$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft File: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft (raw, json) Hash identifier: ePfEq/wQjXJJtfbTXo5FPgl37D58m+lyujFv9cJZNyM= Subject key identifier: 28:B9:3B:70:20:DE:59:90:CF:D7:BA:3F:C7:96:92:B9:20:D6:C7:5B Authority key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 Certificate issuer: /CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Certificate serial: 32B51D0CFA68E5A8248F98E2FEE7F7C241B4C31B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft Manifest number: 012F Signing time: Tue 04 Nov 2025 13:25:14 +0000 Manifest this update: Tue 04 Nov 2025 13:20:14 +0000 Manifest next update: Sun 09 Nov 2025 20:13:14 +0000 Files and hashes: 1: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl (hash: z6ByRMKCe19YuRtZ84tQU6WY5FoRx0R71SEVMGd3RS0=) 2: 34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa (hash: 00QHCnhmXQ1VG4RphdiKc9rqhCyv5e4wyawaUJTCyfw=) 3: 323830333a623836303a3a2f33322d3332203d3e20323637383238.roa (hash: eJmlT26CwZyxaelOUPoLLiMMd4BSp8QyR8CJ1X/hKcM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b5:1d:0c:fa:68:e5:a8:24:8f:98:e2:fe:e7:f7:c2:41:b4:c3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Validity Not Before: Nov 4 13:20:14 2025 GMT Not After : Nov 9 20:13:14 2025 GMT Subject: CN=28B93B7020DE5990CFD7BA3FC79692B920D6C75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:54:e1:ff:04:c2:5a:46:d7:60:ab:c6:97: 15:ac:4e:91:56:32:79:ad:b8:26:f4:3d:5b:e6:27: 4f:22:fa:be:60:35:cf:1c:34:77:14:7d:f0:6b:db: 7b:91:39:42:b3:18:62:2b:c5:3c:db:a6:05:d5:46: 7a:a4:aa:13:70:37:1e:14:45:23:f7:52:1f:b0:ae: 87:12:ea:44:4f:7a:1b:37:88:27:34:80:20:71:02: 61:12:7a:b7:b0:02:1d:25:2e:42:07:2c:b9:6f:b9: 25:4b:6e:25:a6:1e:6a:3d:f2:a9:63:7a:cf:bb:d0: 73:80:83:40:fb:fe:e4:0d:c7:07:c2:25:05:20:ec: 55:c5:9b:00:1a:0e:b3:80:2e:b3:79:b3:db:79:e8: 6c:e8:2a:57:b8:e6:1a:4c:c1:5b:ba:c1:00:a5:b0: 12:a2:d1:19:32:b7:06:51:34:bb:32:3b:a2:9f:40: bd:7f:eb:11:9a:aa:22:35:61:68:3a:0c:a1:a6:58: 46:60:0f:90:05:f8:04:83:0a:32:b9:a0:9b:e3:44: 16:fa:86:ac:ae:cc:c0:7d:65:30:0f:ea:2a:15:a0: da:e7:3e:80:d6:10:5e:3d:56:89:5f:18:b1:66:3a: 2b:e3:44:9b:80:9b:7e:ec:fe:2c:b0:62:2c:8c:8c: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:3B:70:20:DE:59:90:CF:D7:BA:3F:C7:96:92:B9:20:D6:C7:5B X509v3 Authority Key Identifier: keyid:29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e0:2e:50:f0:28:0d:d8:fd:a2:70:1f:56:84:ea:f6:ed:b0: 32:7d:30:37:56:73:13:3b:0e:8b:52:08:db:4e:da:b4:1a:2f: 1c:16:84:d3:ed:05:65:d6:46:5d:4f:40:20:3e:8d:85:ab:ff: b9:bd:8f:21:86:37:71:33:20:83:a6:20:9a:ff:21:5b:bc:4b: 50:85:38:74:d5:86:26:a6:95:21:9e:3e:b2:be:c4:08:4f:77: b9:a9:d7:ef:0c:93:29:29:24:9a:89:5c:56:c6:bf:b8:05:28: 4a:04:af:9d:0f:68:19:92:dc:b4:57:bc:3e:1c:ee:4e:5a:3e: c8:6e:21:54:d0:fb:c5:da:13:4e:c3:a5:03:a1:25:e2:e9:f8: 59:d7:43:80:61:16:08:93:5e:b0:20:34:b2:50:9f:78:93:e8: f0:95:ac:25:7a:fa:17:05:00:34:e8:4f:a2:b2:bd:ad:05:fe: f9:75:97:48:87:99:4c:74:22:0c:01:3f:e8:d5:d1:af:c7:37: 05:2c:ce:43:06:e4:8b:e0:3a:0e:f6:5c:b5:b2:12:9e:83:5a: 62:09:0a:d4:57:06:09:d5:60:13:62:26:b2:75:b4:a8:de:1e: 45:63:7b:c3:36:29:88:a3:0a:6c:31:7d:80:f1:2b:ed:fd:46: 9b:52:60:26 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMrUdDPpo5agkj5ji/uf3wkG0wxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4OTM1QzlBNDNDNUM5QkRDOUFFMUY4MTg1QkZEOThG RjFBN0IzOTAeFw0yNTExMDQxMzIwMTRaFw0yNTExMDkyMDEzMTRaMDMxMTAvBgNV BAMTKDI4QjkzQjcwMjBERTU5OTBDRkQ3QkEzRkM3OTY5MkI5MjBENkM3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDVTh/wTCWkbXYKvGlxWsTpFW MnmtuCb0PVvmJ08i+r5gNc8cNHcUffBr23uROUKzGGIrxTzbpgXVRnqkqhNwNx4U RSP3Uh+wrocS6kRPehs3iCc0gCBxAmESerewAh0lLkIHLLlvuSVLbiWmHmo98qlj es+70HOAg0D7/uQNxwfCJQUg7FXFmwAaDrOALrN5s9t56GzoKle45hpMwVu6wQCl sBKi0RkytwZRNLsyO6KfQL1/6xGaqiI1YWg6DKGmWEZgD5AF+ASDCjK5oJvjRBb6 hqyuzMB9ZTAP6ioVoNrnPoDWEF49VolfGLFmOivjRJuAm37s/iywYiyMjFIXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKLk7cCDeWZDP17o/x5aSuSDWx1swHwYDVR0j BBgwFoAUKYk1yaQ8XJvcmuH4GFv9mP8aezkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRTY5OUE0QUM1RTdFMzNFQTQ2MzE4NTlGOTcyNTI1NDMw MkQxQzE5NURFODQ1NzMyNTE4Mjk1ODdBM0JCNDY2LzAvMjk4OTM1QzlBNDNDNUM5 QkRDOUFFMUY4MTg1QkZEOThGRjFBN0IzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTg5MzVDOUE0M0M1QzlCREM5 QUUxRjgxODVCRkQ5OEZGMUE3QjM5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEU2OTlBNEFDNUU3RTMzRUE0NjMxODU5Rjk3MjUyNTQzMDJEMUMxOTVE RTg0NTczMjUxODI5NTg3QTNCQjQ2Ni8wLzI5ODkzNUM5QTQzQzVDOUJEQzlBRTFG ODE4NUJGRDk4RkYxQTdCMzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ4C5Q8CgN2P2icB9WhOr27bAy fTA3VnMTOw6LUgjbTtq0Gi8cFoTT7QVl1kZdT0AgPo2Fq/+5vY8hhjdxMyCDpiCa /yFbvEtQhTh01YYmppUhnj6yvsQIT3e5qdfvDJMpKSSaiVxWxr+4BShKBK+dD2gZ kty0V7w+HO5OWj7IbiFU0PvF2hNOw6UDoSXi6fhZ10OAYRYIk16wIDSyUJ94k+jw lawlevoXBQA06E+isr2tBf75dZdIh5lMdCIMAT/o1dGvxzcFLM5DBuSL4DoO9ly1 shKeg1piCQrUVwYJ1WATYiaydbSo3h5FY3vDNimIowpsMX2A8Svt/UabUmAm -----END CERTIFICATE-----Generated at Thu Nov 6 01:16:47 2025 by rpki-client