$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft File: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft (raw, json) Hash identifier: BV3LhH4k8DhB6LOCTKP8+h87gJ18inPCfJzevnDqM8I= Subject key identifier: 32:94:41:51:D5:77:41:58:68:35:EA:CB:96:1B:06:E3:B6:84:03:08 Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 Certificate issuer: /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Certificate serial: 2AA9CFF3F4348E7B71C1DDFFE3C8FB2B6E8F87F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft Manifest number: 0135 Signing time: Tue 04 Nov 2025 03:24:21 +0000 Manifest this update: Tue 04 Nov 2025 03:19:21 +0000 Manifest next update: Sun 09 Nov 2025 10:58:21 +0000 Files and hashes: 1: 3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa (hash: ojMvfXSAXgYg2HNtqEcUZn9oeO+XyPGGrQ5gFDlrsbM=) 2: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl (hash: cVuDnIhFm0FHjBgGwfBNdV461n+vcNulzlE2Qh8odRQ=) 3: 323830333a333265303a3a2f33322d3438203d3e20323639393238.roa (hash: rKev2828foJAgoHcNjntqYKVDlmpjTHRQcC9MyFK2yQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a9:cf:f3:f4:34:8e:7b:71:c1:dd:ff:e3:c8:fb:2b:6e:8f:87:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Validity Not Before: Nov 4 03:19:21 2025 GMT Not After : Nov 9 10:58:21 2025 GMT Subject: CN=32944151D57741586835EACB961B06E3B6840308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:de:3f:74:c6:6b:c8:eb:77:39:d3:ff:e9: 13:a8:14:dd:a9:ac:15:42:67:62:08:60:c6:24:a7: 1c:aa:b1:26:9e:1f:d5:dd:6e:d3:de:7e:ac:79:c2: ea:57:60:92:56:9a:63:aa:a9:38:61:76:31:d2:8f: 94:0f:20:f6:be:ce:38:66:0f:9c:2d:f1:88:44:f6: ab:3a:5e:6a:53:bc:45:f0:0e:a1:23:74:40:bd:dd: dd:e4:01:01:65:53:29:db:2d:54:1b:7e:59:ad:1c: 8d:ec:3a:64:4c:98:55:4e:ff:e3:79:57:ac:f4:eb: 3e:3a:65:db:a1:c4:bf:bf:a2:e7:d0:77:05:a4:1f: 57:79:c3:6c:57:74:9b:43:a4:1d:4d:82:4e:ad:6f: e5:54:ff:9a:56:7b:0c:47:2f:cb:b0:25:9f:03:75: f8:37:99:6e:1e:eb:d8:f5:1d:93:66:cb:14:6a:91: a1:c8:4d:cb:a2:86:95:7e:1a:af:4a:70:41:c9:6a: 97:42:ff:24:ff:db:f3:2a:70:f2:33:8c:e2:39:c7: e5:db:52:5b:ac:f3:a7:0e:6f:07:f1:40:23:37:1b: 9e:bf:5b:15:f9:3a:11:12:4e:78:a0:c4:97:cc:1e: 74:69:e6:0f:4a:0e:02:0f:a4:fd:9b:51:e5:8b:13: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:94:41:51:D5:77:41:58:68:35:EA:CB:96:1B:06:E3:B6:84:03:08 X509v3 Authority Key Identifier: keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:cb:48:ba:ae:2a:88:cf:9e:36:1f:33:45:5d:35:88:f0:94: 95:ca:e7:97:1f:16:ec:8b:45:8f:b2:da:5b:cc:fd:98:dc:2f: 4e:40:af:7b:fc:0f:d9:14:ef:cf:c9:0b:0d:64:0f:5f:0a:9b: cd:2d:c7:31:b5:bf:ad:09:ad:f2:aa:a7:b8:c0:c9:38:4a:27: c2:e8:3d:60:d8:06:a1:bb:fc:ba:0d:ff:31:f6:ae:1a:8f:20: eb:d3:cc:9e:59:a1:68:ff:ad:9e:71:0c:00:45:91:bc:54:0e: 76:92:cd:9e:c7:7c:b3:18:34:27:ea:8c:06:ea:53:5e:ee:fe: b6:13:e5:35:3f:23:fc:eb:15:a6:57:1f:e8:5f:5b:41:d5:9a: 10:a9:ff:0a:fa:c3:9a:69:40:1f:81:4e:90:d7:55:dc:94:9b: f8:f8:8f:33:8d:60:ee:6b:6d:64:15:92:9d:55:bd:36:ee:c6: 6b:d1:ef:b5:cb:d7:7b:e6:28:e8:c4:9a:f2:21:93:89:9c:5b: 6c:08:4c:07:47:25:73:47:a6:ac:15:8d:fc:5a:ae:1d:e3:8a: 70:21:f5:72:64:4d:e1:f4:b4:12:4e:77:90:e4:5c:60:a7:76: 9e:0f:7f:98:36:82:97:d9:72:5a:95:a4:af:d6:f8:c9:ff:29: d3:d0:b3:6a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKqnP8/Q0jntxwd3/48j7K26Ph/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIyQ0Q0RDZENDVFQUMyNUVFOTdENUU2NkJFOTM4RUYz MUE2MTY4NjAeFw0yNTExMDQwMzE5MjFaFw0yNTExMDkxMDU4MjFaMDMxMTAvBgNV BAMTKDMyOTQ0MTUxRDU3NzQxNTg2ODM1RUFDQjk2MUIwNkUzQjY4NDAzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2N4/dMZryOt3OdP/6ROoFN2p rBVCZ2IIYMYkpxyqsSaeH9XdbtPefqx5wupXYJJWmmOqqThhdjHSj5QPIPa+zjhm D5wt8YhE9qs6XmpTvEXwDqEjdEC93d3kAQFlUynbLVQbflmtHI3sOmRMmFVO/+N5 V6z06z46ZduhxL+/oufQdwWkH1d5w2xXdJtDpB1Ngk6tb+VU/5pWewxHL8uwJZ8D dfg3mW4e69j1HZNmyxRqkaHITcuihpV+Gq9KcEHJapdC/yT/2/MqcPIzjOI5x+Xb Ulus86cObwfxQCM3G56/WxX5OhESTnigxJfMHnRp5g9KDgIPpP2bUeWLE8H/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMpRBUdV3QVhoNerLlhsG47aEAwgwHwYDVR0j BBgwFoAUKyzU1tRerCXul9Xma+k47zGmFoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84Qjg4NEY1QTlGQTQ3MjhFODYwOEEzRERGODIxODA4NDkx M0I4QzE2QzdEMEZDOUZCMUUzODU3NEZERDE1NDU0LzAvMkIyQ0Q0RDZENDVFQUMy NUVFOTdENUU2NkJFOTM4RUYzMUE2MTY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjJDRDRENkQ0NUVBQzI1RUU5 N0Q1RTY2QkU5MzhFRjMxQTYxNjg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEI4ODRGNUE5RkE0NzI4RTg2MDhBM0RERjgyMTgwODQ5MTNCOEMxNkM3 RDBGQzlGQjFFMzg1NzRGREQxNTQ1NC8wLzJCMkNENEQ2RDQ1RUFDMjVFRTk3RDVF NjZCRTkzOEVGMzFBNjE2ODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4y0i6riqIz542HzNFXTWI8JSV yueXHxbsi0WPstpbzP2Y3C9OQK97/A/ZFO/PyQsNZA9fCpvNLccxtb+tCa3yqqe4 wMk4SifC6D1g2Aahu/y6Df8x9q4ajyDr08yeWaFo/62ecQwARZG8VA52ks2ex3yz GDQn6owG6lNe7v62E+U1PyP86xWmVx/oX1tB1ZoQqf8K+sOaaUAfgU6Q11XclJv4 +I8zjWDua21kFZKdVb027sZr0e+1y9d75ijoxJryIZOJnFtsCEwHRyVzR6asFY38 Wq4d44pwIfVyZE3h9LQSTneQ5Fxgp3aeD3+YNoKX2XJalaSv1vjJ/ynT0LNq -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:40 2025 by rpki-client