$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft File: BB2B2E89891085EE92514B5D91EFE9F59005C933.mft (raw, json) Hash identifier: ueNXSpHCNkry86nmD/6LdQimkxOzftLYq5HwEC4JQAQ= Subject key identifier: 92:DD:29:B0:83:4D:D3:AA:77:1E:6F:14:28:68:5D:46:FF:E3:71:D4 Authority key identifier: BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33 Certificate issuer: /CN=BB2B2E89891085EE92514B5D91EFE9F59005C933 Certificate serial: 1AA4846EDCA9999F8ACA46CB7C805103C404FB63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 07:01:37 +0000 Manifest this update: Tue 04 Nov 2025 06:56:37 +0000 Manifest next update: Sat 08 Nov 2025 18:39:37 +0000 Files and hashes: 1: 3139322e3138382e35382e302f32342d3234203d3e203232373234.roa (hash: bDp2qEnU8bFX0Hrq6jO0gzMPFY2SV4rBFM+gGOfRjPg=) 2: 3139322e3138382e35382e302f32342d3234203d3e203631343638.roa (hash: nK9HhbhKHp/tWxqJEGfoPxsxOmei5bP4zEUr5Rk2R+s=) 3: 3139322e3138382e35382e302f32342d3234203d3e2033353439.roa (hash: OIObDn9Q9FnZsaGoEZoV05WpGD2atjlewYiWoi1fmtk=) 4: BB2B2E89891085EE92514B5D91EFE9F59005C933.crl (hash: wza6C7ONLjlqaY95CZg63u9nYK2tVPB733DnKFVudyQ=) 5: 3139322e3138382e35382e302f32342d3234203d3e203237393437.roa (hash: dgK4VQDVToTOpq9jN2yYloJFzpwhkUrScrDTUUBhqiw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 18:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:84:6e:dc:a9:99:9f:8a:ca:46:cb:7c:80:51:03:c4:04:fb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB2B2E89891085EE92514B5D91EFE9F59005C933 Validity Not Before: Nov 4 06:56:37 2025 GMT Not After : Nov 8 18:39:37 2025 GMT Subject: CN=92DD29B0834DD3AA771E6F1428685D46FFE371D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:f7:c9:ef:fe:ee:24:75:f7:9c:91:e5:2c: bb:d6:1c:55:96:56:96:8a:f6:ce:11:8b:51:a4:8e: 87:da:39:e8:9b:4c:df:8c:f4:7c:7d:f4:49:17:3d: 4d:81:c0:0a:87:84:18:ed:f7:f5:de:2e:10:94:6d: 37:38:ac:26:33:8c:53:79:e6:39:3c:c0:80:66:47: c2:e1:5e:c6:25:8d:e5:3d:7f:ed:3f:4f:91:bd:98: 5b:96:46:2d:b8:a6:4f:58:1b:15:e9:b0:88:be:9a: 24:84:49:a6:99:0e:ee:e4:12:bc:66:8e:da:37:02: 99:d6:de:aa:e4:63:ce:02:28:8f:2c:62:0f:c4:38: 13:07:e8:83:3c:5c:2d:45:5e:51:57:0e:b8:a0:10: 11:3e:71:17:78:f8:bf:e5:31:9f:8c:41:ed:de:dc: 5b:43:6f:0e:51:f9:50:ed:66:49:f8:2f:fa:35:13: 91:d5:be:2e:01:ff:93:31:80:66:5e:84:e2:3e:5f: c7:b1:15:52:ae:d9:df:0d:9d:cb:70:e0:8a:36:87: dd:e9:af:97:4f:64:54:45:fe:6c:09:f8:17:95:6d: e9:a3:bd:11:b3:a0:d8:1e:f6:38:10:0c:43:4a:e8: dc:fc:71:e5:8a:60:87:c1:4f:be:2d:6d:0d:70:ea: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DD:29:B0:83:4D:D3:AA:77:1E:6F:14:28:68:5D:46:FF:E3:71:D4 X509v3 Authority Key Identifier: keyid:BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7e:41:e1:ba:3e:f7:46:ed:41:ff:aa:7d:fa:89:11:71:86: 30:46:45:95:f2:d8:a4:eb:64:69:9f:5e:72:d2:bf:e9:fa:55: 26:34:1e:41:4f:12:db:6b:4f:ca:9a:25:16:1f:3e:d8:7f:2e: 7a:8e:04:4a:39:22:a8:b2:5e:bb:c7:6b:3d:ca:1b:24:2e:36: fb:f0:28:56:e2:88:4e:c5:16:2c:08:83:a3:d0:15:a0:c9:5a: 63:ec:fb:ef:e7:45:ae:85:d0:c7:c3:b2:6d:9c:66:22:44:57: 51:72:b5:5b:f6:3c:c2:25:6e:d4:2f:b7:08:5d:64:21:9f:61: 57:3c:dc:cd:c2:c1:bb:2d:ab:30:a2:77:8f:b2:cf:b3:d4:00: 99:83:49:33:92:02:c5:27:10:17:0b:c5:35:52:8e:f0:29:c5: 52:41:85:f9:9b:0b:e9:fa:bc:56:8f:cb:e9:6c:84:81:dc:97: d9:e9:43:e4:5e:17:3e:ae:5f:42:23:13:13:6a:17:50:62:82: 60:35:0d:f0:48:a6:ac:b2:d3:6f:75:b4:f5:25:f7:17:3a:b9: c2:76:23:d0:6e:c9:da:31:9d:e0:ae:05:62:99:ca:42:df:13: 6a:4f:ba:7d:39:80:45:aa:a1:3f:b6:6b:0d:67:a8:8c:9e:9b: 6f:aa:f3:60 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGqSEbtypmZ+KykbLfIBRA8QE+2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyQjJFODk4OTEwODVFRTkyNTE0QjVEOTFFRkU5RjU5 MDA1QzkzMzAeFw0yNTExMDQwNjU2MzdaFw0yNTExMDgxODM5MzdaMDMxMTAvBgNV BAMTKDkyREQyOUIwODM0REQzQUE3NzFFNkYxNDI4Njg1RDQ2RkZFMzcxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOvfJ7/7uJHX3nJHlLLvWHFWW VpaK9s4Ri1GkjofaOeibTN+M9Hx99EkXPU2BwAqHhBjt9/XeLhCUbTc4rCYzjFN5 5jk8wIBmR8LhXsYljeU9f+0/T5G9mFuWRi24pk9YGxXpsIi+miSESaaZDu7kErxm jto3ApnW3qrkY84CKI8sYg/EOBMH6IM8XC1FXlFXDrigEBE+cRd4+L/lMZ+MQe3e 3FtDbw5R+VDtZkn4L/o1E5HVvi4B/5MxgGZehOI+X8exFVKu2d8Nnctw4Io2h93p r5dPZFRF/mwJ+BeVbemjvRGzoNge9jgQDENK6Nz8ceWKYIfBT74tbQ1w6gxlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkt0psINN06p3Hm8UKGhdRv/jcdQwHwYDVR0j BBgwFoAUuysuiYkQhe6SUUtdke/p9ZAFyTMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRjgyMjNFNDFGREZDQzhCM0YzMjU1N0IwOUY3RDFENDU4 RTU5QTA2NkZDNzM2ODkxNzQ3OUQ1REEwMTIyOTc0LzAvQkIyQjJFODk4OTEwODVF RTkyNTE0QjVEOTFFRkU5RjU5MDA1QzkzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjJCMkU4OTg5MTA4NUVFOTI1 MTRCNUQ5MUVGRTlGNTkwMDVDOTMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEY4MjIzRTQxRkRGQ0M4QjNGMzI1NTdCMDlGN0QxRDQ1OEU1OUEwNjZG QzczNjg5MTc0NzlENURBMDEyMjk3NC8wL0JCMkIyRTg5ODkxMDg1RUU5MjUxNEI1 RDkxRUZFOUY1OTAwNUM5MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCofkHhuj73Ru1B/6p9+okRcYYw RkWV8tik62Rpn15y0r/p+lUmNB5BTxLba0/KmiUWHz7Yfy56jgRKOSKosl67x2s9 yhskLjb78ChW4ohOxRYsCIOj0BWgyVpj7Pvv50WuhdDHw7JtnGYiRFdRcrVb9jzC JW7UL7cIXWQhn2FXPNzNwsG7LaswonePss+z1ACZg0kzkgLFJxAXC8U1Uo7wKcVS QYX5mwvp+rxWj8vpbISB3JfZ6UPkXhc+rl9CIxMTahdQYoJgNQ3wSKasstNvdbT1 JfcXOrnCdiPQbsnaMZ3grgVimcpC3xNqT7p9OYBFqqE/tmsNZ6iMnptvqvNg -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:32 2025 by rpki-client