$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft File: BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft (raw, json) Hash identifier: sxE6l7T11sRCn/X4waAsjZdTX58mIkXLdBUsMzfKK6M= Subject key identifier: 37:79:99:55:1D:90:E8:A1:45:81:4F:2C:48:6B:2F:71:A0:48:6E:D9 Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3 Certificate issuer: /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3 Certificate serial: 2C09B5BC34C6E14A02F00825A9D7CFD513CD2961 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft Manifest number: 0131 Signing time: Tue 04 Nov 2025 15:36:21 +0000 Manifest this update: Tue 04 Nov 2025 15:31:21 +0000 Manifest next update: Sun 09 Nov 2025 00:54:21 +0000 Files and hashes: 1: BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl (hash: YkxpDRSfzJIiBx+BDHUHQd2cgratxQVO55rLVfAlOkY=) 2: 3133382e3138352e33312e302f32342d3234203d3e20323633383137.roa (hash: SmkpiIg0zZyBAsQ+if+UTKOc0IkT7mpHDaNOQdLljRM=) 3: 3133382e3138352e33302e302f32342d3234203d3e20323633383137.roa (hash: VmZKYpVcWB4Fvp1ftaTOVK8V7OgOeViush1FUlGxR5k=) 4: 323830333a6134303a3a2f34372d3438203d3e20323633383137.roa (hash: XWNi85D6pU10hEJTHjZn+WiGf73bs2QkJLnS19kOcn0=) 5: 3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa (hash: e7+CXpay+EWuoUgmXjhSxAKj4Dqkj4EKhInAk5DTdHg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 00:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:09:b5:bc:34:c6:e1:4a:02:f0:08:25:a9:d7:cf:d5:13:cd:29:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3 Validity Not Before: Nov 4 15:31:21 2025 GMT Not After : Nov 9 00:54:21 2025 GMT Subject: CN=377999551D90E8A145814F2C486B2F71A0486ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:ff:5c:f7:7d:fc:bb:42:dd:b6:72:a1:2e: b8:29:40:5b:83:1e:ef:42:78:13:40:ff:d9:66:d6: 9a:ac:4b:e6:2f:58:d0:44:95:05:4d:0c:a1:62:12: fe:0b:8d:f5:53:e8:25:e0:cf:0a:47:69:f2:66:38: d3:d7:99:5a:78:5d:bb:eb:24:a1:5b:42:56:29:fc: 27:6b:cd:8f:91:8a:3f:d6:7c:ae:a3:e1:79:01:46: 56:c5:85:94:0a:42:ed:d2:fe:75:10:e9:5a:90:16: 3b:9f:d9:1a:5a:9f:f6:cb:47:7d:ab:28:df:b2:86: 7a:0a:b7:41:88:28:37:b1:3f:25:e1:0c:1a:92:a8: e3:d3:2d:00:45:9b:90:5a:bf:4b:b5:13:a4:77:e8: 62:af:00:29:9f:ea:bc:9f:44:7b:05:39:57:1e:9a: 57:60:21:de:98:f5:af:2a:b0:ae:27:c1:60:d9:b9: b5:15:4d:47:dd:04:54:29:46:cf:af:9e:0e:a5:24: a6:e4:8f:fe:c4:3e:6e:29:03:78:0a:33:ef:65:a9: 08:27:57:9a:00:e0:79:c6:be:1c:8a:2c:bf:74:a9: 7b:ca:dc:1f:cc:9d:b9:8d:09:77:07:69:f8:ff:97: 1f:98:71:38:8f:8c:14:17:61:2e:32:5e:21:85:1b: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:79:99:55:1D:90:E8:A1:45:81:4F:2C:48:6B:2F:71:A0:48:6E:D9 X509v3 Authority Key Identifier: keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:41:6c:81:45:17:e2:28:ae:65:fb:21:11:c0:c4:c3:aa:1a: 3c:78:ed:80:3a:a3:58:61:f6:09:25:29:f8:87:e6:83:7a:b7: 1f:79:7e:fa:fe:21:ef:e2:6c:48:2a:f8:1b:74:4d:c7:c9:30: ec:d8:0f:b9:03:29:36:5a:c0:95:e4:4f:12:37:0b:df:f2:b2: 2f:33:88:20:e9:97:f8:b8:2c:00:b3:11:bd:9d:dc:e5:ee:70: 29:4a:96:29:9a:f4:b9:82:60:f1:f1:2c:7b:cf:1c:d9:29:82: 70:b1:2e:5a:ce:06:38:a5:0a:f1:ac:b9:dd:83:df:94:b6:d8: af:60:c0:ee:4a:f2:cd:cf:99:58:a2:08:b7:e5:29:e9:b2:8b: 4e:18:d0:6b:e1:c5:56:18:2a:d1:35:f9:3f:63:72:61:e2:cc: 62:ca:bf:e2:28:18:ec:ea:89:7d:d2:90:f8:10:ef:9a:3c:12: 23:7a:a7:48:54:99:f9:b6:32:6d:6d:3e:01:41:06:f4:1a:52: de:99:d2:3b:b9:81:cf:37:2e:62:70:a6:49:bf:7e:ed:bd:42: a5:0d:5a:52:f0:c1:54:4a:8a:59:ee:73:f8:bc:f6:3b:91:c3: 95:1d:18:86:46:af:2d:38:3e:b1:a7:99:5e:2d:ca:70:a2:88: a3:8d:13:61 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULAm1vDTG4UoC8AglqdfP1RPNKWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3NjgzQTA5OTU4ODBGQjUxRjNCRjk4MjkzRURFQ0Qy ODZBRjZBMzAeFw0yNTExMDQxNTMxMjFaFw0yNTExMDkwMDU0MjFaMDMxMTAvBgNV BAMTKDM3Nzk5OTU1MUQ5MEU4QTE0NTgxNEYyQzQ4NkIyRjcxQTA0ODZFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKf9c9338u0LdtnKhLrgpQFuD Hu9CeBNA/9lm1pqsS+YvWNBElQVNDKFiEv4LjfVT6CXgzwpHafJmONPXmVp4Xbvr JKFbQlYp/CdrzY+Rij/WfK6j4XkBRlbFhZQKQu3S/nUQ6VqQFjuf2Rpan/bLR32r KN+yhnoKt0GIKDexPyXhDBqSqOPTLQBFm5Bav0u1E6R36GKvACmf6ryfRHsFOVce mldgId6Y9a8qsK4nwWDZubUVTUfdBFQpRs+vng6lJKbkj/7EPm4pA3gKM+9lqQgn V5oA4HnGvhyKLL90qXvK3B/MnbmNCXcHafj/lx+YcTiPjBQXYS4yXiGFG1J/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUN3mZVR2Q6KFFgU8sSGsvcaBIbtkwHwYDVR0j BBgwFoAUvnaDoJlYgPtR87+YKT7ezShq9qMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yODgwMjRERTg3MzYwMzMxNTQxNTEyNTM1MjU1OThDRUM4 OUI5QTBERTA3NTExN0IxM0E2MEM4QjcxMjhFMkQwLzAvQkU3NjgzQTA5OTU4ODBG QjUxRjNCRjk4MjkzRURFQ0QyODZBRjZBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTc2ODNBMDk5NTg4MEZCNTFG M0JGOTgyOTNFREVDRDI4NkFGNkEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjg4MDI0REU4NzM2MDMzMTU0MTUxMjUzNTI1NTk4Q0VDODlCOUEwREUw NzUxMTdCMTNBNjBDOEI3MTI4RTJEMC8wL0JFNzY4M0EwOTk1ODgwRkI1MUYzQkY5 ODI5M0VERUNEMjg2QUY2QTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPQWyBRRfiKK5l+yERwMTDqho8 eO2AOqNYYfYJJSn4h+aDercfeX76/iHv4mxIKvgbdE3HyTDs2A+5Ayk2WsCV5E8S Nwvf8rIvM4gg6Zf4uCwAsxG9ndzl7nApSpYpmvS5gmDx8Sx7zxzZKYJwsS5azgY4 pQrxrLndg9+UttivYMDuSvLNz5lYogi35SnpsotOGNBr4cVWGCrRNfk/Y3Jh4sxi yr/iKBjs6ol90pD4EO+aPBIjeqdIVJn5tjJtbT4BQQb0GlLemdI7uYHPNy5icKZJ v37tvUKlDVpS8MFUSopZ7nP4vPY7kcOVHRiGRq8tOD6xp5leLcpwooijjRNh -----END CERTIFICATE-----Generated at Wed Nov 5 05:29:31 2025 by rpki-client