$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89F4A9C1771C33E5F0F59FBB5A08F2D1D1A69C005395F8D0EBBD5FE3C81BC861/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.mft File: 2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.mft (raw, json) Hash identifier: zl7zwQlFZWPY/cEfRGZF6jwPJiSinv/nTIm5SMB73+M= Subject key identifier: 00:4C:FD:B3:AA:7A:D5:95:2C:A3:7F:22:89:3F:DA:86:D1:87:84:F0 Authority key identifier: 2F:02:7F:0C:C9:9B:88:5F:A3:A9:A6:42:00:EF:DF:D6:EE:BC:4D:60 Certificate issuer: /CN=2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60 Certificate serial: 5A72D40E3598F57FC1239C41686A7B044FB01E79 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/89F4A9C1771C33E5F0F59FBB5A08F2D1D1A69C005395F8D0EBBD5FE3C81BC861/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.mft Manifest number: 1D Signing time: Tue 04 Nov 2025 07:06:42 +0000 Manifest this update: Tue 04 Nov 2025 07:01:42 +0000 Manifest next update: Sat 08 Nov 2025 21:06:42 +0000 Files and hashes: 1: 2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.crl (hash: ijvLwrM3pObJe6qnmfPk0TcZo5osM86EZkGEfrNscCs=) 2: 323030313a313236383a3a2f33322d3438203d3e20323733323832.roa (hash: APbVieMI1uZuuIH6QmB+GssduUreyGdSFYkt+a4iTW0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/89F4A9C1771C33E5F0F59FBB5A08F2D1D1A69C005395F8D0EBBD5FE3C81BC861/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.crl rsync://repository.lacnic.net/rpki/lacnic/89F4A9C1771C33E5F0F59FBB5A08F2D1D1A69C005395F8D0EBBD5FE3C81BC861/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 21:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:72:d4:0e:35:98:f5:7f:c1:23:9c:41:68:6a:7b:04:4f:b0:1e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60 Validity Not Before: Nov 4 07:01:42 2025 GMT Not After : Nov 8 21:06:42 2025 GMT Subject: CN=004CFDB3AA7AD5952CA37F22893FDA86D18784F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:03:ba:58:05:ab:8f:2a:c4:fb:23:10:8f: b8:48:8f:9e:ac:8b:f1:33:cc:7d:07:20:cc:e5:75: d3:c6:ee:85:f0:2e:5b:3f:0f:d7:b2:94:27:6b:78: 75:b9:81:9b:72:36:fe:d4:86:0a:33:81:c7:66:69: 3b:28:e6:50:1f:d1:fe:b4:fa:77:1d:fe:e4:18:96: e7:92:1c:f1:3a:c2:93:1a:67:3f:03:89:c6:1f:d6: 02:42:8c:a9:0f:b3:ec:64:b9:e5:fc:ed:96:6a:08: 9c:7c:e0:89:2b:f1:ab:95:40:d5:db:cf:16:32:c3: e8:41:0e:cb:83:ae:57:9e:96:b2:e4:34:49:44:40: 2e:3e:99:d2:94:d3:71:90:8d:ff:44:28:81:f6:bf: 11:ab:48:28:a2:68:10:1d:20:d5:6c:73:ba:95:a6: 3b:67:d9:af:03:db:72:98:d2:fb:32:5f:20:32:51: 99:db:1c:a4:a8:54:0b:64:3a:4d:82:fd:29:37:37: e5:8d:b4:63:02:e0:fd:52:2e:99:ac:0d:21:39:0b: 2c:04:71:0e:9b:76:06:3a:c1:49:f8:65:5d:6a:d8: be:d9:92:00:8f:c1:02:d4:d2:6f:88:18:25:aa:42: 1b:aa:8c:01:04:41:0f:4e:b9:de:90:22:73:e9:37: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4C:FD:B3:AA:7A:D5:95:2C:A3:7F:22:89:3F:DA:86:D1:87:84:F0 X509v3 Authority Key Identifier: keyid:2F:02:7F:0C:C9:9B:88:5F:A3:A9:A6:42:00:EF:DF:D6:EE:BC:4D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/89F4A9C1771C33E5F0F59FBB5A08F2D1D1A69C005395F8D0EBBD5FE3C81BC861/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89F4A9C1771C33E5F0F59FBB5A08F2D1D1A69C005395F8D0EBBD5FE3C81BC861/0/2F027F0CC99B885FA3A9A64200EFDFD6EEBC4D60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d3:cd:db:52:0a:64:66:30:8d:5c:d9:35:b4:c5:b4:da:26: 75:35:68:1d:0d:87:f9:a1:b7:69:6e:43:f5:f7:db:4c:50:66: 9b:6b:f0:85:72:51:30:3d:8a:ee:3d:b5:14:01:7b:f8:11:71: 39:db:1d:d1:70:2f:85:48:f9:e5:8e:b3:f9:4b:a2:95:cc:35: 75:49:12:5b:30:88:8d:0b:af:13:8a:fa:d0:73:73:93:6b:4d: 25:5d:8c:fc:ab:03:2c:1e:39:ca:91:3a:96:8d:fd:c7:d5:8f: f6:06:43:9c:d5:ad:11:4d:a5:45:cf:43:24:af:f2:65:11:eb: 6c:76:77:2a:ba:94:4c:e8:66:54:37:5a:bc:17:be:c5:89:98: 79:0f:8c:35:dd:55:34:a1:bb:08:f8:c5:6a:de:9b:06:ee:57: 68:7d:5b:34:4c:c7:bd:69:7a:09:59:f6:eb:10:4f:72:67:06: ea:98:9e:4d:1a:5c:6e:3a:e6:41:ce:c6:90:8e:56:c6:ff:f5: 0c:ed:45:02:0c:1c:80:ca:42:e7:66:f5:a6:a9:92:b5:ac:aa: 0b:13:e9:4f:de:24:85:fb:26:8b:0e:a6:16:cc:82:92:fb:b1: 0a:7e:b5:3e:40:ea:1b:cd:13:68:db:63:c3:2e:78:e8:96:fa: e1:fa:e8:12 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWnLUDjWY9X/BI5xBaGp7BE+wHnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwMjdGMENDOTlCODg1RkEzQTlBNjQyMDBFRkRGRDZF RUJDNEQ2MDAeFw0yNTExMDQwNzAxNDJaFw0yNTExMDgyMTA2NDJaMDMxMTAvBgNV BAMTKDAwNENGREIzQUE3QUQ1OTUyQ0EzN0YyMjg5M0ZEQTg2RDE4Nzg0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QAO6WAWrjyrE+yMQj7hIj56s i/EzzH0HIMzlddPG7oXwLls/D9eylCdreHW5gZtyNv7UhgozgcdmaTso5lAf0f60 +ncd/uQYlueSHPE6wpMaZz8DicYf1gJCjKkPs+xkueX87ZZqCJx84Ikr8auVQNXb zxYyw+hBDsuDrleelrLkNElEQC4+mdKU03GQjf9EKIH2vxGrSCiiaBAdINVsc7qV pjtn2a8D23KY0vsyXyAyUZnbHKSoVAtkOk2C/Sk3N+WNtGMC4P1SLpmsDSE5CywE cQ6bdgY6wUn4ZV1q2L7ZkgCPwQLU0m+IGCWqQhuqjAEEQQ9Oud6QInPpN/CZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAEz9s6p61ZUso38iiT/ahtGHhPAwHwYDVR0j BBgwFoAULwJ/DMmbiF+jqaZCAO/f1u68TWAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OUY0QTlDMTc3MUMzM0U1RjBGNTlGQkI1QTA4RjJEMUQx QTY5QzAwNTM5NUY4RDBFQkJENUZFM0M4MUJDODYxLzAvMkYwMjdGMENDOTlCODg1 RkEzQTlBNjQyMDBFRkRGRDZFRUJDNEQ2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjAyN0YwQ0M5OUI4ODVGQTNB OUE2NDIwMEVGREZENkVFQkM0RDYwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODlGNEE5QzE3NzFDMzNFNUYwRjU5RkJCNUEwOEYyRDFEMUE2OUMwMDUz OTVGOEQwRUJCRDVGRTNDODFCQzg2MS8wLzJGMDI3RjBDQzk5Qjg4NUZBM0E5QTY0 MjAwRUZERkQ2RUVCQzRENjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAP083bUgpkZjCNXNk1tMW02iZ1 NWgdDYf5obdpbkP199tMUGaba/CFclEwPYruPbUUAXv4EXE52x3RcC+FSPnljrP5 S6KVzDV1SRJbMIiNC68TivrQc3OTa00lXYz8qwMsHjnKkTqWjf3H1Y/2BkOc1a0R TaVFz0Mkr/JlEetsdncqupRM6GZUN1q8F77FiZh5D4w13VU0obsI+MVq3psG7ldo fVs0TMe9aXoJWfbrEE9yZwbqmJ5NGlxuOuZBzsaQjlbG//UM7UUCDByAykLnZvWm qZK1rKoLE+lP3iSF+yaLDqYWzIKS+7EKfrU+QOobzRNo22PDLnjolvrh+ugS -----END CERTIFICATE-----Generated at Wed Nov 5 08:15:58 2025 by rpki-client