$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json) Hash identifier: JbiDw3IjBH6C/bCj/r/mzjeG0azS8Xekc16tFAi5YVk= Subject key identifier: 68:9F:D2:25:04:66:FE:E4:27:A0:F8:55:28:41:C8:9C:9C:E1:BE:2D Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5 Certificate serial: 173FD1AC619FC38EC5D38AF36EDA84C070759AC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft Manifest number: 012F Signing time: Tue 04 Nov 2025 09:22:55 +0000 Manifest this update: Tue 04 Nov 2025 09:17:55 +0000 Manifest next update: Sun 09 Nov 2025 09:26:55 +0000 Files and hashes: 1: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: 0wG8UAY7ipzPPU6H/Qn8ayAErVsbpJ3ILXn1Xxmg05c=) 2: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: 3oPDS7k+5tPJKY1jhIPHmJ8cpoJ0oynRExznpTcUM2Y=) 3: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: YCM1oXKAOqvvmUFyPpzwfn80NaYV4PR/y9/a34CTUWE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3f:d1:ac:61:9f:c3:8e:c5:d3:8a:f3:6e:da:84:c0:70:75:9a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5 Validity Not Before: Nov 4 09:17:55 2025 GMT Not After : Nov 9 09:26:55 2025 GMT Subject: CN=689FD2250466FEE427A0F8552841C89C9CE1BE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:a8:ad:21:66:76:5c:a5:00:0d:66:5d:b6: e8:6e:0e:8a:f7:83:6a:f0:a7:0d:13:7d:69:7c:21: f3:64:84:ae:8b:a9:61:93:19:e0:f5:71:1d:0a:0e: f6:c3:64:3a:73:d4:ff:10:f1:4d:d8:40:59:69:ce: 43:ad:25:22:7f:fb:0f:51:de:40:61:5d:83:aa:b3: 35:f0:9e:8e:a4:fa:7f:a3:9b:a4:30:76:24:36:54: 53:a9:26:9c:2b:60:ee:2b:da:4a:44:83:83:94:66: d5:b1:e7:aa:23:07:88:14:6d:e5:1b:27:d1:f1:d8: 6b:f8:aa:f8:6b:d0:48:da:58:b6:f2:1a:cc:f2:c5: c2:2c:fd:88:6b:af:9e:ef:80:9f:e5:87:fd:0d:23: db:a0:3b:2e:af:23:f3:69:c8:f0:80:87:13:14:ad: a7:b8:3b:9a:24:85:bd:e8:5e:02:b1:7f:3d:6b:1a: 3c:53:18:e4:26:8d:9d:2e:6e:b4:35:87:3c:2a:25: 72:4c:0b:9d:8d:77:a3:ff:14:5b:3a:81:2b:89:76: 13:ac:66:76:82:35:9f:ee:35:34:73:2f:d5:32:2f: 5c:bb:52:bf:93:b5:f6:6b:3e:99:e2:6a:a4:3c:5d: 65:3c:e4:30:2a:d5:9e:aa:e3:a4:4e:63:e4:c1:48: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9F:D2:25:04:66:FE:E4:27:A0:F8:55:28:41:C8:9C:9C:E1:BE:2D X509v3 Authority Key Identifier: keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2b:0e:cf:d8:c6:fe:74:02:98:f2:00:81:e8:77:e7:34:a6: 21:2f:98:da:e4:b2:a8:0d:19:d7:9c:b7:2e:d2:a8:ea:8e:e5: 41:0f:9a:eb:14:fc:5c:fa:ff:a4:19:4c:6d:52:f5:77:74:03: 95:61:e3:2e:a8:b6:40:81:c3:e7:d6:4e:da:6e:43:90:26:f6: 67:17:61:ef:53:bd:3d:2d:d6:56:2d:f4:91:d0:22:2c:b9:18: dc:04:3d:38:fe:07:47:76:38:ed:ce:e4:29:21:7c:e2:a7:ec: d9:46:09:73:48:5f:2d:5c:e7:18:23:06:fd:54:2d:c2:e2:99: 7e:95:9c:f2:cd:93:d1:a2:a1:75:32:95:10:ab:77:04:1a:d6: 00:e5:07:fe:b7:a9:ad:dd:b8:00:06:38:99:f9:39:59:95:b4: 2d:3a:c9:55:3b:07:0f:e2:d2:c7:da:90:78:90:3b:9f:87:92: 09:93:24:43:76:be:a6:77:46:ed:3d:9e:64:22:4a:c8:1d:fe: db:15:4a:9f:15:f6:34:1a:47:fc:c6:65:c5:e4:fb:bd:d2:93: ee:f0:a9:66:9e:e7:29:94:35:47:06:f4:69:91:24:f2:12:a3: 29:dc:b6:f5:0d:ca:4f:9a:b6:52:66:bd:af:55:69:49:72:ed: b8:0d:7b:68 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFz/RrGGfw47F04rzbtqEwHB1msIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4 OEZGMzZFNTAeFw0yNTExMDQwOTE3NTVaFw0yNTExMDkwOTI2NTVaMDMxMTAvBgNV BAMTKDY4OUZEMjI1MDQ2NkZFRTQyN0EwRjg1NTI4NDFDODlDOUNFMUJFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYm6itIWZ2XKUADWZdtuhuDor3 g2rwpw0TfWl8IfNkhK6LqWGTGeD1cR0KDvbDZDpz1P8Q8U3YQFlpzkOtJSJ/+w9R 3kBhXYOqszXwno6k+n+jm6QwdiQ2VFOpJpwrYO4r2kpEg4OUZtWx56ojB4gUbeUb J9Hx2Gv4qvhr0EjaWLbyGszyxcIs/Yhrr57vgJ/lh/0NI9ugOy6vI/NpyPCAhxMU rae4O5okhb3oXgKxfz1rGjxTGOQmjZ0ubrQ1hzwqJXJMC52Nd6P/FFs6gSuJdhOs ZnaCNZ/uNTRzL9UyL1y7Ur+TtfZrPpniaqQ8XWU85DAq1Z6q46ROY+TBSDJLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaJ/SJQRm/uQnoPhVKEHInJzhvi0wHwYDVR0j BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5 QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3 OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzJBQTk0OTIzMzI1MTg0OUI1Rjc5MDg1 RkE4MTQwNkU1ODhGRjM2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaKw7P2Mb+dAKY8gCB6HfnNKYh L5ja5LKoDRnXnLcu0qjqjuVBD5rrFPxc+v+kGUxtUvV3dAOVYeMuqLZAgcPn1k7a bkOQJvZnF2HvU709LdZWLfSR0CIsuRjcBD04/gdHdjjtzuQpIXzip+zZRglzSF8t XOcYIwb9VC3C4pl+lZzyzZPRoqF1MpUQq3cEGtYA5Qf+t6mt3bgABjiZ+TlZlbQt OslVOwcP4tLH2pB4kDufh5IJkyRDdr6md0btPZ5kIkrIHf7bFUqfFfY0Gkf8xmXF 5Pu90pPu8KlmnucplDVHBvRpkSTyEqMp3Lb1DcpPmrZSZr2vVWlJcu24DXto -----END CERTIFICATE-----Generated at Wed Nov 5 14:34:54 2025 by rpki-client