$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json) Hash identifier: xwzI5A8wNgGe7yGJ1Wvcgvzxizeq70DurzRuvqZTzzY= Subject key identifier: E5:88:24:4C:2E:1D:F3:B4:3B:A1:73:E8:69:31:E4:5D:0E:C4:97:E2 Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Certificate serial: 0AC573D096FB4F9A1EBF9487BE6852BBB60F25E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft Manifest number: FC Signing time: Sat 02 Aug 2025 06:15:22 +0000 Manifest this update: Sat 02 Aug 2025 06:10:22 +0000 Manifest next update: Thu 07 Aug 2025 03:27:22 +0000 Files and hashes: 1: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: pt90BIyyUSHlZlm4AKVLe1Z6Moz1dZPbV9t+YfaClY0=) 2: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: WUhyDmHn2+bOAV04stH4wAKPFDshibi7NIeQVUJCHeI=) 3: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: Tv46jSL3jD0k1NXV0T/tAaiSDTR6TBPS4SWa9rtammU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c5:73:d0:96:fb:4f:9a:1e:bf:94:87:be:68:52:bb:b6:0f:25:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Validity Not Before: Aug 2 06:10:22 2025 GMT Not After : Aug 7 03:27:22 2025 GMT Subject: CN=E588244C2E1DF3B43BA173E86931E45D0EC497E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:83:96:f0:b4:31:dd:fd:88:47:f2:67:86: 47:cb:d9:58:73:ad:0f:84:b8:91:44:cc:50:50:e8: 4e:f5:bf:74:3d:cb:fe:08:23:dc:e8:ca:48:33:bf: e1:5b:25:1f:96:48:47:c2:f7:89:12:f2:69:9b:8b: b7:ef:79:10:db:da:3b:fd:57:ce:8b:0e:69:47:64: 63:bc:8b:a0:2c:a4:37:40:29:c6:2b:8c:9f:4f:b2: ba:15:be:b1:6d:ff:26:3f:f6:60:0e:bd:bb:fc:de: d2:dc:a4:5e:9e:92:ed:21:27:7b:37:4c:f2:60:b3: a4:b1:22:dc:0a:5a:a3:a4:61:4b:c1:77:f7:68:26: 91:78:63:d9:b7:57:01:de:e8:43:cb:00:3e:f3:ba: f4:44:ec:a3:02:29:b6:24:88:08:46:1b:e8:41:32: 3e:cb:41:ff:ef:a3:06:c0:94:72:be:5a:02:b1:4d: e9:9b:94:32:6a:d6:71:97:ec:40:25:cb:8d:0c:ec: 85:6e:a6:13:46:67:e2:9f:99:6c:0c:cd:9d:94:86: a6:13:b1:40:8b:10:12:d2:9b:90:45:86:f3:8e:19: 0e:39:43:9a:1c:4e:6b:34:21:fb:3b:54:9a:e1:b5: ab:15:e8:28:85:ba:ac:2f:4f:4b:d1:6b:ee:94:4e: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:24:4C:2E:1D:F3:B4:3B:A1:73:E8:69:31:E4:5D:0E:C4:97:E2 X509v3 Authority Key Identifier: keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6f:a8:ba:cc:f5:5f:fa:b5:e1:9e:6c:ed:0e:4b:63:ec:00: da:7a:61:6a:08:ca:4e:44:53:88:e1:73:e5:ed:04:cf:ce:6c: a1:3c:3f:45:52:f7:3f:72:af:bc:57:76:a5:61:8c:4b:bd:df: 03:67:31:b6:69:b5:f0:3e:c2:9d:ec:1e:f2:31:de:49:fd:dd: eb:4c:9c:e1:92:cb:e5:7e:29:23:17:e1:bd:28:a2:1d:5c:ab: d0:5a:e6:ef:c0:65:8b:4e:6a:58:62:c0:24:e1:47:4e:61:35: 51:03:02:65:aa:78:98:b0:fe:b3:0d:66:39:f7:65:83:af:34: fa:d1:8a:5c:d5:44:3c:12:6e:8b:28:44:60:8d:c5:6d:2e:1d: 10:28:cc:2d:7d:f6:b3:2b:1d:49:1d:90:33:cf:ee:7d:26:1a: 7f:ab:6f:e8:1e:83:92:c4:6d:65:14:1d:40:30:a7:d8:fe:cb: fb:89:3d:1e:5a:6f:82:3b:d5:b1:a3:fd:e5:da:87:ad:de:a1: c2:39:e5:14:6d:5f:54:37:84:c3:2e:b5:34:5e:70:89:8d:1e: 16:49:44:1d:67:16:87:30:2c:19:ce:8b:db:53:e1:3d:de:8b: 38:ac:06:db:7a:bb:23:37:66:33:0b:9f:f3:35:d4:05:ca:35: ee:cf:9d:7c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCsVz0Jb7T5oev5SHvmhSu7YPJeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD QkE5NTM2QTAeFw0yNTA4MDIwNjEwMjJaFw0yNTA4MDcwMzI3MjJaMDMxMTAvBgNV BAMTKEU1ODgyNDRDMkUxREYzQjQzQkExNzNFODY5MzFFNDVEMEVDNDk3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNYOW8LQx3f2IR/JnhkfL2Vhz rQ+EuJFEzFBQ6E71v3Q9y/4II9zoykgzv+FbJR+WSEfC94kS8mmbi7fveRDb2jv9 V86LDmlHZGO8i6AspDdAKcYrjJ9PsroVvrFt/yY/9mAOvbv83tLcpF6eku0hJ3s3 TPJgs6SxItwKWqOkYUvBd/doJpF4Y9m3VwHe6EPLAD7zuvRE7KMCKbYkiAhGG+hB Mj7LQf/vowbAlHK+WgKxTemblDJq1nGX7EAly40M7IVuphNGZ+KfmWwMzZ2UhqYT sUCLEBLSm5BFhvOOGQ45Q5ocTms0Ifs7VJrhtasV6CiFuqwvT0vRa+6UThbzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5YgkTC4d87Q7oXPoaTHkXQ7El+IwHwYDVR0j BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4 MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1 OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0 RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSb6i6zPVf+rXhnmztDktj7ADa emFqCMpORFOI4XPl7QTPzmyhPD9FUvc/cq+8V3alYYxLvd8DZzG2abXwPsKd7B7y Md5J/d3rTJzhksvlfikjF+G9KKIdXKvQWubvwGWLTmpYYsAk4UdOYTVRAwJlqniY sP6zDWY592WDrzT60Ypc1UQ8Em6LKERgjcVtLh0QKMwtffazKx1JHZAzz+59Jhp/ q2/oHoOSxG1lFB1AMKfY/sv7iT0eWm+CO9Wxo/3l2oet3qHCOeUUbV9UN4TDLrU0 XnCJjR4WSUQdZxaHMCwZzovbU+E93os4rAbbersjN2YzC5/zNdQFyjXuz518 -----END CERTIFICATE-----Generated at Sun Aug 3 16:08:30 2025 by rpki-client