$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft File: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft (raw, json) Hash identifier: p6C/MkoK+F7OLNrVG2kZj36gfXn4gvGkfUEZ1C+FaX0= Subject key identifier: 72:C4:7C:D1:86:93:24:B9:90:D8:6D:3D:09:A0:0B:E7:5C:0A:3C:18 Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 Certificate issuer: /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Certificate serial: 24FA2A7E3220A7282D6EB61FD14E9C18D8084F20 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 15:06:05 +0000 Manifest this update: Tue 04 Nov 2025 15:01:05 +0000 Manifest next update: Sun 09 Nov 2025 12:42:05 +0000 Files and hashes: 1: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl (hash: 33BsYIAoaXSpCaSm44/KxIS0eoLsNbMhPgxbrj7yme0=) 2: 323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (hash: 0oKhwsbvlRw+epUBcLEJDUcYeM+rU2io5fVuH6LDEi4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fa:2a:7e:32:20:a7:28:2d:6e:b6:1f:d1:4e:9c:18:d8:08:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Validity Not Before: Nov 4 15:01:05 2025 GMT Not After : Nov 9 12:42:05 2025 GMT Subject: CN=72C47CD1869324B990D86D3D09A00BE75C0A3C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:5d:b7:39:6a:df:8c:e3:cf:ce:81:60:68: 4c:8d:d2:9d:5c:fa:86:11:ec:de:63:99:57:9c:46: e2:fb:2f:9d:c5:37:d2:bf:1b:8a:f5:07:60:2d:1a: 67:d2:62:e1:d7:a7:b7:06:4d:5c:20:54:5e:87:52: 4c:60:83:f7:fd:39:21:a8:8f:31:e9:e5:e1:5d:ae: b3:a3:86:16:e6:0f:87:47:5c:7f:67:70:d4:26:bb: 0d:c5:2d:f1:da:08:fb:74:03:ba:2a:3f:cf:13:cf: 0d:46:c3:de:bd:3d:5b:75:78:3b:79:de:11:e5:e5: 93:fa:ef:26:8d:fe:eb:3d:7c:77:4b:c5:f8:ef:40: ee:3a:04:36:29:45:22:c7:5c:6b:f9:ae:27:cf:b1: 36:ca:c1:4b:b3:07:47:71:b6:25:02:ee:5b:c3:8d: 97:4e:32:14:b9:50:3a:2a:2c:8d:b8:e9:da:8f:26: 85:68:d0:58:d3:c7:b2:5a:88:be:71:66:06:6a:4d: 70:b6:9f:33:7b:da:9b:d1:66:87:51:34:8a:bd:6c: 95:0d:d4:d8:3c:30:79:3a:0e:ac:1b:01:ef:55:c3: b9:27:0e:10:f5:8b:98:47:f2:07:e9:f8:44:8a:33: 4e:11:fe:ba:81:07:e2:06:80:bd:7b:91:c2:01:be: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C4:7C:D1:86:93:24:B9:90:D8:6D:3D:09:A0:0B:E7:5C:0A:3C:18 X509v3 Authority Key Identifier: keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:34:75:67:43:2b:27:24:f7:f2:6c:87:7d:bb:c6:98:5b:60: a4:29:b4:5e:1f:48:cc:cd:bb:ed:1b:d7:47:74:02:95:33:c5: e0:f6:53:55:d6:8f:27:b2:72:5e:4d:49:37:a9:f9:77:63:a1: 4a:47:b5:36:5e:5c:b5:dc:93:85:5a:b4:0f:03:8f:e6:28:2b: 5b:bb:41:f4:b0:b4:57:25:2e:5e:36:94:fa:01:0c:4a:e9:98: e2:cb:74:5a:f9:d9:3f:e2:f2:a1:a7:86:c0:17:d0:e4:0f:48: 4e:c4:fd:a4:ca:79:4d:72:25:60:9b:72:09:a3:db:ec:26:67: 4f:9b:3a:46:06:8f:f6:ce:8b:70:4f:4a:e2:95:b4:bc:45:ca: c9:65:da:24:86:7c:8d:93:3f:fe:10:80:c1:8d:5f:86:b3:16: b6:54:65:39:94:4a:33:1b:35:ce:3d:d8:e4:0b:be:e3:1e:cd: 89:21:86:65:70:12:6f:dd:ed:71:b1:70:bf:10:b8:d8:88:a5: f0:44:2f:04:70:62:7f:46:84:38:ad:21:07:2a:e2:f8:07:7f: 78:d6:0e:3c:cd:f3:ca:d3:2a:bc:65:c8:c2:50:7f:b5:9a:50: a4:bd:27:3e:51:c6:6a:97:c1:e3:94:b9:60:44:b6:fc:29:c5: af:50:3a:b6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJPoqfjIgpygtbrYf0U6cGNgITyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGRjE0MkFFNzhBN0Q5NjVGOEUyMjdERkFBNjU5RTJG RUJERTA3ODAeFw0yNTExMDQxNTAxMDVaFw0yNTExMDkxMjQyMDVaMDMxMTAvBgNV BAMTKDcyQzQ3Q0QxODY5MzI0Qjk5MEQ4NkQzRDA5QTAwQkU3NUMwQTNDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuV23OWrfjOPPzoFgaEyN0p1c +oYR7N5jmVecRuL7L53FN9K/G4r1B2AtGmfSYuHXp7cGTVwgVF6HUkxgg/f9OSGo jzHp5eFdrrOjhhbmD4dHXH9ncNQmuw3FLfHaCPt0A7oqP88Tzw1Gw969PVt1eDt5 3hHl5ZP67yaN/us9fHdLxfjvQO46BDYpRSLHXGv5rifPsTbKwUuzB0dxtiUC7lvD jZdOMhS5UDoqLI246dqPJoVo0FjTx7JaiL5xZgZqTXC2nzN72pvRZodRNIq9bJUN 1Ng8MHk6DqwbAe9Vw7knDhD1i5hH8gfp+ESKM04R/rqBB+IGgL17kcIBvmyDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcsR80YaTJLmQ2G09CaAL51wKPBgwHwYDVR0j BBgwFoAUKv8UKueKfZZfjiJ9+qZZ4v694HgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MjQ0RjY4MzVFMjJCQTI2OTk5MjgyMDNCRkI4M0FEQjVE MjQ0QTA5OUY1MzUyOEI1Rjc4RDIyOEQ2OTU5MzczLzAvMkFGRjE0MkFFNzhBN0Q5 NjVGOEUyMjdERkFBNjU5RTJGRUJERTA3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUZGMTQyQUU3OEE3RDk2NUY4 RTIyN0RGQUE2NTlFMkZFQkRFMDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDI0NEY2ODM1RTIyQkEyNjk5OTI4MjAzQkZCODNBREI1RDI0NEEwOTlG NTM1MjhCNUY3OEQyMjhENjk1OTM3My8wLzJBRkYxNDJBRTc4QTdEOTY1RjhFMjI3 REZBQTY1OUUyRkVCREUwNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBNHVnQysnJPfybId9u8aYW2Ck KbReH0jMzbvtG9dHdAKVM8Xg9lNV1o8nsnJeTUk3qfl3Y6FKR7U2Xly13JOFWrQP A4/mKCtbu0H0sLRXJS5eNpT6AQxK6Zjiy3Ra+dk/4vKhp4bAF9DkD0hOxP2kynlN ciVgm3IJo9vsJmdPmzpGBo/2zotwT0rilbS8RcrJZdokhnyNkz/+EIDBjV+Gsxa2 VGU5lEozGzXOPdjkC77jHs2JIYZlcBJv3e1xsXC/ELjYiKXwRC8EcGJ/RoQ4rSEH KuL4B3941g48zfPK0yq8ZcjCUH+1mlCkvSc+UcZql8HjlLlgRLb8KcWvUDq2 -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:25 2025 by rpki-client