$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.mft File: 386B8BAEFE6F1051BFF297F2929E4BD1065BA949.mft (raw, json) Hash identifier: Nih9LpihEaS10QX9kBZKas9Y5inU9hSnbSg2HBnz2NQ= Subject key identifier: 16:0A:8E:E3:41:A3:47:5D:C3:14:1F:01:C0:0F:F7:A9:3A:C8:D5:93 Authority key identifier: 38:6B:8B:AE:FE:6F:10:51:BF:F2:97:F2:92:9E:4B:D1:06:5B:A9:49 Certificate issuer: /CN=386B8BAEFE6F1051BFF297F2929E4BD1065BA949 Certificate serial: 0BD8329C3BD5792BDCAA3E285DDB6E64D30AB6F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.mft Manifest number: 4D Signing time: Mon 03 Nov 2025 21:01:00 +0000 Manifest this update: Mon 03 Nov 2025 20:56:00 +0000 Manifest next update: Sun 09 Nov 2025 10:38:00 +0000 Files and hashes: 1: 3230312e3133312e3131392e302f32342d3234203d3e20323633383235.roa (hash: eQaDV0Wz7/JuWw6mVxmy+s6EMRCemC15kBtujl9LcRM=) 2: 386B8BAEFE6F1051BFF297F2929E4BD1065BA949.crl (hash: RJHNJQG7BkI+EYkNPJ1l/huoDrOfo9w3NI66uU63D44=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.crl rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d8:32:9c:3b:d5:79:2b:dc:aa:3e:28:5d:db:6e:64:d3:0a:b6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=386B8BAEFE6F1051BFF297F2929E4BD1065BA949 Validity Not Before: Nov 3 20:56:00 2025 GMT Not After : Nov 9 10:38:00 2025 GMT Subject: CN=160A8EE341A3475DC3141F01C00FF7A93AC8D593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:9b:db:a8:95:ef:fd:be:a5:28:34:73:44: 11:17:c8:30:60:25:08:64:d2:94:a8:38:a3:9f:18: 76:8c:68:2a:12:e3:bb:f3:9f:d8:30:b4:72:6f:74: 7a:fe:4a:c9:3a:49:bc:49:07:83:c7:89:85:14:cb: e1:50:c4:a3:c4:5b:11:eb:db:d5:08:5a:5a:a0:28: e9:a8:39:7f:81:a2:ec:54:47:7d:4d:29:7e:96:9f: d4:47:a4:c8:4b:4a:45:b1:40:72:39:ab:95:63:c7: 84:5f:53:e7:1f:ff:78:4f:e4:b2:b2:a4:3d:09:03: b3:9e:ec:23:59:1b:3b:06:ec:05:f4:77:bc:ad:38: 8b:51:68:3b:95:1a:0d:fd:2e:f7:96:fd:e2:80:8f: bf:6b:45:5e:09:cd:21:ac:15:05:65:7e:42:13:62: b3:a0:87:09:fb:16:cb:78:6d:ba:00:f2:3f:62:91: 80:be:48:33:cb:75:d2:e8:53:1f:1d:31:d8:8a:10: bb:ca:c9:69:d0:4c:11:54:02:36:c9:19:25:92:5d: 2d:46:c4:d6:14:26:2b:0b:05:d1:dd:19:b5:e0:f4: c6:76:72:1e:85:2d:f2:ba:63:40:b3:76:d8:5a:0f: 13:31:06:fd:7c:c4:38:bb:62:01:16:dc:09:26:8e: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:8E:E3:41:A3:47:5D:C3:14:1F:01:C0:0F:F7:A9:3A:C8:D5:93 X509v3 Authority Key Identifier: keyid:38:6B:8B:AE:FE:6F:10:51:BF:F2:97:F2:92:9E:4B:D1:06:5B:A9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e8:94:0e:3d:67:ba:68:52:02:44:20:74:28:ae:ef:b5:4e: b6:9e:64:99:47:c0:06:3e:9c:2b:bc:32:d4:b3:a7:bd:33:85: ef:b8:06:51:34:c0:fb:84:44:5f:71:c4:77:c0:e9:e4:94:9a: a0:68:f2:87:89:6e:6a:d4:4b:ac:19:a2:a0:ac:2d:90:64:54: 4a:e0:e4:34:aa:cf:51:bc:c2:88:a2:fa:f7:cf:b1:a7:9e:87: cb:be:8c:d5:bb:86:2f:cb:d8:d6:66:2d:68:43:f4:82:65:c6: ea:39:f4:00:18:2b:a0:60:ec:20:6e:db:93:8c:6c:10:01:c2: 4a:a5:42:a2:bd:73:a6:90:48:5a:40:b1:f1:f6:25:61:e8:d7: 8d:04:cb:08:dd:ab:e7:90:66:bd:f0:bc:02:e7:32:24:a4:e3: b1:bd:f8:33:cd:6e:93:d1:a8:5d:4d:34:17:27:e1:6c:c6:4f: 8e:91:af:54:42:55:bc:d0:cf:3b:e2:30:c6:cc:dc:dd:72:66: 29:6a:6e:02:4f:66:e3:11:38:ea:76:d6:ca:39:6e:4e:5a:50: 3c:6d:86:94:32:0d:93:94:8a:ed:a1:7a:e8:c0:e2:46:9c:4b: 73:9e:4d:c8:d2:8c:9c:69:dc:9c:a8:8a:58:2a:2c:3c:52:81: 77:cf:e4:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC9gynDvVeSvcqj4oXdtuZNMKtvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg2QjhCQUVGRTZGMTA1MUJGRjI5N0YyOTI5RTRCRDEw NjVCQTk0OTAeFw0yNTExMDMyMDU2MDBaFw0yNTExMDkxMDM4MDBaMDMxMTAvBgNV BAMTKDE2MEE4RUUzNDFBMzQ3NURDMzE0MUYwMUMwMEZGN0E5M0FDOEQ1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74pvbqJXv/b6lKDRzRBEXyDBg JQhk0pSoOKOfGHaMaCoS47vzn9gwtHJvdHr+Ssk6SbxJB4PHiYUUy+FQxKPEWxHr 29UIWlqgKOmoOX+BouxUR31NKX6Wn9RHpMhLSkWxQHI5q5Vjx4RfU+cf/3hP5LKy pD0JA7Oe7CNZGzsG7AX0d7ytOItRaDuVGg39LveW/eKAj79rRV4JzSGsFQVlfkIT YrOghwn7Fst4bboA8j9ikYC+SDPLddLoUx8dMdiKELvKyWnQTBFUAjbJGSWSXS1G xNYUJisLBdHdGbXg9MZ2ch6FLfK6Y0CzdthaDxMxBv18xDi7YgEW3Akmjq/RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFgqO40GjR13DFB8BwA/3qTrI1ZMwHwYDVR0j BBgwFoAUOGuLrv5vEFG/8pfykp5L0QZbqUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMDlEREZFQ0RGRTk3MTY1MENCMjExODgwQkRGMTMyRUND QzU2NTk0NTYyNUEzNzNDMEU1NThBQjNCOUM1Q0ZBLzAvMzg2QjhCQUVGRTZGMTA1 MUJGRjI5N0YyOTI5RTRCRDEwNjVCQTk0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODZCOEJBRUZFNkYxMDUxQkZG Mjk3RjI5MjlFNEJEMTA2NUJBOTQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjA5RERGRUNERkU5NzE2NTBDQjIxMTg4MEJERjEzMkVDQ0M1NjU5NDU2 MjVBMzczQzBFNTU4QUIzQjlDNUNGQS8wLzM4NkI4QkFFRkU2RjEwNTFCRkYyOTdG MjkyOUU0QkQxMDY1QkE5NDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBp6JQOPWe6aFICRCB0KK7vtU62 nmSZR8AGPpwrvDLUs6e9M4XvuAZRNMD7hERfccR3wOnklJqgaPKHiW5q1EusGaKg rC2QZFRK4OQ0qs9RvMKIovr3z7GnnofLvozVu4Yvy9jWZi1oQ/SCZcbqOfQAGCug YOwgbtuTjGwQAcJKpUKivXOmkEhaQLHx9iVh6NeNBMsI3avnkGa98LwC5zIkpOOx vfgzzW6T0ahdTTQXJ+Fsxk+Oka9UQlW80M874jDGzNzdcmYpam4CT2bjETjqdtbK OW5OWlA8bYaUMg2TlIrtoXrowOJGnEtznk3I0oycadycqIpYKiw8UoF3z+Tx -----END CERTIFICATE-----Generated at Thu Nov 6 00:38:55 2025 by rpki-client