$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft File: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json) Hash identifier: q0UG67VYTkiKlxlOM89HGBCqjTqAvvRt7JrXz6QkDqw= Subject key identifier: EA:53:F7:87:31:8B:46:9C:29:38:E5:13:E4:CE:37:B8:A9:24:91:C5 Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 Certificate issuer: /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Certificate serial: 74D1838CA892657676B276F5CC12F688EA924550 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft Manifest number: F2 Signing time: Tue 19 Aug 2025 19:25:44 +0000 Manifest this update: Tue 19 Aug 2025 19:20:44 +0000 Manifest next update: Mon 25 Aug 2025 19:15:44 +0000 Files and hashes: 1: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: NaNefttP77w0Qm8nwOEuRVSxtyRkCq+RLG4IYvnfm/E=) 2: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: 52CkrWIeh3/WtMUuKWKH8nsK+HsC8V+k1+vyMgSvhdE=) 3: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: uWEhrGLqJXMAoZTZyyMFW1p7Iz6/t6HLsdeX2wpttRM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 Aug 2025 05:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d1:83:8c:a8:92:65:76:76:b2:76:f5:cc:12:f6:88:ea:92:45:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Validity Not Before: Aug 19 19:20:44 2025 GMT Not After : Aug 25 19:15:44 2025 GMT Subject: CN=EA53F787318B469C2938E513E4CE37B8A92491C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:06:ed:68:15:71:6c:b9:b7:d2:64:8c:65: 8b:f5:71:c2:12:9c:04:da:f4:6a:db:48:0a:53:c0: ec:fc:ba:68:da:e4:4d:5d:e1:04:65:c6:7a:80:2d: df:93:f7:e7:b1:61:b5:07:15:62:7d:dd:1c:96:85: ec:b7:a7:42:63:97:f5:fe:e1:0f:62:c0:47:de:f6: e9:92:7f:d6:00:a7:c7:99:f9:c5:cc:19:04:a1:c8: 9e:28:15:01:71:c0:87:bf:6c:6c:2f:c0:95:32:07: 5e:75:c4:95:78:56:24:f0:c1:60:5c:fc:7c:83:4c: 83:f5:09:58:3c:76:6c:0f:f1:97:24:5d:1d:42:2d: 1d:ea:67:d5:77:4f:80:a6:a9:7c:99:1e:06:98:80: d0:19:60:47:a4:17:e9:3b:e5:57:03:f1:cf:3a:f6: da:6b:05:65:a5:b3:05:86:61:f9:b5:ff:7c:00:86: 64:18:19:4d:b1:96:a8:ed:58:c1:9a:8e:7b:67:d3: b4:65:9a:82:c8:a7:00:20:eb:ef:b8:1b:37:40:75: 03:f2:4b:b7:38:2f:0c:e7:95:84:6b:50:ec:75:be: ad:d2:80:19:bd:b7:f0:1d:23:84:b6:25:d5:38:75: 1f:a7:ea:59:07:32:04:7b:59:78:6a:32:73:8c:ea: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:F7:87:31:8B:46:9C:29:38:E5:13:E4:CE:37:B8:A9:24:91:C5 X509v3 Authority Key Identifier: keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:78:2c:92:c4:16:d4:ea:6e:0a:53:f1:bb:e6:dc:4b:7b:03: 49:41:4b:51:20:9d:e7:18:cc:cd:65:b3:b4:2c:d0:b3:59:7a: d2:3d:a3:f8:21:2e:3a:ef:c7:2f:92:d9:35:32:5a:49:34:ff: db:40:24:20:1f:da:20:1b:fb:29:b9:bc:f3:c1:4c:bf:cd:77: 24:0c:21:36:42:ba:b3:cc:e8:7e:a2:f3:92:11:8a:c0:10:33: ed:59:88:4d:c8:76:11:b3:93:1e:04:f8:08:e6:97:25:ed:11: 1a:94:fe:8d:a1:3d:f5:0b:67:2f:93:c7:d8:76:b2:ac:20:04: f6:c4:a8:29:99:28:4e:ea:c9:59:b9:9f:75:2f:13:1b:87:fc: 79:27:93:61:d1:31:c1:2c:ee:b1:92:6a:cc:a9:46:b5:3d:b2: 34:81:aa:aa:4d:4f:5f:f2:91:b0:ec:5e:ba:37:57:c3:06:bc: 07:2c:f6:36:ca:a2:11:02:ae:2c:38:96:4b:00:1b:78:39:87: dc:bc:53:17:79:cb:ab:31:ef:a7:d5:36:62:95:61:ce:c6:e7: d1:2e:ea:5c:21:52:d7:a3:79:54:6c:c4:bf:5b:f8:f4:1a:ab: ff:51:1d:03:bc:7a:64:cd:e9:af:fa:82:ec:5a:c7:8d:f5:37: d9:86:2d:27 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdNGDjKiSZXZ2snb1zBL2iOqSRVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBRkQ0NDM1RTlEODc3ODExMThCRDE2Rjk3QUQ4MUYx MTlCRkJENjAeFw0yNTA4MTkxOTIwNDRaFw0yNTA4MjUxOTE1NDRaMDMxMTAvBgNV BAMTKEVBNTNGNzg3MzE4QjQ2OUMyOTM4RTUxM0U0Q0UzN0I4QTkyNDkxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdFQbtaBVxbLm30mSMZYv1ccIS nATa9GrbSApTwOz8umja5E1d4QRlxnqALd+T9+exYbUHFWJ93RyWhey3p0Jjl/X+ 4Q9iwEfe9umSf9YAp8eZ+cXMGQShyJ4oFQFxwIe/bGwvwJUyB151xJV4ViTwwWBc /HyDTIP1CVg8dmwP8ZckXR1CLR3qZ9V3T4CmqXyZHgaYgNAZYEekF+k75VcD8c86 9tprBWWlswWGYfm1/3wAhmQYGU2xlqjtWMGajntn07RlmoLIpwAg6++4GzdAdQPy S7c4LwznlYRrUOx1vq3SgBm9t/AdI4S2JdU4dR+n6lkHMgR7WXhqMnOM6tM1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6lP3hzGLRpwpOOUT5M43uKkkkcUwHwYDVR0j BBgwFoAUIa/UQ16dh3gRGL0W+XrYHxGb+9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUE5NDkzQzFGNTk4NjBFNEFGMjEyMjQ1ODMyQkRDQ0E1 MDBCRTUxQjM5MTVCQjBCQ0ZDOEQzRDcyREFEOENGLzAvMjFBRkQ0NDM1RTlEODc3 ODExMThCRDE2Rjk3QUQ4MUYxMTlCRkJENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUFGRDQ0MzVFOUQ4Nzc4MTEx OEJEMTZGOTdBRDgxRjExOUJGQkQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFBOTQ5M0MxRjU5ODYwRTRBRjIxMjI0NTgzMkJEQ0NBNTAwQkU1MUIz OTE1QkIwQkNGQzhEM0Q3MkRBRDhDRi8wLzIxQUZENDQzNUU5RDg3NzgxMTE4QkQx NkY5N0FEODFGMTE5QkZCRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApeCySxBbU6m4KU/G75txLewNJ QUtRIJ3nGMzNZbO0LNCzWXrSPaP4IS4678cvktk1MlpJNP/bQCQgH9ogG/spubzz wUy/zXckDCE2QrqzzOh+ovOSEYrAEDPtWYhNyHYRs5MeBPgI5pcl7REalP6NoT31 C2cvk8fYdrKsIAT2xKgpmShO6slZuZ91LxMbh/x5J5Nh0THBLO6xkmrMqUa1PbI0 gaqqTU9f8pGw7F66N1fDBrwHLPY2yqIRAq4sOJZLABt4OYfcvFMXecurMe+n1TZi lWHOxufRLupcIVLXo3lUbMS/W/j0Gqv/UR0DvHpkzemv+oLsWseN9TfZhi0n -----END CERTIFICATE-----Generated at Wed Aug 20 19:43:11 2025 by rpki-client