$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft File: 2A71760D473705CDBB004AFB079B76EBD8CC5513.mft (raw, json) Hash identifier: QByFVhhtihiuTMspsTWcHZ702WFI3AvleLQZ6LBW7S0= Subject key identifier: 03:E0:E1:11:FA:47:23:21:AF:A3:2B:A3:E0:55:8F:70:4F:E0:E9:6D Authority key identifier: 2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13 Certificate issuer: /CN=2A71760D473705CDBB004AFB079B76EBD8CC5513 Certificate serial: 3A61D365E92AA420BC1FC98B629DAD8D7E6C8269 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft Manifest number: 0130 Signing time: Mon 03 Nov 2025 16:03:12 +0000 Manifest this update: Mon 03 Nov 2025 15:58:12 +0000 Manifest next update: Sat 08 Nov 2025 08:46:12 +0000 Files and hashes: 1: 2A71760D473705CDBB004AFB079B76EBD8CC5513.crl (hash: mdkugx/c9qaec7xnF1PyFyh3Ycp523NIdBezGdMwEJI=) 2: 323830333a323961303a3a2f33322d3332203d3e20323637373130.roa (hash: ptd/0/3SvZkwTokJqQoCmXPgIupGKIv9wGKeWRT9Dfc=) 3: 34352e3136352e33362e302f32322d3234203d3e20323637373130.roa (hash: YZAhBfob4tS6gKEbcWtLHUP96DO37vaG33VFbGPaelo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 08:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:61:d3:65:e9:2a:a4:20:bc:1f:c9:8b:62:9d:ad:8d:7e:6c:82:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A71760D473705CDBB004AFB079B76EBD8CC5513 Validity Not Before: Nov 3 15:58:12 2025 GMT Not After : Nov 8 08:46:12 2025 GMT Subject: CN=03E0E111FA472321AFA32BA3E0558F704FE0E96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:37:97:90:52:12:70:77:04:be:bb:42:d6: c4:6a:0c:e4:2f:49:5e:34:8a:3d:aa:98:a5:72:df: 4a:2a:0f:57:c8:dc:01:61:77:81:1c:8d:77:bb:4f: 55:03:5d:24:5e:45:53:f9:15:4c:90:ac:c4:9d:62: 94:5f:0c:78:30:9b:d7:4e:87:a9:cc:ea:a9:68:df: bd:74:1a:3d:b4:cf:50:bc:ae:90:95:e0:11:c1:17: e0:fa:8c:71:2a:44:d8:56:45:f6:65:15:bb:c6:7f: f7:94:0b:d4:b5:21:4e:24:3e:30:53:de:e2:e8:c6: 27:22:f9:31:a9:09:77:ef:ab:04:d0:5a:44:b8:6c: 2e:6c:51:24:5a:90:83:3d:31:6b:a6:b3:a8:80:b7: 1b:f8:18:b9:96:54:3e:8a:a0:8e:7c:c4:73:2b:ec: da:7e:1c:2b:55:81:c0:b9:ae:5c:c6:3c:75:a4:46: fb:c8:94:5d:1d:16:1f:f7:67:a7:b8:b7:f7:0f:7f: 07:f1:ca:1b:e1:38:31:af:9a:d0:44:d5:b9:a8:03: 2a:54:0a:e3:24:79:61:99:f9:a5:26:b2:13:f5:69: 2e:d4:46:bc:5d:f1:f8:94:f4:e6:a5:3e:84:11:a8: d8:56:c1:df:05:b5:82:cd:93:2e:f5:87:8e:47:66: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E0:E1:11:FA:47:23:21:AF:A3:2B:A3:E0:55:8F:70:4F:E0:E9:6D X509v3 Authority Key Identifier: keyid:2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:59:43:30:c2:a3:84:80:78:59:2b:e2:a7:3a:23:04:00:e8: de:45:a2:88:70:94:8c:21:fd:99:df:44:0b:75:79:69:29:de: 1c:33:57:1d:70:20:67:49:1f:ba:93:63:0f:cf:9f:2b:db:df: 4a:a2:91:5d:43:bc:f5:26:63:79:bc:10:c5:9d:11:4c:11:39: e3:e9:b8:38:41:f6:e4:84:ec:ad:5b:1c:a9:32:e7:f6:0e:5c: 2d:90:a0:70:1a:08:dc:50:a3:09:95:83:b3:78:58:e4:41:08: 40:36:ba:fd:86:de:eb:71:fd:72:61:8b:07:a6:a0:e1:d3:7e: c0:46:c3:0a:9b:c8:f3:71:ff:67:e1:d7:b8:3a:ab:0e:0b:81: f8:d7:18:0e:22:5c:1f:86:78:ae:3b:2a:9a:81:c9:04:30:9f: 71:b2:3f:9a:f0:b5:ce:ed:e0:af:89:51:59:b2:d6:e4:6b:9a: 80:b7:e7:b1:02:68:57:94:72:b6:68:42:bf:3e:77:ed:53:8a: b9:29:d1:e7:91:52:e8:4f:f3:0c:fb:b1:22:2d:cc:ec:bb:5d: 94:8d:9a:55:94:ce:72:f3:fe:65:58:cb:3d:af:ab:40:e7:fb: 3e:83:8a:72:47:90:fd:6e:b2:9e:63:96:fb:b0:eb:5a:95:3f: 4e:e0:89:f3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOmHTZekqpCC8H8mLYp2tjX5sgmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE3MTc2MEQ0NzM3MDVDREJCMDA0QUZCMDc5Qjc2RUJE OENDNTUxMzAeFw0yNTExMDMxNTU4MTJaFw0yNTExMDgwODQ2MTJaMDMxMTAvBgNV BAMTKDAzRTBFMTExRkE0NzIzMjFBRkEzMkJBM0UwNTU4RjcwNEZFMEU5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyzeXkFIScHcEvrtC1sRqDOQv SV40ij2qmKVy30oqD1fI3AFhd4EcjXe7T1UDXSReRVP5FUyQrMSdYpRfDHgwm9dO h6nM6qlo3710Gj20z1C8rpCV4BHBF+D6jHEqRNhWRfZlFbvGf/eUC9S1IU4kPjBT 3uLoxici+TGpCXfvqwTQWkS4bC5sUSRakIM9MWums6iAtxv4GLmWVD6KoI58xHMr 7Np+HCtVgcC5rlzGPHWkRvvIlF0dFh/3Z6e4t/cPfwfxyhvhODGvmtBE1bmoAypU CuMkeWGZ+aUmshP1aS7URrxd8fiU9OalPoQRqNhWwd8FtYLNky71h45HZrNDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUA+DhEfpHIyGvoyuj4FWPcE/g6W0wHwYDVR0j BBgwFoAUKnF2DUc3Bc27AEr7B5t269jMVRMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QTg0NzRBODQwQjUzMDIzNUMxRTU5MDlCODU3OUZBNzFF MERGODY2OTk2NEU0MjgxREI3MDUwNDM3RTZBNkI3LzAvMkE3MTc2MEQ0NzM3MDVD REJCMDA0QUZCMDc5Qjc2RUJEOENDNTUxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQTcxNzYwRDQ3MzcwNUNEQkIw MDRBRkIwNzlCNzZFQkQ4Q0M1NTEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEE4NDc0QTg0MEI1MzAyMzVDMUU1OTA5Qjg1NzlGQTcxRTBERjg2Njk5 NjRFNDI4MURCNzA1MDQzN0U2QTZCNy8wLzJBNzE3NjBENDczNzA1Q0RCQjAwNEFG QjA3OUI3NkVCRDhDQzU1MTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8WUMwwqOEgHhZK+KnOiMEAOje RaKIcJSMIf2Z30QLdXlpKd4cM1cdcCBnSR+6k2MPz58r299KopFdQ7z1JmN5vBDF nRFMETnj6bg4QfbkhOytWxypMuf2DlwtkKBwGgjcUKMJlYOzeFjkQQhANrr9ht7r cf1yYYsHpqDh037ARsMKm8jzcf9n4de4OqsOC4H41xgOIlwfhniuOyqagckEMJ9x sj+a8LXO7eCviVFZstbka5qAt+exAmhXlHK2aEK/PnftU4q5KdHnkVLoT/MM+7Ei Lczsu12UjZpVlM5y8/5lWMs9r6tA5/s+g4pyR5D9brKeY5b7sOtalT9O4Inz -----END CERTIFICATE-----Generated at Wed Nov 5 05:33:22 2025 by rpki-client