$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft File: 2C105A8B66A79B278FD2A38A1572477F4D886617.mft (raw, json) Hash identifier: qV0I+0SdiQgYUCyJvKWVXEvzgaYEU8ZkgpD6IigzQ78= Subject key identifier: 3B:7D:7F:51:36:C9:DF:6A:6E:F2:E6:66:A6:F1:4D:4D:77:3C:BC:0C Authority key identifier: 2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17 Certificate issuer: /CN=2C105A8B66A79B278FD2A38A1572477F4D886617 Certificate serial: 6B4D1AB6B0D31AC3639F074E450458EBEDD98ABD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft Manifest number: 0137 Signing time: Mon 03 Nov 2025 19:40:23 +0000 Manifest this update: Mon 03 Nov 2025 19:35:23 +0000 Manifest next update: Sat 08 Nov 2025 04:41:23 +0000 Files and hashes: 1: 34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa (hash: 0XCOQVmd5VW2XH12KWkx4KTlb9nY97UoYJI9T7LmcSg=) 2: 34352e3137342e3133302e302f32332d3234203d3e20323637383230.roa (hash: hzBOz0S7BLd9SBcUzF9bJoc85KxrJ2VYXbo5yqsa+Qk=) 3: 2C105A8B66A79B278FD2A38A1572477F4D886617.crl (hash: pcqYwUu+0uTZFnLsZ9kq0EBEtWTfNDVv9EI3niSrwts=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 04:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:1a:b6:b0:d3:1a:c3:63:9f:07:4e:45:04:58:eb:ed:d9:8a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C105A8B66A79B278FD2A38A1572477F4D886617 Validity Not Before: Nov 3 19:35:23 2025 GMT Not After : Nov 8 04:41:23 2025 GMT Subject: CN=3B7D7F5136C9DF6A6EF2E666A6F14D4D773CBC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:fd:ff:c4:73:4c:2f:53:dc:de:34:a0:3c: 9a:a7:f4:75:ab:78:4e:5b:fe:d4:c1:9f:83:ca:b7: a2:48:7b:f2:ec:4c:2f:4f:57:f9:71:f4:0b:7a:87: eb:1b:8c:7c:43:37:61:52:bf:80:9e:ee:34:33:f2: a2:ad:11:50:4b:70:a6:fe:08:76:84:23:41:19:05: 73:39:84:3b:55:1b:9c:fe:8b:2e:71:0c:23:a9:59: 1d:c0:7e:fa:bb:45:a2:2d:51:df:50:a8:9f:e6:b5: 3d:ca:a7:68:9c:fa:db:53:bc:f5:f1:ed:05:b4:75: 99:a9:12:6f:c2:be:1c:f8:d4:32:ee:61:c4:f9:11: ec:a0:6c:02:13:f9:d7:ad:09:f8:0d:be:4b:e6:b4: 03:da:e1:07:da:35:84:cb:af:7c:7d:00:1e:25:f6: d4:3f:31:08:c5:b2:e9:62:e6:24:a0:f6:6b:44:1a: 42:9e:68:94:8e:d0:d0:59:23:be:aa:a8:25:be:9c: 05:ae:95:52:4a:78:22:01:65:59:5b:92:90:f1:79: d9:0c:dd:e7:bc:5c:8c:1a:ec:c4:ef:4c:34:2b:af: a8:bc:35:f9:df:d2:27:54:33:3e:7b:e6:75:04:36: 32:36:cf:13:17:53:0d:73:56:84:75:94:66:32:e1: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7D:7F:51:36:C9:DF:6A:6E:F2:E6:66:A6:F1:4D:4D:77:3C:BC:0C X509v3 Authority Key Identifier: keyid:2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4a:fe:0d:04:f8:a1:69:6d:db:da:f6:96:d6:ee:4b:33:fe: 21:19:9f:38:31:22:88:18:93:f5:11:5e:87:80:d8:aa:bc:74: 61:4a:55:35:de:b9:3a:93:7a:45:e6:ee:75:9f:9c:e0:fe:2e: 09:58:21:e3:07:9a:d8:95:a9:92:88:99:f6:46:e7:0f:0d:1d: 57:0c:0e:2a:bd:d5:9d:9d:45:f6:ae:9c:e6:a9:e7:da:a2:0c: a8:47:57:b0:5f:a0:8c:88:00:91:b5:75:04:3e:63:dc:aa:89: a5:c2:08:3d:9b:69:c9:cc:df:bd:23:07:2a:64:39:1a:96:ec: 2d:df:33:92:d0:29:1e:ec:ad:e1:20:33:62:b8:92:f7:f3:0d: a4:fd:66:ac:12:92:fc:33:20:a4:9f:e5:57:8b:2a:77:21:1c: 2b:4f:55:e1:65:ea:9a:b5:ee:cb:2a:d8:d0:d9:bb:c6:4a:b9: 94:30:63:ef:7e:42:e4:b0:1a:e8:dc:13:ed:bf:60:67:00:5e: f6:23:fd:f4:d5:93:88:d2:87:c8:1f:f8:c1:5a:ec:25:55:e9: 6c:50:75:8c:7c:1f:85:19:70:25:39:c2:39:14:50:38:85:4d: dd:16:4d:8d:c9:15:f2:26:6d:86:19:02:bc:59:f1:60:b2:fd: e9:a8:9d:8e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa00atrDTGsNjnwdORQRY6+3Zir0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMDVBOEI2NkE3OUIyNzhGRDJBMzhBMTU3MjQ3N0Y0 RDg4NjYxNzAeFw0yNTExMDMxOTM1MjNaFw0yNTExMDgwNDQxMjNaMDMxMTAvBgNV BAMTKDNCN0Q3RjUxMzZDOURGNkE2RUYyRTY2NkE2RjE0RDRENzczQ0JDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZc/3/xHNML1Pc3jSgPJqn9HWr eE5b/tTBn4PKt6JIe/LsTC9PV/lx9At6h+sbjHxDN2FSv4Ce7jQz8qKtEVBLcKb+ CHaEI0EZBXM5hDtVG5z+iy5xDCOpWR3Afvq7RaItUd9QqJ/mtT3Kp2ic+ttTvPXx 7QW0dZmpEm/Cvhz41DLuYcT5EeygbAIT+detCfgNvkvmtAPa4QfaNYTLr3x9AB4l 9tQ/MQjFsuli5iSg9mtEGkKeaJSO0NBZI76qqCW+nAWulVJKeCIBZVlbkpDxedkM 3ee8XIwa7MTvTDQrr6i8Nfnf0idUMz575nUENjI2zxMXUw1zVoR1lGYy4Uk1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUO31/UTbJ32pu8uZmpvFNTXc8vAwwHwYDVR0j BBgwFoAULBBai2anmyeP0qOKFXJHf02IZhcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRDlDNzQ3MzI5NDJGNjRFREM3MDI4RTlEN0IwNUZCRTNC NUY1NEM1QThCRUMxNDUyOTk3OTY3ODhGNjgzMzA5LzAvMkMxMDVBOEI2NkE3OUIy NzhGRDJBMzhBMTU3MjQ3N0Y0RDg4NjYxNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzEwNUE4QjY2QTc5QjI3OEZE MkEzOEExNTcyNDc3RjREODg2NjE3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0Q5Qzc0NzMyOTQyRjY0RURDNzAyOEU5RDdCMDVGQkUzQjVGNTRDNUE4 QkVDMTQ1Mjk5Nzk2Nzg4RjY4MzMwOS8wLzJDMTA1QThCNjZBNzlCMjc4RkQyQTM4 QTE1NzI0NzdGNEQ4ODY2MTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMSv4NBPihaW3b2vaW1u5LM/4h GZ84MSKIGJP1EV6HgNiqvHRhSlU13rk6k3pF5u51n5zg/i4JWCHjB5rYlamSiJn2 RucPDR1XDA4qvdWdnUX2rpzmqefaogyoR1ewX6CMiACRtXUEPmPcqomlwgg9m2nJ zN+9IwcqZDkaluwt3zOS0Cke7K3hIDNiuJL38w2k/WasEpL8MyCkn+VXiyp3IRwr T1XhZeqate7LKtjQ2bvGSrmUMGPvfkLksBro3BPtv2BnAF72I/301ZOI0ofIH/jB WuwlVelsUHWMfB+FGXAlOcI5FFA4hU3dFk2NyRXyJm2GGQK8WfFgsv3pqJ2O -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:16 2025 by rpki-client