$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json) Hash identifier: 6WNCG2bJfTMpnh5727JgCcqZ07OqKVBZLyVDPyb5dWM= Subject key identifier: BA:49:97:28:0A:75:E3:3D:DC:EB:E5:A5:DB:23:6B:05:D6:9D:E0:74 Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 5E094295D0FA243A33F8E5A686187CCFCC5F0C6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft Manifest number: 0104 Signing time: Fri 01 Aug 2025 19:07:58 +0000 Manifest this update: Fri 01 Aug 2025 19:02:58 +0000 Manifest next update: Thu 07 Aug 2025 11:52:58 +0000 Files and hashes: 1: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: w6iBQZDniDHcezjZtUldtX80qQ64K2PUrNb7DPdgK20=) 2: 323830333a346132303a3a2f33322d3332203d3e20323635383438.roa (hash: /INlcJc/KcMRifLcDdqXWwIVAexjHFg4O5X7DME1EmM=) 3: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: l0LWu22qOaLDlCthMeY/CvKaI4uUOaZIcvupuCI9a04=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:09:42:95:d0:fa:24:3a:33:f8:e5:a6:86:18:7c:cf:cc:5f:0c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: Aug 1 19:02:58 2025 GMT Not After : Aug 7 11:52:58 2025 GMT Subject: CN=BA4997280A75E33DDCEBE5A5DB236B05D69DE074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:d9:c7:65:2a:75:09:50:fd:5e:06:ea:a1: 5c:49:65:34:3d:27:ee:20:c6:01:f4:c4:6b:eb:eb: 87:f5:21:ff:bb:02:91:cf:91:7e:79:58:d0:b0:64: 6f:04:66:8e:fb:b2:22:af:d1:51:02:77:a8:ba:d5: 13:24:2c:de:9d:67:b3:85:84:40:14:90:75:97:41: 3c:85:a9:57:cf:26:18:f9:ea:9b:87:36:8f:2c:ac: 6c:16:db:db:bc:a5:a7:51:d7:3b:8b:37:15:9a:97: ab:ca:d6:68:98:22:ce:cf:2d:3c:e9:e6:40:93:5e: 6a:68:f1:50:8a:6c:80:06:e3:06:9e:a8:da:c1:9d: 7d:c5:8f:a6:63:17:7e:5a:64:fa:b9:c8:99:e7:ee: 2f:96:33:2b:5b:8f:c0:14:8f:40:f0:da:8b:97:5c: 31:88:e2:66:f6:8f:00:c4:13:06:42:2c:83:f1:e0: e8:bc:f3:1a:b3:5e:6e:4c:15:9d:f4:d5:68:34:d8: bd:a8:e7:ac:24:82:42:1f:8c:3d:31:15:d4:7c:bc: 46:6e:8f:62:df:17:90:36:0e:8f:23:52:38:e7:cb: b9:28:4e:09:ca:b0:a1:84:be:28:32:0f:a3:74:11: 32:44:bf:fd:8c:d2:7f:a0:37:a4:fe:a1:77:4f:93: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:49:97:28:0A:75:E3:3D:DC:EB:E5:A5:DB:23:6B:05:D6:9D:E0:74 X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:99:73:0e:36:70:71:7e:31:72:08:95:28:d6:c2:a0:fb:ae: 03:3f:63:b5:b8:df:47:45:bc:d1:59:ae:f7:c6:d0:3c:25:f2: 6f:78:1f:d5:46:15:f1:e5:3b:b1:37:1d:56:ce:07:9a:a0:ff: 76:c8:f1:0b:22:94:64:31:be:eb:ea:c2:5e:00:59:b0:db:18: c4:84:d7:a6:87:9f:9e:6d:3a:8d:f8:74:b4:a5:d8:92:9a:09: 6b:e7:0f:22:18:f3:aa:ac:92:f1:31:44:ad:ac:d6:59:05:46: 66:46:cd:e6:2d:d8:4f:d5:d9:f5:a8:d9:bc:d6:dd:0d:ad:00: 62:49:b6:ba:64:a6:0c:58:b6:e1:98:9e:6a:49:26:2d:ef:51: fb:f1:f0:f5:0a:9e:7b:51:61:85:67:d7:b6:9d:92:8c:8e:74: 53:64:7a:4d:a7:67:7a:27:01:5b:4e:a7:74:b3:1f:9c:8a:48: 8f:e7:75:28:ca:c1:7c:ba:35:9f:26:26:84:fb:7e:54:41:61: 1f:49:b8:25:51:b1:3f:c7:d0:a7:a1:53:8e:4b:db:1c:10:3b: 31:9a:d6:a6:71:b2:d6:2f:79:a9:6a:e0:d3:08:10:3b:54:5e: 9f:65:e5:8a:c0:39:63:37:6b:d4:52:51:b4:f5:bd:84:aa:4c: d5:88:b8:d1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXglCldD6JDoz+OWmhhh8z8xfDGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNTA4MDExOTAyNThaFw0yNTA4MDcxMTUyNThaMDMxMTAvBgNV BAMTKEJBNDk5NzI4MEE3NUUzM0REQ0VCRTVBNURCMjM2QjA1RDY5REUwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbYtnHZSp1CVD9XgbqoVxJZTQ9 J+4gxgH0xGvr64f1If+7ApHPkX55WNCwZG8EZo77siKv0VECd6i61RMkLN6dZ7OF hEAUkHWXQTyFqVfPJhj56puHNo8srGwW29u8padR1zuLNxWal6vK1miYIs7PLTzp 5kCTXmpo8VCKbIAG4waeqNrBnX3Fj6ZjF35aZPq5yJnn7i+WMytbj8AUj0Dw2ouX XDGI4mb2jwDEEwZCLIPx4Oi88xqzXm5MFZ301Wg02L2o56wkgkIfjD0xFdR8vEZu j2LfF5A2Do8jUjjny7koTgnKsKGEvigyD6N0ETJEv/2M0n+gN6T+oXdPk21FAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUukmXKAp14z3c6+Wl2yNrBdad4HQwHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzI4QTdENTNCQUM1MzEwNUNBOEEwQjNB MUM5NUMyRTZBNzE5ODE2NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhmXMONnBxfjFyCJUo1sKg+64D P2O1uN9HRbzRWa73xtA8JfJveB/VRhXx5TuxNx1WzgeaoP92yPELIpRkMb7r6sJe AFmw2xjEhNemh5+ebTqN+HS0pdiSmglr5w8iGPOqrJLxMUStrNZZBUZmRs3mLdhP 1dn1qNm81t0NrQBiSba6ZKYMWLbhmJ5qSSYt71H78fD1Cp57UWGFZ9e2nZKMjnRT ZHpNp2d6JwFbTqd0sx+cikiP53UoysF8ujWfJiaE+35UQWEfSbglUbE/x9CnoVOO S9scEDsxmtamcbLWL3mpauDTCBA7VF6fZeWKwDljN2vUUlG09b2EqkzViLjR -----END CERTIFICATE-----Generated at Sun Aug 3 16:08:25 2025 by rpki-client