$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft File: 215EF3A6C3425B383CEB59CE45AC9A7826229223.mft (raw, json) Hash identifier: lQieGp9tg+Y7cIVl0le6eHwhTPzZpgZaxMl4sGQDnI0= Subject key identifier: B8:49:58:1D:83:9D:BC:B0:3A:77:9A:45:22:A7:99:31:32:BC:FC:A9 Authority key identifier: 21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 Certificate issuer: /CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Certificate serial: 630B16FC1F602D1B4369BB94C61A019F7AE6E528 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft Manifest number: 012F Signing time: Tue 04 Nov 2025 18:38:05 +0000 Manifest this update: Tue 04 Nov 2025 18:33:05 +0000 Manifest next update: Sun 09 Nov 2025 13:47:05 +0000 Files and hashes: 1: 323030313a313363373a363030333a3a2f34382d3438203d3e203238303536.roa (hash: nawzzhum8MQWj7TXuzlCWw+jKq70TVRot/Zw7CNYRsE=) 2: 3230302e302e31382e302f32342d3234203d3e203238303536.roa (hash: /R6TNDHkC7qrc3ejA5Ozx8e7s7rp/3h3zNI5TVz6S0w=) 3: 215EF3A6C3425B383CEB59CE45AC9A7826229223.crl (hash: 4T1NipFdD9ErQNaorZ4prq1TwoRVrJKQ6tYyu9/vBIo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0b:16:fc:1f:60:2d:1b:43:69:bb:94:c6:1a:01:9f:7a:e6:e5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215EF3A6C3425B383CEB59CE45AC9A7826229223 Validity Not Before: Nov 4 18:33:05 2025 GMT Not After : Nov 9 13:47:05 2025 GMT Subject: CN=B849581D839DBCB03A779A4522A7993132BCFCA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:96:24:57:55:ea:89:0c:e0:7e:02:16:fd: a3:24:7d:0a:1b:68:f1:12:64:e2:16:03:fd:d6:da: 84:aa:f4:f1:88:0f:a5:a3:8d:d9:2e:ef:8b:d8:21: f0:03:c3:e9:e0:ad:ed:55:db:28:4f:7c:a3:3e:f6: 59:e7:fc:99:cd:83:7a:b9:fe:05:1a:ea:a4:4b:e1: c7:97:69:3c:cf:2b:0f:13:c9:0c:78:da:b6:25:82: 6c:f2:85:15:04:48:c1:36:dc:9c:32:e9:58:09:a5: 17:1e:e2:8e:aa:8f:b8:4a:93:70:89:29:15:ad:f9: a7:e2:e3:48:63:c4:cc:71:7a:91:31:8b:bf:98:88: 1a:c3:f1:d0:b4:7c:b9:49:aa:fb:c3:9c:70:f1:5d: 2e:9d:2f:ca:3f:fb:d7:b3:65:ac:00:71:9a:75:a3: d8:a7:28:ee:17:a1:7c:91:eb:4f:70:25:8a:53:08: bc:f5:db:0d:02:67:bf:77:7d:6b:6f:78:20:82:85: 8b:e8:60:34:1d:99:63:15:87:8e:95:f9:1d:20:b8: c6:49:f4:4e:db:7e:c9:06:f6:fc:d4:33:cc:65:6b: f1:ea:ee:73:64:83:25:3d:17:15:e9:e1:e2:27:07: a3:0c:a9:78:7a:ca:e2:1f:a8:d6:12:20:54:7d:25: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:58:1D:83:9D:BC:B0:3A:77:9A:45:22:A7:99:31:32:BC:FC:A9 X509v3 Authority Key Identifier: keyid:21:5E:F3:A6:C3:42:5B:38:3C:EB:59:CE:45:AC:9A:78:26:22:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA32E4A70FA6D288FB26D20CEF7A8D0287F008D64FB8266BF99A094F0B9BC9/0/215EF3A6C3425B383CEB59CE45AC9A7826229223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:8b:7e:a5:66:0d:ab:90:f6:29:21:43:ef:5a:4b:61:b4: 1e:de:d4:69:92:a9:c6:d7:9e:6f:c8:37:2d:8f:bc:23:f1:88: 63:3b:9e:2f:60:00:db:74:eb:54:b9:81:eb:3b:97:fb:20:87: 47:13:5e:22:ed:bc:07:c1:91:bd:cf:96:68:2c:8f:e6:1d:2b: 0d:e3:71:5e:a5:30:e7:e8:be:2f:50:35:7f:2f:2e:be:60:28: e5:b4:06:9b:eb:1b:6d:9e:29:c4:44:43:b2:57:74:cf:db:e1: a2:79:54:95:38:fc:66:11:e4:fb:37:57:28:94:95:06:5a:c6: 05:d1:26:b4:ec:3a:59:83:76:8c:29:86:63:63:7b:d8:8d:59: 52:ba:b8:4d:15:80:ae:37:2f:d5:cf:57:92:cd:b2:e3:05:ab: fa:cf:b9:82:8b:4c:ee:55:bb:8e:eb:26:1f:24:a9:71:bf:05: df:01:c7:fd:6b:2d:7b:13:8c:01:e8:85:22:b2:7f:7d:c6:a5: 96:ce:23:8d:89:ef:7c:7d:b3:d2:5e:fd:61:8b:db:6c:5d:fd: 28:27:e9:3e:59:01:a6:01:2d:97:44:27:a2:de:31:23:00:fc: d1:4b:97:b2:8c:84:e1:c8:ad:67:1b:eb:bf:93:69:f4:be:fb: 85:87:22:fa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYwsW/B9gLRtDabuUxhoBn3rm5SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RUYzQTZDMzQyNUIzODNDRUI1OUNFNDVBQzlBNzgy NjIyOTIyMzAeFw0yNTExMDQxODMzMDVaFw0yNTExMDkxMzQ3MDVaMDMxMTAvBgNV BAMTKEI4NDk1ODFEODM5REJDQjAzQTc3OUE0NTIyQTc5OTMxMzJCQ0ZDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYZYkV1XqiQzgfgIW/aMkfQob aPESZOIWA/3W2oSq9PGID6Wjjdku74vYIfADw+ngre1V2yhPfKM+9lnn/JnNg3q5 /gUa6qRL4ceXaTzPKw8TyQx42rYlgmzyhRUESME23Jwy6VgJpRce4o6qj7hKk3CJ KRWt+afi40hjxMxxepExi7+YiBrD8dC0fLlJqvvDnHDxXS6dL8o/+9ezZawAcZp1 o9inKO4XoXyR609wJYpTCLz12w0CZ793fWtveCCChYvoYDQdmWMVh46V+R0guMZJ 9E7bfskG9vzUM8xla/Hq7nNkgyU9FxXp4eInB6MMqXh6yuIfqNYSIFR9JbJ/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuElYHYOdvLA6d5pFIqeZMTK8/KkwHwYDVR0j BBgwFoAUIV7zpsNCWzg861nORayaeCYikiMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUZBMzJFNEE3MEZBNkQyODhGQjI2RDIwQ0VGN0E4RDAy ODdGMDA4RDY0RkI4MjY2QkY5OUEwOTRGMEI5QkM5LzAvMjE1RUYzQTZDMzQyNUIz ODNDRUI1OUNFNDVBQzlBNzgyNjIyOTIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTVFRjNBNkMzNDI1QjM4M0NF QjU5Q0U0NUFDOUE3ODI2MjI5MjIzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFGQTMyRTRBNzBGQTZEMjg4RkIyNkQyMENFRjdBOEQwMjg3RjAwOEQ2 NEZCODI2NkJGOTlBMDk0RjBCOUJDOS8wLzIxNUVGM0E2QzM0MjVCMzgzQ0VCNTlD RTQ1QUM5QTc4MjYyMjkyMjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAySot+pWYNq5D2KSFD71pLYbQe 3tRpkqnG155vyDctj7wj8YhjO54vYADbdOtUuYHrO5f7IIdHE14i7bwHwZG9z5Zo LI/mHSsN43FepTDn6L4vUDV/Ly6+YCjltAab6xttninEREOyV3TP2+GieVSVOPxm EeT7N1colJUGWsYF0Sa07DpZg3aMKYZjY3vYjVlSurhNFYCuNy/Vz1eSzbLjBav6 z7mCi0zuVbuO6yYfJKlxvwXfAcf9ay17E4wB6IUisn99xqWWziONie98fbPSXv1h i9tsXf0oJ+k+WQGmAS2XRCei3jEjAPzRS5eyjIThyK1nG+u/k2n0vvuFhyL6 -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:24 2025 by rpki-client