$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft File: A2B7697124E3E04C84077E519A3633A382D4378C.mft (raw, json) Hash identifier: vtwF4iTeOFufh1RX9aLjYcApDzL95wKP3d0yEhUojH0= Subject key identifier: 12:CF:4F:8E:BA:BA:CC:C6:80:10:50:36:A3:F0:7E:76:54:52:E4:80 Authority key identifier: A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C Certificate issuer: /CN=A2B7697124E3E04C84077E519A3633A382D4378C Certificate serial: 56E204907046BE84F0717C95CDFC6C931B923822 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft Manifest number: D3 Signing time: Mon 03 Nov 2025 11:05:38 +0000 Manifest this update: Mon 03 Nov 2025 11:00:38 +0000 Manifest next update: Sun 09 Nov 2025 07:18:38 +0000 Files and hashes: 1: 34352e3137332e36382e302f32322d3234203d3e20323637383037.roa (hash: aN+7ugIZqlbqDxZGpokoCdOUqg/52MaGOm1O6NCEtNU=) 2: 323830333a613036303a3a2f33322d3438203d3e20323637383037.roa (hash: Us/4AjYXrH1J6I7JJfgrxwthZpQH5PGblIT5UEDKY70=) 3: A2B7697124E3E04C84077E519A3633A382D4378C.crl (hash: njOiaH9Il1/BzsztxU0YBcEzKB85fmr9pW/IQvHbgKw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e2:04:90:70:46:be:84:f0:71:7c:95:cd:fc:6c:93:1b:92:38:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B7697124E3E04C84077E519A3633A382D4378C Validity Not Before: Nov 3 11:00:38 2025 GMT Not After : Nov 9 07:18:38 2025 GMT Subject: CN=12CF4F8EBABACCC680105036A3F07E765452E480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:ff:ee:25:76:f4:be:a7:3f:05:13:22:11: 05:51:ac:66:b1:c3:62:e7:0d:3a:20:d2:08:73:dd: e7:12:67:ab:47:81:81:d9:2b:ce:88:de:50:06:de: 49:13:04:8d:19:f0:17:ff:79:79:8a:17:f4:a4:3c: b7:b6:1a:a1:be:46:1e:52:e3:da:1d:cc:8d:3a:af: 0a:94:ec:e7:21:36:d8:34:ef:11:02:fd:62:53:12: bf:a6:de:ad:b0:e9:05:7b:ed:bd:f1:c5:8d:bb:7a: ef:a7:5c:0e:5a:85:e1:a6:d3:8b:3a:fb:d1:e5:67: a2:3b:a3:fd:61:c5:a0:e4:9a:16:96:23:f9:5e:17: fd:f4:07:65:6c:e1:1e:cd:e9:71:42:24:3c:6b:48: 3e:a0:3b:e2:0c:d5:9c:44:33:78:1c:32:11:ba:7b: 42:a3:8d:0c:e3:85:89:ff:66:fe:25:03:91:f4:13: 69:6b:92:a9:0f:5c:ed:f8:6c:f0:30:b2:97:b8:d0: 7c:c9:79:6b:77:fd:7c:da:bf:22:29:c7:e2:b0:45: a2:1e:00:70:26:10:f2:45:a3:9a:0e:c5:0e:76:51: b2:80:11:37:c8:25:6d:f7:4c:2a:0d:5d:07:59:0c: e5:27:69:45:22:fa:98:d6:61:d2:d5:80:a2:26:51: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:4F:8E:BA:BA:CC:C6:80:10:50:36:A3:F0:7E:76:54:52:E4:80 X509v3 Authority Key Identifier: keyid:A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:40:e3:2b:a5:64:4e:52:80:85:25:a4:d6:85:99:bd:cd:5c: f9:cf:89:52:70:1c:46:10:fb:c3:ff:36:cc:a3:b0:86:74:11: 3b:7c:5e:7a:8e:57:dd:0f:20:db:93:23:ac:4e:0c:64:63:af: 1a:ec:e8:82:18:8c:2c:bd:bc:dd:66:b7:ed:de:6b:f6:4e:59: 3a:ed:02:2c:d7:50:42:d2:eb:a2:67:e0:34:43:3b:b4:74:8a: 2f:6c:60:d7:b4:ac:82:cd:cf:ec:fc:0c:6d:56:97:5a:30:70: ea:cb:e7:bc:2c:ef:b8:b5:6f:b6:49:65:21:ec:44:f5:f3:c9: 2e:db:9a:94:26:4b:3a:d7:d6:2b:f3:0c:c2:45:11:82:e6:6e: c5:d4:6d:19:5e:03:fe:7c:48:f1:b1:99:78:b7:20:bd:f5:8a: ad:9e:74:b4:89:16:62:ce:42:b7:48:2f:a0:02:d5:ba:c6:e3: 41:6f:45:93:35:b8:01:6c:8d:9a:d4:35:cb:87:31:4d:e8:c8: 93:50:de:95:63:99:dc:75:77:0e:2d:37:d8:82:10:d3:68:fc: e8:64:ef:30:a2:ca:50:37:b5:49:d1:a9:42:7a:6e:1e:31:07: ad:bf:a1:f8:ac:69:15:43:99:00:a7:ca:81:28:7f:ce:89:05: b4:7d:8f:5b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVuIEkHBGvoTwcXyVzfxskxuSOCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCNzY5NzEyNEUzRTA0Qzg0MDc3RTUxOUEzNjMzQTM4 MkQ0Mzc4QzAeFw0yNTExMDMxMTAwMzhaFw0yNTExMDkwNzE4MzhaMDMxMTAvBgNV BAMTKDEyQ0Y0RjhFQkFCQUNDQzY4MDEwNTAzNkEzRjA3RTc2NTQ1MkU0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKOP/uJXb0vqc/BRMiEQVRrGax w2LnDTog0ghz3ecSZ6tHgYHZK86I3lAG3kkTBI0Z8Bf/eXmKF/SkPLe2GqG+Rh5S 49odzI06rwqU7OchNtg07xEC/WJTEr+m3q2w6QV77b3xxY27eu+nXA5aheGm04s6 +9HlZ6I7o/1hxaDkmhaWI/leF/30B2Vs4R7N6XFCJDxrSD6gO+IM1ZxEM3gcMhG6 e0KjjQzjhYn/Zv4lA5H0E2lrkqkPXO34bPAwspe40HzJeWt3/XzavyIpx+KwRaIe AHAmEPJFo5oOxQ52UbKAETfIJW33TCoNXQdZDOUnaUUi+pjWYdLVgKImUWhJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUEs9Pjrq6zMaAEFA2o/B+dlRS5IAwHwYDVR0j BBgwFoAUordpcSTj4EyEB35RmjYzo4LUN4wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQkYzMkQzN0MxNzY4OTVCNDE3RjA3NjE0NTdFRDZEQzY3 NTdDOTRFM0YxQjhBN0YyQjc1NUNCNzU1QjVEQThELzAvQTJCNzY5NzEyNEUzRTA0 Qzg0MDc3RTUxOUEzNjMzQTM4MkQ0Mzc4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMkI3Njk3MTI0RTNFMDRDODQw NzdFNTE5QTM2MzNBMzgyRDQzNzhDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEJGMzJEMzdDMTc2ODk1QjQxN0YwNzYxNDU3RUQ2REM2NzU3Qzk0RTNG MUI4QTdGMkI3NTVDQjc1NUI1REE4RC8wL0EyQjc2OTcxMjRFM0UwNEM4NDA3N0U1 MTlBMzYzM0EzODJENDM3OEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7QOMrpWROUoCFJaTWhZm9zVz5 z4lScBxGEPvD/zbMo7CGdBE7fF56jlfdDyDbkyOsTgxkY68a7OiCGIwsvbzdZrft 3mv2Tlk67QIs11BC0uuiZ+A0Qzu0dIovbGDXtKyCzc/s/AxtVpdaMHDqy+e8LO+4 tW+2SWUh7ET188ku25qUJks619Yr8wzCRRGC5m7F1G0ZXgP+fEjxsZl4tyC99Yqt nnS0iRZizkK3SC+gAtW6xuNBb0WTNbgBbI2a1DXLhzFN6MiTUN6VY5ncdXcOLTfY ghDTaPzoZO8wospQN7VJ0alCem4eMQetv6H4rGkVQ5kAp8qBKH/OiQW0fY9b -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:58 2025 by rpki-client