$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft File: 49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft (raw, json) Hash identifier: oSoZ3KA5oTTy8XvbHtqoobNliPdTDCFoCWN5dkTIpkc= Subject key identifier: 64:8F:00:8B:FF:AA:40:59:EB:BA:C7:BA:62:79:65:0A:88:DC:98:B1 Authority key identifier: 49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15 Certificate issuer: /CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15 Certificate serial: 22D871963A278B95B7E0E895D7765922E53E2B37 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft Manifest number: 0139 Signing time: Wed 05 Nov 2025 13:28:10 +0000 Manifest this update: Wed 05 Nov 2025 13:23:10 +0000 Manifest next update: Sun 09 Nov 2025 13:37:10 +0000 Files and hashes: 1: 49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl (hash: 6sVLgqKLRxrhgy+kPnqe3M84zjzhv/O/KpYRQ/SWqKw=) 2: 3230312e3138322e38302e302f32322d3234203d3e203532333237.roa (hash: vQQmEqYs+W6UnR+05jheauJ/X5jaLJdhrOQgYmHgMKk=) 3: 323830333a343432303a3a2f33322d3438203d3e203532333237.roa (hash: QtuC3rxfuetIPCLBP4hbSiywC5NqM12DmCka6hbGrFk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d8:71:96:3a:27:8b:95:b7:e0:e8:95:d7:76:59:22:e5:3e:2b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15 Validity Not Before: Nov 5 13:23:10 2025 GMT Not After : Nov 9 13:37:10 2025 GMT Subject: CN=648F008BFFAA4059EBBAC7BA6279650A88DC98B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:b4:75:64:e9:08:5c:e6:53:bb:48:94:bf: 5f:6f:e9:d0:86:a1:cb:65:6e:dd:fa:29:84:33:f2: 49:d6:18:ed:65:03:60:22:37:2a:dd:45:b5:db:da: 9b:52:ba:4e:fc:21:32:13:17:5a:02:b2:01:0b:0c: 14:31:cf:22:39:b8:54:55:fc:76:62:c5:b3:38:55: c1:0e:23:00:36:86:61:27:c9:0e:7e:ea:e6:21:74: 40:4d:18:e6:cb:82:56:6d:b4:63:9b:da:2e:66:f4: d6:00:a2:3e:ea:1f:57:a3:e9:5d:fd:34:b0:77:36: 1e:31:3c:cf:4b:05:2d:82:40:ff:3b:e3:22:ca:2b: c4:aa:45:4f:fd:cb:d4:7c:44:de:9d:31:cb:68:67: 04:a5:4e:4f:9e:ee:6f:4a:d9:a1:b3:5f:7a:2b:c0: 70:fe:94:29:3b:d5:6d:1b:26:a5:50:ed:e1:b9:bc: d5:1f:aa:b6:42:f1:a7:73:5e:03:a6:5a:ce:53:fc: d9:2d:15:44:fb:f4:5e:95:19:c2:64:38:22:3a:ad: fd:0e:ce:50:30:ef:c5:64:b6:02:0c:00:10:1a:3c: 9c:e8:f9:e7:fe:bc:68:1e:21:55:07:34:61:51:e6: d1:0c:67:ed:dc:a0:13:6e:d9:35:a5:e9:98:69:4f: 0c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8F:00:8B:FF:AA:40:59:EB:BA:C7:BA:62:79:65:0A:88:DC:98:B1 X509v3 Authority Key Identifier: keyid:49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f4:dd:6d:8b:f4:3d:8d:d8:0e:a2:a9:47:0b:f5:98:c7:1a: 57:d2:be:81:c8:7c:3e:b3:5b:74:4d:6b:2a:3f:3e:63:62:b9: 26:f1:1f:27:60:10:2e:24:ca:85:78:c5:19:10:cf:2c:66:5f: 1c:87:f5:3e:c4:45:18:70:4d:03:72:25:19:8a:b1:82:b4:d9: 79:85:09:b4:5b:d8:8e:f2:11:c1:87:9e:2f:31:16:c7:26:0c: 4e:17:d4:7e:f5:ad:74:23:b1:fc:97:ab:cb:b6:47:50:96:d2: 5a:93:f9:9e:1c:bf:33:bf:50:a1:4e:69:3c:c1:9c:3a:ea:c0: 9d:ec:eb:85:20:0e:20:6a:ad:a2:7d:01:16:aa:83:6a:8b:71: 4a:4e:a7:d9:25:17:d7:4d:12:11:86:74:50:8d:17:6d:fd:f4: 51:fb:f5:82:6f:67:11:11:e0:df:3f:51:c9:5b:62:49:b9:30: c0:f6:91:9b:92:46:42:7f:a2:ef:3b:57:58:43:f5:69:e8:83: 3f:a1:5c:10:27:1c:cc:a4:e5:75:a9:32:48:9f:d8:3e:d6:e8: 7b:3f:12:76:71:e8:32:5d:17:54:0e:de:89:cf:35:9f:fd:06: de:23:89:53:b1:c7:94:07:c3:dc:a7:3b:f1:6d:a7:7d:78:5e: 36:e9:2e:47 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIthxljoni5W34OiV13ZZIuU+KzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlEOENDRUE4MDQ5ODYyMjE1MDQ1RjQ1RUYwRDg3QzRD QjBBNkYxNTAeFw0yNTExMDUxMzIzMTBaFw0yNTExMDkxMzM3MTBaMDMxMTAvBgNV BAMTKDY0OEYwMDhCRkZBQTQwNTlFQkJBQzdCQTYyNzk2NTBBODhEQzk4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3rR1ZOkIXOZTu0iUv19v6dCG octlbt36KYQz8knWGO1lA2AiNyrdRbXb2ptSuk78ITITF1oCsgELDBQxzyI5uFRV /HZixbM4VcEOIwA2hmEnyQ5+6uYhdEBNGObLglZttGOb2i5m9NYAoj7qH1ej6V39 NLB3Nh4xPM9LBS2CQP874yLKK8SqRU/9y9R8RN6dMctoZwSlTk+e7m9K2aGzX3or wHD+lCk71W0bJqVQ7eG5vNUfqrZC8adzXgOmWs5T/NktFUT79F6VGcJkOCI6rf0O zlAw78VktgIMABAaPJzo+ef+vGgeIVUHNGFR5tEMZ+3coBNu2TWl6ZhpTwy3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZI8Ai/+qQFnruse6YnllCojcmLEwHwYDVR0j BBgwFoAUSdjM6oBJhiIVBF9F7w2HxMsKbxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NjBEMjdFOUZDOTczRTg5N0IzRDIyM0ZBQ0ZEOTUxQzE5 ODQ5OEJFRTY3RDYxRDkyNjc4N0UzNUZCOUI5QjI1LzAvNDlEOENDRUE4MDQ5ODYy MjE1MDQ1RjQ1RUYwRDg3QzRDQjBBNkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUQ4Q0NFQTgwNDk4NjIyMTUw NDVGNDVFRjBEODdDNENCMEE2RjE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDYwRDI3RTlGQzk3M0U4OTdCM0QyMjNGQUNGRDk1MUMxOTg0OThCRUU2 N0Q2MUQ5MjY3ODdFMzVGQjlCOUIyNS8wLzQ5RDhDQ0VBODA0OTg2MjIxNTA0NUY0 NUVGMEQ4N0M0Q0IwQTZGMTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA09N1ti/Q9jdgOoqlHC/WYxxpX 0r6ByHw+s1t0TWsqPz5jYrkm8R8nYBAuJMqFeMUZEM8sZl8ch/U+xEUYcE0DciUZ irGCtNl5hQm0W9iO8hHBh54vMRbHJgxOF9R+9a10I7H8l6vLtkdQltJak/meHL8z v1ChTmk8wZw66sCd7OuFIA4gaq2ifQEWqoNqi3FKTqfZJRfXTRIRhnRQjRdt/fRR +/WCb2cREeDfP1HJW2JJuTDA9pGbkkZCf6LvO1dYQ/Vp6IM/oVwQJxzMpOV1qTJI n9g+1uh7PxJ2cegyXRdUDt6JzzWf/QbeI4lTsceUB8Pcpzvxbad9eF426S5H -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:26 2025 by rpki-client