$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.mft File: A21FE834C0EE69DF7913D5ED884800CC38D73955.mft (raw, json) Hash identifier: JYleTSau5lryoLJDpvax7FqEL/dtmC+vghumXCbFiHY= Subject key identifier: 99:61:6C:FF:CD:27:55:30:04:1E:BD:7D:E6:12:5B:A0:38:8C:79:16 Authority key identifier: A2:1F:E8:34:C0:EE:69:DF:79:13:D5:ED:88:48:00:CC:38:D7:39:55 Certificate issuer: /CN=A21FE834C0EE69DF7913D5ED884800CC38D73955 Certificate serial: 2A3A4F708C8FDE2C1B587A48967DC51615B2F545 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.mft Manifest number: 011A Signing time: Thu 18 Sep 2025 12:56:09 +0000 Manifest this update: Thu 18 Sep 2025 12:51:09 +0000 Manifest next update: Tue 23 Sep 2025 05:31:09 +0000 Files and hashes: 1: 34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa (hash: S7joQl01sHQu5KRZi0UxKsFbh/UWkfEk+J0MmsOKVSU=) 2: A21FE834C0EE69DF7913D5ED884800CC38D73955.crl (hash: OMjVQXUHC/4i4xrL+pzTN7AAyKtKHTz6f5pKKNIvs7E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.crl rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3a:4f:70:8c:8f:de:2c:1b:58:7a:48:96:7d:c5:16:15:b2:f5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21FE834C0EE69DF7913D5ED884800CC38D73955 Validity Not Before: Sep 18 12:51:09 2025 GMT Not After : Sep 23 05:31:09 2025 GMT Subject: CN=99616CFFCD275530041EBD7DE6125BA0388C7916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:71:4f:d7:cd:03:be:e3:f6:f1:72:a6:08: ac:10:47:86:14:a2:ff:a3:5f:d7:fe:fe:bc:55:77: 66:32:18:22:76:1a:bf:8a:61:f0:e7:f0:a4:f3:47: ff:73:48:08:72:cc:f8:f3:4d:68:9c:15:61:22:66: 2c:f0:42:55:70:d1:a1:1e:40:59:04:5f:33:5c:c4: eb:95:0d:52:e8:5e:4b:82:8b:23:8d:5b:98:75:7a: a9:52:16:83:24:2f:cf:fb:fe:4d:c5:1c:c9:91:fd: 8e:16:e0:0d:da:ac:b7:65:6a:de:f3:a2:3a:be:89: 5e:53:8b:1b:c9:db:af:62:9f:b1:df:62:2f:c0:c4: 45:2b:39:e8:3c:63:26:07:66:ef:ce:e9:f6:76:f8: 31:34:50:14:15:ef:ff:95:25:1a:41:d9:0a:2a:4e: 34:55:67:c7:b8:33:83:5a:8d:6a:7d:bc:2e:ba:d0: 02:a9:2b:2a:79:09:c8:41:c0:03:cd:7c:93:52:fa: a7:d7:a3:73:9e:9e:1b:0a:65:3b:39:e4:2b:21:82: fa:79:28:ba:5a:05:69:19:2e:65:01:e3:ab:75:0e: b6:99:6c:ee:66:8f:38:44:1a:2c:04:fe:a3:49:07: 5d:1a:d7:31:f7:92:72:bf:26:be:c3:ec:0a:fe:e8: 70:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:61:6C:FF:CD:27:55:30:04:1E:BD:7D:E6:12:5B:A0:38:8C:79:16 X509v3 Authority Key Identifier: keyid:A2:1F:E8:34:C0:EE:69:DF:79:13:D5:ED:88:48:00:CC:38:D7:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:96:d7:fe:6e:39:29:c0:ba:dc:10:4b:50:8d:55:02:0e:d6: 33:24:b8:a1:ac:7c:8e:fd:53:35:11:1c:48:87:c4:64:f0:42: 84:7b:79:93:f4:f1:01:13:48:2b:c6:20:cd:b7:79:ee:52:61: 34:01:ec:0f:6b:ed:ab:2c:dc:1d:22:10:7c:ea:aa:b5:52:d1: f7:f5:68:32:9a:88:fb:b9:3e:7b:ac:b9:cb:fa:2f:6b:c2:5a: 98:14:03:5e:fd:1c:f9:d6:5d:73:a5:3e:1d:a1:e2:e4:2d:02: 3c:f6:0b:ba:6a:12:ad:2a:0e:36:e6:ec:3d:22:6e:1a:f6:84: e9:a8:0a:2d:08:5e:05:26:41:c4:ec:ea:64:df:a2:1e:97:57: a1:bc:63:4a:97:71:1b:5d:9b:b2:50:0d:f6:38:62:ee:9c:4f: 0e:7c:5e:ad:db:32:42:9a:60:67:a7:98:ab:35:e3:17:e2:29: c3:71:e5:f1:41:0a:ea:09:e7:c1:f8:77:b1:9e:11:2f:8e:67: c0:f7:8d:54:be:ef:0d:95:65:77:de:c3:5b:f1:9e:8c:e8:08: 29:04:e3:c2:54:ca:62:fc:12:a4:60:0e:db:c7:cf:7e:b0:37: c9:3d:cf:1c:7b:2b:bb:c7:a2:d6:fb:fe:40:c3:f7:ee:ba:30: d6:b4:e0:34 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKjpPcIyP3iwbWHpIln3FFhWy9UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxRkU4MzRDMEVFNjlERjc5MTNENUVEODg0ODAwQ0Mz OEQ3Mzk1NTAeFw0yNTA5MTgxMjUxMDlaFw0yNTA5MjMwNTMxMDlaMDMxMTAvBgNV BAMTKDk5NjE2Q0ZGQ0QyNzU1MzAwNDFFQkQ3REU2MTI1QkEwMzg4Qzc5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHXFP180DvuP28XKmCKwQR4YU ov+jX9f+/rxVd2YyGCJ2Gr+KYfDn8KTzR/9zSAhyzPjzTWicFWEiZizwQlVw0aEe QFkEXzNcxOuVDVLoXkuCiyONW5h1eqlSFoMkL8/7/k3FHMmR/Y4W4A3arLdlat7z ojq+iV5TixvJ269in7HfYi/AxEUrOeg8YyYHZu/O6fZ2+DE0UBQV7/+VJRpB2Qoq TjRVZ8e4M4NajWp9vC660AKpKyp5CchBwAPNfJNS+qfXo3OenhsKZTs55Cshgvp5 KLpaBWkZLmUB46t1DraZbO5mjzhEGiwE/qNJB10a1zH3knK/Jr7D7Ar+6HCbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmWFs/80nVTAEHr195hJboDiMeRYwHwYDVR0j BBgwFoAUoh/oNMDuad95E9XtiEgAzDjXOVUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzY5Q0U2NTJGREYzNUY1NzZDNzY4NDkxRUEzQzEzREQw ODMxQjFERTg1NTA5MTk0MUMyOTE3NTVFRDdFMkVGLzAvQTIxRkU4MzRDMEVFNjlE Rjc5MTNENUVEODg0ODAwQ0MzOEQ3Mzk1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjFGRTgzNEMwRUU2OURGNzkx M0Q1RUQ4ODQ4MDBDQzM4RDczOTU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTc2OUNFNjUyRkRGMzVGNTc2Qzc2ODQ5MUVBM0MxM0REMDgzMUIxREU4 NTUwOTE5NDFDMjkxNzU1RUQ3RTJFRi8wL0EyMUZFODM0QzBFRTY5REY3OTEzRDVF RDg4NDgwMENDMzhENzM5NTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5ltf+bjkpwLrcEEtQjVUCDtYz JLihrHyO/VM1ERxIh8Rk8EKEe3mT9PEBE0grxiDNt3nuUmE0AewPa+2rLNwdIhB8 6qq1UtH39Wgymoj7uT57rLnL+i9rwlqYFANe/Rz51l1zpT4doeLkLQI89gu6ahKt Kg425uw9Im4a9oTpqAotCF4FJkHE7Opk36Iel1ehvGNKl3EbXZuyUA32OGLunE8O fF6t2zJCmmBnp5irNeMX4inDceXxQQrqCefB+HexnhEvjmfA941Uvu8NlWV33sNb 8Z6M6AgpBOPCVMpi/BKkYA7bx89+sDfJPc8ceyu7x6LW+/5Aw/fuujDWtOA0 -----END CERTIFICATE-----Generated at Thu Sep 18 17:10:59 2025 by rpki-client