$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft File: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft (raw, json) Hash identifier: uP5rAQzhg9AjT5fFZgkaBOkTXU3rtHodu3De3/eycn0= Subject key identifier: CF:5C:28:B7:D2:E8:4B:1D:05:F7:FC:15:BD:39:99:83:65:6D:C4:A1 Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA Certificate issuer: /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Certificate serial: 122519E4795DC9A2224CAAF03AECDEC2BF519B44 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 13:15:05 +0000 Manifest this update: Tue 04 Nov 2025 13:10:05 +0000 Manifest next update: Mon 10 Nov 2025 02:08:05 +0000 Files and hashes: 1: 323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (hash: QDGdpSjompnHuxfIn7sQ3auNFSevURCMD9/TvRt/Q38=) 2: 3137392e302e39362e302f32322d3234203d3e20323731383736.roa (hash: Cw0vZv2Jgj2wqXBPQxsE5Dhkvc4LI4K/2JStcyGfQ/w=) 3: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl (hash: eTlG7CfmtOLTfz3h3iBGhoPcxD5Nysn6hHArQNiCyVM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:25:19:e4:79:5d:c9:a2:22:4c:aa:f0:3a:ec:de:c2:bf:51:9b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Validity Not Before: Nov 4 13:10:05 2025 GMT Not After : Nov 10 02:08:05 2025 GMT Subject: CN=CF5C28B7D2E84B1D05F7FC15BD399983656DC4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:2d:7d:3c:f7:3f:9a:03:ed:3e:00:13:a5: 0c:fe:a8:cc:fb:c7:30:cb:33:91:5a:cd:fb:75:19: 2e:92:89:0e:d3:eb:40:f1:25:19:40:7f:6b:d9:95: 33:42:11:d5:3d:1a:14:af:ac:9a:b5:8b:19:78:3d: 82:7e:51:24:6b:9c:82:63:c5:bc:4d:e9:43:cb:e2: 5c:23:71:81:03:20:c9:85:d8:36:10:1f:7d:cd:ba: 51:62:8d:19:7a:d9:53:d1:f0:9b:05:0a:dd:03:97: fe:99:02:5f:4b:67:a4:59:a6:dc:f5:63:19:9d:2a: 0f:36:ee:70:54:38:e0:5e:82:a3:0d:a2:2d:ff:92: 6b:05:9b:86:b7:a9:49:96:ef:06:c0:62:96:2d:42: 4d:88:d7:b4:f5:1a:44:f4:5f:84:3a:69:6c:d7:ff: f0:ff:7e:fd:2b:c2:af:df:2d:4f:5d:75:03:4e:92: 24:69:42:d2:c1:40:a9:64:af:e7:c0:3a:7e:d7:47: 8c:b4:cc:ad:a5:56:24:e6:8a:b0:aa:b8:4a:df:a0: 07:06:d8:5b:b4:cc:6c:9e:e7:a3:13:cc:5c:05:a1: 9f:4b:0c:92:b7:bd:ff:67:99:74:57:9a:26:46:7d: 8e:19:1d:c3:4a:87:46:08:7a:73:ea:5a:07:b6:ac: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5C:28:B7:D2:E8:4B:1D:05:F7:FC:15:BD:39:99:83:65:6D:C4:A1 X509v3 Authority Key Identifier: keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8f:3b:9b:a9:5f:1d:53:bb:b8:7b:05:25:d1:fe:c0:24:25: 91:a9:9d:e3:94:b4:2d:f5:ce:f6:94:13:3b:3e:99:b4:e0:4e: d1:1e:86:c1:bb:84:5c:e7:7f:86:52:05:d2:70:a0:6f:d2:fc: f2:42:08:fb:23:26:c7:6d:d8:01:46:2a:34:ed:80:64:77:90: 20:f6:0b:2f:b1:14:ac:c9:f3:fe:59:f0:50:4d:de:4e:68:af: 37:df:14:37:e3:0f:c0:62:a4:30:84:82:6b:f9:4b:01:9d:50: fd:fe:ed:c6:cc:2d:ec:13:60:0b:81:e3:00:30:32:08:0d:b3: c9:ca:8b:a7:ef:10:7e:d7:6b:53:fe:cb:30:2b:36:45:0a:50: f7:0d:a9:ec:79:b8:8c:1e:25:80:c6:0b:b9:4a:2a:62:ac:a3: 20:e0:8b:22:61:4c:d4:49:96:6f:0d:22:86:1f:d0:61:e6:20: 13:84:5a:c5:e4:33:2e:68:b4:87:46:f6:2c:53:e3:6f:16:ed: ef:59:d8:24:b3:4a:79:d2:ae:85:86:2e:0a:65:63:8b:e3:da: b1:7e:67:53:9a:96:da:c8:e6:94:96:17:36:64:b9:89:d3:2d: 78:73:21:19:13:07:c7:6d:bc:e4:20:53:45:58:d9:b8:3b:41: 66:fd:a7:58 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEiUZ5HldyaIiTKrwOuzewr9Rm0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI4NjIwQUNFQTg4NDI0OTU2ODU1MDJDMkRENjU5QTQ0 QkRBQUFGQTAeFw0yNTExMDQxMzEwMDVaFw0yNTExMTAwMjA4MDVaMDMxMTAvBgNV BAMTKENGNUMyOEI3RDJFODRCMUQwNUY3RkMxNUJEMzk5OTgzNjU2REM0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMC19PPc/mgPtPgATpQz+qMz7 xzDLM5Fazft1GS6SiQ7T60DxJRlAf2vZlTNCEdU9GhSvrJq1ixl4PYJ+USRrnIJj xbxN6UPL4lwjcYEDIMmF2DYQH33NulFijRl62VPR8JsFCt0Dl/6ZAl9LZ6RZptz1 YxmdKg827nBUOOBegqMNoi3/kmsFm4a3qUmW7wbAYpYtQk2I17T1GkT0X4Q6aWzX //D/fv0rwq/fLU9ddQNOkiRpQtLBQKlkr+fAOn7XR4y0zK2lViTmirCquErfoAcG 2Fu0zGye56MTzFwFoZ9LDJK3vf9nmXRXmiZGfY4ZHcNKh0YIenPqWge2rJUXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUz1wot9LoSx0F9/wVvTmZg2VtxKEwHwYDVR0j BBgwFoAUK4YgrOqIQklWhVAsLdZZpEvaqvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRDExMjc2ODM1Mjk0RUFFNTMwQzc4QzQ3MTk2Q0ZGMzBD QTRCQjA0NTU3QzY4Rjg5RTQ0M0NGMzhGNUI2NjBDLzAvMkI4NjIwQUNFQTg4NDI0 OTU2ODU1MDJDMkRENjU5QTQ0QkRBQUFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjg2MjBBQ0VBODg0MjQ5NTY4 NTUwMkMyREQ2NTlBNDRCREFBQUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUQxMTI3NjgzNTI5NEVBRTUzMEM3OEM0NzE5NkNGRjMwQ0E0QkIwNDU1 N0M2OEY4OUU0NDNDRjM4RjVCNjYwQy8wLzJCODYyMEFDRUE4ODQyNDk1Njg1NTAy QzJERDY1OUE0NEJEQUFBRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJjzubqV8dU7u4ewUl0f7AJCWR qZ3jlLQt9c72lBM7Ppm04E7RHobBu4Rc53+GUgXScKBv0vzyQgj7IybHbdgBRio0 7YBkd5Ag9gsvsRSsyfP+WfBQTd5OaK833xQ34w/AYqQwhIJr+UsBnVD9/u3GzC3s E2ALgeMAMDIIDbPJyoun7xB+12tT/sswKzZFClD3DansebiMHiWAxgu5SipirKMg 4IsiYUzUSZZvDSKGH9Bh5iAThFrF5DMuaLSHRvYsU+NvFu3vWdgks0p50q6Fhi4K ZWOL49qxfmdTmpbayOaUlhc2ZLmJ0y14cyEZEwfHbbzkIFNFWNm4O0Fm/adY -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:51 2025 by rpki-client