$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft File: 21B9887060F924CDFF24C230D32A91B83A17CD97.mft (raw, json) Hash identifier: OH6WVawXtYrddR3HOGHAuTQIVkBjBG2+Y0FtMiu/uIU= Subject key identifier: E9:C0:51:66:18:48:16:85:A5:23:9B:0D:FA:4E:97:AA:5F:F9:14:DC Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Certificate serial: 69ABECA43E80E38AF0C7624DC2821A19DCA1C369 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 05:20:43 +0000 Manifest this update: Tue 04 Nov 2025 05:15:43 +0000 Manifest next update: Sat 08 Nov 2025 16:44:43 +0000 Files and hashes: 1: 21B9887060F924CDFF24C230D32A91B83A17CD97.crl (hash: 2iMV7us/siqGMq5Xgxcd5o4WdzOI/NxPGOdo1QKprK0=) 2: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (hash: e7fwKCAwrJBOARxXUFeN2hPCUL05RIozWzYfyHXA7Ss=) 3: 323830303a3163303a3a2f33322d3332203d3e203237373730.roa (hash: 4FSJXV5thJKx6H5OTH8Mp5tqHztsrWOngAC7cBidY1k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 16:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ab:ec:a4:3e:80:e3:8a:f0:c7:62:4d:c2:82:1a:19:dc:a1:c3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Validity Not Before: Nov 4 05:15:43 2025 GMT Not After : Nov 8 16:44:43 2025 GMT Subject: CN=E9C0516618481685A5239B0DFA4E97AA5FF914DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:36:f0:be:85:db:e4:87:17:77:38:be:8b: 2a:19:f5:a3:22:e5:a4:9a:71:3f:5a:dd:45:7d:fb: d8:f6:23:ad:da:31:26:9d:09:d8:d7:36:be:fe:e7: a7:0d:70:a0:4b:2e:78:e0:38:75:69:91:14:06:63: f0:06:6a:44:d7:fb:d5:4f:4f:e3:42:64:fe:09:ad: ad:9a:bd:52:48:b6:a5:92:15:36:06:39:e3:35:e4: 85:fb:f5:79:13:05:4b:71:14:6b:82:4b:85:d4:34: c6:c2:36:85:15:01:8a:9e:80:14:80:c5:0f:0a:00: 6e:a9:7e:77:67:8c:74:18:9c:10:2c:7e:4e:a8:93: 9c:0f:2c:de:8f:64:fa:1e:c2:52:bc:95:b1:49:62: 80:ab:43:64:7c:11:b9:9a:c0:46:42:c4:4b:cc:ec: 78:45:d8:bb:66:b2:e0:fa:2b:fd:94:64:4e:89:94: 07:22:00:f8:11:70:f5:e6:bc:16:e2:af:68:f8:d7: 7b:67:32:97:4f:ba:93:c5:8b:a0:95:8f:d5:13:ff: 65:16:90:85:e6:1c:84:da:06:4d:f8:f6:d0:a7:ff: bd:ab:89:6b:cc:a0:3f:7b:5f:41:33:87:8f:f7:08: 30:55:9b:45:df:93:6b:c9:c4:9b:b6:c9:25:de:01: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:51:66:18:48:16:85:A5:23:9B:0D:FA:4E:97:AA:5F:F9:14:DC X509v3 Authority Key Identifier: keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ed:c5:04:46:67:ac:a5:be:62:ea:ad:34:dd:45:e1:c8:01: d1:fe:e2:c6:af:10:78:85:cf:3c:e4:44:1e:21:1c:d1:0b:ab: 59:84:65:08:cd:b3:56:f1:13:19:82:8d:f6:b7:95:cc:9a:a2: 7e:77:fe:ea:ac:bb:84:be:3b:f7:7d:8c:d9:c0:44:7f:28:91: bf:1e:a6:6c:d9:5d:04:5e:ff:d6:c7:4b:89:0e:87:79:47:b8: 6a:4d:0e:a9:a9:34:15:17:12:f8:d5:b1:14:4e:9a:36:20:38: f5:05:3f:ae:1d:25:aa:96:c5:be:a6:11:10:ff:70:e8:4b:bc: 12:1b:bc:e9:e3:09:9b:4f:63:57:d0:dc:71:0d:eb:39:21:a1: d7:d8:a8:61:9e:cd:a7:80:c3:34:01:ba:45:b8:a4:d5:9d:0f: 06:86:48:b2:fa:23:5d:05:9a:34:85:f8:51:e2:5a:0f:3e:ac: a6:a6:31:2a:bc:3c:1a:a5:26:98:42:ed:70:61:2c:f0:09:24: b2:ec:14:94:87:a9:ac:1d:c7:ed:03:4c:aa:5f:c6:23:e2:20: 45:77:c2:8b:d0:47:b6:e6:b5:ef:11:32:56:e4:ce:66:3b:50: 28:3c:51:0e:89:f4:c4:08:26:db:94:dd:89:d3:e9:7f:06:0e: 81:7d:d4:69 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaavspD6A44rwx2JNwoIaGdyhw2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCOTg4NzA2MEY5MjRDREZGMjRDMjMwRDMyQTkxQjgz QTE3Q0Q5NzAeFw0yNTExMDQwNTE1NDNaFw0yNTExMDgxNjQ0NDNaMDMxMTAvBgNV BAMTKEU5QzA1MTY2MTg0ODE2ODVBNTIzOUIwREZBNEU5N0FBNUZGOTE0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqTbwvoXb5IcXdzi+iyoZ9aMi 5aSacT9a3UV9+9j2I63aMSadCdjXNr7+56cNcKBLLnjgOHVpkRQGY/AGakTX+9VP T+NCZP4Jra2avVJItqWSFTYGOeM15IX79XkTBUtxFGuCS4XUNMbCNoUVAYqegBSA xQ8KAG6pfndnjHQYnBAsfk6ok5wPLN6PZPoewlK8lbFJYoCrQ2R8EbmawEZCxEvM 7HhF2LtmsuD6K/2UZE6JlAciAPgRcPXmvBbir2j413tnMpdPupPFi6CVj9UT/2UW kIXmHITaBk349tCn/72riWvMoD97X0Ezh4/3CDBVm0Xfk2vJxJu2ySXeAb8hAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6cBRZhhIFoWlI5sN+k6Xql/5FNwwHwYDVR0j BBgwFoAUIbmIcGD5JM3/JMIw0yqRuDoXzZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDM3Q0E4Q0Q5NTc4Qjg1MTZGRjMzRjI0NzY0QUYxREEy MDc4ODA5MzA4RUJGM0YzMERCRjRFRjEwNzdEMzZDLzAvMjFCOTg4NzA2MEY5MjRD REZGMjRDMjMwRDMyQTkxQjgzQTE3Q0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI5ODg3MDYwRjkyNENERkYy NEMyMzBEMzJBOTFCODNBMTdDRDk3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQzN0NBOENEOTU3OEI4NTE2RkYzM0YyNDc2NEFGMURBMjA3ODgwOTMw OEVCRjNGMzBEQkY0RUYxMDc3RDM2Qy8wLzIxQjk4ODcwNjBGOTI0Q0RGRjI0QzIz MEQzMkE5MUI4M0ExN0NEOTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj7cUERmespb5i6q003UXhyAHR /uLGrxB4hc885EQeIRzRC6tZhGUIzbNW8RMZgo32t5XMmqJ+d/7qrLuEvjv3fYzZ wER/KJG/HqZs2V0EXv/Wx0uJDod5R7hqTQ6pqTQVFxL41bEUTpo2IDj1BT+uHSWq lsW+phEQ/3DoS7wSG7zp4wmbT2NX0NxxDes5IaHX2Khhns2ngMM0AbpFuKTVnQ8G hkiy+iNdBZo0hfhR4loPPqympjEqvDwapSaYQu1wYSzwCSSy7BSUh6msHcftA0yq X8Yj4iBFd8KL0Ee25rXvETJW5M5mO1AoPFEOifTECCbblN2J0+l/Bg6BfdRp -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:46 2025 by rpki-client