$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft File: 215EF3A6C3425B383CEB59CE45AC9A7826229223.mft (raw, json) Hash identifier: MGYVwUSHjX0zPN9trdJ/AubyBkynB1C4Cn6tbNk61ng= Subject key identifier: C3:69:19:17:FC:1B:58:96:62:6F:F4:AD:66:E3:BF:28:E5:E4:9F:9C Authority key identifier: 21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 Certificate issuer: /CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Certificate serial: 1A28269E743A86ABB15D4C0FE4A64291C1283E40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft Manifest number: FB Signing time: Sat 19 Jul 2025 17:11:09 +0000 Manifest this update: Sat 19 Jul 2025 17:06:09 +0000 Manifest next update: Thu 24 Jul 2025 17:14:09 +0000 Files and hashes: 1: 3230302e302e31382e302f32342d3234203d3e203238303536.roa (hash: /R6TNDHkC7qrc3ejA5Ozx8e7s7rp/3h3zNI5TVz6S0w=) 2: 323030313a313363373a363030333a3a2f34382d3438203d3e203238303536.roa (hash: nawzzhum8MQWj7TXuzlCWw+jKq70TVRot/Zw7CNYRsE=) 3: 215EF3A6C3425B383CEB59CE45AC9A7826229223.crl (hash: tTetDM8Xurn/tPv0fJ+pGda6K6XdjWs3MJXajhWzE+k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Jul 2025 17:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:28:26:9e:74:3a:86:ab:b1:5d:4c:0f:e4:a6:42:91:c1:28:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Validity Not Before: Jul 19 17:06:09 2025 GMT Not After : Jul 24 17:14:09 2025 GMT Subject: CN=C3691917FC1B5896626FF4AD66E3BF28E5E49F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:63:c7:b2:37:1b:8f:52:4d:d7:55:1e:df: 21:fd:88:5e:10:20:48:bd:60:75:0c:de:ed:a0:1b: d7:79:a5:ab:aa:88:12:5d:30:e5:83:d1:56:75:bf: 0a:7f:7e:94:8a:42:b6:d4:52:21:d9:a1:de:76:b9: d4:4f:87:2b:8c:b5:31:8a:61:86:d9:af:2a:9f:2e: 43:d6:81:34:59:44:39:e0:d6:95:f2:91:d9:7a:00: 2c:f8:70:5d:fd:c7:e6:63:1b:0b:0c:d2:43:87:a9: 2c:c9:5b:42:c6:b5:30:46:0c:bb:76:6c:7e:67:4c: 86:5c:74:1d:3d:56:c1:0a:46:f7:62:2c:73:70:73: 6c:55:8b:a5:a8:fc:9c:7a:7a:48:8d:6d:2e:fb:47: e3:0b:cc:d3:4e:d3:19:2a:9e:28:bf:fd:4a:a2:57: 7e:44:cf:0a:28:a2:3d:67:d6:b2:15:23:09:03:22: c3:35:c5:ea:dd:77:2b:27:14:ec:92:9a:40:67:04: 02:8b:dc:1c:5e:d9:5b:1b:d1:a2:c1:f6:12:15:25: ef:d0:6c:99:09:3f:42:49:02:98:57:88:a9:3e:d9: fd:fa:c7:5d:3f:af:c2:52:c6:78:d9:0f:58:93:91: 7c:47:94:07:39:30:f6:46:0c:bb:a6:70:96:66:6c: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:19:17:FC:1B:58:96:62:6F:F4:AD:66:E3:BF:28:E5:E4:9F:9C X509v3 Authority Key Identifier: keyid:21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:48:b9:ca:2e:03:9a:29:7d:38:f5:ea:88:86:0d:c1:6f:72: d2:bb:76:b3:e5:8d:f2:80:02:a2:46:c8:1e:6d:e3:2c:ae:67: ab:b5:b8:5c:f8:e2:a4:80:83:0a:f3:e2:d3:cf:e5:9c:fc:70: d1:77:ff:dd:f1:37:bf:f8:a5:7c:a7:c3:5c:e2:ac:e9:b3:17: 4f:7c:2d:29:55:f3:91:12:a6:b9:75:64:44:f3:0f:ed:77:46: b6:17:6f:02:8a:71:51:ba:1c:1c:70:fc:61:07:b6:67:6b:b5: 36:d3:4b:77:38:bc:fc:88:20:e8:11:4c:78:93:6a:a8:32:cb: 12:4d:fb:1e:b4:aa:27:c9:f9:54:24:35:52:7c:7b:d8:7d:68: 15:41:38:c6:1a:b8:ca:aa:04:26:fe:43:ef:81:37:30:3f:68: cb:b7:6e:b4:08:73:a4:c2:5e:b5:73:75:a6:41:09:31:04:d4: ea:72:47:ec:cb:a0:de:11:93:54:05:d5:f6:19:8a:ba:bd:b4: d3:42:db:d1:ca:23:9f:f3:4a:3c:54:a2:9d:c4:50:17:40:a6: 2a:a2:43:3a:07:e3:c8:9d:6c:fd:47:1e:2f:90:cd:4b:7c:c1: 05:ab:0b:8d:f6:83:78:45:41:fd:95:68:6f:bf:ad:2c:dd:e2: 03:5c:f0:a6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGigmnnQ6hquxXUwP5KZCkcEoPkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RUYzQTZDMzQyNUIzODNDRUI1OUNFNDVBQzlBNzgy NjIyOTIyMzAeFw0yNTA3MTkxNzA2MDlaFw0yNTA3MjQxNzE0MDlaMDMxMTAvBgNV BAMTKEMzNjkxOTE3RkMxQjU4OTY2MjZGRjRBRDY2RTNCRjI4RTVFNDlGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x2PHsjcbj1JN11Ue3yH9iF4Q IEi9YHUM3u2gG9d5pauqiBJdMOWD0VZ1vwp/fpSKQrbUUiHZod52udRPhyuMtTGK YYbZryqfLkPWgTRZRDng1pXykdl6ACz4cF39x+ZjGwsM0kOHqSzJW0LGtTBGDLt2 bH5nTIZcdB09VsEKRvdiLHNwc2xVi6Wo/Jx6ekiNbS77R+MLzNNO0xkqnii//Uqi V35Ezwoooj1n1rIVIwkDIsM1xerddysnFOySmkBnBAKL3Bxe2Vsb0aLB9hIVJe/Q bJkJP0JJAphXiKk+2f36x10/r8JSxnjZD1iTkXxHlAc5MPZGDLumcJZmbFerAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUw2kZF/wbWJZib/StZuO/KOXkn5wwHwYDVR0j BBgwFoAUIV7zpsNCWzg861nORayaeCYikiMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUZBMzJFNEE3MEZBNkQyODhGQjI2RDIwQ0VGN0E4RDAy ODdGMDA4RDY0RkI4MjY2QkY5OUEwOTRGMEI5QkM5LzAvMjE1RUYzQTZDMzQyNUIz ODNDRUI1OUNFNDVBQzlBNzgyNjIyOTIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTVFRjNBNkMzNDI1QjM4M0NF QjU5Q0U0NUFDOUE3ODI2MjI5MjIzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFGQTMyRTRBNzBGQTZEMjg4RkIyNkQyMENFRjdBOEQwMjg3RjAwOEQ2 NEZCODI2NkJGOTlBMDk0RjBCOUJDOS8wLzIxNUVGM0E2QzM0MjVCMzgzQ0VCNTlD RTQ1QUM5QTc4MjYyMjkyMjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7SLnKLgOaKX049eqIhg3Bb3LS u3az5Y3ygAKiRsgebeMsrmertbhc+OKkgIMK8+LTz+Wc/HDRd//d8Te/+KV8p8Nc 4qzpsxdPfC0pVfOREqa5dWRE8w/td0a2F28CinFRuhwccPxhB7Zna7U200t3OLz8 iCDoEUx4k2qoMssSTfsetKonyflUJDVSfHvYfWgVQTjGGrjKqgQm/kPvgTcwP2jL t260CHOkwl61c3WmQQkxBNTqckfsy6DeEZNUBdX2GYq6vbTTQtvRyiOf80o8VKKd xFAXQKYqokM6B+PInWz9Rx4vkM1LfMEFqwuN9oN4RUH9lWhvv60s3eIDXPCm -----END CERTIFICATE-----Generated at Mon Jul 21 07:51:04 2025 by rpki-client