$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft File: B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft (raw, json) Hash identifier: OAAWUo+2+h7cUD1pvibumx3iFD4bvrEUYxm5Jslp89w= Subject key identifier: DF:1B:1E:78:F9:F4:7E:3E:7B:37:C7:24:F1:17:37:0C:0B:5F:66:45 Authority key identifier: B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86 Certificate issuer: /CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86 Certificate serial: 683ADE51205EAF6E9467C02B10C88BDEA209D50B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft Manifest number: 47 Signing time: Tue 04 Nov 2025 09:33:03 +0000 Manifest this update: Tue 04 Nov 2025 09:28:03 +0000 Manifest next update: Sun 09 Nov 2025 00:31:03 +0000 Files and hashes: 1: 323830333a393635303a3a2f33322d3438203d3e20323733323035.roa (hash: Ui+oKYXAjQVAPlwuVQ7Mx3yalQ4MkA6sfGi1DWFfSlw=) 2: B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl (hash: F1IrQa6Dz9+U8ht+17g+fvdTbI4q1RhzuxyH+nO96qY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 00:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3a:de:51:20:5e:af:6e:94:67:c0:2b:10:c8:8b:de:a2:09:d5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86 Validity Not Before: Nov 4 09:28:03 2025 GMT Not After : Nov 9 00:31:03 2025 GMT Subject: CN=DF1B1E78F9F47E3E7B37C724F117370C0B5F6645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:87:4e:61:e6:f7:4f:b2:81:bd:d5:53:d9: ee:0a:b6:2f:d0:b2:f0:22:ce:f4:fc:28:8b:3a:70: ae:54:2b:2f:3c:92:a8:d3:33:9f:fb:4c:bd:15:0b: 04:e3:f4:df:18:4f:d1:40:b1:31:97:d1:22:af:27: d5:e7:a4:15:72:cd:5a:d9:dc:1d:22:5d:d8:fd:79: 13:ad:df:fd:60:cb:72:ae:86:4a:1d:74:1e:01:5d: 53:65:fb:ce:53:f3:f5:f5:80:dc:99:b8:68:e1:e3: 9b:f1:f0:79:c7:a8:d0:c0:16:6c:c9:e2:03:3e:9f: 70:34:c3:db:af:27:4a:d2:d4:70:70:62:94:45:88: 97:e8:85:d0:6b:f6:5d:a6:3b:05:65:fc:61:48:3a: c0:f0:27:27:2b:5a:e6:4a:da:5c:cd:78:ec:61:3b: e3:43:02:64:ee:86:28:7b:78:74:f8:20:04:17:a3: d0:78:7e:cd:87:fa:31:61:b0:6a:57:9c:4a:df:a8: 19:4d:05:b2:3c:be:d7:a8:9c:7b:c3:65:5d:1c:aa: 80:0a:8a:99:f2:aa:fc:90:d7:be:0e:05:22:87:f5: 72:e4:63:84:95:63:3e:99:7f:4e:8c:a6:42:68:6e: df:d3:33:29:85:70:ba:0e:00:14:b7:e1:95:26:69: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1B:1E:78:F9:F4:7E:3E:7B:37:C7:24:F1:17:37:0C:0B:5F:66:45 X509v3 Authority Key Identifier: keyid:B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9c:f5:7d:2f:eb:7b:80:45:7c:f3:af:64:ab:ab:36:4b:ad: a2:6d:d8:b5:e3:b3:c4:10:85:d4:56:43:35:f9:04:07:54:07: 63:88:df:de:d4:d0:f1:7e:1c:57:d8:9e:82:99:57:7d:06:e8: 7f:c7:3f:cb:52:54:88:69:4e:63:46:a4:f8:d0:82:b9:d3:b5: 17:25:7f:b1:07:82:e1:bf:13:a5:44:11:23:a7:d9:80:05:95: 6f:43:d2:21:1a:a5:24:9f:07:d6:d3:8d:ca:56:fd:f6:f9:93: 24:76:a1:c2:9e:e4:99:57:d1:e9:c6:79:fe:52:19:63:b4:c6: 23:ff:20:5b:e0:a1:bc:e1:ba:91:da:71:eb:2a:5f:ad:9e:13: 72:62:da:40:1e:5c:62:b1:d1:b4:7a:12:41:63:77:39:89:94: b4:93:28:a3:c4:2e:6d:be:00:08:04:83:c2:7c:e3:d9:72:15: 99:5a:06:46:d5:14:0c:11:33:42:34:4c:13:a0:69:18:c0:82: da:8d:69:ad:34:65:17:91:36:b7:af:07:40:1d:54:e3:54:85: 80:37:41:28:26:71:0c:da:97:f6:28:c2:a9:80:5f:dc:69:a0: 1f:c0:41:ca:27:2e:21:d6:f6:26:49:47:75:ed:2b:10:87:cb: d4:1e:86:3b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaDreUSBer26UZ8ArEMiL3qIJ1QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFNUJEQ0U5QjNEMkVERDNGQkIzREMzN0Y0OUI4MURE RTVBNkM4NjAeFw0yNTExMDQwOTI4MDNaFw0yNTExMDkwMDMxMDNaMDMxMTAvBgNV BAMTKERGMUIxRTc4RjlGNDdFM0U3QjM3QzcyNEYxMTczNzBDMEI1RjY2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCC4dOYeb3T7KBvdVT2e4Kti/Q svAizvT8KIs6cK5UKy88kqjTM5/7TL0VCwTj9N8YT9FAsTGX0SKvJ9XnpBVyzVrZ 3B0iXdj9eROt3/1gy3KuhkoddB4BXVNl+85T8/X1gNyZuGjh45vx8HnHqNDAFmzJ 4gM+n3A0w9uvJ0rS1HBwYpRFiJfohdBr9l2mOwVl/GFIOsDwJycrWuZK2lzNeOxh O+NDAmTuhih7eHT4IAQXo9B4fs2H+jFhsGpXnErfqBlNBbI8vteonHvDZV0cqoAK ipnyqvyQ174OBSKH9XLkY4SVYz6Zf06MpkJobt/TMymFcLoOABS34ZUmaWQ7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3xseePn0fj57N8ck8Rc3DAtfZkUwHwYDVR0j BBgwFoAUueW9zps9Lt0/uz3Df0m4Hd5abIYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MTUyMEE3RDQxQUVFQ0U0QTNDNjcyNDRFREZBNUVGRjVG Mzg0M0JBRTE4MTM2Q0YzNzBBREVCRTI0OTA4MDBDLzAvQjlFNUJEQ0U5QjNEMkVE RDNGQkIzREMzN0Y0OUI4MURERTVBNkM4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUU1QkRDRTlCM0QyRUREM0ZC QjNEQzM3RjQ5QjgxRERFNUE2Qzg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjE1MjBBN0Q0MUFFRUNFNEEzQzY3MjQ0RURGQTVFRkY1RjM4NDNCQUUx ODEzNkNGMzcwQURFQkUyNDkwODAwQy8wL0I5RTVCRENFOUIzRDJFREQzRkJCM0RD MzdGNDlCODFEREU1QTZDODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEnPV9L+t7gEV8869kq6s2S62i bdi147PEEIXUVkM1+QQHVAdjiN/e1NDxfhxX2J6CmVd9Buh/xz/LUlSIaU5jRqT4 0IK507UXJX+xB4LhvxOlRBEjp9mABZVvQ9IhGqUknwfW043KVv32+ZMkdqHCnuSZ V9Hpxnn+UhljtMYj/yBb4KG84bqR2nHrKl+tnhNyYtpAHlxisdG0ehJBY3c5iZS0 kyijxC5tvgAIBIPCfOPZchWZWgZG1RQMETNCNEwToGkYwILajWmtNGUXkTa3rwdA HVTjVIWAN0EoJnEM2pf2KMKpgF/caaAfwEHKJy4h1vYmSUd17SsQh8vUHoY7 -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:43 2025 by rpki-client