$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: ngJ8fuVUftvFc8OPaG39F1q3wd+URc1gEH92NCuJDm4= Subject key identifier: 0D:07:57:DA:A0:ED:D3:B6:2F:83:24:18:0E:1C:5D:69:AF:3C:FA:D1 Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 53EC07A772ED0A72450A2CA59A1BAA70FC244920 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 0119 Signing time: Tue 16 Sep 2025 18:01:47 +0000 Manifest this update: Tue 16 Sep 2025 17:56:47 +0000 Manifest next update: Mon 22 Sep 2025 16:54:47 +0000 Files and hashes: 1: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: +A4iKTCl2MV1Tx5ypvBU9+eqzsUV2xgEqANt9HERoD0=) 2: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: +Ehqe5AsijtKZOHSCGOIJa3pckbUIwcG5kJITFHRXM0=) 3: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: xLRZgciYVKW2fszW3oBBhkAkYRBkW0pWxgFR7JUYCZs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ec:07:a7:72:ed:0a:72:45:0a:2c:a5:9a:1b:aa:70:fc:24:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Sep 16 17:56:47 2025 GMT Not After : Sep 22 16:54:47 2025 GMT Subject: CN=0D0757DAA0EDD3B62F8324180E1C5D69AF3CFAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a1:43:70:58:84:17:46:a2:f4:40:c2:1a:a1: 81:5b:70:c3:80:5d:4c:54:86:54:8c:63:d8:80:70: 69:9b:24:1f:8b:ba:1e:dd:53:c3:2a:a9:8d:dc:50: 26:bb:90:38:70:6d:90:6c:b4:0e:83:fc:b7:da:b9: e2:67:d9:67:59:5c:24:3e:71:bb:39:ca:bb:c1:11: 01:9e:2b:c4:5f:66:0a:1c:74:7d:48:2e:eb:d9:3b: 07:08:9b:f6:47:de:28:25:96:15:ea:46:d5:5a:00: 97:fc:0b:01:3f:91:5e:15:34:bf:fe:a5:51:dd:2d: 2f:b1:35:b6:28:77:73:95:c0:62:2c:60:6d:f6:6f: 3a:a7:2e:02:e3:36:4e:0d:b6:42:03:4e:97:09:e4: 7f:8f:96:71:22:de:dc:28:7e:38:ba:c5:6c:d5:31: a8:37:69:11:bb:78:fb:cf:38:c4:e9:c1:55:e8:89: c4:63:e2:d8:6b:8b:fa:d6:6e:86:4d:08:d4:f9:ec: 95:25:34:3c:4a:bb:52:ac:ae:fe:f7:68:1f:27:db: 88:95:03:1c:42:7f:4e:c6:15:e1:51:f3:41:3e:64: fa:36:6e:25:f2:7a:81:92:75:5b:77:ab:f8:67:a3: d1:65:f8:46:42:5a:b1:e3:3e:74:e8:7b:13:ce:21: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:57:DA:A0:ED:D3:B6:2F:83:24:18:0E:1C:5D:69:AF:3C:FA:D1 X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:32:50:10:91:db:68:3b:1d:47:46:a1:cd:56:56:3c:ed:51: a5:ff:fa:b9:5b:02:aa:5a:4e:6d:7d:a9:24:a8:97:03:97:53: 0f:da:d4:3a:2e:fa:8a:ff:fc:56:64:02:16:6a:b7:d2:a1:44: b8:b2:6a:52:33:28:43:f9:b8:74:a9:70:a5:c1:75:df:81:c9: 61:a6:c3:e4:0a:25:2b:38:be:91:be:ec:9c:e5:7b:93:64:10: ac:41:03:85:86:68:97:fc:9e:ff:46:ab:97:31:f7:24:3c:a8: 3b:05:79:fe:56:86:21:1d:45:6b:47:de:0e:28:a1:5e:70:2b: f5:5d:9c:3c:df:2e:df:78:b9:8e:75:f8:d9:c2:d2:3b:a5:db: 1d:29:25:96:97:bf:2e:20:79:4d:f9:cb:f8:21:83:32:df:21: 50:3b:0b:4f:aa:4c:14:d7:1d:2a:5f:6e:ec:f0:43:d1:67:ef: f6:d3:be:ac:a0:e1:a1:84:cc:90:dd:fd:4a:f6:34:2e:97:b0: 3b:a3:a5:0d:5c:4c:cd:28:c4:bf:ea:64:62:bc:27:db:10:5a: f8:a2:92:6e:ff:fc:53:bb:5f:af:2c:7b:f9:32:78:dc:ee:f1: 9e:3d:f8:29:95:bc:45:35:a8:6f:e6:bd:41:7c:55:23:fa:c9: 6c:8b:1f:6b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUU+wHp3LtCnJFCiylmhuqcPwkSSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNTA5MTYxNzU2NDdaFw0yNTA5MjIxNjU0NDdaMDMxMTAvBgNV BAMTKDBEMDc1N0RBQTBFREQzQjYyRjgzMjQxODBFMUM1RDY5QUYzQ0ZBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDioUNwWIQXRqL0QMIaoYFbcMOA XUxUhlSMY9iAcGmbJB+Luh7dU8MqqY3cUCa7kDhwbZBstA6D/LfaueJn2WdZXCQ+ cbs5yrvBEQGeK8RfZgocdH1ILuvZOwcIm/ZH3igllhXqRtVaAJf8CwE/kV4VNL/+ pVHdLS+xNbYod3OVwGIsYG32bzqnLgLjNk4NtkIDTpcJ5H+PlnEi3twofji6xWzV Mag3aRG7ePvPOMTpwVXoicRj4thri/rWboZNCNT57JUlNDxKu1Ksrv73aB8n24iV AxxCf07GFeFR80E+ZPo2biXyeoGSdVt3q/hno9Fl+EZCWrHjPnToexPOIWxFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDQdX2qDt07YvgyQYDhxdaa88+tEwHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgMlAQkdtoOx1HRqHNVlY87VGl //q5WwKqWk5tfakkqJcDl1MP2tQ6LvqK//xWZAIWarfSoUS4smpSMyhD+bh0qXCl wXXfgclhpsPkCiUrOL6Rvuyc5XuTZBCsQQOFhmiX/J7/RquXMfckPKg7BXn+VoYh HUVrR94OKKFecCv1XZw83y7feLmOdfjZwtI7pdsdKSWWl78uIHlN+cv4IYMy3yFQ OwtPqkwU1x0qX27s8EPRZ+/2076soOGhhMyQ3f1K9jQul7A7o6UNXEzNKMS/6mRi vCfbEFr4opJu//xTu1+vLHv5Mnjc7vGePfgplbxFNahv5r1BfFUj+slsix9r -----END CERTIFICATE-----Generated at Wed Sep 17 21:32:47 2025 by rpki-client