$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft File: 24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft (raw, json) Hash identifier: 2NMyZ+F4GaT6tyXDzi+3Z0Q5kLTwi9eIvH8Tw53y43U= Subject key identifier: 3B:23:A7:92:A7:C3:3A:10:81:F8:BB:3F:CC:E4:7D:20:CD:90:59:BC Authority key identifier: 24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF Certificate issuer: /CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF Certificate serial: 31D9FC3545A7615C30C0D239317C3B7FC62837A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft Manifest number: 013A Signing time: Wed 05 Nov 2025 12:27:40 +0000 Manifest this update: Wed 05 Nov 2025 12:22:40 +0000 Manifest next update: Mon 10 Nov 2025 17:06:40 +0000 Files and hashes: 1: 24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl (hash: XGOjEdM0NsEYU3AJGg1EYuDFFlXnK119taVZOIvIR6g=) 2: 323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa (hash: s04QAhlw8XOKF9yrmP/+sP2zJGFRoN4KYWctsrnPhkI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d9:fc:35:45:a7:61:5c:30:c0:d2:39:31:7c:3b:7f:c6:28:37:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF Validity Not Before: Nov 5 12:22:40 2025 GMT Not After : Nov 10 17:06:40 2025 GMT Subject: CN=3B23A792A7C33A1081F8BB3FCCE47D20CD9059BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:d6:bf:5f:29:25:51:b1:50:3b:ff:3a:30: d0:bb:62:66:01:4c:f6:91:18:ef:9f:aa:19:22:a1: f2:56:9b:e6:e4:83:14:1d:40:0c:44:ab:7f:eb:4c: bc:6a:7e:ae:93:94:6b:9b:62:2a:b9:45:8e:ea:ce: 42:dc:8d:b0:fb:50:88:8b:3d:59:a3:84:db:db:8c: 89:f9:36:3d:e4:50:f9:16:ef:92:b8:bc:5a:40:c7: 1a:f0:87:d3:57:a7:1d:10:5b:56:2a:57:1c:d4:3f: b2:e8:f8:5b:42:9d:d7:aa:1e:09:cf:9a:cd:90:4d: 6c:06:8f:41:d5:8d:ed:73:78:d5:6d:03:c8:01:bc: 53:fd:9d:90:ef:15:f6:f7:97:50:b7:a7:51:0d:66: 7b:78:54:5e:10:ab:29:38:53:6e:e3:5a:f7:14:63: b2:37:86:e1:f6:46:3c:5d:cb:52:ab:4e:de:1a:50: 0c:87:1f:ef:3f:eb:06:ca:0e:6e:53:cc:44:27:e6: d8:78:57:9c:0c:d7:bf:2e:71:53:c3:16:3a:31:22: e6:1c:30:ab:93:d9:12:e9:28:f6:f2:1c:ca:2b:bb: 5c:65:7c:08:4e:75:ef:8b:cf:93:28:66:04:8f:a8: fa:79:d5:0f:84:c3:96:90:86:9f:c5:f1:52:7d:6a: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:A7:92:A7:C3:3A:10:81:F8:BB:3F:CC:E4:7D:20:CD:90:59:BC X509v3 Authority Key Identifier: keyid:24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bd:ed:0d:a5:ca:f8:42:81:42:46:72:65:72:94:ad:17:38: f4:76:22:eb:4b:a0:99:cf:1f:c8:5b:d4:56:e2:29:3d:46:34: 1b:c6:72:86:8e:55:b1:a2:93:45:0e:36:48:b4:97:e1:c0:84: bf:29:98:7c:15:c3:24:f3:cd:a7:11:8b:31:5d:c1:fc:00:3b: b0:c2:4e:b7:16:de:f7:11:06:87:00:10:2e:87:55:96:5a:3f: b1:06:d4:f2:b7:c4:14:84:78:52:ef:77:0f:89:5f:7a:07:8e: 18:42:9c:30:d3:27:a1:34:af:46:6a:c0:4c:3b:9f:ed:db:61: 10:21:7c:54:3b:47:15:29:09:5c:7e:8d:b4:df:2f:36:68:a5: 9b:ea:6a:dc:88:31:c5:25:ff:93:71:0f:b7:2e:f1:d6:9e:e3: 92:f1:44:c5:19:21:2f:c9:91:d7:dd:75:89:66:91:f9:52:0c: 64:2b:b4:61:92:64:60:c3:f9:dc:a8:e7:a3:2d:f4:c6:5a:5d: 99:f1:b3:f7:1b:33:4c:e6:44:f3:bc:dc:4d:cc:fb:b7:78:81: 87:45:80:ee:3f:76:9d:7d:8c:0e:41:ef:5d:e6:b4:cb:8e:8e: ad:7a:12:4f:07:4a:ba:35:89:3c:f8:68:7b:00:31:68:08:1e: c0:96:be:c6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMdn8NUWnYVwwwNI5MXw7f8YoN6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBQjRFRjBDREU1Q0JDNTJFMTI1RTYzNEM2ODIzN0M0 NkQwRjhDRjAeFw0yNTExMDUxMjIyNDBaFw0yNTExMTAxNzA2NDBaMDMxMTAvBgNV BAMTKDNCMjNBNzkyQTdDMzNBMTA4MUY4QkIzRkNDRTQ3RDIwQ0Q5MDU5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Nta/XyklUbFQO/86MNC7YmYB TPaRGO+fqhkiofJWm+bkgxQdQAxEq3/rTLxqfq6TlGubYiq5RY7qzkLcjbD7UIiL PVmjhNvbjIn5Nj3kUPkW75K4vFpAxxrwh9NXpx0QW1YqVxzUP7Lo+FtCndeqHgnP ms2QTWwGj0HVje1zeNVtA8gBvFP9nZDvFfb3l1C3p1ENZnt4VF4Qqyk4U27jWvcU Y7I3huH2Rjxdy1KrTt4aUAyHH+8/6wbKDm5TzEQn5th4V5wM178ucVPDFjoxIuYc MKuT2RLpKPbyHMoru1xlfAhOde+Lz5MoZgSPqPp51Q+Ew5aQhp/F8VJ9aiV7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOyOnkqfDOhCB+Ls/zOR9IM2QWbwwHwYDVR0j BBgwFoAUJKtO8M3ly8UuEl5jTGgjfEbQ+M8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOUI0NUEzNTI4QjhFM0JFRDlCRTdGNzlDQUI0OTVBNjFC NzMxNDU3M0RCRDlGOUNEMzNERTQ4OTc5MUVDQ0I5LzAvMjRBQjRFRjBDREU1Q0JD NTJFMTI1RTYzNEM2ODIzN0M0NkQwRjhDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEFCNEVGMENERTVDQkM1MkUx MjVFNjM0QzY4MjM3QzQ2RDBGOENGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDlCNDVBMzUyOEI4RTNCRUQ5QkU3Rjc5Q0FCNDk1QTYxQjczMTQ1NzNE QkQ5RjlDRDMzREU0ODk3OTFFQ0NCOS8wLzI0QUI0RUYwQ0RFNUNCQzUyRTEyNUU2 MzRDNjgyMzdDNDZEMEY4Q0YubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7ve0Npcr4QoFCRnJlcpStFzj0 diLrS6CZzx/IW9RW4ik9RjQbxnKGjlWxopNFDjZItJfhwIS/KZh8FcMk882nEYsx XcH8ADuwwk63Ft73EQaHABAuh1WWWj+xBtTyt8QUhHhS73cPiV96B44YQpww0yeh NK9GasBMO5/t22EQIXxUO0cVKQlcfo203y82aKWb6mrciDHFJf+TcQ+3LvHWnuOS 8UTFGSEvyZHX3XWJZpH5UgxkK7RhkmRgw/ncqOejLfTGWl2Z8bP3GzNM5kTzvNxN zPu3eIGHRYDuP3adfYwOQe9d5rTLjo6tehJPB0q6NYk8+Gh7ADFoCB7Alr7G -----END CERTIFICATE-----Generated at Wed Nov 5 20:07:33 2025 by rpki-client