$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft File: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft (raw, json) Hash identifier: 4jM7R/x79Eh7qGoh+yDOkm/HGffrEMbJNyixzMMb5O8= Subject key identifier: 0B:4F:F8:C1:B4:25:D2:71:EC:49:C6:66:08:AA:D2:21:5B:A0:04:77 Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE Certificate issuer: /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE Certificate serial: 3BAD5BB85BFF241C96793DD957FEA5E1B833A114 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft Manifest number: 013C Signing time: Wed 05 Nov 2025 09:51:17 +0000 Manifest this update: Wed 05 Nov 2025 09:46:17 +0000 Manifest next update: Mon 10 Nov 2025 02:19:17 +0000 Files and hashes: 1: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (hash: M6ORRmOjHmMsQNf1kdyef1dJN1SWSdh126U+iO1IFbI=) 2: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl (hash: n8cDb2iDrlFdouDDzyEZrCYQHOEI6Jgo9BpcZShb3CA=) 3: 323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (hash: U8WxyTNq4zMrD7zIgmZG7H6X5lZodDFo/vZmQoIl41A=) 4: 3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (hash: zqIKyXjJi80cBIksZ5XjThzAWTyFD1sdNLptjXJQgX8=) 5: 3134332e302e38302e302f32322d3234203d3e20323632323331.roa (hash: swrsgDe0o9qSKgaY5vzkAmT9scHwb/lYIccWTU1JQlo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ad:5b:b8:5b:ff:24:1c:96:79:3d:d9:57:fe:a5:e1:b8:33:a1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE Validity Not Before: Nov 5 09:46:17 2025 GMT Not After : Nov 10 02:19:17 2025 GMT Subject: CN=0B4FF8C1B425D271EC49C66608AAD2215BA00477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:45:c5:f3:85:57:01:a3:b4:74:d7:61:a3: 56:bf:40:31:08:c5:a8:7e:fa:c4:a0:ab:b3:61:79: 71:3f:cb:6e:df:4a:60:7b:4a:50:72:18:fa:24:00: f6:d4:7b:c0:2f:17:e9:7e:16:be:18:0a:b9:4c:bc: ea:46:b1:69:cf:29:d1:1b:47:ba:fb:83:e8:7f:a6: 7f:4e:b2:50:66:b6:23:1b:57:56:55:e8:e3:ab:02: 75:45:44:c4:a7:56:c3:10:19:96:1c:ff:88:04:2e: 95:91:7c:2a:8e:0b:3c:cf:99:6d:c5:a6:2b:5f:42: 07:7d:b3:cc:fa:31:bd:db:06:4c:af:97:39:e8:ae: 21:f4:5d:19:e6:2d:60:9c:b8:84:3e:71:7e:84:d9: 5d:56:1a:c5:d4:d4:42:29:9c:e3:d2:14:03:f8:7a: 1e:c9:5d:57:07:2e:ab:1a:a3:78:f6:24:b8:5b:c2: 8e:ba:de:2d:2f:e3:95:ff:ef:96:ec:ac:fa:01:60: 53:0d:1c:52:fb:f9:0c:c5:f4:0a:3f:f7:13:86:b0: d4:ce:b3:fe:2f:6f:f0:ee:3b:ac:85:fb:3b:92:98: 16:72:d1:2d:24:53:44:26:14:01:34:9a:e0:ab:7a: b7:5d:25:c6:57:30:fd:b8:87:c3:03:ac:5e:ad:c1: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:F8:C1:B4:25:D2:71:EC:49:C6:66:08:AA:D2:21:5B:A0:04:77 X509v3 Authority Key Identifier: keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:02:f0:98:e5:96:c7:79:9b:07:78:45:26:b6:e4:f6:da:95: 83:c7:61:2a:ac:0e:ab:cd:88:ea:a6:3a:19:a3:81:00:3d:b0: 0d:97:f7:3d:c2:89:40:d0:7d:76:b0:92:3d:c8:03:7b:c5:1f: 7d:86:53:73:24:4e:e1:6f:68:51:c4:a3:aa:2f:83:71:2c:35: 7c:d1:70:ba:45:d3:bd:83:bd:90:08:9a:48:b0:c1:c0:55:ea: 72:46:a9:21:e6:6f:d7:dc:43:03:74:fd:4f:98:30:f3:1a:9e: ca:bd:96:55:53:ba:8b:c7:37:a7:75:ed:d6:37:e2:db:3e:8d: 2e:12:39:9f:b3:a2:6c:1d:43:fe:29:94:23:d7:e6:0c:d6:b4: 91:15:f5:91:5c:96:ef:4f:e2:78:d4:95:85:b1:14:65:65:19: ea:44:a7:b0:4a:c7:a5:00:a1:21:9c:b3:4e:f8:47:4c:46:6e: 82:bf:03:00:da:be:50:5a:ba:fb:ed:6c:f3:3e:01:69:f8:30: d1:65:b8:8e:8c:e1:56:d3:0d:17:46:5e:d9:44:82:53:6b:5a: c1:86:37:ed:53:4b:00:c0:00:06:b4:30:8d:e9:34:0c:54:83: 66:d8:7f:99:c2:61:cf:16:18:2d:7a:a0:84:0c:d8:6b:79:52: 06:0c:c0:b1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUO61buFv/JByWeT3ZV/6l4bgzoRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIzM0I1QzlGQjA1MDMyRUU0RDMyM0Y1ODk4NEM5QkIy MzUzRjlBRTAeFw0yNTExMDUwOTQ2MTdaFw0yNTExMTAwMjE5MTdaMDMxMTAvBgNV BAMTKDBCNEZGOEMxQjQyNUQyNzFFQzQ5QzY2NjA4QUFEMjIxNUJBMDA0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSh0XF84VXAaO0dNdho1a/QDEI xah++sSgq7NheXE/y27fSmB7SlByGPokAPbUe8AvF+l+Fr4YCrlMvOpGsWnPKdEb R7r7g+h/pn9OslBmtiMbV1ZV6OOrAnVFRMSnVsMQGZYc/4gELpWRfCqOCzzPmW3F pitfQgd9s8z6Mb3bBkyvlznoriH0XRnmLWCcuIQ+cX6E2V1WGsXU1EIpnOPSFAP4 eh7JXVcHLqsao3j2JLhbwo663i0v45X/75bsrPoBYFMNHFL7+QzF9Ao/9xOGsNTO s/4vb/DuO6yF+zuSmBZy0S0kU0QmFAE0muCrerddJcZXMP24h8MDrF6twfRbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUC0/4wbQl0nHsScZmCKrSIVugBHcwHwYDVR0j BBgwFoAUQjO1yfsFAy7k0yP1iYTJuyNT+a4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQUYwMkU4MjI1MTQ2NDREMzBFQjlDNjMzNTA3NTYyMEFG RUM4OTNCREI5OTQwRkExRUEyNTY4RkJERDhDQjE3LzAvNDIzM0I1QzlGQjA1MDMy RUU0RDMyM0Y1ODk4NEM5QkIyMzUzRjlBRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjMzQjVDOUZCMDUwMzJFRTRE MzIzRjU4OTg0QzlCQjIzNTNGOUFFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkFGMDJFODIyNTE0NjQ0RDMwRUI5QzYzMzUwNzU2MjBBRkVDODkzQkRC OTk0MEZBMUVBMjU2OEZCREQ4Q0IxNy8wLzQyMzNCNUM5RkIwNTAzMkVFNEQzMjNG NTg5ODRDOUJCMjM1M0Y5QUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHAvCY5ZbHeZsHeEUmtuT22pWD x2EqrA6rzYjqpjoZo4EAPbANl/c9wolA0H12sJI9yAN7xR99hlNzJE7hb2hRxKOq L4NxLDV80XC6RdO9g72QCJpIsMHAVepyRqkh5m/X3EMDdP1PmDDzGp7KvZZVU7qL xzende3WN+LbPo0uEjmfs6JsHUP+KZQj1+YM1rSRFfWRXJbvT+J41JWFsRRlZRnq RKewSselAKEhnLNO+EdMRm6CvwMA2r5QWrr77WzzPgFp+DDRZbiOjOFW0w0XRl7Z RIJTa1rBhjftU0sAwAAGtDCN6TQMVINm2H+ZwmHPFhgteqCEDNhreVIGDMCx -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:11 2025 by rpki-client