$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft File: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft (raw, json) Hash identifier: V10bJ3y5lH2q0ISPO7i44UqLjp0HQGCPR8rDa6WLY+E= Subject key identifier: 84:5F:2F:A2:7C:55:C4:04:94:5C:53:CB:88:01:0F:7A:F0:C5:98:71 Authority key identifier: 2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C Certificate issuer: /CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C Certificate serial: 50BD3A6200F396430592F7F13EE0D5251F804C7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft Manifest number: 0135 Signing time: Tue 04 Nov 2025 03:59:38 +0000 Manifest this update: Tue 04 Nov 2025 03:54:38 +0000 Manifest next update: Sun 09 Nov 2025 23:58:38 +0000 Files and hashes: 1: 3230302e3131352e3137392e302f32342d3234203d3e20323632323338.roa (hash: t0NXd0AZoax6j3Zx+zGAKvSkdzoQul8jv0P43Qt0bzM=) 2: 323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa (hash: BG7uP5ZpYPElGFwYBjwJHYhl9menyk39pNruzJ1aixs=) 3: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl (hash: rBQDdjGjpXVI9MKTGWn2A8iV+5sMre7HKvkHMNCtSj8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bd:3a:62:00:f3:96:43:05:92:f7:f1:3e:e0:d5:25:1f:80:4c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C Validity Not Before: Nov 4 03:54:38 2025 GMT Not After : Nov 9 23:58:38 2025 GMT Subject: CN=845F2FA27C55C404945C53CB88010F7AF0C59871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:df:bf:ba:2e:d9:63:b0:b8:7d:56:20:72: 67:6a:f1:5c:92:6f:11:74:f8:b8:4f:20:49:da:c4: 84:6e:14:c0:12:e3:fc:60:c6:4b:3c:85:cb:49:96: bd:db:06:60:7a:92:f6:3f:ca:ac:db:ee:e4:ec:b3: f3:fd:f1:2d:d1:21:60:b0:57:3a:bb:6f:b8:df:25: 81:18:25:11:9c:62:20:90:bb:7d:36:ea:dd:4d:fa: 11:e1:ad:68:7a:fe:cb:a1:11:70:6b:de:49:25:de: fa:a8:7f:ff:6f:a5:8a:45:b0:f6:89:09:64:b4:18: cf:e0:97:03:2f:0f:ed:91:d5:65:51:a2:e8:b3:fd: b4:53:71:1a:0e:b2:eb:23:1f:44:e6:9e:44:fa:5e: 15:b8:75:1d:0f:9a:c1:e0:b5:74:57:df:57:75:50: 83:43:e4:f9:75:a3:29:c1:f9:86:13:1f:d4:24:50: 85:98:d4:cd:f0:53:ac:16:5c:fa:49:1b:19:04:9a: e6:ed:40:a2:03:12:16:92:3d:d7:6c:5c:a3:86:48: 24:e2:8b:96:fe:0d:c5:f9:16:7c:36:8b:4f:10:a0: 66:6e:71:e5:b0:c5:28:40:33:ab:c9:46:4c:33:8c: 04:8c:70:ae:44:7f:cd:00:64:87:74:69:8a:8d:78: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5F:2F:A2:7C:55:C4:04:94:5C:53:CB:88:01:0F:7A:F0:C5:98:71 X509v3 Authority Key Identifier: keyid:2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:96:57:5a:73:03:ac:17:d8:3d:92:4d:6b:b2:02:da:13:c8: 30:fd:72:e4:20:be:0b:65:f2:09:4e:46:d4:91:32:3d:db:3d: 90:43:1c:f7:f7:94:2f:11:6b:8f:b6:8e:d0:03:6b:96:1f:e6: d0:14:a6:fe:01:f7:24:31:32:09:49:c5:b1:52:64:52:7e:2c: cd:59:76:08:a8:ed:21:d6:54:d2:e3:10:88:72:ab:6d:0f:d2: 92:c0:71:12:1e:e5:f8:27:a6:7c:fa:7f:fd:48:97:88:cc:7e: c8:d0:9a:b9:89:4a:6e:83:3c:b8:a4:ca:9f:1f:73:a4:ca:0e: fe:48:9c:b0:cd:19:bf:6a:ef:54:5c:50:06:af:75:66:af:0b: dd:e0:02:d2:86:fd:80:c2:90:66:c5:3f:3f:c3:5a:58:5a:3d: d3:2d:4a:ae:43:a2:79:63:0b:c0:52:db:34:76:cc:1c:e6:42: cd:41:bd:8f:36:8f:76:9d:cd:aa:42:ab:6e:db:d7:ac:d2:82: 16:89:a3:bf:19:93:e1:05:0a:87:f8:c8:fd:ca:ec:d4:22:41: e0:b3:a7:49:e2:6c:4e:f6:99:ab:3b:11:a4:61:f1:c2:b8:c4: c3:ad:ac:36:fc:06:ee:20:7d:9c:c0:ac:ab:9b:47:cd:a9:83: 42:7b:64:96 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUL06YgDzlkMFkvfxPuDVJR+ATHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwMERFNjg1NkE0NjY3MEU3NENCQzMzODBBODRCNzVB NEJEOTgyQzAeFw0yNTExMDQwMzU0MzhaFw0yNTExMDkyMzU4MzhaMDMxMTAvBgNV BAMTKDg0NUYyRkEyN0M1NUM0MDQ5NDVDNTNDQjg4MDEwRjdBRjBDNTk4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwt+/ui7ZY7C4fVYgcmdq8VyS bxF0+LhPIEnaxIRuFMAS4/xgxks8hctJlr3bBmB6kvY/yqzb7uTss/P98S3RIWCw Vzq7b7jfJYEYJRGcYiCQu3026t1N+hHhrWh6/suhEXBr3kkl3vqof/9vpYpFsPaJ CWS0GM/glwMvD+2R1WVRouiz/bRTcRoOsusjH0TmnkT6XhW4dR0PmsHgtXRX31d1 UIND5Pl1oynB+YYTH9QkUIWY1M3wU6wWXPpJGxkEmubtQKIDEhaSPddsXKOGSCTi i5b+DcX5Fnw2i08QoGZuceWwxShAM6vJRkwzjASMcK5Ef80AZId0aYqNeJDBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhF8vonxVxASUXFPLiAEPevDFmHEwHwYDVR0j BBgwFoAULQDeaFakZnDnTLwzgKhLdaS9mCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zM0NCRDgyM0E1RTZBNDRCMjExMDk0QTE1N0QyOThBREM0 QjlERkFGQzM5QjA1MzQzMjk3RUZENDBDNTA3NkZDLzAvMkQwMERFNjg1NkE0NjY3 MEU3NENCQzMzODBBODRCNzVBNEJEOTgyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDAwREU2ODU2QTQ2NjcwRTc0 Q0JDMzM4MEE4NEI3NUE0QkQ5ODJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzNDQkQ4MjNBNUU2QTQ0QjIxMTA5NEExNTdEMjk4QURDNEI5REZBRkMz OUIwNTM0MzI5N0VGRDQwQzUwNzZGQy8wLzJEMDBERTY4NTZBNDY2NzBFNzRDQkMz MzgwQTg0Qjc1QTRCRDk4MkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZlldacwOsF9g9kk1rsgLaE8gw /XLkIL4LZfIJTkbUkTI92z2QQxz395QvEWuPto7QA2uWH+bQFKb+AfckMTIJScWx UmRSfizNWXYIqO0h1lTS4xCIcqttD9KSwHESHuX4J6Z8+n/9SJeIzH7I0Jq5iUpu gzy4pMqfH3Okyg7+SJywzRm/au9UXFAGr3Vmrwvd4ALShv2AwpBmxT8/w1pYWj3T LUquQ6J5YwvAUts0dswc5kLNQb2PNo92nc2qQqtu29es0oIWiaO/GZPhBQqH+Mj9 yuzUIkHgs6dJ4mxO9pmrOxGkYfHCuMTDraw2/AbuIH2cwKyrm0fNqYNCe2SW -----END CERTIFICATE-----Generated at Wed Nov 5 12:08:00 2025 by rpki-client