$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft File: 2AC489AA343746243A2A3A97A473CEE27756EAA1.mft (raw, json) Hash identifier: VanrJ8DZUCQ4a5WgifCu8529t9vUjX0fvnO0Mo2ipfE= Subject key identifier: 19:94:3E:9E:F9:47:9B:45:DE:65:7E:BA:6D:00:37:18:AA:A2:FC:A1 Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 Certificate issuer: /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Certificate serial: 03AFE98AD647460A590F0475DBD1620AE65C3DB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 16:47:03 +0000 Manifest this update: Tue 04 Nov 2025 16:42:03 +0000 Manifest next update: Mon 10 Nov 2025 15:01:03 +0000 Files and hashes: 1: 323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa (hash: Aq19bHGezD8Uw7TFu4tX5et4obxnS6jNdf+zmERjlBI=) 2: 2AC489AA343746243A2A3A97A473CEE27756EAA1.crl (hash: YEl5nDCZfXkWgwvznRbue+1M7Cgcv59o9I4hMpZpafw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:af:e9:8a:d6:47:46:0a:59:0f:04:75:db:d1:62:0a:e6:5c:3d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Validity Not Before: Nov 4 16:42:03 2025 GMT Not After : Nov 10 15:01:03 2025 GMT Subject: CN=19943E9EF9479B45DE657EBA6D003718AAA2FCA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:e5:f8:0e:4b:15:7e:09:36:c7:37:39:65: cd:3c:32:96:b6:88:7c:6a:17:ff:24:02:6a:bb:e3: 36:74:1c:9f:5f:a2:3f:b8:54:7f:f3:32:38:05:68: 84:e5:52:d0:8f:c5:5c:09:64:58:14:3a:dd:b2:4c: 57:93:b8:af:15:86:80:fd:ff:f5:8a:2c:f0:c9:d4: 03:4e:40:43:8e:1b:9d:50:d5:1e:e5:45:12:4e:6a: 4c:12:bb:9d:06:40:73:92:3f:22:d7:55:a2:49:40: 95:06:02:db:b3:0a:e2:cf:a2:13:da:9d:e7:5e:ba: 0a:e4:b8:a7:6a:d0:7e:cc:1e:59:c1:fe:fc:b8:ab: e3:45:72:f7:1d:a1:c3:69:8f:36:65:d3:90:a2:94: e4:cd:7e:6d:e5:00:eb:20:2e:1b:de:60:e2:c8:c6: c6:c0:5e:46:ba:f9:c0:6a:26:b4:a0:f6:ca:7e:6e: ae:44:19:9c:37:a5:e8:e5:c9:f0:c4:63:2c:c6:4c: 8a:0c:68:b1:a6:3f:32:ff:98:1c:60:bf:99:14:cb: 69:4a:18:94:b2:19:58:a9:d9:60:3f:70:fd:9e:ae: 29:04:c1:1e:18:5a:bb:dc:e9:8e:f6:d5:b4:61:a2: eb:5b:43:90:7c:05:a3:63:bb:77:71:7b:ca:42:52: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:3E:9E:F9:47:9B:45:DE:65:7E:BA:6D:00:37:18:AA:A2:FC:A1 X509v3 Authority Key Identifier: keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a0:b2:36:d9:65:3c:50:a5:67:ce:c0:05:3b:c7:c0:87:1c: 5f:3a:e6:46:2d:13:2a:ff:f2:c8:74:0f:17:cb:60:a0:69:fe: ba:f3:c6:2c:17:62:9a:8c:9e:23:69:05:f7:98:49:8e:79:83: b2:e4:d8:c2:4a:26:47:3c:c7:7b:d6:a5:de:69:ad:4d:f5:7f: 0c:34:81:db:d0:90:cb:20:1f:50:c4:77:03:aa:13:55:be:af: c1:4e:6c:8d:2a:eb:0a:c3:37:4b:62:8d:75:5d:9c:a2:d5:c4: 61:02:20:5d:2d:67:63:d8:63:9b:f5:37:c6:71:45:b3:72:14: ec:44:ff:bd:db:6b:83:b8:06:b1:44:eb:08:5f:6f:c9:12:20: ed:49:53:29:37:e1:6e:78:a6:d5:44:fb:3a:c5:1a:0f:3c:9a: 59:7b:54:64:42:bc:6b:72:f1:1b:0d:14:1b:6f:79:83:c7:20: a0:b1:2f:51:25:0d:c3:c9:0f:c8:98:5f:ab:2d:6f:e7:3e:1a: c8:b5:61:62:46:71:b5:3a:9b:d3:85:b3:66:fb:6b:a9:ea:ef: 5a:c2:e8:70:73:8d:ce:6a:cb:74:34:7e:46:ba:49:6e:49:ce: f3:02:3e:79:48:a9:0d:82:8c:53:e2:05:e7:11:14:e7:04:84: d0:ae:87:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUA6/pitZHRgpZDwR129FiCuZcPbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNDg5QUEzNDM3NDYyNDNBMkEzQTk3QTQ3M0NFRTI3 NzU2RUFBMTAeFw0yNTExMDQxNjQyMDNaFw0yNTExMTAxNTAxMDNaMDMxMTAvBgNV BAMTKDE5OTQzRTlFRjk0NzlCNDVERTY1N0VCQTZEMDAzNzE4QUFBMkZDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ouX4DksVfgk2xzc5Zc08Mpa2 iHxqF/8kAmq74zZ0HJ9foj+4VH/zMjgFaITlUtCPxVwJZFgUOt2yTFeTuK8VhoD9 //WKLPDJ1ANOQEOOG51Q1R7lRRJOakwSu50GQHOSPyLXVaJJQJUGAtuzCuLPohPa nedeugrkuKdq0H7MHlnB/vy4q+NFcvcdocNpjzZl05CilOTNfm3lAOsgLhveYOLI xsbAXka6+cBqJrSg9sp+bq5EGZw3pejlyfDEYyzGTIoMaLGmPzL/mBxgv5kUy2lK GJSyGVip2WA/cP2erikEwR4YWrvc6Y721bRhoutbQ5B8BaNju3dxe8pCUg/1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGZQ+nvlHm0XeZX66bQA3GKqi/KEwHwYDVR0j BBgwFoAUKsSJqjQ3RiQ6KjqXpHPO4ndW6qEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NzU2MDI3QzAyMUQyRDY1RDkyNzNBNDAzOEVBNDIzRDc2 MDhDMDUyMTFFMzY0ODE0NjBCOEQyNzYyQkM3MEY3LzAvMkFDNDg5QUEzNDM3NDYy NDNBMkEzQTk3QTQ3M0NFRTI3NzU2RUFBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUM0ODlBQTM0Mzc0NjI0M0Ey QTNBOTdBNDczQ0VFMjc3NTZFQUExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDc1NjAyN0MwMjFEMkQ2NUQ5MjczQTQwMzhFQTQyM0Q3NjA4QzA1MjEx RTM2NDgxNDYwQjhEMjc2MkJDNzBGNy8wLzJBQzQ4OUFBMzQzNzQ2MjQzQTJBM0E5 N0E0NzNDRUUyNzc1NkVBQTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcoLI22WU8UKVnzsAFO8fAhxxf OuZGLRMq//LIdA8Xy2Cgaf6688YsF2KajJ4jaQX3mEmOeYOy5NjCSiZHPMd71qXe aa1N9X8MNIHb0JDLIB9QxHcDqhNVvq/BTmyNKusKwzdLYo11XZyi1cRhAiBdLWdj 2GOb9TfGcUWzchTsRP+922uDuAaxROsIX2/JEiDtSVMpN+FueKbVRPs6xRoPPJpZ e1RkQrxrcvEbDRQbb3mDxyCgsS9RJQ3DyQ/ImF+rLW/nPhrItWFiRnG1OpvThbNm +2up6u9awuhwc43Oast0NH5GukluSc7zAj55SKkNgoxT4gXnERTnBITQroep -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:34 2025 by rpki-client