$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.mft File: 22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.mft (raw, json) Hash identifier: K/zO76Ssm2uVjvZ4U8lhJuFhdz4aqDVqBGfCxJXLk78= Subject key identifier: 42:2E:42:C4:5F:46:CE:F7:AC:5C:8B:CB:23:88:0B:70:31:DB:D0:CF Authority key identifier: 22:E4:E9:A2:FB:F4:98:BE:B9:A1:B8:A1:F3:5B:91:15:0D:CA:03:D1 Certificate issuer: /CN=22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1 Certificate serial: 6F5E1B72129CDBBF458E98037615EBA4EFFE1D74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.mft Manifest number: 0134 Signing time: Mon 03 Nov 2025 17:24:03 +0000 Manifest this update: Mon 03 Nov 2025 17:19:03 +0000 Manifest next update: Sat 08 Nov 2025 18:29:03 +0000 Files and hashes: 1: 3230302e362e31332e302f32342d3234203d3e203237393437.roa (hash: lsA7h6NCVgXLmFSRtgjZZ4bt18sy9SnkZO5nnUl9ACo=) 2: 22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.crl (hash: ovInU0PeSfQwNasV6zFsLnCGsseqlD4cimQeMD2OkVU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.crl rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 18:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5e:1b:72:12:9c:db:bf:45:8e:98:03:76:15:eb:a4:ef:fe:1d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1 Validity Not Before: Nov 3 17:19:03 2025 GMT Not After : Nov 8 18:29:03 2025 GMT Subject: CN=422E42C45F46CEF7AC5C8BCB23880B7031DBD0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:7a:5a:54:70:06:f2:c5:e9:b9:10:9d:e5: 63:61:18:11:63:c4:d5:b1:be:19:2c:b0:ed:b6:60: 15:05:c8:21:e4:52:37:08:ff:ee:09:15:f6:50:21: 8b:cf:d0:98:5a:22:e2:78:43:52:63:fb:ed:7d:c7: 6a:bd:a0:cb:6a:ad:b9:45:8e:42:eb:f5:0c:d8:fc: ae:a3:6a:71:ff:d9:cd:22:c6:c5:ea:26:05:db:62: 6e:9e:0b:e7:c5:06:c2:52:72:f6:fd:4f:74:9c:f5: 47:0c:d5:b1:15:d9:bd:95:d2:13:3c:03:92:c5:f4: 5b:f0:26:3f:35:d2:0b:ab:c9:8a:d8:5e:fd:8e:60: d2:00:93:28:c9:d9:61:52:a3:98:be:2d:08:d7:e2: 78:7a:d4:c3:50:69:4c:b8:9f:1f:7a:34:9d:bd:39: 4d:5b:7c:f7:8c:c5:07:f7:b5:b4:8b:25:07:cb:d6: f1:b8:73:3f:a3:7c:40:0a:bd:e7:3d:f1:6a:dc:0f: 2a:3d:cd:6d:ba:06:83:b4:a3:dc:8c:2e:2a:9b:d8: 3b:20:cf:f5:b0:ce:08:40:11:bf:7c:3d:ed:a0:26: 43:f6:f0:95:2b:12:ba:3c:05:12:c8:d1:16:1f:26: 23:5b:63:49:6e:12:26:02:d3:1b:cc:ae:6f:f6:ab: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2E:42:C4:5F:46:CE:F7:AC:5C:8B:CB:23:88:0B:70:31:DB:D0:CF X509v3 Authority Key Identifier: keyid:22:E4:E9:A2:FB:F4:98:BE:B9:A1:B8:A1:F3:5B:91:15:0D:CA:03:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2f:aa:ce:88:ac:dd:72:04:03:98:01:d2:79:de:e7:fb:d7: 37:25:16:33:3e:29:7d:f3:84:89:68:2d:d1:8e:24:dc:7e:a1: d9:d2:c5:5f:6a:2a:9a:27:58:42:87:9c:76:da:91:3c:2f:41: 80:0b:62:e9:bc:68:ae:e3:57:b8:84:ac:5e:8e:45:4d:aa:d6: f1:a0:6b:6b:fd:65:d5:ad:3c:43:88:1c:f0:37:3b:05:b4:4a: 50:b6:16:30:4b:25:ae:c2:22:c5:7d:d3:a9:62:23:9b:2f:4f: e3:d5:c9:19:d3:73:46:00:a7:fa:ed:60:6a:7c:65:b2:a9:9b: e5:3d:bd:86:8c:a1:82:10:0d:92:2e:dc:4e:71:8c:67:a7:3d: 06:21:48:4b:b7:97:01:9d:8c:73:5c:30:16:5a:a4:74:51:03: 2c:9c:8f:08:08:80:d3:fb:79:64:26:d6:4a:20:b4:37:b7:70: e2:b6:57:dc:1c:4d:6a:8a:e2:55:92:24:2f:02:ad:3c:67:f3: 73:71:c8:bd:d1:10:bf:62:bb:d4:68:f9:54:a6:6c:b9:b8:b0: b0:9c:ce:2a:5f:9f:b1:25:f2:e4:89:8c:5f:3a:88:b1:55:5e: 75:a1:c9:98:a9:42:61:f8:2a:c9:8c:5c:fd:e6:1d:cb:f0:d5: 7d:f8:5e:12 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUb14bchKc279FjpgDdhXrpO/+HXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJFNEU5QTJGQkY0OThCRUI5QTFCOEExRjM1QjkxMTUw RENBMDNEMTAeFw0yNTExMDMxNzE5MDNaFw0yNTExMDgxODI5MDNaMDMxMTAvBgNV BAMTKDQyMkU0MkM0NUY0NkNFRjdBQzVDOEJDQjIzODgwQjcwMzFEQkQwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfXpaVHAG8sXpuRCd5WNhGBFj xNWxvhkssO22YBUFyCHkUjcI/+4JFfZQIYvP0JhaIuJ4Q1Jj++19x2q9oMtqrblF jkLr9QzY/K6janH/2c0ixsXqJgXbYm6eC+fFBsJScvb9T3Sc9UcM1bEV2b2V0hM8 A5LF9FvwJj810guryYrYXv2OYNIAkyjJ2WFSo5i+LQjX4nh61MNQaUy4nx96NJ29 OU1bfPeMxQf3tbSLJQfL1vG4cz+jfEAKvec98WrcDyo9zW26BoO0o9yMLiqb2Dsg z/WwzghAEb98Pe2gJkP28JUrEro8BRLI0RYfJiNbY0luEiYC0xvMrm/2q4HvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQi5CxF9GzvesXIvLI4gLcDHb0M8wHwYDVR0j BBgwFoAUIuTpovv0mL65obih81uRFQ3KA9EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDA2QzY0MkM5MUM3NTdFNkNGQkM4NDI2NDQwMUJFMTY5 MjU1NDMxOTM0QzA5RUVBRkRGODlDMjM2MEI2QjkzLzAvMjJFNEU5QTJGQkY0OThC RUI5QTFCOEExRjM1QjkxMTUwRENBMDNEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkU0RTlBMkZCRjQ5OEJFQjlB MUI4QTFGMzVCOTExNTBEQ0EwM0QxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QwNkM2NDJDOTFDNzU3RTZDRkJDODQyNjQ0MDFCRTE2OTI1NTQzMTkz NEMwOUVFQUZERjg5QzIzNjBCNkI5My8wLzIyRTRFOUEyRkJGNDk4QkVCOUExQjhB MUYzNUI5MTE1MERDQTAzRDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuL6rOiKzdcgQDmAHSed7n+9c3 JRYzPil984SJaC3RjiTcfqHZ0sVfaiqaJ1hCh5x22pE8L0GAC2LpvGiu41e4hKxe jkVNqtbxoGtr/WXVrTxDiBzwNzsFtEpQthYwSyWuwiLFfdOpYiObL0/j1ckZ03NG AKf67WBqfGWyqZvlPb2GjKGCEA2SLtxOcYxnpz0GIUhLt5cBnYxzXDAWWqR0UQMs nI8ICIDT+3lkJtZKILQ3t3DitlfcHE1qiuJVkiQvAq08Z/Nzcci90RC/YrvUaPlU pmy5uLCwnM4qX5+xJfLkiYxfOoixVV51ocmYqUJh+CrJjFz95h3L8NV9+F4S -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:42 2025 by rpki-client