$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft File: 33AE83F4491BEA105F85ED2DA938440613250424.mft (raw, json) Hash identifier: +kiY8CFE3PtUvDOqTgawgNXjUYd3Y+JOw+G7DMde7zc= Subject key identifier: 7C:C4:41:98:16:FC:46:95:CB:AA:F2:9B:57:F0:C1:08:55:22:D9:7C Authority key identifier: 33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24 Certificate issuer: /CN=33AE83F4491BEA105F85ED2DA938440613250424 Certificate serial: 66E4BD65F878DA2BBDDCAA71E72B3AB241EDBE0C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft Manifest number: FF Signing time: Tue 04 Nov 2025 19:08:21 +0000 Manifest this update: Tue 04 Nov 2025 19:03:21 +0000 Manifest next update: Sun 09 Nov 2025 10:03:21 +0000 Files and hashes: 1: 33AE83F4491BEA105F85ED2DA938440613250424.crl (hash: NWCCRGfA4y+yLFsJiLbxC2yCn/I0hX13/AsdrtASkLI=) 2: 3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa (hash: lKDsGUdF6vU48E6/gLmEaNuf3NfC/ebqouJ+N09fKFs=) 3: 323830333a396565303a3a2f33322d3332203d3e20323639393838.roa (hash: 9FOxULTAdbFwn2YiI8uSMtsen57iR6H9GDxT88zMA0w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e4:bd:65:f8:78:da:2b:bd:dc:aa:71:e7:2b:3a:b2:41:ed:be:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33AE83F4491BEA105F85ED2DA938440613250424 Validity Not Before: Nov 4 19:03:21 2025 GMT Not After : Nov 9 10:03:21 2025 GMT Subject: CN=7CC4419816FC4695CBAAF29B57F0C1085522D97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:da:29:c8:81:55:70:04:eb:fc:09:54:61:7f: 7c:83:dc:cb:27:bf:da:73:f6:1b:9d:e2:97:57:66: 35:e3:cd:3d:d5:da:0b:87:64:41:96:13:2f:c9:ee: 73:bf:da:2c:e6:41:55:a8:bd:ba:e5:d9:47:9b:f9: b0:34:d6:1a:71:35:70:c5:d5:a3:fe:49:d9:76:0c: 39:60:c0:25:40:46:47:50:64:85:06:13:8f:9b:37: fb:0b:26:75:85:4a:24:80:68:a4:8d:c9:a3:9b:af: 07:bb:06:cd:83:c9:16:a0:e5:3e:a1:a6:d7:0d:99: ee:6e:b9:a2:98:b9:46:97:7b:64:9a:f6:b9:7e:0f: 04:f4:c6:40:74:88:64:b5:e4:33:89:ff:d1:bb:ef: e8:d8:d0:6b:7d:91:6a:ab:ed:f2:c4:49:48:5d:c4: 0e:86:fc:45:2e:6c:70:0b:59:2c:ba:0c:ff:3e:2d: 80:0e:b3:53:ce:e8:af:2b:79:16:e0:43:92:8e:db: 24:5c:52:16:f0:75:28:ef:03:04:11:c5:ce:19:7c: 2c:9f:b3:d0:f1:1a:f4:95:72:79:29:9a:ab:cc:1b: 06:ca:37:d3:4d:c1:44:44:58:2d:86:d4:56:6d:8f: 3d:46:97:7b:24:ec:13:3f:01:07:53:00:b2:93:59: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C4:41:98:16:FC:46:95:CB:AA:F2:9B:57:F0:C1:08:55:22:D9:7C X509v3 Authority Key Identifier: keyid:33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:64:a3:2d:95:dd:96:0c:72:6d:bc:c1:e5:84:b3:bc:af:76: d0:7e:76:ad:c3:60:1d:5c:24:a5:41:89:11:02:53:9a:ad:a6: 1a:dc:f2:49:7b:ea:ff:8c:dd:60:4c:6d:24:b3:4a:ec:21:ba: 71:27:63:c2:34:b9:de:9a:76:b9:c1:24:a9:b7:fc:41:8a:7c: ac:b0:6b:95:42:0f:c5:7b:e8:91:e9:64:2c:c1:ab:19:02:8b: a8:32:a1:db:4b:17:87:08:ec:e1:b2:36:d4:e4:ec:bf:f5:aa: 7d:67:74:be:02:05:a9:f8:bd:ce:3a:e9:b2:e3:93:c7:b5:e7: 27:9c:ba:1f:1c:26:60:24:aa:04:88:27:7d:55:fd:dc:92:06: 9e:40:2d:1d:32:96:c8:71:59:e8:0c:b9:54:38:39:2c:cc:d2: 98:1d:9c:3d:35:6f:c0:8e:2d:00:79:df:b0:b0:02:69:ad:8e: 31:3b:93:54:7a:e6:9a:ae:24:5e:46:2d:44:fa:70:7e:e1:1e: 0d:6e:e1:da:ec:d7:50:b8:44:e4:7d:98:f6:77:0f:dd:e3:c1: 3d:32:82:77:7d:68:cc:6a:b5:75:ab:68:5b:27:c0:89:e5:d3: a3:2e:0d:15:64:42:8f:61:b6:80:6f:40:d0:40:5b:b9:70:54: 9c:73:2c:bb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZuS9Zfh42iu93Kpx5ys6skHtvgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBRTgzRjQ0OTFCRUExMDVGODVFRDJEQTkzODQ0MDYx MzI1MDQyNDAeFw0yNTExMDQxOTAzMjFaFw0yNTExMDkxMDAzMjFaMDMxMTAvBgNV BAMTKDdDQzQ0MTk4MTZGQzQ2OTVDQkFBRjI5QjU3RjBDMTA4NTUyMkQ5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD42inIgVVwBOv8CVRhf3yD3Msn v9pz9hud4pdXZjXjzT3V2guHZEGWEy/J7nO/2izmQVWovbrl2Ueb+bA01hpxNXDF 1aP+Sdl2DDlgwCVARkdQZIUGE4+bN/sLJnWFSiSAaKSNyaObrwe7Bs2DyRag5T6h ptcNme5uuaKYuUaXe2Sa9rl+DwT0xkB0iGS15DOJ/9G77+jY0Gt9kWqr7fLESUhd xA6G/EUubHALWSy6DP8+LYAOs1PO6K8reRbgQ5KO2yRcUhbwdSjvAwQRxc4ZfCyf s9DxGvSVcnkpmqvMGwbKN9NNwUREWC2G1FZtjz1Gl3sk7BM/AQdTALKTWVOpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfMRBmBb8RpXLqvKbV/DBCFUi2XwwHwYDVR0j BBgwFoAUM66D9Ekb6hBfhe0tqThEBhMlBCQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQ0JDMTE2QTgzMkZBMTY2MDdENjc1Qzc1RjY3RTMwMDQ5 NzA0NTU0MTNGM0Q1QjZERkM2Q0U0MjRDODE2NEM4LzAvMzNBRTgzRjQ0OTFCRUEx MDVGODVFRDJEQTkzODQ0MDYxMzI1MDQyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0FFODNGNDQ5MUJFQTEwNUY4 NUVEMkRBOTM4NDQwNjEzMjUwNDI0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUNCQzExNkE4MzJGQTE2NjA3RDY3NUM3NUY2N0UzMDA0OTcwNDU1NDEz RjNENUI2REZDNkNFNDI0QzgxNjRDOC8wLzMzQUU4M0Y0NDkxQkVBMTA1Rjg1RUQy REE5Mzg0NDA2MTMyNTA0MjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRZKMtld2WDHJtvMHlhLO8r3bQ fnatw2AdXCSlQYkRAlOaraYa3PJJe+r/jN1gTG0ks0rsIbpxJ2PCNLnemna5wSSp t/xBinyssGuVQg/Fe+iR6WQswasZAouoMqHbSxeHCOzhsjbU5Oy/9ap9Z3S+AgWp +L3OOumy45PHtecnnLofHCZgJKoEiCd9Vf3ckgaeQC0dMpbIcVnoDLlUODkszNKY HZw9NW/Aji0Aed+wsAJprY4xO5NUeuaariReRi1E+nB+4R4NbuHa7NdQuETkfZj2 dw/d48E9MoJ3fWjMarV1q2hbJ8CJ5dOjLg0VZEKPYbaAb0DQQFu5cFSccyy7 -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:39 2025 by rpki-client