$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft File: BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft (raw, json) Hash identifier: 3ixqS3Ezy3oRUBTh+6RoPJvwM7dCOxyxfGPppUQcpkM= Subject key identifier: 9D:5F:8D:02:2E:AB:55:D1:7C:2B:33:27:9A:A9:15:44:17:D1:A3:51 Authority key identifier: BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28 Certificate issuer: /CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828 Certificate serial: 0BC2B938732A20F2F092660922562C0A38B00375 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft Manifest number: 0137 Signing time: Mon 03 Nov 2025 18:14:38 +0000 Manifest this update: Mon 03 Nov 2025 18:09:38 +0000 Manifest next update: Sun 09 Nov 2025 16:33:38 +0000 Files and hashes: 1: BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl (hash: c8pGlz3PQByS/RG53B0QlhcUzxmwGgGdFP0vmdmeCmA=) 2: 3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa (hash: F76GrfwcKexdgUbJG6CgDaKwgPsEu6hUZX77Pc88mZU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c2:b9:38:73:2a:20:f2:f0:92:66:09:22:56:2c:0a:38:b0:03:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828 Validity Not Before: Nov 3 18:09:38 2025 GMT Not After : Nov 9 16:33:38 2025 GMT Subject: CN=9D5F8D022EAB55D17C2B33279AA9154417D1A351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:cc:e9:7a:67:ac:cd:b7:fa:e9:15:ad:7f: 7d:85:24:7e:bd:85:aa:da:89:f0:10:8a:d9:23:04: b9:45:8c:f7:0f:8c:2b:a8:eb:6b:47:89:35:6b:5d: eb:4c:9b:f5:83:5a:24:df:09:b4:7d:bc:b4:4b:bd: 28:39:e9:16:5e:83:ce:27:0e:e1:b2:e3:6f:9b:76: 8e:2f:ad:b1:fe:94:db:7e:2a:2b:a7:ac:e3:92:e3: f1:7f:83:1e:d7:20:86:e1:3e:f8:99:cf:81:e0:87: 4f:db:a2:9e:c5:11:ca:9d:f1:12:89:00:30:7c:27: 6d:ce:89:5d:9a:f0:87:f3:b1:09:94:ca:c7:17:65: 7a:89:ac:62:4c:bf:c8:6a:66:19:c1:46:d5:41:d8: 13:54:0a:e9:ea:26:fb:74:a6:31:56:2a:8a:95:c7: 09:29:4f:3d:c7:a1:01:4f:70:dc:f6:7d:57:e9:ac: e6:35:f5:fa:b3:8d:07:b4:dc:e6:ea:16:55:cb:90: 97:56:bf:d8:39:4a:93:b8:b0:d2:d1:1d:14:51:45: da:3a:da:2a:65:86:55:1e:a2:51:72:11:80:66:8f: 43:82:d2:5e:6e:4e:07:ba:1b:40:9c:60:87:06:1a: 84:64:df:dd:ab:32:05:2e:9c:86:0c:3f:35:f0:42: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5F:8D:02:2E:AB:55:D1:7C:2B:33:27:9A:A9:15:44:17:D1:A3:51 X509v3 Authority Key Identifier: keyid:BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f2:f0:0e:4e:04:65:ff:28:18:14:66:5d:fb:29:49:68:fe: 1d:64:29:ac:87:ed:45:33:af:43:18:12:3f:65:2f:61:15:5c: e8:93:de:ae:2f:fa:8a:64:df:39:68:82:b3:d2:a7:04:59:98: 7a:0b:53:3f:cd:e1:5f:11:40:3a:20:94:14:eb:81:50:3a:fc: 55:4d:be:af:7f:94:fd:02:84:0a:9a:b4:11:d3:b5:4a:76:cc: 39:45:37:30:7d:ff:ef:36:34:40:60:77:c8:ff:d5:0e:db:98: d5:8f:0c:53:a8:3a:e2:14:42:02:f9:66:e6:46:02:37:64:12: 4f:12:1e:fc:b0:26:d0:60:82:b9:87:4b:eb:1f:cc:f6:66:5a: e3:53:ae:ec:85:f7:96:ea:90:72:2b:b0:d6:7b:48:07:37:98: fe:c3:97:68:57:43:61:db:19:86:c6:18:1c:b5:7e:17:df:ff: 1a:a9:07:97:9a:c6:6b:d8:80:66:63:89:c6:70:48:af:60:33: 7a:a6:4f:01:71:74:12:ea:3e:bb:2d:81:fb:bb:13:87:b7:c6: d9:92:d8:c9:d5:55:8e:53:53:08:f9:ee:b6:0d:ac:ff:1c:71: 50:96:82:af:7a:f9:be:d8:2c:ee:4c:14:a8:5d:cf:a0:63:08: 26:e7:ea:fe -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC8K5OHMqIPLwkmYJIlYsCjiwA3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFFNDA3RUNDODRFNEQ3NTU3RTNBRjAyMzdBQ0U1MEMw RUYzOTgyODAeFw0yNTExMDMxODA5MzhaFw0yNTExMDkxNjMzMzhaMDMxMTAvBgNV BAMTKDlENUY4RDAyMkVBQjU1RDE3QzJCMzMyNzlBQTkxNTQ0MTdEMUEzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozszpemeszbf66RWtf32FJH69 haraifAQitkjBLlFjPcPjCuo62tHiTVrXetMm/WDWiTfCbR9vLRLvSg56RZeg84n DuGy42+bdo4vrbH+lNt+KiunrOOS4/F/gx7XIIbhPviZz4Hgh0/bop7FEcqd8RKJ ADB8J23OiV2a8IfzsQmUyscXZXqJrGJMv8hqZhnBRtVB2BNUCunqJvt0pjFWKoqV xwkpTz3HoQFPcNz2fVfprOY19fqzjQe03ObqFlXLkJdWv9g5SpO4sNLRHRRRRdo6 2iplhlUeolFyEYBmj0OC0l5uTge6G0CcYIcGGoRk392rMgUunIYMPzXwQjOdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnV+NAi6rVdF8KzMnmqkVRBfRo1EwHwYDVR0j BBgwFoAUuuQH7MhOTXVX468CN6zlDA7zmCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMTAxOUE2Njg0OTRFOEUzREZCN0RFNTlGOUIwOUY4OUIz QTgwRTI4OTM2Qzc0NDJFQzk1QjNGMjUxMDAwMzkyLzAvQkFFNDA3RUNDODRFNEQ3 NTU3RTNBRjAyMzdBQ0U1MEMwRUYzOTgyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUU0MDdFQ0M4NEU0RDc1NTdF M0FGMDIzN0FDRTUwQzBFRjM5ODI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjEwMTlBNjY4NDk0RThFM0RGQjdERTU5RjlCMDlGODlCM0E4MEUyODkz NkM3NDQyRUM5NUIzRjI1MTAwMDM5Mi8wL0JBRTQwN0VDQzg0RTRENzU1N0UzQUYw MjM3QUNFNTBDMEVGMzk4MjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY8vAOTgRl/ygYFGZd+ylJaP4d ZCmsh+1FM69DGBI/ZS9hFVzok96uL/qKZN85aIKz0qcEWZh6C1M/zeFfEUA6IJQU 64FQOvxVTb6vf5T9AoQKmrQR07VKdsw5RTcwff/vNjRAYHfI/9UO25jVjwxTqDri FEIC+WbmRgI3ZBJPEh78sCbQYIK5h0vrH8z2ZlrjU67shfeW6pByK7DWe0gHN5j+ w5doV0Nh2xmGxhgctX4X3/8aqQeXmsZr2IBmY4nGcEivYDN6pk8BcXQS6j67LYH7 uxOHt8bZktjJ1VWOU1MI+e62Daz/HHFQloKvevm+2CzuTBSoXc+gYwgm5+r+ -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:24 2025 by rpki-client