$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.mft File: 222B3CF3CD749CFD33A071A688E449758651F5AE.mft (raw, json) Hash identifier: a0SnQjhu391yFwgvv/uqHdGSDb5ka5FbJTbK6+jXy9o= Subject key identifier: 6D:CA:E5:85:9C:BC:AB:11:8F:86:8D:8E:EE:FB:94:79:A4:24:8F:11 Authority key identifier: 22:2B:3C:F3:CD:74:9C:FD:33:A0:71:A6:88:E4:49:75:86:51:F5:AE Certificate issuer: /CN=222B3CF3CD749CFD33A071A688E449758651F5AE Certificate serial: 242BDD83ED901D64AE059537333AA266B82E59C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 09:31:10 +0000 Manifest this update: Wed 05 Nov 2025 09:26:10 +0000 Manifest next update: Sun 09 Nov 2025 21:19:10 +0000 Files and hashes: 1: 222B3CF3CD749CFD33A071A688E449758651F5AE.crl (hash: Qf8ydrXMOamZvrrvg137gjLzHS7hmPAO+XHZC2jqQ0Q=) 2: 3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa (hash: OFb6YF+Q+FMasExVAgkMqqSO+PyqD0vtS3emWK2zX1o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.crl rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2b:dd:83:ed:90:1d:64:ae:05:95:37:33:3a:a2:66:b8:2e:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222B3CF3CD749CFD33A071A688E449758651F5AE Validity Not Before: Nov 5 09:26:10 2025 GMT Not After : Nov 9 21:19:10 2025 GMT Subject: CN=6DCAE5859CBCAB118F868D8EEEFB9479A4248F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:16:02:40:42:4c:28:55:35:ee:fa:10:2c: 89:ea:40:50:98:06:da:53:13:2d:37:f0:52:a7:42: 77:2e:7a:34:88:0f:86:74:0e:04:00:66:71:ef:5f: f4:1e:6e:4c:02:54:67:e7:e7:f7:e1:d5:28:43:2b: 6f:e9:ca:6a:97:10:47:81:3b:fb:31:79:fe:03:f6: a7:2c:f1:0e:9b:42:bc:72:dd:45:41:54:52:aa:c9: c9:db:9e:23:41:03:1a:b3:8d:b5:74:1e:a8:82:f8: ff:f4:7b:8c:72:0f:47:6a:30:9a:af:85:e4:d2:3d: 11:74:16:5a:c6:4c:27:86:2d:c9:0a:62:57:f9:34: ff:99:08:43:e1:6e:dc:6d:ec:f5:af:29:d9:e2:e8: 1f:9a:d1:ae:ab:eb:01:e9:6b:af:89:87:79:85:8c: e1:9f:1f:9e:45:6d:2e:8c:0a:57:57:e2:d9:93:e0: 7e:c1:ce:69:4b:b5:b8:1d:75:72:b7:8c:d6:c4:1c: 57:a9:d9:1a:a5:97:e7:8a:aa:35:8b:94:e6:1c:54: 92:70:51:57:cb:68:3f:c9:bb:a9:c3:bb:a2:c0:e6: 0d:86:00:3f:3f:a3:b8:06:98:e8:10:6d:7c:9b:47: f9:40:ac:a5:08:43:31:e2:36:59:da:7b:90:0b:8c: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CA:E5:85:9C:BC:AB:11:8F:86:8D:8E:EE:FB:94:79:A4:24:8F:11 X509v3 Authority Key Identifier: keyid:22:2B:3C:F3:CD:74:9C:FD:33:A0:71:A6:88:E4:49:75:86:51:F5:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:37:fa:82:01:39:8b:68:ce:fd:79:0d:d5:15:65:5a:db: 22:b3:8a:3b:f1:28:15:0f:b8:88:6f:2c:08:d7:6b:2a:e3:51: 1f:e4:27:a1:fa:18:cc:be:9c:54:63:43:e6:69:83:19:2d:a0: 61:bb:48:94:e9:22:1c:e9:d7:ce:1a:df:5e:f8:60:88:0b:e2: f0:16:d2:2e:4d:3a:72:c0:19:e5:7e:44:2b:9c:4a:3c:e9:20: de:f8:49:03:6d:99:e1:f2:30:74:b1:0d:04:d7:7e:ca:ff:ce: 55:03:97:63:b1:d7:d5:73:41:ea:8f:94:42:de:a6:57:cb:53: 8a:d6:c7:73:16:81:ab:58:17:f2:d8:b3:49:a8:c7:90:e0:18: 98:52:0f:00:e5:46:20:63:84:a2:33:d6:fe:a3:1b:14:cf:a8: 32:32:c4:60:b2:12:ef:69:e9:cf:d4:11:07:af:1b:0d:f9:f3: af:38:81:73:9a:77:5e:75:37:61:c7:8b:fc:c8:4e:18:0f:bc: dc:ab:a8:d2:ee:9b:f5:d8:84:8c:0e:09:13:3a:ca:6b:3a:6c: 36:11:6e:3f:37:dc:7c:9c:a8:96:47:41:94:6b:07:10:af:c8: a0:2c:ae:65:3b:68:88:61:40:3c:3d:c0:a2:86:c2:df:38:78: ec:ca:c1:d3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJCvdg+2QHWSuBZU3MzqiZrguWcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIyQjNDRjNDRDc0OUNGRDMzQTA3MUE2ODhFNDQ5NzU4 NjUxRjVBRTAeFw0yNTExMDUwOTI2MTBaFw0yNTExMDkyMTE5MTBaMDMxMTAvBgNV BAMTKDZEQ0FFNTg1OUNCQ0FCMTE4Rjg2OEQ4RUVFRkI5NDc5QTQyNDhGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ThYCQEJMKFU17voQLInqQFCY BtpTEy038FKnQncuejSID4Z0DgQAZnHvX/QebkwCVGfn5/fh1ShDK2/pymqXEEeB O/sxef4D9qcs8Q6bQrxy3UVBVFKqycnbniNBAxqzjbV0HqiC+P/0e4xyD0dqMJqv heTSPRF0FlrGTCeGLckKYlf5NP+ZCEPhbtxt7PWvKdni6B+a0a6r6wHpa6+Jh3mF jOGfH55FbS6MCldX4tmT4H7BzmlLtbgddXK3jNbEHFep2Rqll+eKqjWLlOYcVJJw UVfLaD/Ju6nDu6LA5g2GAD8/o7gGmOgQbXybR/lArKUIQzHiNlnae5ALjB7LAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbcrlhZy8qxGPho2O7vuUeaQkjxEwHwYDVR0j BBgwFoAUIis88810nP0zoHGmiORJdYZR9a4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80RUU1NjE4RDkyMUZFNjQ0QzcyNjk4RjFENzA5QkRDNEZC NEIyMTBCNEVBNzU2MjM2RUU0RTZCRkQzM0VFNDBBLzAvMjIyQjNDRjNDRDc0OUNG RDMzQTA3MUE2ODhFNDQ5NzU4NjUxRjVBRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMjJCM0NGM0NENzQ5Q0ZEMzNB MDcxQTY4OEU0NDk3NTg2NTFGNUFFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEVFNTYxOEQ5MjFGRTY0NEM3MjY5OEYxRDcwOUJEQzRGQjRCMjEwQjRF QTc1NjIzNkVFNEU2QkZEMzNFRTQwQS8wLzIyMkIzQ0YzQ0Q3NDlDRkQzM0EwNzFB Njg4RTQ0OTc1ODY1MUY1QUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbGDf6ggE5i2jO/XkN1RVlWtsi s4o78SgVD7iIbywI12sq41Ef5Ceh+hjMvpxUY0PmaYMZLaBhu0iU6SIc6dfOGt9e +GCIC+LwFtIuTTpywBnlfkQrnEo86SDe+EkDbZnh8jB0sQ0E137K/85VA5djsdfV c0Hqj5RC3qZXy1OK1sdzFoGrWBfy2LNJqMeQ4BiYUg8A5UYgY4SiM9b+oxsUz6gy MsRgshLvaenP1BEHrxsN+fOvOIFzmndedTdhx4v8yE4YD7zcq6jS7pv12ISMDgkT OsprOmw2EW4/N9x8nKiWR0GUawcQr8igLK5lO2iIYUA8PcCihsLfOHjsysHT -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:50 2025 by rpki-client