$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft File: 5D81157E960567670F7461B44557EFEA818501D2.mft (raw, json) Hash identifier: LhufTJVUxKshdIpI7eNbfELhc92PoasWKL14OfqU18E= Subject key identifier: 8A:40:51:DF:B5:A2:FD:9B:DD:C1:8C:56:DD:ED:61:EB:E5:37:F9:31 Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 Certificate issuer: /CN=5D81157E960567670F7461B44557EFEA818501D2 Certificate serial: 2DA6585A475EC31D284CE7E3EB3E03DD47977122 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft Manifest number: 0121 Signing time: Wed 17 Sep 2025 14:44:52 +0000 Manifest this update: Wed 17 Sep 2025 14:39:52 +0000 Manifest next update: Tue 23 Sep 2025 00:57:52 +0000 Files and hashes: 1: 5D81157E960567670F7461B44557EFEA818501D2.crl (hash: MXQNMLhoUOTVBzjKaD1f4hMAtXBzxJAGa+o/delzTxk=) 2: 3230302e372e3136302e302f32302d3234203d3e203237383238.roa (hash: yhraEemo5oNZS1Vp/2RMyrvdvUHvcFt5radrCdAXO9E=) 3: 323830313a3130343a3a2f34302d3437203d3e203237383238.roa (hash: U0g+ZhC8/zG80aq7e5Hpc9RnzXpIMukrBY3+kAVFjYE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 23:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a6:58:5a:47:5e:c3:1d:28:4c:e7:e3:eb:3e:03:dd:47:97:71:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2 Validity Not Before: Sep 17 14:39:52 2025 GMT Not After : Sep 23 00:57:52 2025 GMT Subject: CN=8A4051DFB5A2FD9BDDC18C56DDED61EBE537F931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:a6:ae:68:3e:b1:b1:ee:da:91:30:4b:21: 29:b3:ab:df:ff:9f:46:84:8e:b9:f2:39:72:2d:43: 3b:b2:54:98:38:94:24:81:54:44:62:a9:f3:b5:4f: c6:4d:e2:09:2a:d7:d9:bb:1d:50:f9:5a:bf:8a:97: 15:1a:8b:c2:48:fa:bc:95:1a:49:48:ed:c1:90:8c: 28:a5:c0:55:f6:f3:5f:55:14:ea:56:ea:34:66:f8: 8f:a7:36:55:93:c7:fe:bb:ff:4e:0d:a6:ca:19:19: 87:ad:23:93:e1:ec:82:d9:7d:4b:a0:a5:8e:50:71: 4d:12:c3:8a:7d:4a:93:1c:6d:aa:ce:08:95:9c:38: 7a:9c:07:11:10:65:54:0f:31:6d:2c:eb:ef:9f:3a: e1:f7:22:d7:45:1c:5b:98:4d:6a:20:7d:1f:af:1c: 08:66:f5:37:bd:82:99:19:00:b1:69:b5:84:09:e3: fb:4f:0a:bb:32:12:9d:02:6c:0d:58:00:37:b6:8a: 76:68:50:dd:08:b5:47:a7:22:3d:86:9c:37:b9:05: 57:71:14:94:f2:91:7d:3a:89:ae:e6:64:dc:7e:db: 9c:6a:e4:cf:b6:a8:7e:88:71:d2:76:3f:a7:67:54: 32:ff:ce:12:7d:21:27:53:98:61:09:a2:15:9d:80: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:51:DF:B5:A2:FD:9B:DD:C1:8C:56:DD:ED:61:EB:E5:37:F9:31 X509v3 Authority Key Identifier: keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fc:e1:5a:86:26:ef:2c:7b:3c:0a:58:f0:d7:29:85:a3:1e: 13:e0:a3:44:ba:bf:0b:da:20:6a:81:1d:fb:13:65:34:4b:84: bb:1e:82:95:2a:7e:c7:95:cf:69:5c:d0:df:04:07:5b:a1:e1: 35:b3:e1:51:26:4e:bf:26:9d:76:00:b8:e2:d8:fb:c7:88:94: b2:d9:36:1e:ef:c8:63:f3:82:f9:00:b9:3f:47:a8:17:24:bb: 1c:31:24:03:9a:57:95:a8:6d:81:21:06:3f:26:de:74:0b:f3: a5:eb:37:89:d6:c7:64:dd:af:38:29:40:42:f9:ab:d2:b6:67: 75:5e:b5:b3:e7:03:02:88:71:04:1b:29:eb:6e:6d:94:90:29: 30:3b:97:4e:47:c9:52:48:8d:4e:82:f8:92:cf:36:9e:ea:a9: fb:55:2f:e2:40:81:62:37:74:7c:56:fb:de:21:5e:9b:f0:d9: 7d:72:1e:7a:ac:be:4e:b7:c2:52:ae:c6:87:44:e8:44:8c:00: 58:d7:c0:a8:9c:cb:38:28:3f:99:d9:ce:e6:35:98:b5:19:cc: 3d:72:da:3f:0a:2b:54:c5:2d:87:80:ab:40:f9:1f:47:2f:8d: 23:35:09:81:cb:9f:82:4c:f6:1a:35:84:3e:36:8f:29:29:d4: 09:cc:94:1f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULaZYWkdewx0oTOfj6z4D3UeXcSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4 MTg1MDFEMjAeFw0yNTA5MTcxNDM5NTJaFw0yNTA5MjMwMDU3NTJaMDMxMTAvBgNV BAMTKDhBNDA1MURGQjVBMkZEOUJEREMxOEM1NkRERUQ2MUVCRTUzN0Y5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XqauaD6xse7akTBLISmzq9// n0aEjrnyOXItQzuyVJg4lCSBVERiqfO1T8ZN4gkq19m7HVD5Wr+KlxUai8JI+ryV GklI7cGQjCilwFX2819VFOpW6jRm+I+nNlWTx/67/04NpsoZGYetI5Ph7ILZfUug pY5QcU0Sw4p9SpMcbarOCJWcOHqcBxEQZVQPMW0s6++fOuH3ItdFHFuYTWogfR+v HAhm9Te9gpkZALFptYQJ4/tPCrsyEp0CbA1YADe2inZoUN0ItUenIj2GnDe5BVdx FJTykX06ia7mZNx+25xq5M+2qH6IcdJ2P6dnVDL/zhJ9ISdTmGEJohWdgPGJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUikBR37Wi/ZvdwYxW3e1h6+U3+TEwHwYDVR0j BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2 NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3 NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzVEODExNTdFOTYwNTY3NjcwRjc0NjFC NDQ1NTdFRkVBODE4NTAxRDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL/OFahibvLHs8Cljw1ymFox4T 4KNEur8L2iBqgR37E2U0S4S7HoKVKn7Hlc9pXNDfBAdboeE1s+FRJk6/Jp12ALji 2PvHiJSy2TYe78hj84L5ALk/R6gXJLscMSQDmleVqG2BIQY/Jt50C/Ol6zeJ1sdk 3a84KUBC+avStmd1XrWz5wMCiHEEGynrbm2UkCkwO5dOR8lSSI1OgviSzzae6qn7 VS/iQIFiN3R8VvveIV6b8Nl9ch56rL5Ot8JSrsaHROhEjABY18ConMs4KD+Z2c7m NZi1Gcw9cto/CitUxS2HgKtA+R9HL40jNQmBy5+CTPYaNYQ+No8pKdQJzJQf -----END CERTIFICATE-----Generated at Fri Sep 19 00:45:45 2025 by rpki-client