$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft File: 215EF3A6C3425B383CEB59CE45AC9A7826229223.mft (raw, json) Hash identifier: k2SFBsj3BAC275n3+HdYzUyZZWgPIiwHcixNAXX80g4= Subject key identifier: BF:BB:25:6D:F3:70:E5:99:4C:D3:3D:52:9F:B4:C7:35:63:20:3F:8A Authority key identifier: 21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 Certificate issuer: /CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Certificate serial: 2083C053952CF9D4FB268865803C4039A7CE25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft Manifest number: 0117 Signing time: Tue 16 Sep 2025 21:59:20 +0000 Manifest this update: Tue 16 Sep 2025 21:54:20 +0000 Manifest next update: Mon 22 Sep 2025 19:27:20 +0000 Files and hashes: 1: 215EF3A6C3425B383CEB59CE45AC9A7826229223.crl (hash: Lt2ePl04PB8+gAoQhbk86gti5daYvf3VDxjpT9/uZP8=) 2: 323030313a313363373a363030333a3a2f34382d3438203d3e203238303536.roa (hash: nawzzhum8MQWj7TXuzlCWw+jKq70TVRot/Zw7CNYRsE=) 3: 3230302e302e31382e302f32342d3234203d3e203238303536.roa (hash: /R6TNDHkC7qrc3ejA5Ozx8e7s7rp/3h3zNI5TVz6S0w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 19:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:83:c0:53:95:2c:f9:d4:fb:26:88:65:80:3c:40:39:a7:ce:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Validity Not Before: Sep 16 21:54:20 2025 GMT Not After : Sep 22 19:27:20 2025 GMT Subject: CN=BFBB256DF370E5994CD33D529FB4C73563203F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:97:f6:8a:6b:44:28:42:ed:35:70:50:3c: 40:c4:b5:9a:3d:0e:f0:b6:59:9f:19:36:97:48:d3: d5:b5:68:2b:bf:99:8e:20:de:60:95:1c:ad:9f:99: c8:28:db:64:e0:4f:33:56:f3:34:34:d2:5e:79:96: a6:1e:98:67:08:20:1f:fd:a3:d0:ea:ae:49:63:37: fe:f3:b6:8c:0e:f4:4e:c4:c5:d8:23:cb:68:57:6a: 40:af:0a:7e:0f:78:91:73:fe:25:ca:49:3f:be:71: e2:4c:ee:bd:e2:a8:97:26:86:0c:f3:6f:68:44:d2: f8:57:d1:e1:ce:23:a9:a4:7e:da:26:ff:45:f7:df: f4:16:dd:ba:a3:c1:1c:24:cf:42:05:84:4c:f7:92: e1:2d:95:b4:e9:02:37:5a:9b:92:53:08:2d:c2:e1: 7f:6c:23:24:66:80:a8:95:b1:d4:08:03:b0:43:e8: 0e:ac:69:08:86:eb:43:89:83:b8:2d:53:fe:79:89: 4d:57:f0:e7:20:73:cd:3c:22:d8:f4:33:bd:62:8d: 8f:57:14:69:2d:e5:71:cd:e7:e1:5e:a3:0b:6d:4a: cf:25:ab:fa:b8:56:37:6a:98:65:f4:e7:5d:50:69: ed:2a:c5:8b:54:0f:62:0f:e9:9a:3a:ea:f0:a4:42: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BB:25:6D:F3:70:E5:99:4C:D3:3D:52:9F:B4:C7:35:63:20:3F:8A X509v3 Authority Key Identifier: keyid:21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2f:15:63:21:6e:6e:07:4f:3c:e0:14:11:5e:f3:50:ce:cd: fd:9f:cb:0d:24:be:36:9f:da:52:7b:8d:9f:43:e5:1d:c8:dc: 5e:8a:79:a1:55:4b:f3:04:6a:ac:02:c6:4a:69:ec:46:f3:a3: 2e:a8:f4:ba:b6:0e:74:76:3d:8b:c1:f5:92:11:0f:ea:b7:74: cc:28:57:67:c2:82:bf:4e:35:5b:bf:07:0e:19:4d:12:d5:76: 97:74:7b:77:00:4b:47:ea:ea:63:b5:a5:f0:09:7f:51:85:81: 25:50:2a:e1:ab:13:4a:1b:54:3a:65:46:01:50:48:c8:2f:88: 36:b3:b9:99:55:0a:1b:ce:01:bb:7c:11:fe:38:ba:0d:cc:1d: 8c:c3:9f:f6:14:1d:a7:c3:c7:7a:8a:dc:11:6c:e7:8a:64:df: 33:91:8d:d6:e6:13:cd:87:f6:8e:ce:1a:4a:48:97:b1:e2:1b: 5a:ca:95:59:3c:bf:ce:00:14:61:f3:96:7a:b1:59:32:2b:e9: ac:78:16:e1:77:97:e2:5e:73:91:9f:2b:42:c9:f5:ba:d3:c7: 04:59:db:ed:4d:27:a8:74:08:b3:cd:a5:fc:51:70:82:26:ec: 06:65:5d:36:2b:a2:ff:59:cb:bb:64:61:82:e9:37:a3:e2:e0: 2a:d5:b5:54 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgITIIPAU5Us+dT7JohlgDxAOafOJTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyMTVFRjNBNkMzNDI1QjM4M0NFQjU5Q0U0NUFDOUE3ODI2 MjI5MjIzMB4XDTI1MDkxNjIxNTQyMFoXDTI1MDkyMjE5MjcyMFowMzExMC8GA1UE AxMoQkZCQjI1NkRGMzcwRTU5OTRDRDMzRDUyOUZCNEM3MzU2MzIwM0Y4QTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvkl/aKa0QoQu01cFA8QMS1mj0O 8LZZnxk2l0jT1bVoK7+ZjiDeYJUcrZ+ZyCjbZOBPM1bzNDTSXnmWph6YZwggH/2j 0OquSWM3/vO2jA70TsTF2CPLaFdqQK8Kfg94kXP+JcpJP75x4kzuveKolyaGDPNv aETS+FfR4c4jqaR+2ib/Rfff9BbduqPBHCTPQgWETPeS4S2VtOkCN1qbklMILcLh f2wjJGaAqJWx1AgDsEPoDqxpCIbrQ4mDuC1T/nmJTVfw5yBzzTwi2PQzvWKNj1cU aS3lcc3n4V6jC21KzyWr+rhWN2qYZfTnXVBp7SrFi1QPYg/pmjrq8KRCPvECAwEA AaOCAtMwggLPMB0GA1UdDgQWBBS/uyVt83DlmUzTPVKftMc1YyA/ijAfBgNVHSME GDAWgBQhXvOmw0JbODzrWc5FrJp4JiKSIzAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0 L3Jwa2kvbGFjbmljL0ExRkEzMkU0QTcwRkE2RDI4OEZCMjZEMjBDRUY3QThEMDI4 N0YwMDhENjRGQjgyNjZCRjk5QTA5NEYwQjlCQzkvMC8yMTVFRjNBNkMzNDI1QjM4 M0NFQjU5Q0U0NUFDOUE3ODI2MjI5MjIzLmNybDCBuQYIKwYBBQUHAQEEgawwgakw gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzIxNUVGM0E2QzM0MjVCMzgzQ0VC NTlDRTQ1QUM5QTc4MjYyMjkyMjMuY2VyMIG5BggrBgEFBQcBCwSBrDCBqTCBpgYI KwYBBQUHMAuGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMUZBMzJFNEE3MEZBNkQyODhGQjI2RDIwQ0VGN0E4RDAyODdGMDA4RDY0 RkI4MjY2QkY5OUEwOTRGMEI5QkM5LzAvMjE1RUYzQTZDMzQyNUIzODNDRUI1OUNF NDVBQzlBNzgyNjIyOTIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABkvFWMhbm4HTzzgFBFe81DOzf2f yw0kvjaf2lJ7jZ9D5R3I3F6KeaFVS/MEaqwCxkpp7Ebzoy6o9Lq2DnR2PYvB9ZIR D+q3dMwoV2fCgr9ONVu/Bw4ZTRLVdpd0e3cAS0fq6mO1pfAJf1GFgSVQKuGrE0ob VDplRgFQSMgviDazuZlVChvOAbt8Ef44ug3MHYzDn/YUHafDx3qK3BFs54pk3zOR jdbmE82H9o7OGkpIl7HiG1rKlVk8v84AFGHzlnqxWTIr6ax4FuF3l+Jec5GfK0LJ 9brTxwRZ2+1NJ6h0CLPNpfxRcIIm7AZlXTYrov9Zy7tkYYLpN6Pi4CrVtVQ= -----END CERTIFICATE-----Generated at Fri Sep 19 06:30:40 2025 by rpki-client