$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft File: 2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft (raw, json) Hash identifier: +Vr4VFW5YLLVGs92dTjoBySn9rsXnR6OSdPCOMTdILs= Subject key identifier: AE:1F:FA:14:42:96:90:71:2B:82:3D:32:56:98:BA:BF:5B:47:38:61 Authority key identifier: 2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0 Certificate issuer: /CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0 Certificate serial: 0F980F9D324E4A1476E13E7E14615861FA4D2D8C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft Manifest number: 012F Signing time: Tue 04 Nov 2025 06:56:35 +0000 Manifest this update: Tue 04 Nov 2025 06:51:35 +0000 Manifest next update: Mon 10 Nov 2025 02:45:35 +0000 Files and hashes: 1: 2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl (hash: MgsMZv1xijRkrsbwdHpeqRBqEFXe/SbO8Ek4eSS4Cag=) 2: 34352e3137352e36342e302f32322d3234203d3e20323633363836.roa (hash: TJ+igW/YrUcosQrIwNfQipcoW/x6+LywdR0fClvRIfw=) 3: 323830333a626336303a3a2f33322d3438203d3e20323634373733.roa (hash: Zsl7muYxcZ67isD4Zg7u1qDtM/Ls31dJ2jj3C1DNnrU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:98:0f:9d:32:4e:4a:14:76:e1:3e:7e:14:61:58:61:fa:4d:2d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0 Validity Not Before: Nov 4 06:51:35 2025 GMT Not After : Nov 10 02:45:35 2025 GMT Subject: CN=AE1FFA14429690712B823D325698BABF5B473861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:e7:48:6f:a8:e1:7c:a9:d3:a8:f4:a3:8f: ec:9e:92:0e:45:48:6d:fc:82:0d:20:eb:a5:1d:93: c8:f2:cd:87:fd:89:d8:43:e4:28:85:43:1f:33:43: 40:04:82:a7:0e:d1:39:f0:a2:9e:d5:87:ab:c6:bb: 61:a2:6b:96:d8:49:81:fb:01:85:fa:67:68:f2:36: fc:dd:06:93:f4:ee:00:3e:b6:14:10:1c:98:2e:17: a2:88:c7:48:06:e8:c8:df:16:59:d0:c0:39:c9:5e: 72:99:2e:63:02:dc:73:f8:ae:33:81:fd:b6:9e:ff: cd:50:9b:5e:22:67:27:19:8c:52:df:de:81:38:38: 74:71:56:a2:0e:95:10:5e:b1:b7:a5:5d:56:47:31: 37:cc:c1:61:d8:e0:fd:cd:9a:60:a1:d4:73:ae:d3: 05:7b:48:0d:a7:47:81:42:ec:06:d5:66:61:ac:37: 30:37:bf:da:7c:bb:c2:31:56:fb:7c:45:b5:52:8c: 99:0b:cc:6d:36:36:75:43:0c:9f:71:b9:d9:b4:79: b5:4e:2b:94:de:fa:00:2b:e4:2f:9e:58:5f:0f:bf: df:23:18:6b:d3:32:07:da:49:67:f9:bb:78:b3:93: f3:94:3a:19:98:9a:ab:53:f2:08:d8:f0:75:1f:4b: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:FA:14:42:96:90:71:2B:82:3D:32:56:98:BA:BF:5B:47:38:61 X509v3 Authority Key Identifier: keyid:2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e7:1d:89:b2:57:4f:af:03:9a:3e:f6:4a:01:20:94:35:f7: ad:81:64:18:5b:13:ae:8f:cf:1c:76:c3:51:86:53:c8:2b:0b: 98:48:64:18:7f:22:6a:1c:c7:d2:70:dd:04:bd:13:4f:40:04: 4f:43:55:8b:07:00:00:cd:8a:80:19:db:84:2d:3e:51:c9:38: 2b:2e:46:84:b1:85:4a:25:86:d6:78:60:c7:c9:8e:35:66:e4: 15:39:25:93:25:c3:18:e4:a2:37:a7:15:f9:39:46:e3:56:d0: c8:f2:bc:31:13:a9:ff:bc:18:bb:0b:39:b9:56:cf:2f:20:69: 6a:fa:2d:37:bf:d8:45:36:bc:4f:38:ad:d3:a2:2e:ec:5a:74: 25:90:3a:2b:6a:56:c1:8f:2d:f2:27:e3:31:34:9f:1a:35:94: 59:28:d6:16:2a:2d:2e:ed:ab:0b:09:7b:08:9d:32:52:23:6f: 5c:7e:31:37:29:eb:12:e6:d3:12:f2:52:75:48:60:b8:2f:2f: 10:b3:6d:ed:f1:24:f5:f7:6a:fb:94:47:b5:b2:a6:ac:6c:1d: d9:7d:fd:c2:4e:42:e5:0b:d3:d2:96:65:0d:39:e5:44:fb:f3: 4b:99:25:0c:51:5b:96:d0:17:be:e6:ed:65:87:48:af:6a:b7: 84:8b:77:74 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD5gPnTJOShR24T5+FGFYYfpNLYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEQUEzQUNDOUNBNEJGQzkyMTlGQjY1Q0I0NjRDOUI5 QzRCOTREMDAeFw0yNTExMDQwNjUxMzVaFw0yNTExMTAwMjQ1MzVaMDMxMTAvBgNV BAMTKEFFMUZGQTE0NDI5NjkwNzEyQjgyM0QzMjU2OThCQUJGNUI0NzM4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BOdIb6jhfKnTqPSjj+yekg5F SG38gg0g66Udk8jyzYf9idhD5CiFQx8zQ0AEgqcO0Tnwop7Vh6vGu2Gia5bYSYH7 AYX6Z2jyNvzdBpP07gA+thQQHJguF6KIx0gG6MjfFlnQwDnJXnKZLmMC3HP4rjOB /bae/81Qm14iZycZjFLf3oE4OHRxVqIOlRBesbelXVZHMTfMwWHY4P3NmmCh1HOu 0wV7SA2nR4FC7AbVZmGsNzA3v9p8u8IxVvt8RbVSjJkLzG02NnVDDJ9xudm0ebVO K5Te+gAr5C+eWF8Pv98jGGvTMgfaSWf5u3izk/OUOhmYmqtT8gjY8HUfS9IlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrh/6FEKWkHErgj0yVpi6v1tHOGEwHwYDVR0j BBgwFoAUL9qjrMnKS/ySGftly0ZMm5xLlNAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNzAwREMyQkNDMTJGM0QyOEQ5NDExNEZGRjFDODA3Qjc1 NzcxNEVBQUIyQ0M3RjAxMEVEMEFCNzIwNUMxNEVGLzAvMkZEQUEzQUNDOUNBNEJG QzkyMTlGQjY1Q0I0NjRDOUI5QzRCOTREMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkRBQTNBQ0M5Q0E0QkZDOTIx OUZCNjVDQjQ2NEM5QjlDNEI5NEQwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTcwMERDMkJDQzEyRjNEMjhEOTQxMTRGRkYxQzgwN0I3NTc3MTRFQUFC MkNDN0YwMTBFRDBBQjcyMDVDMTRFRi8wLzJGREFBM0FDQzlDQTRCRkM5MjE5RkI2 NUNCNDY0QzlCOUM0Qjk0RDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB15x2JsldPrwOaPvZKASCUNfet gWQYWxOuj88cdsNRhlPIKwuYSGQYfyJqHMfScN0EvRNPQARPQ1WLBwAAzYqAGduE LT5RyTgrLkaEsYVKJYbWeGDHyY41ZuQVOSWTJcMY5KI3pxX5OUbjVtDI8rwxE6n/ vBi7Czm5Vs8vIGlq+i03v9hFNrxPOK3Toi7sWnQlkDoralbBjy3yJ+MxNJ8aNZRZ KNYWKi0u7asLCXsInTJSI29cfjE3KesS5tMS8lJ1SGC4Ly8Qs23t8ST192r7lEe1 sqasbB3Zff3CTkLlC9PSlmUNOeVE+/NLmSUMUVuW0Be+5u1lh0ivareEi3d0 -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:54 2025 by rpki-client