$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft File: B4FABCBFF83288B64BE540323B458825C54A4663.mft (raw, json) Hash identifier: NjiwBqzfMq5D33gGFjOmtTNFl0AWqwvG2UKkUCrJg4k= Subject key identifier: 00:E0:CE:C1:CA:87:13:2B:94:E5:C0:2A:9E:E2:FC:9A:F4:9A:47:0A Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63 Certificate issuer: /CN=B4FABCBFF83288B64BE540323B458825C54A4663 Certificate serial: 23CC3631458EA0AE3ED84EAF2D204576039CC315 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft Manifest number: 9A Signing time: Mon 03 Nov 2025 19:10:09 +0000 Manifest this update: Mon 03 Nov 2025 19:05:09 +0000 Manifest next update: Sun 09 Nov 2025 09:30:09 +0000 Files and hashes: 1: 34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa (hash: F6bsnRTCs627fuNyoRTlesCcezkPMMnlWqt9UKcbXIQ=) 2: B4FABCBFF83288B64BE540323B458825C54A4663.crl (hash: 4ta/nWPJnRK07WYp26i77KDKA5AF4XOVBJx+vugIqzc=) 3: 323830333a376435303a3a2f33322d3332203d3e20323733383739.roa (hash: gzSC2D7O692wiyR6GMXy+7RzrosHCQ5eG9qU0D/BQhI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cc:36:31:45:8e:a0:ae:3e:d8:4e:af:2d:20:45:76:03:9c:c3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663 Validity Not Before: Nov 3 19:05:09 2025 GMT Not After : Nov 9 09:30:09 2025 GMT Subject: CN=00E0CEC1CA87132B94E5C02A9EE2FC9AF49A470A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:fa:11:f9:bf:98:2a:7a:68:ba:f1:d4:9c: 32:8b:8e:9c:8e:28:cd:ec:c1:ff:68:85:81:77:da: bf:3c:cc:cf:8f:e7:da:bc:4d:b9:05:e1:74:2f:62: 3b:a6:6e:95:4a:41:8f:0a:ef:bc:b5:93:d2:85:ef: 8f:0a:4d:30:32:b6:40:8c:5c:a5:d0:69:1f:e6:c9: 9c:c9:3f:d6:36:d1:0a:fb:de:51:a0:48:dd:b2:7e: 3d:23:61:59:76:ea:8f:fe:13:5b:cf:34:42:9a:c2: f1:15:88:36:a8:6a:1e:30:8d:9b:55:8b:ec:f4:85: f8:d0:b5:d8:11:7a:9a:b9:df:59:18:22:e2:50:6b: f6:3b:a5:7f:4e:e6:77:f4:3d:08:63:11:c7:30:68: dc:c3:f1:86:00:58:9d:4b:79:ea:c0:9a:f7:6a:9a: a8:57:2f:fc:99:31:9b:74:59:17:a3:ac:43:b0:07: c1:ea:3b:b3:00:0d:88:cd:42:7f:28:9b:77:d9:42: fa:e3:5b:67:7a:e7:de:e7:11:88:58:73:f7:b7:29: 4e:6c:96:d8:79:d8:fd:be:9c:57:f7:20:69:e2:2e: 9a:0e:de:82:49:9a:ec:9f:d5:c1:04:b6:36:7d:85: fa:25:87:40:7e:31:af:45:b5:cd:3c:f3:be:95:c5: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E0:CE:C1:CA:87:13:2B:94:E5:C0:2A:9E:E2:FC:9A:F4:9A:47:0A X509v3 Authority Key Identifier: keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7b:90:4f:75:e4:39:2b:9c:89:35:f9:1e:00:4b:dc:92:a7: d0:3b:30:c3:7f:80:4d:b1:0b:75:8e:5b:59:52:ac:b9:71:1c: c3:17:31:b8:8a:94:04:7c:85:ba:36:05:90:88:35:48:97:bd: 83:f1:3c:06:21:df:9a:08:8d:ca:13:98:8e:22:54:c8:f5:5b: 6e:d3:a1:21:d1:1f:82:5b:5d:9b:d4:20:a1:03:fb:5f:76:5e: d2:61:39:ae:2a:1c:7e:c5:6a:01:35:e8:ea:1c:d8:9f:d1:cd: 3c:b1:84:54:34:b7:09:3b:95:fc:be:e5:7e:fe:82:08:ff:9f: 7c:e8:ff:aa:11:3a:f2:af:6f:bd:47:d4:95:5d:6b:47:35:87: f7:a5:a2:60:bf:d5:7d:e7:5b:00:71:1b:c3:92:99:e3:7a:79: a6:73:be:cc:c6:17:35:69:0b:41:34:9c:5c:17:2a:8f:9f:87: fc:c2:30:5e:f4:21:43:79:9d:33:a5:7f:f3:f3:79:e3:59:39: fa:9a:dd:b8:aa:72:42:97:c0:39:64:05:7d:4b:e9:9c:09:df: 15:9e:e4:e8:a4:6d:ce:dd:c0:03:4b:18:7d:21:cd:50:ea:fc: f8:ed:86:9d:f2:63:bc:1c:fe:a9:1e:05:a6:6d:0f:a7:3b:bb: dd:23:52:ac -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI8w2MUWOoK4+2E6vLSBFdgOcwxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRGQUJDQkZGODMyODhCNjRCRTU0MDMyM0I0NTg4MjVD NTRBNDY2MzAeFw0yNTExMDMxOTA1MDlaFw0yNTExMDkwOTMwMDlaMDMxMTAvBgNV BAMTKDAwRTBDRUMxQ0E4NzEzMkI5NEU1QzAyQTlFRTJGQzlBRjQ5QTQ3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd6foR+b+YKnpouvHUnDKLjpyO KM3swf9ohYF32r88zM+P59q8TbkF4XQvYjumbpVKQY8K77y1k9KF748KTTAytkCM XKXQaR/myZzJP9Y20Qr73lGgSN2yfj0jYVl26o/+E1vPNEKawvEViDaoah4wjZtV i+z0hfjQtdgRepq531kYIuJQa/Y7pX9O5nf0PQhjEccwaNzD8YYAWJ1LeerAmvdq mqhXL/yZMZt0WRejrEOwB8HqO7MADYjNQn8om3fZQvrjW2d6597nEYhYc/e3KU5s lth52P2+nFf3IGniLpoO3oJJmuyf1cEEtjZ9hfolh0B+Ma9Ftc08876VxU/VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAODOwcqHEyuU5cAqnuL8mvSaRwowHwYDVR0j BBgwFoAUtPq8v/gyiLZL5UAyO0WIJcVKRmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTFGQkExRTlBNkIwMTJGMTQyMkRGQ0I0MjhERDlGQTRE OTNCQkFEMjVENDk4OUJDQjFGRDMzMzhGQkE1NzU5LzAvQjRGQUJDQkZGODMyODhC NjRCRTU0MDMyM0I0NTg4MjVDNTRBNDY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNEZBQkNCRkY4MzI4OEI2NEJF NTQwMzIzQjQ1ODgyNUM1NEE0NjYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUExRkJBMUU5QTZCMDEyRjE0MjJERkNCNDI4REQ5RkE0RDkzQkJBRDI1 RDQ5ODlCQ0IxRkQzMzM4RkJBNTc1OS8wL0I0RkFCQ0JGRjgzMjg4QjY0QkU1NDAz MjNCNDU4ODI1QzU0QTQ2NjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAe5BPdeQ5K5yJNfkeAEvckqfQ OzDDf4BNsQt1jltZUqy5cRzDFzG4ipQEfIW6NgWQiDVIl72D8TwGId+aCI3KE5iO IlTI9Vtu06Eh0R+CW12b1CChA/tfdl7SYTmuKhx+xWoBNejqHNif0c08sYRUNLcJ O5X8vuV+/oII/5986P+qETryr2+9R9SVXWtHNYf3paJgv9V951sAcRvDkpnjenmm c77Mxhc1aQtBNJxcFyqPn4f8wjBe9CFDeZ0zpX/z83njWTn6mt24qnJCl8A5ZAV9 S+mcCd8VnuTopG3O3cADSxh9Ic1Q6vz47Yad8mO8HP6pHgWmbQ+nO7vdI1Ks -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:04 2025 by rpki-client