$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06476A85F68236D1057749D2334FD7A7D0562A38F600891B19968572E48588D2/0/B38B21A8D254B34751C475CF54107EBD34273B8E.mft File: B38B21A8D254B34751C475CF54107EBD34273B8E.mft (raw, json) Hash identifier: 398Ne1ql+fyTGd2V9K4sAZ9tCx47kWelWhkcuTnMQp4= Subject key identifier: 21:F6:B3:3D:71:EC:AE:F4:48:0C:88:62:D4:6C:5A:A4:BC:76:07:E1 Authority key identifier: B3:8B:21:A8:D2:54:B3:47:51:C4:75:CF:54:10:7E:BD:34:27:3B:8E Certificate issuer: /CN=B38B21A8D254B34751C475CF54107EBD34273B8E Certificate serial: 661EEA604749CCA514BDED759C4EA204EFAF7984 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38B21A8D254B34751C475CF54107EBD34273B8E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/06476A85F68236D1057749D2334FD7A7D0562A38F600891B19968572E48588D2/0/B38B21A8D254B34751C475CF54107EBD34273B8E.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 16:36:53 +0000 Manifest this update: Tue 04 Nov 2025 16:31:53 +0000 Manifest next update: Sun 09 Nov 2025 17:02:53 +0000 Files and hashes: 1: 3136382e3139342e33322e302f32322d3234203d3e20323634373433.roa (hash: K1Ocvli8jJZJsYwAGfLzDS/ZBaLEpagXTBqAyF50cuQ=) 2: B38B21A8D254B34751C475CF54107EBD34273B8E.crl (hash: gdQDgyK9Yd0jxxRp6/aaewGF4NmXxIntdSFfn8O1OL8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/06476A85F68236D1057749D2334FD7A7D0562A38F600891B19968572E48588D2/0/B38B21A8D254B34751C475CF54107EBD34273B8E.crl rsync://repository.lacnic.net/rpki/lacnic/06476A85F68236D1057749D2334FD7A7D0562A38F600891B19968572E48588D2/0/B38B21A8D254B34751C475CF54107EBD34273B8E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38B21A8D254B34751C475CF54107EBD34273B8E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1e:ea:60:47:49:cc:a5:14:bd:ed:75:9c:4e:a2:04:ef:af:79:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B38B21A8D254B34751C475CF54107EBD34273B8E Validity Not Before: Nov 4 16:31:53 2025 GMT Not After : Nov 9 17:02:53 2025 GMT Subject: CN=21F6B33D71ECAEF4480C8862D46C5AA4BC7607E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:f8:20:dc:2e:24:52:c5:ba:82:43:0e:8c: fd:a8:04:f6:c9:64:69:ba:3c:62:9c:e9:b6:71:ca: 82:7d:5b:d9:6b:62:de:d2:f1:57:e3:4d:db:0e:f3: c5:6b:32:af:ab:49:04:5b:42:89:5c:48:eb:61:0a: 9c:15:9d:27:bc:14:ff:de:1c:a1:c7:f9:87:73:3f: 20:8e:4b:67:6c:91:1b:89:b2:fc:32:19:42:19:23: 4c:c6:5e:0b:05:4a:ee:14:fb:6e:ab:c6:43:41:d7: 00:29:bf:49:d5:9b:74:30:70:04:04:3e:a2:96:fb: 03:24:0d:ba:e2:3b:49:d1:b9:5e:00:30:58:8a:d6: 43:a2:99:57:cd:71:1a:da:e9:d4:a2:c5:b6:d6:ee: 2d:60:f2:0c:e3:b8:70:f5:68:22:3f:64:92:86:a2: 7f:db:e0:6e:e1:42:d9:c6:54:71:10:7d:c7:cd:7b: 46:f5:d8:fe:e0:34:ef:98:1d:73:5e:60:f7:c8:e3: a7:ca:bb:ea:22:28:a1:86:dc:bb:8c:2f:e5:3c:e5: 7d:3a:67:99:40:8b:10:44:53:1e:fe:cc:23:7d:46: be:fd:a0:0a:7a:02:f2:31:cf:66:81:8c:d1:ef:b9: c6:31:b3:54:7d:3c:c0:8c:2f:f7:31:26:a2:b7:96: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F6:B3:3D:71:EC:AE:F4:48:0C:88:62:D4:6C:5A:A4:BC:76:07:E1 X509v3 Authority Key Identifier: keyid:B3:8B:21:A8:D2:54:B3:47:51:C4:75:CF:54:10:7E:BD:34:27:3B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/06476A85F68236D1057749D2334FD7A7D0562A38F600891B19968572E48588D2/0/B38B21A8D254B34751C475CF54107EBD34273B8E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38B21A8D254B34751C475CF54107EBD34273B8E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06476A85F68236D1057749D2334FD7A7D0562A38F600891B19968572E48588D2/0/B38B21A8D254B34751C475CF54107EBD34273B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:28:e5:1e:c0:cc:a9:70:84:64:26:b5:41:ef:41:00:e2:3d: f4:cd:57:6c:da:f1:3e:4b:e7:35:9e:26:79:f9:4c:18:84:1c: 2c:d8:1a:21:69:29:3f:e1:d6:4b:8e:2c:d6:18:3c:64:a8:a2: 8f:67:6e:83:68:89:44:b9:b1:e3:3f:83:44:b9:8c:0f:3f:f5: 3d:7d:a3:4e:48:1b:7c:59:b6:db:3c:a7:6b:4a:0b:c1:67:36: fd:2f:4a:d0:a4:55:a7:9f:7c:a0:53:ee:ae:2b:61:36:cb:1b: a4:6e:24:92:f7:cd:2e:d8:42:83:3c:24:ea:ad:15:f7:ed:23: 75:22:07:81:3b:4d:45:a8:13:31:6a:c3:1a:b9:3c:0b:56:e7: 4f:d0:70:98:71:eb:f3:1f:b8:bc:6e:33:a7:cb:7a:eb:f3:ee: 11:69:ad:ce:ab:1b:67:54:12:15:a2:ef:fe:f4:ff:f2:c1:02: bf:66:7b:70:6e:08:2d:bf:2a:7c:a6:be:83:11:15:1e:d5:c6: d9:c9:bc:e8:55:5c:2f:93:af:4c:28:f1:42:a8:4d:12:3a:bc: d6:ef:c5:70:b3:ff:3f:ab:a1:9b:85:7b:5e:3e:0f:2c:8b:14: e7:6e:df:ed:dc:03:c1:62:80:69:4e:c2:7a:ea:f7:22:fe:44: 04:42:2b:8f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZh7qYEdJzKUUve11nE6iBO+veYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4QjIxQThEMjU0QjM0NzUxQzQ3NUNGNTQxMDdFQkQz NDI3M0I4RTAeFw0yNTExMDQxNjMxNTNaFw0yNTExMDkxNzAyNTNaMDMxMTAvBgNV BAMTKDIxRjZCMzNENzFFQ0FFRjQ0ODBDODg2MkQ0NkM1QUE0QkM3NjA3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUnfgg3C4kUsW6gkMOjP2oBPbJ ZGm6PGKc6bZxyoJ9W9lrYt7S8VfjTdsO88VrMq+rSQRbQolcSOthCpwVnSe8FP/e HKHH+YdzPyCOS2dskRuJsvwyGUIZI0zGXgsFSu4U+26rxkNB1wApv0nVm3QwcAQE PqKW+wMkDbriO0nRuV4AMFiK1kOimVfNcRra6dSixbbW7i1g8gzjuHD1aCI/ZJKG on/b4G7hQtnGVHEQfcfNe0b12P7gNO+YHXNeYPfI46fKu+oiKKGG3LuML+U85X06 Z5lAixBEUx7+zCN9Rr79oAp6AvIxz2aBjNHvucYxs1R9PMCML/cxJqK3lp+XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIfazPXHsrvRIDIhi1GxapLx2B+EwHwYDVR0j BBgwFoAUs4shqNJUs0dRxHXPVBB+vTQnO44wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNjQ3NkE4NUY2ODIzNkQxMDU3NzQ5RDIzMzRGRDdBN0Qw NTYyQTM4RjYwMDg5MUIxOTk2ODU3MkU0ODU4OEQyLzAvQjM4QjIxQThEMjU0QjM0 NzUxQzQ3NUNGNTQxMDdFQkQzNDI3M0I4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzhCMjFBOEQyNTRCMzQ3NTFD NDc1Q0Y1NDEwN0VCRDM0MjczQjhFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDY0NzZBODVGNjgyMzZEMTA1Nzc0OUQyMzM0RkQ3QTdEMDU2MkEzOEY2 MDA4OTFCMTk5Njg1NzJFNDg1ODhEMi8wL0IzOEIyMUE4RDI1NEIzNDc1MUM0NzVD RjU0MTA3RUJEMzQyNzNCOEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaKOUewMypcIRkJrVB70EA4j30 zVds2vE+S+c1niZ5+UwYhBws2BohaSk/4dZLjizWGDxkqKKPZ26DaIlEubHjP4NE uYwPP/U9faNOSBt8WbbbPKdrSgvBZzb9L0rQpFWnn3ygU+6uK2E2yxukbiSS980u 2EKDPCTqrRX37SN1IgeBO01FqBMxasMauTwLVudP0HCYcevzH7i8bjOny3rr8+4R aa3OqxtnVBIVou/+9P/ywQK/Zntwbggtvyp8pr6DERUe1cbZybzoVVwvk69MKPFC qE0SOrzW78Vws/8/q6GbhXtePg8sixTnbt/t3APBYoBpTsJ66vci/kQEQiuP -----END CERTIFICATE-----Generated at Wed Nov 5 05:30:33 2025 by rpki-client