$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: 1nMTeMUkbOTkkhxZ+OUiwgDJqmWDyMUXH87WEKALFKs= Subject key identifier: 79:4A:95:16:81:49:0D:CF:0F:6B:53:D7:2D:02:BF:8D:3D:AD:D1:A5 Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 19307D3A56BB0F596458FF858E04D322328D2596 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 0131 Signing time: Tue 04 Nov 2025 21:34:36 +0000 Manifest this update: Tue 04 Nov 2025 21:29:36 +0000 Manifest next update: Sun 09 Nov 2025 17:33:36 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=) 2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: U2mtGaL7tY2JdHjdFgILkvmEybSkYtSSJv+DAf6fFe8=) 3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:30:7d:3a:56:bb:0f:59:64:58:ff:85:8e:04:d3:22:32:8d:25:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Nov 4 21:29:36 2025 GMT Not After : Nov 9 17:33:36 2025 GMT Subject: CN=794A951681490DCF0F6B53D72D02BF8D3DADD1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:11:df:0c:6e:a0:9b:28:64:f9:d6:8a:3f: b2:88:d9:81:4f:c1:b2:f7:d8:cc:4a:58:ef:9b:e5: 8e:a9:6c:77:ea:a1:c4:b4:a6:fb:73:55:79:23:6d: 3e:6a:ee:1d:23:03:fe:73:15:92:38:81:74:52:74: 5e:83:48:8b:93:0b:3b:38:f7:e7:4d:95:e1:9b:9a: c2:1b:3d:08:66:1a:ee:fc:8d:4c:e5:1d:a9:fb:6f: 9a:5a:60:39:fe:b7:07:d7:16:39:db:37:18:59:00: 29:98:6b:dd:0f:4d:92:a1:a7:32:30:ee:f2:9e:bb: 5d:f0:c1:26:a9:b2:be:7c:6c:72:16:44:a3:a0:e6: 0b:23:46:e5:97:0f:ee:56:bd:ec:6e:62:f2:6e:7b: be:cc:a1:61:51:d4:aa:4f:1e:1a:83:0c:35:01:2c: 54:ee:ba:74:8b:74:40:c4:fc:39:c8:65:be:74:33: 2b:4d:ab:36:f9:a5:6d:98:69:28:c9:6e:e0:65:3c: 5e:83:f9:34:ee:73:7b:23:9b:ad:4f:61:d5:ad:5e: 60:9f:6b:2f:85:1d:e9:3f:08:15:cd:a3:64:be:68: 3e:e7:a7:c7:99:78:48:8f:8a:82:05:7c:de:a5:0f: 58:55:e4:57:a1:08:47:56:ac:38:4a:f9:ad:c0:98: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4A:95:16:81:49:0D:CF:0F:6B:53:D7:2D:02:BF:8D:3D:AD:D1:A5 X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4e:66:88:90:c3:6b:6f:bc:5a:d1:73:d5:9e:7c:a0:1b:f3: 3f:2d:1c:4d:d4:0c:65:da:1b:b4:60:b6:f5:ee:98:98:64:9e: 4d:7b:0b:e6:04:ae:e6:e6:2b:28:7f:d1:ef:21:d1:25:38:00: 34:14:b3:0d:c3:2e:63:40:13:e3:af:7d:f1:c3:d2:4f:b7:53: 03:6a:b5:97:69:59:4f:93:b8:22:57:32:ff:e2:66:c1:24:86: be:5c:3b:e7:83:26:ee:8b:ab:da:c8:9d:c1:f2:46:f9:d7:b9: c3:ea:3a:cc:0f:a6:6e:5c:41:9d:13:99:68:93:ea:e4:fc:3d: 07:30:d8:31:23:a6:43:2f:b1:61:f1:e0:bf:ab:16:86:40:e9: e0:2a:ed:20:75:10:9c:6b:5a:35:aa:6e:cc:c0:72:ae:ee:61: 6a:19:ec:25:00:c0:b4:1d:b3:94:5c:f1:07:0f:5f:a8:80:f9: 6f:fe:03:28:9c:de:11:c6:f4:35:60:23:17:22:d0:df:81:3c: 8f:1b:10:9a:18:2d:b8:c7:cb:97:17:41:88:58:03:7d:c6:c7: bd:39:d0:05:f4:bd:d3:d6:d7:c4:43:51:5b:ea:66:e8:86:aa: 9e:a3:aa:c2:8c:a2:0d:28:b5:01:7b:eb:61:47:e4:1c:d2:ec: 64:44:d0:d7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGTB9Ola7D1lkWP+FjgTTIjKNJZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNTExMDQyMTI5MzZaFw0yNTExMDkxNzMzMzZaMDMxMTAvBgNV BAMTKDc5NEE5NTE2ODE0OTBEQ0YwRjZCNTNENzJEMDJCRjhEM0RBREQxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFhHfDG6gmyhk+daKP7KI2YFP wbL32MxKWO+b5Y6pbHfqocS0pvtzVXkjbT5q7h0jA/5zFZI4gXRSdF6DSIuTCzs4 9+dNleGbmsIbPQhmGu78jUzlHan7b5paYDn+twfXFjnbNxhZACmYa90PTZKhpzIw 7vKeu13wwSapsr58bHIWRKOg5gsjRuWXD+5WvexuYvJue77MoWFR1KpPHhqDDDUB LFTuunSLdEDE/DnIZb50MytNqzb5pW2YaSjJbuBlPF6D+TTuc3sjm61PYdWtXmCf ay+FHek/CBXNo2S+aD7np8eZeEiPioIFfN6lD1hV5FehCEdWrDhK+a3AmPB1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUeUqVFoFJDc8Pa1PXLQK/jT2t0aUwHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbTmaIkMNrb7xa0XPVnnygG/M/ LRxN1Axl2hu0YLb17piYZJ5NewvmBK7m5isof9HvIdElOAA0FLMNwy5jQBPjr33x w9JPt1MDarWXaVlPk7giVzL/4mbBJIa+XDvngybui6vayJ3B8kb517nD6jrMD6Zu XEGdE5lok+rk/D0HMNgxI6ZDL7Fh8eC/qxaGQOngKu0gdRCca1o1qm7MwHKu7mFq GewlAMC0HbOUXPEHD1+ogPlv/gMonN4RxvQ1YCMXItDfgTyPGxCaGC24x8uXF0GI WAN9xse9OdAF9L3T1tfEQ1Fb6mbohqqeo6rCjKINKLUBe+thR+Qc0uxkRNDX -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:43 2025 by rpki-client