$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.mft File: B9A021876E416A2682854C32FF258B9643EE2BDB.mft (raw, json) Hash identifier: p1LD7Kat6RqEoZTaJYcCIA+W7t4VBEcryF/Uvfp5zBg= Subject key identifier: 86:5F:F3:EB:13:82:F3:7A:25:C6:9F:26:41:B5:6F:C9:9F:27:CD:B6 Authority key identifier: B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB Certificate issuer: /CN=B9A021876E416A2682854C32FF258B9643EE2BDB Certificate serial: 6463B6355D50991DAFC9942BF7D4BD66A571AD47 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.mft Manifest number: D2 Signing time: Tue 04 Nov 2025 21:24:30 +0000 Manifest this update: Tue 04 Nov 2025 21:19:30 +0000 Manifest next update: Mon 10 Nov 2025 07:22:30 +0000 Files and hashes: 1: B9A021876E416A2682854C32FF258B9643EE2BDB.crl (hash: uw4ycGk3NjFs6cJghVGiu8vvsnTOPreyyXA9HImiCpw=) 2: 3230302e3131352e3138362e302f32332d3234203d3e203532343130.roa (hash: fyhQjPF+4DEInu6LumcMcowHVtTExZJ38PljZnGJn98=) 3: 3230302e392e3232362e302f32342d3234203d3e203532343130.roa (hash: sRpbpgniBdI7gZIrz0YkpPO35JM8GrIqSyNnwkUlisU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.crl rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:63:b6:35:5d:50:99:1d:af:c9:94:2b:f7:d4:bd:66:a5:71:ad:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A021876E416A2682854C32FF258B9643EE2BDB Validity Not Before: Nov 4 21:19:30 2025 GMT Not After : Nov 10 07:22:30 2025 GMT Subject: CN=865FF3EB1382F37A25C69F2641B56FC99F27CDB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:f0:c2:00:fd:43:af:17:3f:b1:45:94:ee: b2:67:2d:98:df:35:76:50:f2:f7:fb:cc:c6:ab:f3: 12:f8:98:2b:6b:10:ba:e0:a5:2c:80:ba:b1:14:f9: ba:e4:1a:aa:97:5a:e9:d2:8a:0d:0e:7a:94:c2:63: 3b:da:45:ca:a1:30:1a:1a:71:59:36:16:22:60:24: d2:44:3f:08:e0:52:97:4e:55:8f:0a:be:3d:e9:93: ab:8f:35:2c:68:68:25:58:82:99:10:23:e4:37:44: fd:27:a2:df:36:df:f8:da:51:bc:db:45:f7:60:5b: 14:ab:04:af:86:09:c0:f8:05:81:c4:91:8e:7e:0f: ae:06:c5:38:6e:81:e7:b0:d6:a7:27:69:29:b4:18: 7e:43:fd:39:5e:11:fa:38:a4:e8:74:2c:26:79:42: 23:5a:9c:e1:70:9c:e2:df:de:05:85:9d:cb:65:4d: ec:8b:0b:9a:0d:65:f4:73:1a:5a:42:b6:7b:d4:5e: 59:0c:f1:ed:0a:16:b4:5c:d5:96:94:cc:9f:3c:d0: 62:98:f9:b1:9c:05:a0:44:32:2e:fc:12:97:86:50: 83:20:74:28:5b:46:cc:1c:d8:17:8b:d6:c0:2c:1e: 67:1e:93:62:c2:96:d9:3c:84:f5:bc:04:ce:4a:79: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5F:F3:EB:13:82:F3:7A:25:C6:9F:26:41:B5:6F:C9:9F:27:CD:B6 X509v3 Authority Key Identifier: keyid:B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:18:b3:35:a5:36:41:5b:be:1e:ee:d2:fa:71:d3:f8:fd:6b: a6:33:7e:ac:ac:38:56:94:8e:30:96:1b:41:7c:e3:62:69:fc: a8:9c:79:03:ab:92:e7:b0:f6:b0:2d:95:e4:91:b8:1b:c3:a0: 90:66:8f:c1:a1:5c:98:27:3c:d6:b8:81:f1:94:a0:7c:f4:62: 6f:33:22:43:da:d0:b8:9a:be:a5:8a:36:f6:c9:bc:d3:1a:2d: 04:57:60:1f:0f:12:4b:45:72:34:39:be:4d:09:a2:9b:48:39: 55:73:32:4d:41:d4:0c:78:a9:b9:68:63:10:2a:3b:d1:73:6b: c6:aa:b4:e1:3a:41:07:76:6e:ef:90:9c:a9:56:a0:3c:06:6d: f4:f5:a2:4f:d1:ca:93:e6:a3:38:9d:38:22:62:a4:68:29:38: 37:3a:e9:ab:8e:e1:55:3d:cf:1f:42:1b:82:da:67:13:70:fb: c3:ff:d0:86:cb:04:74:b4:13:83:64:26:41:11:de:2b:69:3c: b9:2f:18:4d:fe:c5:5a:39:1d:49:31:05:08:a0:83:fe:b5:34: 48:ad:39:5d:4f:1a:fc:9b:9a:23:56:4d:ea:8f:c1:d9:bc:bd: 5b:cd:b0:fa:ec:88:51:a2:9b:35:bb:8a:34:9f:85:1e:6d:c2: 54:db:52:35 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZGO2NV1QmR2vyZQr99S9ZqVxrUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBMDIxODc2RTQxNkEyNjgyODU0QzMyRkYyNThCOTY0 M0VFMkJEQjAeFw0yNTExMDQyMTE5MzBaFw0yNTExMTAwNzIyMzBaMDMxMTAvBgNV BAMTKDg2NUZGM0VCMTM4MkYzN0EyNUM2OUYyNjQxQjU2RkM5OUYyN0NEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcvDCAP1Drxc/sUWU7rJnLZjf NXZQ8vf7zMar8xL4mCtrELrgpSyAurEU+brkGqqXWunSig0OepTCYzvaRcqhMBoa cVk2FiJgJNJEPwjgUpdOVY8Kvj3pk6uPNSxoaCVYgpkQI+Q3RP0not823/jaUbzb RfdgWxSrBK+GCcD4BYHEkY5+D64GxThugeew1qcnaSm0GH5D/TleEfo4pOh0LCZ5 QiNanOFwnOLf3gWFnctlTeyLC5oNZfRzGlpCtnvUXlkM8e0KFrRc1ZaUzJ880GKY +bGcBaBEMi78EpeGUIMgdChbRswc2BeL1sAsHmcek2LCltk8hPW8BM5Kee31AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhl/z6xOC83olxp8mQbVvyZ8nzbYwHwYDVR0j BBgwFoAUuaAhh25BaiaChUwy/yWLlkPuK9swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMzdGRDhGMzMxRjlCMjIxMjA2OTdBOTc2MjM4RkU1QTIx MDg2QUE3RDUxRDUxNzQyOEFDRTA3QkUyMEMzQThCLzAvQjlBMDIxODc2RTQxNkEy NjgyODU0QzMyRkYyNThCOTY0M0VFMkJEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUEwMjE4NzZFNDE2QTI2ODI4 NTRDMzJGRjI1OEI5NjQzRUUyQkRCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzM3RkQ4RjMzMUY5QjIyMTIwNjk3QTk3NjIzOEZFNUEyMTA4NkFBN0Q1 MUQ1MTc0MjhBQ0UwN0JFMjBDM0E4Qi8wL0I5QTAyMTg3NkU0MTZBMjY4Mjg1NEMz MkZGMjU4Qjk2NDNFRTJCREIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtGLM1pTZBW74e7tL6cdP4/Wum M36srDhWlI4wlhtBfONiafyonHkDq5LnsPawLZXkkbgbw6CQZo/BoVyYJzzWuIHx lKB89GJvMyJD2tC4mr6lijb2ybzTGi0EV2AfDxJLRXI0Ob5NCaKbSDlVczJNQdQM eKm5aGMQKjvRc2vGqrThOkEHdm7vkJypVqA8Bm309aJP0cqT5qM4nTgiYqRoKTg3 OumrjuFVPc8fQhuC2mcTcPvD/9CGywR0tBODZCZBEd4raTy5LxhN/sVaOR1JMQUI oIP+tTRIrTldTxr8m5ojVk3qj8HZvL1bzbD67IhRops1u4o0n4UebcJU21I1 -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:18 2025 by rpki-client