$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.mft File: 475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.mft (raw, json) Hash identifier: OPUi0FJPeyJQy94Ec+c7f7UKb5Skktd6gByBm/sM3jc= Subject key identifier: 62:68:3A:69:69:DD:5B:75:FE:9D:72:6E:DF:C8:E1:38:3E:A8:70:2E Authority key identifier: 47:5F:76:72:28:FF:8A:3E:78:9E:7A:8F:5C:EA:94:BE:A0:9D:B3:E9 Certificate issuer: /CN=475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9 Certificate serial: 6657BE2A24AFDB34AB6923C506A6E556F6999993 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.mft Manifest number: 0136 Signing time: Wed 05 Nov 2025 03:42:50 +0000 Manifest this update: Wed 05 Nov 2025 03:37:50 +0000 Manifest next update: Sun 09 Nov 2025 07:25:50 +0000 Files and hashes: 1: 323830333a333232303a3a2f33322d3332203d3e20323633363933.roa (hash: N3GST/O9Z5DVRxpw78GeufQ1/PN33xq+C3rt/jEKUEU=) 2: 475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.crl (hash: xCqbc3y894cymneRM3lX5DresZzG2uqdsVjxH6i/gRM=) 3: 34352e37302e3138342e302f32322d3234203d3e20323633363933.roa (hash: JDmlyFqe1L7l6QjwVc3tbLlNQvTAU2F57j0Wbv2fR8g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.crl rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:57:be:2a:24:af:db:34:ab:69:23:c5:06:a6:e5:56:f6:99:99:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9 Validity Not Before: Nov 5 03:37:50 2025 GMT Not After : Nov 9 07:25:50 2025 GMT Subject: CN=62683A6969DD5B75FE9D726EDFC8E1383EA8702E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:ad:e1:e6:cd:3f:c1:5d:43:12:2c:96:28: fd:cf:03:6b:e7:2f:24:29:9a:98:f2:cc:67:4b:37: 27:f2:98:92:b2:98:4c:0b:fd:bb:85:8f:e0:fe:c6: b8:5b:53:11:4e:a7:32:a5:1b:f3:9d:0b:26:e8:dc: 4a:af:1a:a0:72:34:d1:06:f0:ac:45:9b:11:34:c1: 26:13:a3:d0:eb:c5:4c:04:7d:e5:3b:d9:22:12:36: 94:07:ba:51:32:cf:3f:70:4b:97:fd:9e:9c:4c:2b: 0a:58:58:b6:b6:22:46:95:71:d9:ef:80:9e:92:0f: 5f:de:24:63:52:98:de:9f:d7:2f:2b:19:13:00:c4: 32:f6:c5:c1:b5:67:02:0b:b7:3b:d0:e9:95:47:97: ea:34:aa:ae:4d:88:d1:8b:27:66:2b:7c:b0:29:0b: 4a:d4:52:ea:d8:a4:67:32:1c:50:5e:e7:93:b5:36: 16:10:27:f8:7b:3f:d1:0d:70:c8:71:4a:b7:4c:6f: 73:bf:fb:45:15:79:7e:00:eb:f4:55:33:09:6f:5b: 3f:39:c8:c5:d0:3c:69:29:45:92:86:16:b9:58:f3: eb:e8:1f:4d:84:3c:df:e5:f7:61:01:6c:33:da:bb: 8f:64:6d:58:84:26:3a:12:fe:ee:a3:2c:6d:62:ce: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:3A:69:69:DD:5B:75:FE:9D:72:6E:DF:C8:E1:38:3E:A8:70:2E X509v3 Authority Key Identifier: keyid:47:5F:76:72:28:FF:8A:3E:78:9E:7A:8F:5C:EA:94:BE:A0:9D:B3:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74CACE6676950E34AFA1BFD4231CFBC472D8A5CE71FCF3988EA0D51C594176B8/0/475F767228FF8A3E789E7A8F5CEA94BEA09DB3E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a2:a1:ed:92:65:aa:b3:07:7e:ef:8d:0d:98:cc:e3:77:46: 4a:ee:6e:19:33:d2:62:30:ff:5a:bd:4b:55:13:b2:89:50:72: 4e:7d:c6:cd:94:4d:40:6d:87:bb:90:88:08:de:68:af:19:1f: 18:42:b0:9c:a0:71:9d:85:ae:9e:20:1c:19:af:7e:20:d2:76: 75:fd:b8:8c:1f:69:33:ba:42:ee:a5:ab:1b:6b:0e:e4:a9:6a: 10:2e:ed:64:48:af:4f:d5:94:92:7c:5d:1c:88:32:d7:f2:36: 4e:b3:3f:db:46:08:28:89:18:4e:51:70:c8:b9:dc:2b:97:27: eb:b3:3c:dc:c1:8c:7b:db:06:cf:6d:86:63:0a:fe:0c:29:ff: dc:8b:67:64:05:19:62:94:e1:de:b6:d5:46:93:de:63:25:7b: d4:be:99:23:76:e3:9f:8a:4d:f0:5b:b6:a5:0f:e6:34:48:75: fd:81:2e:c7:10:ea:1e:96:72:0a:0d:06:73:2d:a1:bb:7d:2c: dd:dd:b8:41:75:1e:68:23:01:aa:04:03:81:36:02:66:b4:6f: c3:52:cd:f8:0e:d1:18:3e:02:55:64:c1:5b:cf:a5:5f:9e:f3: a9:2e:11:39:6a:80:7f:8e:7f:34:50:b3:1b:f2:12:1d:b5:4e: 6e:c0:87:af -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZle+KiSv2zSraSPFBqblVvaZmZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1Rjc2NzIyOEZGOEEzRTc4OUU3QThGNUNFQTk0QkVB MDlEQjNFOTAeFw0yNTExMDUwMzM3NTBaFw0yNTExMDkwNzI1NTBaMDMxMTAvBgNV BAMTKDYyNjgzQTY5NjlERDVCNzVGRTlENzI2RURGQzhFMTM4M0VBODcwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXl63h5s0/wV1DEiyWKP3PA2vn LyQpmpjyzGdLNyfymJKymEwL/buFj+D+xrhbUxFOpzKlG/OdCybo3EqvGqByNNEG 8KxFmxE0wSYTo9DrxUwEfeU72SISNpQHulEyzz9wS5f9npxMKwpYWLa2IkaVcdnv gJ6SD1/eJGNSmN6f1y8rGRMAxDL2xcG1ZwILtzvQ6ZVHl+o0qq5NiNGLJ2YrfLAp C0rUUurYpGcyHFBe55O1NhYQJ/h7P9ENcMhxSrdMb3O/+0UVeX4A6/RVMwlvWz85 yMXQPGkpRZKGFrlY8+voH02EPN/l92EBbDPau49kbViEJjoS/u6jLG1izoJLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYmg6aWndW3X+nXJu38jhOD6ocC4wHwYDVR0j BBgwFoAUR192cij/ij54nnqPXOqUvqCds+kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NENBQ0U2Njc2OTUwRTM0QUZBMUJGRDQyMzFDRkJDNDcy RDhBNUNFNzFGQ0YzOTg4RUEwRDUxQzU5NDE3NkI4LzAvNDc1Rjc2NzIyOEZGOEEz RTc4OUU3QThGNUNFQTk0QkVBMDlEQjNFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzVGNzY3MjI4RkY4QTNFNzg5 RTdBOEY1Q0VBOTRCRUEwOURCM0U5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzRDQUNFNjY3Njk1MEUzNEFGQTFCRkQ0MjMxQ0ZCQzQ3MkQ4QTVDRTcx RkNGMzk4OEVBMEQ1MUM1OTQxNzZCOC8wLzQ3NUY3NjcyMjhGRjhBM0U3ODlFN0E4 RjVDRUE5NEJFQTA5REIzRTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqoqHtkmWqswd+740NmMzjd0ZK 7m4ZM9JiMP9avUtVE7KJUHJOfcbNlE1AbYe7kIgI3mivGR8YQrCcoHGdha6eIBwZ r34g0nZ1/biMH2kzukLupasbaw7kqWoQLu1kSK9P1ZSSfF0ciDLX8jZOsz/bRggo iRhOUXDIudwrlyfrszzcwYx72wbPbYZjCv4MKf/ci2dkBRlilOHettVGk95jJXvU vpkjduOfik3wW7alD+Y0SHX9gS7HEOoelnIKDQZzLaG7fSzd3bhBdR5oIwGqBAOB NgJmtG/DUs34DtEYPgJVZMFbz6VfnvOpLhE5aoB/jn80ULMb8hIdtU5uwIev -----END CERTIFICATE-----Generated at Wed Nov 5 15:49:29 2025 by rpki-client