$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft File: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json) Hash identifier: N3s8Enj3A3HTc1V4kJVpu/ZNkJO+wKQGiGwjEDj1gjw= Subject key identifier: B7:15:53:9D:DB:8B:BA:0B:26:AB:EF:A3:29:5C:2D:0C:B2:50:C4:35 Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 Certificate issuer: /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Certificate serial: 33D72449115DD0D17CC53794C419BAAFD3B5BBAD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft Manifest number: 64 Signing time: Mon 03 Nov 2025 18:44:56 +0000 Manifest this update: Mon 03 Nov 2025 18:39:56 +0000 Manifest next update: Sun 09 Nov 2025 02:36:56 +0000 Files and hashes: 1: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: rPV5SX8ypiWVuO0JcNySME9shz4PN4rU/cMsltC02vQ=) 2: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: xT9XwSauYoSUnu1hhUiyvbXy1q8NqQprbVYTgbnc4vM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d7:24:49:11:5d:d0:d1:7c:c5:37:94:c4:19:ba:af:d3:b5:bb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Validity Not Before: Nov 3 18:39:56 2025 GMT Not After : Nov 9 02:36:56 2025 GMT Subject: CN=B715539DDB8BBA0B26ABEFA3295C2D0CB250C435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:14:61:a4:14:0b:2a:bb:5e:2a:42:7e:d9:b7: 75:a6:ec:24:89:96:1c:5d:87:07:0e:e3:fd:bb:db: c1:33:6e:28:88:6e:e2:b6:d0:b9:fb:49:84:04:5e: 50:b0:b0:ba:3a:19:c1:4d:62:40:06:98:f7:bb:82: 42:85:a1:e8:75:f1:1d:76:bc:81:f1:53:10:19:98: 5a:0b:62:19:ba:44:90:43:65:78:e7:89:9b:6d:0d: d1:03:ed:cb:55:f9:80:be:5b:30:f4:27:1f:56:a4: 17:94:f9:0d:28:8a:16:61:22:e0:e6:cd:65:e5:6c: b2:b6:8f:4d:0c:15:18:84:d1:d7:36:43:96:a1:6a: 4a:ec:99:f3:da:28:ad:51:b3:e9:85:dc:21:37:3a: 99:11:d8:b0:48:e9:62:b5:7b:f6:7d:e6:09:71:93: 3a:c9:7f:03:8f:78:d0:26:83:4b:2d:4e:da:53:e7: ca:a5:39:30:11:97:45:21:1f:fd:a9:b9:11:fd:49: 9a:74:1a:89:e4:d6:11:46:dc:a9:5d:a1:4a:10:13: 99:cd:0d:09:bb:a0:e1:9d:3e:fd:0f:64:23:c6:af: bd:c1:f7:9c:07:3d:05:d2:72:67:8c:d7:8b:6d:3a: b0:03:ff:a7:47:80:a2:46:e5:2c:49:7c:07:a9:e4: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:53:9D:DB:8B:BA:0B:26:AB:EF:A3:29:5C:2D:0C:B2:50:C4:35 X509v3 Authority Key Identifier: keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:22:9a:ad:6c:19:de:79:b5:48:90:57:9a:03:1b:1d:3a:83: 95:39:d5:45:52:30:a1:dc:a4:91:2b:37:bf:13:a1:38:e8:92: 43:09:d4:80:12:ae:d2:83:5a:4b:79:09:12:2a:87:fa:47:b9: a3:e8:0f:fb:a6:10:4f:40:eb:2e:61:40:ef:60:d0:5a:d1:a5: 57:75:58:c7:12:52:75:43:e0:87:67:36:0a:d1:e9:a0:ed:c8: f5:f4:d7:87:95:f0:9c:30:7d:b7:65:d7:b7:76:ac:68:60:a8: 6c:9f:7b:36:66:c7:57:75:17:7f:98:40:f0:01:58:b4:25:0f: 75:c5:4f:5c:fc:28:e0:a2:10:1f:4e:45:53:ca:3c:63:eb:a0: f6:69:bc:03:d6:fd:f1:86:23:38:95:61:7b:57:72:71:97:4b: 40:87:d6:ec:80:02:49:2a:9e:1b:bc:04:22:81:a6:96:f6:e2: 64:92:e9:d7:23:b8:76:30:71:ef:2d:85:57:1f:4d:03:65:af: b2:20:28:90:11:0a:3c:f5:55:6c:68:eb:5c:c3:fa:ed:72:3c: f1:b4:94:a8:90:b4:db:48:09:f1:d9:3e:69:24:4c:66:3d:27: 00:f4:f3:26:c9:68:ae:03:d0:6a:f5:21:cf:ac:fb:4a:ef:90: bc:7e:fe:06 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUM9ckSRFd0NF8xTeUxBm6r9O1u60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2 NzFCMEE3MjAeFw0yNTExMDMxODM5NTZaFw0yNTExMDkwMjM2NTZaMDMxMTAvBgNV BAMTKEI3MTU1MzlEREI4QkJBMEIyNkFCRUZBMzI5NUMyRDBDQjI1MEM0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFGGkFAsqu14qQn7Zt3Wm7CSJ lhxdhwcO4/2728EzbiiIbuK20Ln7SYQEXlCwsLo6GcFNYkAGmPe7gkKFoeh18R12 vIHxUxAZmFoLYhm6RJBDZXjniZttDdED7ctV+YC+WzD0Jx9WpBeU+Q0oihZhIuDm zWXlbLK2j00MFRiE0dc2Q5ahakrsmfPaKK1Rs+mF3CE3OpkR2LBI6WK1e/Z95glx kzrJfwOPeNAmg0stTtpT58qlOTARl0UhH/2puRH9SZp0Gonk1hFG3KldoUoQE5nN DQm7oOGdPv0PZCPGr73B95wHPQXScmeM14ttOrAD/6dHgKJG5SxJfAep5K7XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUtxVTnduLugsmq++jKVwtDLJQxDUwHwYDVR0j BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzg4NDJCQkVFRkE4NUZFMzcxQkRFQkM0 REJCMTcwOUVCNjcxQjBBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5IpqtbBneebVIkFeaAxsdOoOV OdVFUjCh3KSRKze/E6E46JJDCdSAEq7Sg1pLeQkSKof6R7mj6A/7phBPQOsuYUDv YNBa0aVXdVjHElJ1Q+CHZzYK0emg7cj19NeHlfCcMH23Zde3dqxoYKhsn3s2ZsdX dRd/mEDwAVi0JQ91xU9c/CjgohAfTkVTyjxj66D2abwD1v3xhiM4lWF7V3Jxl0tA h9bsgAJJKp4bvAQigaaW9uJkkunXI7h2MHHvLYVXH00DZa+yICiQEQo89VVsaOtc w/rtcjzxtJSokLTbSAnx2T5pJExmPScA9PMmyWiuA9Bq9SHPrPtK75C8fv4G -----END CERTIFICATE-----Generated at Wed Nov 5 20:23:48 2025 by rpki-client