$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.mft File: C636D3DEB84C442DE1085F972B221033DF5AC901.mft (raw, json) Hash identifier: XC7SkEYAaCqcm12Pz6K83xuywEsrXsYMDtBdIR5aaqc= Subject key identifier: D2:EA:CD:29:C5:4B:E0:68:13:B3:D6:4A:18:1D:4D:9B:41:0E:0D:43 Authority key identifier: C6:36:D3:DE:B8:4C:44:2D:E1:08:5F:97:2B:22:10:33:DF:5A:C9:01 Certificate issuer: /CN=C636D3DEB84C442DE1085F972B221033DF5AC901 Certificate serial: 1D5DDC57684F27A18A4A2564A379BCFC3DFC6C6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C636D3DEB84C442DE1085F972B221033DF5AC901.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 16:58:44 +0000 Manifest this update: Mon 03 Nov 2025 16:53:44 +0000 Manifest next update: Sun 09 Nov 2025 09:13:44 +0000 Files and hashes: 1: C636D3DEB84C442DE1085F972B221033DF5AC901.crl (hash: /zr+9jmZeUNNOzr0mHiYXuSwAeRDcMMcYBx+sdl46lc=) 2: 323830313a31663a393830303a3a2f34382d3438203d3e203133343839.roa (hash: GGncpY8hpRU36fiRIfeRPnhYrU25/Y9XtnswwOeOpxs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.crl rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C636D3DEB84C442DE1085F972B221033DF5AC901.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5d:dc:57:68:4f:27:a1:8a:4a:25:64:a3:79:bc:fc:3d:fc:6c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C636D3DEB84C442DE1085F972B221033DF5AC901 Validity Not Before: Nov 3 16:53:44 2025 GMT Not After : Nov 9 09:13:44 2025 GMT Subject: CN=D2EACD29C54BE06813B3D64A181D4D9B410E0D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:d7:ce:71:f2:d0:e5:f9:64:24:15:54:51: dc:19:89:23:04:d1:38:5e:16:b6:89:ea:c0:1b:ae: 0b:a2:ca:c2:2f:9c:80:c0:33:b9:05:16:f5:02:b2: 12:92:ad:8a:95:dd:55:d3:70:4a:d8:c7:f1:de:16: d7:4c:c6:02:8a:ec:46:9e:b1:b6:14:43:76:e1:c7: b8:62:a2:0a:c6:a7:2c:ee:e0:6f:4d:6a:9c:f7:c3: 56:a4:0d:c5:c5:3a:3f:e2:4a:7f:31:f2:90:c9:63: ac:ce:06:c8:ad:d0:23:ce:51:52:80:f2:08:eb:06: 58:d6:a6:e1:a5:e9:69:17:2b:d8:36:6c:8f:05:ee: 5e:f1:84:2e:39:d0:8d:05:3d:b9:72:66:83:ba:b0: 9a:00:21:e3:f4:65:32:23:d6:49:f2:fd:8c:b3:03: 1f:30:44:2e:f2:11:4c:7d:7b:1d:b5:76:97:eb:ea: 80:a0:5c:e9:1b:fe:86:90:92:8c:68:d0:c7:ff:c3: 91:a7:5c:ea:40:b2:c5:3b:8d:9f:5c:8f:07:f2:6d: 60:56:f7:0b:ca:47:55:d7:dd:af:3d:22:7d:11:21: d3:4b:0c:d1:4c:17:0d:d0:b8:f2:c6:60:b5:6c:c3: db:00:2b:b6:58:7b:90:68:e8:ce:8a:ce:9f:61:4d: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EA:CD:29:C5:4B:E0:68:13:B3:D6:4A:18:1D:4D:9B:41:0E:0D:43 X509v3 Authority Key Identifier: keyid:C6:36:D3:DE:B8:4C:44:2D:E1:08:5F:97:2B:22:10:33:DF:5A:C9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C636D3DEB84C442DE1085F972B221033DF5AC901.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2259AB53B809344F938A9C3FF0C6B88B77B8F055E25855760951CA4528E43CA/0/C636D3DEB84C442DE1085F972B221033DF5AC901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:71:41:db:1a:a3:37:59:1d:6f:b2:03:d1:29:7f:12:86:3c: 8d:ca:45:65:1c:d1:fd:20:95:ec:72:e2:71:94:b3:04:51:f1: e2:aa:13:e6:2a:d3:62:e9:fe:fd:f0:58:78:08:45:6f:7b:ac: e3:09:66:72:8e:72:95:f3:3d:a9:03:a4:2d:b0:1d:ed:4f:fd: 39:8e:ee:1b:b8:d8:4f:60:fb:4d:ab:6d:a5:51:f4:16:06:ed: b5:6b:06:8f:7e:99:0e:77:b3:0c:a9:6b:40:ff:95:fd:01:f1: 44:31:7c:fa:44:5d:d1:95:3f:4b:50:1c:e0:79:36:49:23:ad: b7:cf:91:88:5c:12:c1:5d:e1:bd:f2:02:f1:01:0d:9d:a9:cb: 13:c9:d7:97:9e:1f:f1:a0:83:18:b1:22:7f:ed:ef:73:93:3a: 76:09:e0:6c:ac:75:3f:b1:9d:99:7c:f8:be:04:92:06:16:b6: 53:21:22:05:45:a0:4b:0c:0b:d6:8c:ff:e8:96:c5:e1:b1:fe: 0d:7e:ba:df:da:41:af:1c:cb:fb:30:12:be:1d:5f:7f:94:42: 5b:24:cb:82:32:12:60:fe:2c:de:41:77:c1:13:a5:5e:68:dc: d2:24:01:fd:0d:a9:8c:9d:f9:f2:00:71:f4:a3:1a:22:02:b5: 19:7e:97:16 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHV3cV2hPJ6GKSiVko3m8/D38bGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzNkQzREVCODRDNDQyREUxMDg1Rjk3MkIyMjEwMzNE RjVBQzkwMTAeFw0yNTExMDMxNjUzNDRaFw0yNTExMDkwOTEzNDRaMDMxMTAvBgNV BAMTKEQyRUFDRDI5QzU0QkUwNjgxM0IzRDY0QTE4MUQ0RDlCNDEwRTBENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZq9fOcfLQ5flkJBVUUdwZiSME 0TheFraJ6sAbrguiysIvnIDAM7kFFvUCshKSrYqV3VXTcErYx/HeFtdMxgKK7Eae sbYUQ3bhx7hiogrGpyzu4G9Napz3w1akDcXFOj/iSn8x8pDJY6zOBsit0CPOUVKA 8gjrBljWpuGl6WkXK9g2bI8F7l7xhC450I0FPblyZoO6sJoAIeP0ZTIj1kny/Yyz Ax8wRC7yEUx9ex21dpfr6oCgXOkb/oaQkoxo0Mf/w5GnXOpAssU7jZ9cjwfybWBW 9wvKR1XX3a89In0RIdNLDNFMFw3QuPLGYLVsw9sAK7ZYe5Bo6M6Kzp9hTWV3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0urNKcVL4GgTs9ZKGB1Nm0EODUMwHwYDVR0j BBgwFoAUxjbT3rhMRC3hCF+XKyIQM99ayQEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMjI1OUFCNTNCODA5MzQ0RjkzOEE5QzNGRjBDNkI4OEI3 N0I4RjA1NUUyNTg1NTc2MDk1MUNBNDUyOEU0M0NBLzAvQzYzNkQzREVCODRDNDQy REUxMDg1Rjk3MkIyMjEwMzNERjVBQzkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjM2RDNERUI4NEM0NDJERTEw ODVGOTcyQjIyMTAzM0RGNUFDOTAxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzIyNTlBQjUzQjgwOTM0NEY5MzhBOUMzRkYwQzZCODhCNzdCOEYwNTVF MjU4NTU3NjA5NTFDQTQ1MjhFNDNDQS8wL0M2MzZEM0RFQjg0QzQ0MkRFMTA4NUY5 NzJCMjIxMDMzREY1QUM5MDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClcUHbGqM3WR1vsgPRKX8ShjyN ykVlHNH9IJXscuJxlLMEUfHiqhPmKtNi6f798Fh4CEVve6zjCWZyjnKV8z2pA6Qt sB3tT/05ju4buNhPYPtNq22lUfQWBu21awaPfpkOd7MMqWtA/5X9AfFEMXz6RF3R lT9LUBzgeTZJI623z5GIXBLBXeG98gLxAQ2dqcsTydeXnh/xoIMYsSJ/7e9zkzp2 CeBsrHU/sZ2ZfPi+BJIGFrZTISIFRaBLDAvWjP/olsXhsf4Nfrrf2kGvHMv7MBK+ HV9/lEJbJMuCMhJg/izeQXfBE6VeaNzSJAH9DamMnfnyAHH0oxoiArUZfpcW -----END CERTIFICATE-----Generated at Wed Nov 5 20:26:03 2025 by rpki-client