$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.mft File: BAA5C366DB5F0C6DCA61A19157D44E0271E62268.mft (raw, json) Hash identifier: wdhV2xOnX+k00KVK2SVkUOygLaXR8b36aCdWEhAPHTU= Subject key identifier: EB:F8:81:C3:D1:09:1A:CF:C2:72:E1:0B:A9:C5:5E:AB:3A:01:3F:98 Authority key identifier: BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68 Certificate issuer: /CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268 Certificate serial: 39F7D3581889BA062F7223961756D490B450A34D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.mft Manifest number: AD Signing time: Mon 03 Nov 2025 12:56:36 +0000 Manifest this update: Mon 03 Nov 2025 12:51:36 +0000 Manifest next update: Sun 09 Nov 2025 06:09:36 +0000 Files and hashes: 1: BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl (hash: Vh7cwUeotXyUOcoIA6sWhZzc/WwMLXSeRuzUoV8U9k4=) 2: 34352e3137392e3139382e302f32342d3234203d3e203634323331.roa (hash: NgnV7WjTg8GevTpx1BQjAioRmGXbJnRgTO+BZUDGjyM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f7:d3:58:18:89:ba:06:2f:72:23:96:17:56:d4:90:b4:50:a3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268 Validity Not Before: Nov 3 12:51:36 2025 GMT Not After : Nov 9 06:09:36 2025 GMT Subject: CN=EBF881C3D1091ACFC272E10BA9C55EAB3A013F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:fc:8c:fd:de:50:aa:91:a6:be:af:7a:9e: 98:50:4a:f1:99:40:6c:42:f0:85:96:dc:80:3f:90: f4:57:92:8f:0d:33:ed:55:72:0a:77:8d:31:d7:91: 9c:5e:d4:50:73:e7:b1:b5:55:43:61:22:e9:f9:52: b2:2a:5d:a1:e9:ca:35:d2:29:c1:76:39:50:07:eb: 8a:3e:80:98:c9:e3:39:42:e1:bf:90:d9:d5:52:d4: 9f:db:7d:ad:7f:72:47:03:4b:9a:0d:cb:79:68:1e: 4d:3a:75:c8:7f:fe:04:4b:01:c7:69:ad:8b:db:e9: 07:70:4a:d8:58:82:b0:dc:c0:06:44:72:dc:d0:2b: d9:4a:6d:75:81:ff:ae:1e:65:25:d0:98:d4:e5:dc: 5b:f0:d0:d4:3a:f5:e2:ab:f0:53:6a:38:a5:09:ee: 92:84:6f:ab:78:86:5b:aa:b1:03:f6:32:07:17:36: a3:1d:c4:32:19:1e:9b:6a:57:82:94:09:b8:0d:c4: 6f:35:e3:a5:fe:84:c3:29:d8:00:fb:a0:3d:ea:43: 7f:94:1a:04:00:96:ba:06:36:fe:95:cf:bb:9d:3b: 49:06:d5:41:34:c6:da:7d:27:d8:88:fd:7b:ee:50: d7:50:6d:51:57:8c:69:ef:7f:d3:2b:b0:52:c5:e3: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F8:81:C3:D1:09:1A:CF:C2:72:E1:0B:A9:C5:5E:AB:3A:01:3F:98 X509v3 Authority Key Identifier: keyid:BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:24:e5:fa:e0:42:a4:67:09:52:cc:f0:70:86:4a:8c:09:c7: e7:31:51:e3:a5:f8:04:6d:39:12:b7:a0:28:35:81:8d:ef:5c: 5a:78:9f:ab:de:13:96:c8:c1:09:b5:5e:bb:86:b0:b2:ec:17: b3:bb:a9:a6:32:52:43:d4:be:ff:e7:6e:21:86:ed:02:0c:1a: cd:7e:95:84:a0:8a:99:45:32:62:c1:df:a2:75:5f:c9:e3:ae: 35:5c:03:78:fc:59:83:d9:9c:3f:d4:80:fd:a3:93:29:2a:73: 3c:ea:b1:3d:c4:a6:fc:5d:b7:a5:cc:04:3d:fc:e1:3c:f5:94: bf:d9:65:5b:31:72:f8:54:c3:9e:84:08:9c:6a:c5:7b:5d:20: 5d:7e:3d:d2:c1:76:74:24:bd:d4:dc:35:62:f8:54:bb:4e:43: 29:ad:03:61:3f:5f:fe:37:82:bb:3c:9e:92:c4:c6:36:68:77: 42:29:f6:7b:70:91:9a:48:58:9f:7e:7d:2c:ed:47:23:93:2d: 1a:77:64:32:f4:1a:36:f5:2c:57:90:4c:01:e5:08:e6:8f:7f: 1d:05:e9:4d:a3:3d:17:fb:d3:68:7c:f3:0b:8b:7c:11:41:d9: 64:82:9b:27:29:f2:88:09:06:bb:48:30:db:19:53:e8:67:73: cf:04:45:74 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOffTWBiJugYvciOWF1bUkLRQo00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNUMzNjZEQjVGMEM2RENBNjFBMTkxNTdENDRFMDI3 MUU2MjI2ODAeFw0yNTExMDMxMjUxMzZaFw0yNTExMDkwNjA5MzZaMDMxMTAvBgNV BAMTKEVCRjg4MUMzRDEwOTFBQ0ZDMjcyRTEwQkE5QzU1RUFCM0EwMTNGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMvyM/d5QqpGmvq96nphQSvGZ QGxC8IWW3IA/kPRXko8NM+1Vcgp3jTHXkZxe1FBz57G1VUNhIun5UrIqXaHpyjXS KcF2OVAH64o+gJjJ4zlC4b+Q2dVS1J/bfa1/ckcDS5oNy3loHk06dch//gRLAcdp rYvb6QdwSthYgrDcwAZEctzQK9lKbXWB/64eZSXQmNTl3Fvw0NQ69eKr8FNqOKUJ 7pKEb6t4hluqsQP2MgcXNqMdxDIZHptqV4KUCbgNxG8146X+hMMp2AD7oD3qQ3+U GgQAlroGNv6Vz7udO0kG1UE0xtp9J9iI/XvuUNdQbVFXjGnvf9MrsFLF45P1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6/iBw9EJGs/CcuELqcVeqzoBP5gwHwYDVR0j BBgwFoAUuqXDZttfDG3KYaGRV9ROAnHmImgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84REYyNEIxMzczQTg4MDUwMTkwQ0ZEREZCNENBREQ4OUVD M0Q4NTg3RkI1RTIzREM4MDAwRDVGMjFFNTU5OTA0LzAvQkFBNUMzNjZEQjVGMEM2 RENBNjFBMTkxNTdENDRFMDI3MUU2MjI2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUE1QzM2NkRCNUYwQzZEQ0E2 MUExOTE1N0Q0NEUwMjcxRTYyMjY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOERGMjRCMTM3M0E4ODA1MDE5MENGRERGQjRDQUREODlFQzNEODU4N0ZC NUUyM0RDODAwMEQ1RjIxRTU1OTkwNC8wL0JBQTVDMzY2REI1RjBDNkRDQTYxQTE5 MTU3RDQ0RTAyNzFFNjIyNjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxJOX64EKkZwlSzPBwhkqMCcfn MVHjpfgEbTkSt6AoNYGN71xaeJ+r3hOWyMEJtV67hrCy7Bezu6mmMlJD1L7/524h hu0CDBrNfpWEoIqZRTJiwd+idV/J4641XAN4/FmD2Zw/1ID9o5MpKnM86rE9xKb8 XbelzAQ9/OE89ZS/2WVbMXL4VMOehAicasV7XSBdfj3SwXZ0JL3U3DVi+FS7TkMp rQNhP1/+N4K7PJ6SxMY2aHdCKfZ7cJGaSFiffn0s7Ucjky0ad2Qy9Bo29SxXkEwB 5Qjmj38dBelNoz0X+9NofPMLi3wRQdlkgpsnKfKICQa7SDDbGVPoZ3PPBEV0 -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:24 2025 by rpki-client