$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: EYoYUBZ287ig5D+z+2R47V97pWFqfyG/uDWAL94E2eE= Subject key identifier: 8A:23:1E:89:DA:CA:5F:43:BD:E7:3A:42:5E:1F:A2:85:56:65:A2:6F Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 2A7061A88824941CDD769AA1A953B468A52202BE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 010F Signing time: Fri 22 Aug 2025 23:03:42 +0000 Manifest this update: Fri 22 Aug 2025 22:58:42 +0000 Manifest next update: Thu 28 Aug 2025 10:27:42 +0000 Files and hashes: 1: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: tEUsXiAUMRlLbcsQxxMz3rKbvaKdJ1jWOoEDMoA2+5g=) 2: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: +A4iKTCl2MV1Tx5ypvBU9+eqzsUV2xgEqANt9HERoD0=) 3: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: +Ehqe5AsijtKZOHSCGOIJa3pckbUIwcG5kJITFHRXM0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:70:61:a8:88:24:94:1c:dd:76:9a:a1:a9:53:b4:68:a5:22:02:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Aug 22 22:58:42 2025 GMT Not After : Aug 28 10:27:42 2025 GMT Subject: CN=8A231E89DACA5F43BDE73A425E1FA2855665A26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:f6:15:90:1b:43:20:07:a5:c4:f7:9a:93: ff:40:4d:5d:db:07:dc:f2:d0:52:ab:ff:3c:be:2e: cc:69:80:a9:cc:47:2c:df:c3:6e:48:ef:fc:45:29: 89:f2:bf:39:4c:81:94:ab:99:16:ec:ca:4a:fa:b3: ee:94:8f:b0:6e:ce:15:b0:3d:da:14:d1:34:b7:10: 0b:63:c6:fe:ba:68:f8:17:93:4e:16:96:38:6b:29: cf:e9:ce:73:2b:25:c4:05:04:59:58:0d:6b:40:26: 78:2d:6a:c8:cc:03:9c:66:ec:3c:b4:12:6a:20:e1: 86:7e:56:47:86:13:8b:aa:15:da:cc:ae:74:05:79: 35:f6:f2:d6:42:b8:29:70:e6:d6:15:90:26:41:ee: 97:a1:9f:83:ab:cf:05:8e:af:fd:54:90:7c:a7:4e: 81:f2:78:ba:0a:40:43:85:e1:69:c7:f4:8b:9f:22: 9f:63:9c:6b:fb:46:f2:69:f7:24:d8:e6:d3:8b:f5: 0e:e1:40:83:09:54:fb:a9:40:c8:13:59:c5:da:a8: 7a:0d:70:58:59:40:68:34:b0:ee:df:8d:c4:61:2a: e5:ce:f7:f3:3c:61:15:cb:08:cc:23:fd:6f:5c:36: a7:07:76:b0:a0:ee:6b:64:94:43:50:6e:57:7b:11: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:1E:89:DA:CA:5F:43:BD:E7:3A:42:5E:1F:A2:85:56:65:A2:6F X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d8:e6:22:b9:aa:b2:35:0f:98:87:d1:4d:fa:1a:c0:17:ac: 21:ac:7f:a9:33:0f:c8:b8:7d:23:02:e8:7f:06:e9:d5:a9:0f: bc:38:a2:88:99:18:91:c8:23:36:a8:3e:3b:c7:ac:1c:bf:f7: 7d:0f:50:5b:10:46:05:16:74:35:f3:4f:0c:a1:b2:5b:11:d8: c0:9b:cf:45:d8:38:3c:08:06:1e:2f:f5:25:60:3e:27:ae:bc: 7c:89:d0:d3:f6:d1:76:78:5a:2b:5a:2c:45:08:6f:d6:24:ac: ab:54:77:67:95:69:e3:80:66:e8:cd:1e:f6:b4:6f:17:8c:b0: 2d:97:82:66:42:d0:cd:56:28:50:47:93:4f:f3:b3:98:f2:ca: 5e:e3:af:91:06:3e:47:01:6a:83:c3:64:65:b6:6d:f7:53:fb: 94:57:19:13:bd:1a:dc:e1:c6:dc:2b:28:9f:f2:f5:74:e1:41: a2:f4:28:be:5d:ba:bb:83:d7:61:70:e0:3b:e7:14:31:49:c9: 80:a6:24:82:d3:05:ff:23:5c:76:28:0a:a3:3d:75:c3:4e:23: 0f:3e:ea:cb:82:71:81:36:cd:7c:24:a5:fb:66:9e:6c:b3:6d: 2e:84:18:bb:59:17:85:ef:9a:79:69:d4:37:26:6d:2f:d5:d8: 1b:8d:10:e5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKnBhqIgklBzddpqhqVO0aKUiAr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNTA4MjIyMjU4NDJaFw0yNTA4MjgxMDI3NDJaMDMxMTAvBgNV BAMTKDhBMjMxRTg5REFDQTVGNDNCREU3M0E0MjVFMUZBMjg1NTY2NUEyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhPYVkBtDIAelxPeak/9ATV3b B9zy0FKr/zy+LsxpgKnMRyzfw25I7/xFKYnyvzlMgZSrmRbsykr6s+6Uj7BuzhWw PdoU0TS3EAtjxv66aPgXk04WljhrKc/pznMrJcQFBFlYDWtAJngtasjMA5xm7Dy0 Emog4YZ+VkeGE4uqFdrMrnQFeTX28tZCuClw5tYVkCZB7pehn4OrzwWOr/1UkHyn ToHyeLoKQEOF4WnH9IufIp9jnGv7RvJp9yTY5tOL9Q7hQIMJVPupQMgTWcXaqHoN cFhZQGg0sO7fjcRhKuXO9/M8YRXLCMwj/W9cNqcHdrCg7mtklENQbld7EbK3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiiMeidrKX0O95zpCXh+ihVZlom8wHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCB2OYiuaqyNQ+Yh9FN+hrAF6wh rH+pMw/IuH0jAuh/BunVqQ+8OKKImRiRyCM2qD47x6wcv/d9D1BbEEYFFnQ1808M obJbEdjAm89F2Dg8CAYeL/UlYD4nrrx8idDT9tF2eForWixFCG/WJKyrVHdnlWnj gGbozR72tG8XjLAtl4JmQtDNVihQR5NP87OY8spe46+RBj5HAWqDw2Rltm33U/uU VxkTvRrc4cbcKyif8vV04UGi9Ci+Xbq7g9dhcOA75xQxScmApiSC0wX/I1x2KAqj PXXDTiMPPurLgnGBNs18JKX7Zp5ss20uhBi7WReF75p5adQ3Jm0v1dgbjRDl -----END CERTIFICATE-----Generated at Sat Aug 23 11:04:25 2025 by rpki-client