$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.mft File: 9FB011501E0E167D04273DED442BE972FA3836F0.mft (raw, json) Hash identifier: GkuGr/Zy0LOEbqbrEaeOhcOuzaZ+yAV9zcKKcOZrVko= Subject key identifier: 49:C0:F0:84:6A:1E:9F:80:A3:24:19:89:E7:C3:07:72:82:22:50:3A Authority key identifier: 9F:B0:11:50:1E:0E:16:7D:04:27:3D:ED:44:2B:E9:72:FA:38:36:F0 Certificate issuer: /CN=9FB011501E0E167D04273DED442BE972FA3836F0 Certificate serial: 38B8F582E4F97565ED26BE20B47DE153713B7AB5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.mft Manifest number: 012F Signing time: Tue 04 Nov 2025 20:44:11 +0000 Manifest this update: Tue 04 Nov 2025 20:39:11 +0000 Manifest next update: Mon 10 Nov 2025 04:58:11 +0000 Files and hashes: 1: 9FB011501E0E167D04273DED442BE972FA3836F0.crl (hash: kB9E/C6KuYrGeJ0fMALdAanqwVUdlI2zvj14nUAC1ao=) 2: 323830313a31303a353830303a3a2f34382d3438203d3e203139343239.roa (hash: NepkRGZpKRFGiGQVoSpAsWVzUVN6Qp81kOuiqhTbHHg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.crl rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b8:f5:82:e4:f9:75:65:ed:26:be:20:b4:7d:e1:53:71:3b:7a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB011501E0E167D04273DED442BE972FA3836F0 Validity Not Before: Nov 4 20:39:11 2025 GMT Not After : Nov 10 04:58:11 2025 GMT Subject: CN=49C0F0846A1E9F80A3241989E7C307728222503A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:79:6e:64:a1:e4:82:f6:94:2a:22:fd:c1:33: a4:9d:6e:a0:34:37:e6:a2:6f:1a:46:b1:fa:01:b6: 26:ff:51:3a:45:ea:75:1c:ef:0c:5a:40:f6:bf:88: f5:46:7f:81:f1:13:66:da:1a:b5:e8:ee:6a:e2:bf: e2:be:87:f6:89:4a:83:59:55:50:ef:c0:cb:c1:0e: a0:92:b8:72:b9:49:d0:48:b8:2a:89:93:ee:a2:ce: ef:d9:fb:77:d2:33:13:62:70:8f:0d:b5:4a:e8:a6: 0e:e2:60:a4:02:8b:ea:00:a5:50:45:44:93:92:33: 89:b9:58:af:07:12:00:74:29:82:01:5d:e4:e6:30: b2:54:ec:dd:c9:ec:ed:79:79:2b:64:3a:4f:2c:fc: 77:55:55:e9:9a:0a:be:8e:16:98:0a:75:bf:0b:3e: b8:fb:a4:0e:63:88:99:48:19:08:6e:61:bc:61:40: 2a:d8:f5:0f:05:6b:9a:30:e5:4d:46:90:62:08:2a: 0e:89:6b:9c:39:dd:c1:6e:aa:f2:a3:58:cb:8c:a5: a7:68:0d:61:6e:dc:34:6e:6a:0c:fc:08:88:d4:d6: e3:02:79:b9:11:51:5d:7c:9e:31:67:9e:81:85:91: fd:f7:5e:72:d9:ba:47:9e:cc:d4:38:5d:56:14:4d: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C0:F0:84:6A:1E:9F:80:A3:24:19:89:E7:C3:07:72:82:22:50:3A X509v3 Authority Key Identifier: keyid:9F:B0:11:50:1E:0E:16:7D:04:27:3D:ED:44:2B:E9:72:FA:38:36:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:86:ca:25:3c:43:b0:03:cd:f4:59:58:12:47:63:5f:26:d0: 04:7c:c1:2a:d7:f3:2b:e1:d7:55:65:a1:3a:0f:9a:43:f4:ba: c9:7d:48:b1:f2:17:eb:bb:52:72:1e:5a:ff:f1:0c:2e:83:da: 54:71:8f:86:e8:5a:6e:c4:2f:d9:c1:04:81:63:ca:c2:d6:b1: 42:c4:ff:c2:a3:a4:5b:e4:c9:be:a7:2f:e9:10:fd:6e:2a:05: d7:91:05:1d:23:72:b5:1b:ab:70:e3:2b:a5:5d:96:43:6d:2f: 4e:e5:73:94:2f:d1:7a:e0:06:ab:27:98:27:f4:6c:69:32:d4: 06:00:31:b7:a2:d8:c8:ff:2a:a8:ee:21:06:a6:78:ce:0b:31: 4b:f2:68:80:b2:9c:87:0f:56:70:d0:34:37:e0:80:09:dc:55: 45:8a:54:d6:e0:48:16:f3:25:56:ee:83:99:14:ca:31:1b:55: ab:c7:b5:e8:92:22:a7:6f:6d:04:d5:3e:b4:46:f5:e0:5a:8d: 82:37:6d:81:50:ab:42:7d:9b:56:e5:46:d7:bb:db:e4:86:ae: 64:1d:d3:77:55:4c:9f:83:a9:35:06:fc:36:4f:72:bf:20:9c: 70:83:bb:a1:40:f5:44:0a:11:b2:41:f6:44:b4:d3:10:7a:2d: 88:05:46:e5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOLj1guT5dWXtJr4gtH3hU3E7erUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCMDExNTAxRTBFMTY3RDA0MjczREVENDQyQkU5NzJG QTM4MzZGMDAeFw0yNTExMDQyMDM5MTFaFw0yNTExMTAwNDU4MTFaMDMxMTAvBgNV BAMTKDQ5QzBGMDg0NkExRTlGODBBMzI0MTk4OUU3QzMwNzcyODIyMjUwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMeW5koeSC9pQqIv3BM6SdbqA0 N+aibxpGsfoBtib/UTpF6nUc7wxaQPa/iPVGf4HxE2baGrXo7mriv+K+h/aJSoNZ VVDvwMvBDqCSuHK5SdBIuCqJk+6izu/Z+3fSMxNicI8NtUropg7iYKQCi+oApVBF RJOSM4m5WK8HEgB0KYIBXeTmMLJU7N3J7O15eStkOk8s/HdVVemaCr6OFpgKdb8L Prj7pA5jiJlIGQhuYbxhQCrY9Q8Fa5ow5U1GkGIIKg6Ja5w53cFuqvKjWMuMpado DWFu3DRuagz8CIjU1uMCebkRUV18njFnnoGFkf33XnLZukeezNQ4XVYUTaq5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUScDwhGoen4CjJBmJ58MHcoIiUDowHwYDVR0j BBgwFoAUn7ARUB4OFn0EJz3tRCvpcvo4NvAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NDI4MTIzQ0Y2RjQzNTI2Mzc5MjBCNUQyMTcxMzg3NTZE REEzQjU1NzIyODg5QzNFQzdFNTQwMTRCM0YyOEZFLzAvOUZCMDExNTAxRTBFMTY3 RDA0MjczREVENDQyQkU5NzJGQTM4MzZGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RkIwMTE1MDFFMEUxNjdEMDQy NzNERUQ0NDJCRTk3MkZBMzgzNkYwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTQyODEyM0NGNkY0MzUyNjM3OTIwQjVEMjE3MTM4NzU2RERBM0I1NTcy Mjg4OUMzRUM3RTU0MDE0QjNGMjhGRS8wLzlGQjAxMTUwMUUwRTE2N0QwNDI3M0RF RDQ0MkJFOTcyRkEzODM2RjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzhsolPEOwA830WVgSR2NfJtAE fMEq1/Mr4ddVZaE6D5pD9LrJfUix8hfru1JyHlr/8Qwug9pUcY+G6FpuxC/ZwQSB Y8rC1rFCxP/Co6Rb5Mm+py/pEP1uKgXXkQUdI3K1G6tw4yulXZZDbS9O5XOUL9F6 4AarJ5gn9GxpMtQGADG3otjI/yqo7iEGpnjOCzFL8miAspyHD1Zw0DQ34IAJ3FVF ilTW4EgW8yVW7oOZFMoxG1Wrx7XokiKnb20E1T60RvXgWo2CN22BUKtCfZtW5UbX u9vkhq5kHdN3VUyfg6k1Bvw2T3K/IJxwg7uhQPVEChGyQfZEtNMQei2IBUbl -----END CERTIFICATE-----Generated at Wed Nov 5 15:52:45 2025 by rpki-client