$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft File: 476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft (raw, json) Hash identifier: T6lvhy6sAjNXuYw+rxBfVCECGBbZ8xEgd0R/qMKF8QM= Subject key identifier: 2F:DD:30:4D:D2:A0:AE:5B:E9:36:D1:29:6B:CC:D8:58:C5:1F:24:8F Authority key identifier: 47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97 Certificate issuer: /CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97 Certificate serial: 2A74CD4A4C8CF7CBBB9A4E8018520BACED5F7343 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft Manifest number: 0131 Signing time: Wed 05 Nov 2025 03:07:32 +0000 Manifest this update: Wed 05 Nov 2025 03:02:32 +0000 Manifest next update: Sun 09 Nov 2025 22:30:32 +0000 Files and hashes: 1: 476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl (hash: gYNRUKLxd5L8YbiqQeDPHh9uG0zdvT8bMiyBsiVgROc=) 2: 34352e3232382e35362e302f32322d3235203d3e20323632313936.roa (hash: 1paSyIbcNo09aB8KkRmC8FkyosP+fpYmegEmdh3Smck=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:74:cd:4a:4c:8c:f7:cb:bb:9a:4e:80:18:52:0b:ac:ed:5f:73:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97 Validity Not Before: Nov 5 03:02:32 2025 GMT Not After : Nov 9 22:30:32 2025 GMT Subject: CN=2FDD304DD2A0AE5BE936D1296BCCD858C51F248F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:12:45:7a:66:fd:e3:39:86:31:4d:39:9f: c5:f5:4c:d7:db:e0:55:4e:ae:b9:5a:36:95:b6:42: 28:b7:fc:7b:38:07:1c:b2:12:a3:dd:28:07:5f:34: cb:d5:1f:d1:a5:6c:73:7b:cd:f3:3f:3e:5a:37:6a: 7e:12:c5:00:e5:a6:2b:a1:f6:c2:cf:e2:6f:bb:11: ff:90:dc:5b:ce:d4:7b:84:3e:11:e5:e2:14:d1:c7: 8c:8b:fc:89:86:51:71:67:17:bc:54:a8:42:44:90: 10:00:6c:46:64:35:b4:7a:48:f7:0d:bf:90:7d:a7: d5:b6:07:49:d1:d7:9a:1c:e3:8e:db:ba:e7:e2:d1: 2e:44:e5:83:8a:4c:5b:02:6c:3e:e5:6e:6b:38:8e: 07:68:e3:c4:03:6b:5a:09:57:40:1b:4f:d3:8e:3f: 37:40:bb:b6:4e:8c:22:0b:5f:dd:4e:91:2e:ec:a6: a4:a9:fc:8e:82:ee:89:81:d5:ec:55:df:6f:90:f2: b4:ad:03:16:f3:38:5d:0f:af:78:95:b7:a1:75:01: ec:ef:73:59:da:8e:40:a9:44:18:b8:14:21:7f:77: f4:9b:ef:bd:03:90:75:37:99:a6:d8:80:82:5e:f0: 1f:58:f9:47:69:10:75:6c:e4:32:ce:c7:0c:c5:d1: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DD:30:4D:D2:A0:AE:5B:E9:36:D1:29:6B:CC:D8:58:C5:1F:24:8F X509v3 Authority Key Identifier: keyid:47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:77:3a:54:b0:7f:3b:f8:ea:09:cc:94:02:92:53:dc:e4:23: 26:74:67:65:d4:9b:91:23:42:8f:7c:ff:12:69:f8:c7:13:b4: b6:3b:3d:86:5e:f9:77:db:30:f0:3e:a8:8c:7b:9e:27:06:1e: 4d:42:78:c0:c1:15:5a:91:dc:cd:e0:9a:d2:97:b6:d3:4d:0f: 47:0c:1f:44:9d:a8:e3:3b:73:91:31:32:80:96:8e:ce:b9:b5: 33:7f:78:41:22:d7:6b:5c:c8:9c:fb:f8:b9:53:61:e6:df:ab: 68:fc:c2:1b:3e:cf:84:ed:69:bd:94:22:cb:02:c2:8c:d9:94: 95:59:f9:fd:bb:46:8c:ae:d8:f9:e0:0e:1d:b0:9b:28:f1:8d: 46:33:3d:27:57:25:7c:d2:4c:65:e4:10:55:f0:c1:0b:9a:60: c3:4f:22:4d:25:fb:58:07:0b:92:7c:95:39:35:41:55:a0:b4: 2c:71:0f:30:2d:e7:f7:c3:f8:51:24:75:8b:c8:fd:d3:3b:ff: 8a:7e:b4:39:84:63:ae:0a:97:92:9a:14:54:e6:f2:1d:39:e9: 13:5f:c7:7e:33:25:88:28:7d:c4:e6:1d:ee:83:2b:d0:80:a2: 5d:6f:88:82:6a:e8:de:53:00:8b:08:43:b8:28:70:63:f3:60: ce:1e:ce:9c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKnTNSkyM98u7mk6AGFILrO1fc0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2RUI2MUYxN0I0OUNEODhBMERCNkFCRUQyRTk2NkE2 MUFBQUE5NzAeFw0yNTExMDUwMzAyMzJaFw0yNTExMDkyMjMwMzJaMDMxMTAvBgNV BAMTKDJGREQzMDRERDJBMEFFNUJFOTM2RDEyOTZCQ0NEODU4QzUxRjI0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ShJFemb94zmGMU05n8X1TNfb 4FVOrrlaNpW2Qii3/Hs4BxyyEqPdKAdfNMvVH9GlbHN7zfM/Plo3an4SxQDlpiuh 9sLP4m+7Ef+Q3FvO1HuEPhHl4hTRx4yL/ImGUXFnF7xUqEJEkBAAbEZkNbR6SPcN v5B9p9W2B0nR15oc447buufi0S5E5YOKTFsCbD7lbms4jgdo48QDa1oJV0AbT9OO PzdAu7ZOjCILX91OkS7spqSp/I6C7omB1exV32+Q8rStAxbzOF0Pr3iVt6F1Aezv c1najkCpRBi4FCF/d/Sb770DkHU3mabYgIJe8B9Y+UdpEHVs5DLOxwzF0c55AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUL90wTdKgrlvpNtEpa8zYWMUfJI8wHwYDVR0j BBgwFoAUR262Hxe0nNiKDbar7S6WamGqqpcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQUJFREZDQjJGMkVEMTIwRjA4NTFDRTJFODdCRDczNkVG ODE5MEMxNzNBQkM4NURCNUExMDQ3RTU4MTg3MTM2LzAvNDc2RUI2MUYxN0I0OUNE ODhBMERCNkFCRUQyRTk2NkE2MUFBQUE5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZFQjYxRjE3QjQ5Q0Q4OEEw REI2QUJFRDJFOTY2QTYxQUFBQTk3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0FCRURGQ0IyRjJFRDEyMEYwODUxQ0UyRTg3QkQ3MzZFRjgxOTBDMTcz QUJDODVEQjVBMTA0N0U1ODE4NzEzNi8wLzQ3NkVCNjFGMTdCNDlDRDg4QTBEQjZB QkVEMkU5NjZBNjFBQUFBOTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCydzpUsH87+OoJzJQCklPc5CMm dGdl1JuRI0KPfP8SafjHE7S2Oz2GXvl32zDwPqiMe54nBh5NQnjAwRVakdzN4JrS l7bTTQ9HDB9EnajjO3ORMTKAlo7OubUzf3hBItdrXMic+/i5U2Hm36to/MIbPs+E 7Wm9lCLLAsKM2ZSVWfn9u0aMrtj54A4dsJso8Y1GMz0nVyV80kxl5BBV8MELmmDD TyJNJftYBwuSfJU5NUFVoLQscQ8wLef3w/hRJHWLyP3TO/+KfrQ5hGOuCpeSmhRU 5vIdOekTX8d+MyWIKH3E5h3ugyvQgKJdb4iCaujeUwCLCEO4KHBj82DOHs6c -----END CERTIFICATE-----Generated at Wed Nov 5 18:35:01 2025 by rpki-client