$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.mft File: 694A9B567DC84442DF416235D33074B005F7A672.mft (raw, json) Hash identifier: DJFIzyF+5fZU0jzBr2WAL+ZbVzlhEzC89lc4bQq3E0A= Subject key identifier: 57:66:81:D4:85:D1:3B:FD:94:CD:C9:A7:D9:03:90:0A:79:16:4E:CD Authority key identifier: 69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72 Certificate issuer: /CN=694A9B567DC84442DF416235D33074B005F7A672 Certificate serial: 253371F1D7EAE8845CC49D50854D2BC0C645FA99 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 14:25:45 +0000 Manifest this update: Tue 04 Nov 2025 14:20:45 +0000 Manifest next update: Mon 10 Nov 2025 06:35:45 +0000 Files and hashes: 1: 3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa (hash: cGrABufLYtpvD1DXznJQ7lgOMXvRKlQJEfyG8p27jMI=) 2: 323830333a663565303a3a2f33322d3438203d3e20323730303432.roa (hash: 5tSlc7z2fR64JjyuYtBTWC4FXJr+h1oncOIOoct3D28=) 3: 694A9B567DC84442DF416235D33074B005F7A672.crl (hash: AAG6MuqE+kGRkl6EWDEtWj44WwMujg4DFfovCMU2RUc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:33:71:f1:d7:ea:e8:84:5c:c4:9d:50:85:4d:2b:c0:c6:45:fa:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694A9B567DC84442DF416235D33074B005F7A672 Validity Not Before: Nov 4 14:20:45 2025 GMT Not After : Nov 10 06:35:45 2025 GMT Subject: CN=576681D485D13BFD94CDC9A7D903900A79164ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:4f:c5:5d:be:18:e8:8c:24:ee:b4:09:68: f7:72:6c:e0:7b:5a:bf:35:1e:df:4e:9c:ba:63:c3: 25:ef:66:b3:44:a5:8f:b6:3b:e6:e3:fc:9f:03:39: 64:69:53:63:80:d1:1d:5d:9c:95:ca:a0:8e:44:6e: 9a:4f:7f:81:36:52:14:a3:3b:3c:be:05:70:42:4e: 87:4d:4e:9f:8d:f1:59:1b:be:08:f5:c9:01:d9:87: 4a:ae:e1:7f:57:b8:27:68:2e:88:b4:19:ea:19:a0: ef:c8:37:3e:de:61:3b:e3:11:40:e9:3d:e0:7d:17: 90:ef:ef:04:9e:65:ae:b3:91:b5:33:ca:38:b2:d7: 7a:51:7e:4e:8b:5e:a4:02:70:b7:2c:df:d9:30:c4: 17:b9:5c:10:20:8d:c2:f6:ab:da:5d:1a:48:29:fe: c1:04:88:a7:63:b6:90:6d:57:0f:0f:3e:ae:0b:32: a3:49:a3:23:40:f1:5c:15:28:7c:f1:4d:cb:88:ac: d1:34:b8:8e:44:01:76:1d:87:70:0f:30:a1:ae:c9: 8d:30:03:a7:9a:b8:cd:9a:12:35:41:31:84:88:31: af:19:3f:d0:27:22:87:11:cc:11:f1:b4:63:a9:3d: d7:bb:90:24:70:53:79:ae:e7:57:58:40:2f:e5:01: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:66:81:D4:85:D1:3B:FD:94:CD:C9:A7:D9:03:90:0A:79:16:4E:CD X509v3 Authority Key Identifier: keyid:69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8b:39:9a:1f:ae:dd:14:fa:e5:3f:e3:c3:67:00:a3:ad:23: 29:c9:f6:7d:0b:4e:4f:3e:9e:f4:d4:2d:a7:95:3d:18:1c:a5: bd:22:d4:8c:1b:58:f6:99:96:5f:26:74:1e:fe:68:bd:04:f0: b0:21:41:0f:fb:15:14:bc:6a:47:13:f2:05:12:65:f5:ef:3f: 73:c7:68:63:87:29:df:02:d1:85:fc:c4:51:49:22:f8:54:49: fd:b4:41:0e:fc:7c:94:73:7e:77:a4:b6:da:c2:01:f2:8b:3b: cd:4c:52:9a:c0:c1:e7:af:9e:10:7b:82:e3:5f:0a:cc:7b:99: b3:4e:39:f4:f7:dc:11:ee:e0:91:02:00:54:1e:7d:ef:b1:bf: ca:fc:50:52:5b:cc:a4:57:30:6e:f2:2e:70:16:5b:3a:e6:80: 4b:30:a1:27:95:77:bf:bd:46:10:46:34:15:8f:e6:c3:e8:da: aa:4d:27:64:1d:8c:1c:f2:3c:05:18:52:cb:13:34:f9:08:4a: b9:20:c2:75:09:5f:aa:97:55:81:7d:9e:29:ba:d3:e0:7b:a6: 7a:79:7d:e7:3e:3d:56:0b:fd:01:40:55:a3:89:93:80:f9:6a: ee:08:18:f0:03:48:ec:7a:5e:f8:b4:f5:83:6a:46:87:34:74: 82:a8:f2:18 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJTNx8dfq6IRcxJ1QhU0rwMZF+pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk0QTlCNTY3REM4NDQ0MkRGNDE2MjM1RDMzMDc0QjAw NUY3QTY3MjAeFw0yNTExMDQxNDIwNDVaFw0yNTExMTAwNjM1NDVaMDMxMTAvBgNV BAMTKDU3NjY4MUQ0ODVEMTNCRkQ5NENEQzlBN0Q5MDM5MDBBNzkxNjRFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClV0/FXb4Y6Iwk7rQJaPdybOB7 Wr81Ht9OnLpjwyXvZrNEpY+2O+bj/J8DOWRpU2OA0R1dnJXKoI5EbppPf4E2UhSj Ozy+BXBCTodNTp+N8Vkbvgj1yQHZh0qu4X9XuCdoLoi0GeoZoO/INz7eYTvjEUDp PeB9F5Dv7wSeZa6zkbUzyjiy13pRfk6LXqQCcLcs39kwxBe5XBAgjcL2q9pdGkgp /sEEiKdjtpBtVw8PPq4LMqNJoyNA8VwVKHzxTcuIrNE0uI5EAXYdh3APMKGuyY0w A6eauM2aEjVBMYSIMa8ZP9AnIocRzBHxtGOpPde7kCRwU3mu51dYQC/lAaj1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUV2aB1IXRO/2Uzcmn2QOQCnkWTs0wHwYDVR0j BBgwFoAUaUqbVn3IRELfQWI10zB0sAX3pnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MkZENTFDNDQyQkNCOUE5Q0ZDNDQ4QjQ1MkMyNkVCNTc3 NkQwNzBFQjA1MTMxMjI3NTdDOERBOTRGQ0RDNEEwLzAvNjk0QTlCNTY3REM4NDQ0 MkRGNDE2MjM1RDMzMDc0QjAwNUY3QTY3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTRBOUI1NjdEQzg0NDQyREY0 MTYyMzVEMzMwNzRCMDA1RjdBNjcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTJGRDUxQzQ0MkJDQjlBOUNGQzQ0OEI0NTJDMjZFQjU3NzZEMDcwRUIw NTEzMTIyNzU3QzhEQTk0RkNEQzRBMC8wLzY5NEE5QjU2N0RDODQ0NDJERjQxNjIz NUQzMzA3NEIwMDVGN0E2NzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXizmaH67dFPrlP+PDZwCjrSMp yfZ9C05PPp701C2nlT0YHKW9ItSMG1j2mZZfJnQe/mi9BPCwIUEP+xUUvGpHE/IF EmX17z9zx2hjhynfAtGF/MRRSSL4VEn9tEEO/HyUc353pLbawgHyizvNTFKawMHn r54Qe4LjXwrMe5mzTjn099wR7uCRAgBUHn3vsb/K/FBSW8ykVzBu8i5wFls65oBL MKEnlXe/vUYQRjQVj+bD6NqqTSdkHYwc8jwFGFLLEzT5CEq5IMJ1CV+ql1WBfZ4p utPge6Z6eX3nPj1WC/0BQFWjiZOA+WruCBjwA0jsel74tPWDakaHNHSCqPIY -----END CERTIFICATE-----Generated at Wed Nov 5 21:52:22 2025 by rpki-client