$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json) Hash identifier: YPpgbiDxXbkaHj23haXWlOYiU7B3EC8h4I0/GdztKN0= Subject key identifier: 5B:15:7E:ED:10:52:5E:5B:D1:61:06:13:69:F8:63:8C:79:06:5B:15 Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 55FAD77EE1D6DA2A6C9F1F2D659DA0FC980D57FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft Manifest number: 011D Signing time: Thu 18 Sep 2025 00:01:20 +0000 Manifest this update: Wed 17 Sep 2025 23:56:20 +0000 Manifest next update: Mon 22 Sep 2025 01:55:20 +0000 Files and hashes: 1: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: l0LWu22qOaLDlCthMeY/CvKaI4uUOaZIcvupuCI9a04=) 2: 323830333a346132303a3a2f33322d3332203d3e20323635383438.roa (hash: /INlcJc/KcMRifLcDdqXWwIVAexjHFg4O5X7DME1EmM=) 3: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: JtizmOzUDnaK6cs31cAcIRcRfqQ68WjIu4VDCayDqlU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 01:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fa:d7:7e:e1:d6:da:2a:6c:9f:1f:2d:65:9d:a0:fc:98:0d:57:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: Sep 17 23:56:20 2025 GMT Not After : Sep 22 01:55:20 2025 GMT Subject: CN=5B157EED10525E5BD161061369F8638C79065B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:95:57:e2:73:59:20:59:04:b0:e4:9e:50:b7: 86:18:c3:0c:b0:d6:98:bf:d6:26:73:2a:e8:03:d7: c3:a7:1e:75:27:bc:23:cf:13:20:ab:ec:77:fd:cc: 94:b1:51:29:4d:a5:eb:0f:fc:e3:84:3a:68:59:f5: 3c:1a:92:2b:04:ed:98:42:b3:91:cf:d8:b7:32:b9: 1a:04:28:0b:04:73:8c:d7:d4:e6:0f:53:00:a4:a0: 07:62:9d:2a:f8:20:dd:98:8f:9b:82:f1:a7:12:70: a6:25:ae:19:52:9c:3f:3d:f3:6c:ba:b8:61:40:24: 88:cd:f0:e2:9a:bd:01:59:c9:33:74:78:ea:ee:cb: ea:ea:b5:33:4e:17:b9:0a:f2:4a:61:71:35:54:c6: 2a:2b:cf:2c:d6:8a:a2:68:81:2d:9e:fe:67:ff:6b: 3c:bc:eb:c3:f1:49:35:9f:25:a4:30:e6:67:50:33: a0:8b:d5:67:f1:ba:df:30:a2:03:74:3a:95:07:da: 98:11:78:3f:fc:60:c9:8b:14:97:39:b3:35:94:9d: 8b:06:cf:e3:c5:5b:89:6b:13:bb:37:af:37:fb:d5: bf:22:0c:6c:18:81:3e:e3:2b:85:10:be:46:35:c2: 47:72:c2:7a:3c:ca:65:17:df:a7:51:83:1d:f7:20: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:15:7E:ED:10:52:5E:5B:D1:61:06:13:69:F8:63:8C:79:06:5B:15 X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:10:9f:bc:69:ea:f2:3a:a4:89:7e:f3:4d:c9:e8:28:d7:33: 1e:95:4d:27:9f:f9:90:e2:8d:30:50:61:91:d7:45:9c:7b:7c: 78:6f:f0:60:0b:2f:e9:46:54:68:b1:5f:51:f8:10:ef:27:dd: 87:16:4d:94:4c:8a:34:05:48:46:27:d5:4c:c6:90:98:04:e8: 5f:b6:42:1e:3f:2a:4e:b1:5a:0c:d6:5c:10:9b:e1:c4:00:5c: 13:47:88:1f:31:4e:cf:57:bb:42:3e:fb:6e:e7:d6:f2:a8:25: 8c:05:4a:e6:d4:1f:ed:c1:7d:d6:40:3e:53:69:91:30:df:2b: 8a:0c:9f:9e:ef:e4:d0:08:53:c7:33:30:3a:40:05:be:3a:9f: 34:07:b6:c1:5e:69:bd:2e:af:87:1b:a9:02:63:ca:3d:4b:c8: 27:57:a8:8c:6d:d8:90:6a:ee:c5:60:4c:61:6d:ba:32:55:ce: 7b:f7:83:0b:71:ed:d2:5c:9b:05:b5:08:a4:03:aa:7a:24:28: f5:5b:7a:a5:13:1c:ce:47:35:dd:79:ad:66:12:4e:bf:68:a7: 40:4d:92:29:e3:05:bc:aa:b2:0a:30:1a:f8:2c:f8:0e:fa:71: 93:f8:e2:f2:03:21:76:9f:aa:dd:17:f0:51:78:ce:2c:0e:dd: 50:cb:e2:c0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVfrXfuHW2ipsnx8tZZ2g/JgNV/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNTA5MTcyMzU2MjBaFw0yNTA5MjIwMTU1MjBaMDMxMTAvBgNV BAMTKDVCMTU3RUVEMTA1MjVFNUJEMTYxMDYxMzY5Rjg2MzhDNzkwNjVCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqlVfic1kgWQSw5J5Qt4YYwwyw 1pi/1iZzKugD18OnHnUnvCPPEyCr7Hf9zJSxUSlNpesP/OOEOmhZ9TwakisE7ZhC s5HP2LcyuRoEKAsEc4zX1OYPUwCkoAdinSr4IN2Yj5uC8acScKYlrhlSnD8982y6 uGFAJIjN8OKavQFZyTN0eOruy+rqtTNOF7kK8kphcTVUxiorzyzWiqJogS2e/mf/ azy868PxSTWfJaQw5mdQM6CL1Wfxut8wogN0OpUH2pgReD/8YMmLFJc5szWUnYsG z+PFW4lrE7s3rzf71b8iDGwYgT7jK4UQvkY1wkdywno8ymUX36dRgx33IC3vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWxV+7RBSXlvRYQYTafhjjHkGWxUwHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzI4QTdENTNCQUM1MzEwNUNBOEEwQjNB MUM5NUMyRTZBNzE5ODE2NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGEJ+8aeryOqSJfvNNyego1zMe lU0nn/mQ4o0wUGGR10Wce3x4b/BgCy/pRlRosV9R+BDvJ92HFk2UTIo0BUhGJ9VM xpCYBOhftkIePypOsVoM1lwQm+HEAFwTR4gfMU7PV7tCPvtu59byqCWMBUrm1B/t wX3WQD5TaZEw3yuKDJ+e7+TQCFPHMzA6QAW+Op80B7bBXmm9Lq+HG6kCY8o9S8gn V6iMbdiQau7FYExhbboyVc5794MLce3SXJsFtQikA6p6JCj1W3qlExzORzXdea1m Ek6/aKdATZIp4wW8qrIKMBr4LPgO+nGT+OLyAyF2n6rdF/BReM4sDt1Qy+LA -----END CERTIFICATE-----Generated at Thu Sep 18 23:31:54 2025 by rpki-client