$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json) Hash identifier: 0KWrvBh+adHEHxeZygDc6q7JtHRJ3ZfsqaDaDOJ1G9c= Subject key identifier: 46:3A:29:5F:B5:2F:24:F6:E2:D1:AB:2E:E7:21:9C:0E:0A:87:11:B7 Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Certificate serial: 5DB5AB55CAC0F458C4CAC69784777A4D5825807C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft Manifest number: F8 Signing time: Thu 24 Jul 2025 01:39:48 +0000 Manifest this update: Thu 24 Jul 2025 01:34:48 +0000 Manifest next update: Tue 29 Jul 2025 14:04:48 +0000 Files and hashes: 1: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: Tv46jSL3jD0k1NXV0T/tAaiSDTR6TBPS4SWa9rtammU=) 2: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: P+XPI2oS1u0tlyKOhupz0m8JaCtmxackkSsUMVbJ7yA=) 3: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: pt90BIyyUSHlZlm4AKVLe1Z6Moz1dZPbV9t+YfaClY0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 14:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b5:ab:55:ca:c0:f4:58:c4:ca:c6:97:84:77:7a:4d:58:25:80:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Validity Not Before: Jul 24 01:34:48 2025 GMT Not After : Jul 29 14:04:48 2025 GMT Subject: CN=463A295FB52F24F6E2D1AB2EE7219C0E0A8711B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:fa:16:8e:1e:a5:9b:b0:ec:9a:9a:2c:1a: 7a:1b:ba:14:f7:6b:cc:27:4f:9b:ea:65:53:1b:7e: e7:68:86:b5:e9:73:b0:93:df:9a:58:e9:41:2c:67: f4:08:58:17:48:b5:3a:ba:8d:cc:77:44:02:fd:17: e5:3b:cf:1e:a1:b2:4c:1f:dd:46:6d:45:26:91:f2: 05:8f:32:8a:95:db:80:54:01:d2:b5:2c:bd:21:ea: a6:b2:93:17:72:7f:0d:cf:0b:a8:f6:57:90:8c:ac: 10:c9:40:9e:19:5b:1e:a1:3b:55:53:bb:22:f6:98: 46:22:67:f7:25:6c:01:24:13:60:1a:cf:ab:02:84: d5:fe:04:6c:1a:2a:c9:9f:90:50:e5:6d:2d:d0:0e: 7f:cd:c8:80:c6:8d:32:2a:48:60:a5:6a:09:a7:24: 1a:c1:2e:d4:10:60:96:c1:24:0c:d7:29:b1:8a:67: 7a:1b:a1:f0:62:7d:14:fc:a0:be:da:6e:fb:2a:0c: b3:33:fa:63:29:c8:c2:b2:bc:72:a4:0f:02:f6:97: 4a:6f:d5:65:b6:f5:41:7b:47:a8:8b:d9:54:18:27: 95:d5:2d:c9:94:e6:e4:33:7a:cb:55:3e:e6:7f:9a: 28:f8:66:ed:21:27:66:09:15:81:76:9e:3f:4c:cf: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3A:29:5F:B5:2F:24:F6:E2:D1:AB:2E:E7:21:9C:0E:0A:87:11:B7 X509v3 Authority Key Identifier: keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ca:1a:31:f3:11:a4:65:a5:38:0e:9e:05:aa:c1:96:3b:ea: 0c:6f:49:1a:2d:f0:fa:1c:f1:cc:e8:c3:63:e8:46:c1:c8:e3: e4:aa:8d:81:49:90:ea:f4:ad:bd:c2:1f:69:00:b7:30:57:99: a5:1a:ca:14:a0:0a:c2:14:1c:2e:b1:ce:b0:a7:e8:71:e5:f1: e8:de:14:92:96:20:07:cc:c7:ea:21:b5:d7:78:07:a1:f1:f0: 7a:65:ce:e0:33:86:dc:5a:41:2c:e0:75:58:ea:6d:c3:4a:1a: e4:4f:c2:99:a8:79:28:02:2e:1f:e9:89:05:52:15:bd:b3:8c: f8:b3:07:75:a1:94:47:90:e5:db:a5:f5:fc:f7:ff:de:0a:50: 20:26:20:64:3d:65:8f:30:54:85:6c:cd:04:6f:b4:49:95:22: e9:db:63:eb:d7:14:c7:24:de:2d:01:9d:9c:3a:00:9c:10:4f: 7a:9b:ab:91:cc:75:22:64:c7:95:58:bd:35:ca:72:0a:13:5e: 2d:8a:0d:5d:8b:6c:c7:ed:24:5f:41:15:db:9f:fa:8c:0e:08: 50:83:71:ab:f4:06:70:b4:82:5c:21:10:2e:6c:18:67:e4:5d: f1:42:77:7e:71:01:c3:df:de:26:89:a6:c5:f6:e8:4b:ec:bd: 7f:05:f8:e4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXbWrVcrA9FjEysaXhHd6TVglgHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD QkE5NTM2QTAeFw0yNTA3MjQwMTM0NDhaFw0yNTA3MjkxNDA0NDhaMDMxMTAvBgNV BAMTKDQ2M0EyOTVGQjUyRjI0RjZFMkQxQUIyRUU3MjE5QzBFMEE4NzExQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gPoWjh6lm7DsmposGnobuhT3 a8wnT5vqZVMbfudohrXpc7CT35pY6UEsZ/QIWBdItTq6jcx3RAL9F+U7zx6hskwf 3UZtRSaR8gWPMoqV24BUAdK1LL0h6qaykxdyfw3PC6j2V5CMrBDJQJ4ZWx6hO1VT uyL2mEYiZ/clbAEkE2Aaz6sChNX+BGwaKsmfkFDlbS3QDn/NyIDGjTIqSGClagmn JBrBLtQQYJbBJAzXKbGKZ3obofBifRT8oL7abvsqDLMz+mMpyMKyvHKkDwL2l0pv 1WW29UF7R6iL2VQYJ5XVLcmU5uQzestVPuZ/mij4Zu0hJ2YJFYF2nj9Mz3WlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURjopX7UvJPbi0asu5yGcDgqHEbcwHwYDVR0j BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4 MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1 OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0 RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACyhox8xGkZaU4Dp4FqsGWO+oM b0kaLfD6HPHM6MNj6EbByOPkqo2BSZDq9K29wh9pALcwV5mlGsoUoArCFBwusc6w p+hx5fHo3hSSliAHzMfqIbXXeAeh8fB6Zc7gM4bcWkEs4HVY6m3DShrkT8KZqHko Ai4f6YkFUhW9s4z4swd1oZRHkOXbpfX89//eClAgJiBkPWWPMFSFbM0Eb7RJlSLp 22Pr1xTHJN4tAZ2cOgCcEE96m6uRzHUiZMeVWL01ynIKE14tig1di2zH7SRfQRXb n/qMDghQg3Gr9AZwtIJcIRAubBhn5F3xQnd+cQHD394miabF9uhL7L1/Bfjk -----END CERTIFICATE-----Generated at Sat Jul 26 12:18:18 2025 by rpki-client