQhuIAvtKXIrSPPm99YU5poJdpARCcOns0Dh -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:34 2025 by rpki-client