$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: IOCQQnxLdMtPU2l87vpl/kb6ObPZMlRiGVlDZ93MyWM= Subject key identifier: 31:94:3E:F7:CA:B7:D9:55:B6:59:9B:B8:0E:BE:5C:F1:60:4F:E0:29 Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 5F67985EC97505B06B1441378A29E142177D5413 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 012A Signing time: Mon 20 Oct 2025 03:48:46 +0000 Manifest this update: Mon 20 Oct 2025 03:43:46 +0000 Manifest next update: Sat 25 Oct 2025 18:44:46 +0000 Files and hashes: 1: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: +Ehqe5AsijtKZOHSCGOIJa3pckbUIwcG5kJITFHRXM0=) 2: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: e/u1f5B5pQ8k8meUmmqJn58M7mruwwHI9hJ/Iw3kKPc=) 3: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: +A4iKTCl2MV1Tx5ypvBU9+eqzsUV2xgEqANt9HERoD0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:67:98:5e:c9:75:05:b0:6b:14:41:37:8a:29:e1:42:17:7d:54:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Oct 20 03:43:46 2025 GMT Not After : Oct 25 18:44:46 2025 GMT Subject: CN=31943EF7CAB7D955B6599BB80EBE5CF1604FE029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:b3:df:9b:55:43:69:19:8d:85:41:65:94: 14:c8:82:2d:fc:26:98:c9:2e:aa:56:2b:e5:c3:ac: c5:af:ac:e7:ec:4c:82:4e:7a:bb:52:82:c7:57:35: 9f:10:d6:09:1d:0a:94:69:3b:ff:d3:b2:ac:81:8d: 09:a3:d1:ad:85:ef:a1:df:2b:5f:a0:4f:20:0a:f3: df:2b:9a:b7:0e:c7:af:1b:bc:cf:02:ae:81:fb:1b: 2d:2f:b3:70:89:93:2d:78:07:28:8b:47:7e:9f:3b: 93:c0:1f:e1:02:fe:f7:90:83:13:aa:50:bc:a3:7d: a6:2e:e4:a4:d0:3d:f2:74:2d:59:82:b3:f0:f2:d4: ed:a4:0c:15:9a:94:f1:36:17:3b:b6:c6:08:29:5a: 73:ff:28:35:6a:e2:fe:5a:2a:52:84:86:8f:7e:a8: 98:4a:2b:32:52:6e:fa:9f:7f:d8:b7:da:2c:82:f5: 56:f5:b1:15:50:18:b1:47:68:44:21:2c:b4:73:b0: 5d:61:83:41:8b:a8:34:f1:b3:79:44:88:df:63:a9: 85:f7:fc:e6:2b:20:72:21:14:fe:57:09:d9:cd:56: ae:5b:20:4b:41:40:6c:40:b9:2e:4e:45:b7:69:8b: c0:e9:ee:a2:c0:42:b9:5a:e6:06:d9:c3:66:7d:15: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:94:3E:F7:CA:B7:D9:55:B6:59:9B:B8:0E:BE:5C:F1:60:4F:E0:29 X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2a:e8:42:92:5a:00:21:91:20:d6:de:7e:85:d1:99:cc:37: 20:17:f5:38:28:99:20:d0:df:1b:af:78:24:11:1a:f7:de:63: db:26:9b:db:a2:39:6a:bc:9e:55:85:c8:08:67:cb:1d:05:f1: b6:dc:3f:47:84:48:fd:56:cb:85:8d:13:60:8f:c9:47:13:ef: 94:ed:85:57:bd:29:ca:4c:f5:ea:21:3b:a5:80:4d:91:67:cb: f8:e3:2f:29:fb:fb:eb:c6:89:a5:f9:0e:c1:64:83:5a:1a:14: c2:fa:3d:24:10:be:a0:75:42:dd:ba:36:3e:b3:26:35:4d:52: d8:ea:44:1f:e4:a2:0d:3c:8a:24:ab:83:22:5c:2b:98:5a:a0: be:1e:87:21:c6:91:23:32:a5:f9:07:51:5d:34:97:d3:3a:97: b5:ce:5d:55:c2:a6:1a:a2:0a:80:07:c3:35:b2:3e:d0:65:40: 10:c5:5e:e8:54:5f:18:17:43:ef:58:ca:ff:05:74:37:69:cb: db:0f:ef:ac:89:35:89:7a:f2:c9:0a:35:ce:20:14:ee:3e:d7: 6c:56:74:7f:68:53:bb:18:83:d8:f4:6f:5d:a5:ed:f9:9a:33: 7e:ee:2f:9d:db:1a:2a:49:0d:04:b8:c0:a2:ad:0b:cb:1f:37: cc:0a:9e:f4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUX2eYXsl1BbBrFEE3iinhQhd9VBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNTEwMjAwMzQzNDZaFw0yNTEwMjUxODQ0NDZaMDMxMTAvBgNV BAMTKDMxOTQzRUY3Q0FCN0Q5NTVCNjU5OUJCODBFQkU1Q0YxNjA0RkUwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pbPfm1VDaRmNhUFllBTIgi38 JpjJLqpWK+XDrMWvrOfsTIJOertSgsdXNZ8Q1gkdCpRpO//TsqyBjQmj0a2F76Hf K1+gTyAK898rmrcOx68bvM8CroH7Gy0vs3CJky14ByiLR36fO5PAH+EC/veQgxOq ULyjfaYu5KTQPfJ0LVmCs/Dy1O2kDBWalPE2Fzu2xggpWnP/KDVq4v5aKlKEho9+ qJhKKzJSbvqff9i32iyC9Vb1sRVQGLFHaEQhLLRzsF1hg0GLqDTxs3lEiN9jqYX3 /OYrIHIhFP5XCdnNVq5bIEtBQGxAuS5ORbdpi8Dp7qLAQrla5gbZw2Z9FbjtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMZQ+98q32VW2WZu4Dr5c8WBP4CkwHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYKuhCkloAIZEg1t5+hdGZzDcg F/U4KJkg0N8br3gkERr33mPbJpvbojlqvJ5VhcgIZ8sdBfG23D9HhEj9VsuFjRNg j8lHE++U7YVXvSnKTPXqITulgE2RZ8v44y8p+/vrxoml+Q7BZINaGhTC+j0kEL6g dULdujY+syY1TVLY6kQf5KINPIokq4MiXCuYWqC+HochxpEjMqX5B1FdNJfTOpe1 zl1VwqYaogqAB8M1sj7QZUAQxV7oVF8YF0PvWMr/BXQ3acvbD++siTWJevLJCjXO IBTuPtdsVnR/aFO7GIPY9G9dpe35mjN+7i+d2xoqSQ0EuMCirQvLHzfMCp70 -----END CERTIFICATE-----Generated at Mon Oct 20 10:49:49 2025 by rpki-client