$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft File: 2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft (raw, json) Hash identifier: WvFaBi13OZSqsDt4lFRZkINFjbTBQwkTysidwFKwySA= Subject key identifier: A1:C1:65:56:D4:39:32:2A:CE:52:9B:4A:AA:79:1F:46:F0:B0:9A:ED Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A Certificate issuer: /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Certificate serial: 4A991AE0AB72E08B019FA17DCF807E810FF6B531 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 09:48:13 +0000 Manifest this update: Tue 04 Nov 2025 09:43:13 +0000 Manifest next update: Sat 08 Nov 2025 20:42:13 +0000 Files and hashes: 1: 2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl (hash: UfGE1km+tAqmAAx7mLBvuIZwVoFgntn35gOcjnaXc30=) 2: 3230302e35322e3132382e302f32302d3234203d3e203136353331.roa (hash: qUy2OLAZvapfc2Yrl+IUqZZqDjL6jHoskXObvTdeSVk=) 3: 3230302e37362e39362e302f32302d3234203d3e203136353331.roa (hash: CNgTTa5W9lPRLFY0Uji1+LVSgTAijkz0OIid8B19UGk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 20:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:99:1a:e0:ab:72:e0:8b:01:9f:a1:7d:cf:80:7e:81:0f:f6:b5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Validity Not Before: Nov 4 09:43:13 2025 GMT Not After : Nov 8 20:42:13 2025 GMT Subject: CN=A1C16556D439322ACE529B4AAA791F46F0B09AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:ed:94:17:9f:92:cd:16:12:37:96:13:da: 07:70:1d:ac:c4:3a:0b:62:9d:e8:d6:97:e4:58:70: 03:47:c5:c3:66:94:27:6e:09:2e:0a:b9:7d:6b:d7: 5a:00:c5:f2:38:cc:3d:6c:3d:52:6d:ae:34:05:d9: d0:52:b2:13:bf:2e:f9:56:f6:33:8d:1d:6e:7d:e1: 4a:c6:1f:22:c0:b1:a0:34:53:43:d7:8f:37:c8:86: 58:be:68:2d:d6:4b:4a:a6:b9:4d:74:29:4a:6f:2e: dd:af:95:0e:11:e3:bf:c1:a6:d0:c5:e9:c4:7a:ba: 2e:3c:1c:9d:08:71:91:dc:84:a0:a5:1b:cf:a8:08: c3:16:8e:70:6e:d7:c3:b5:74:46:56:af:ca:54:37: f6:c0:55:43:da:2b:13:b9:60:26:68:a4:cf:71:5b: 5d:17:c4:77:9c:35:0c:68:5a:72:10:c1:a5:a6:3e: f2:92:99:09:8f:40:61:0a:79:39:4c:b9:42:da:38: 77:77:7d:94:25:16:16:74:cc:6b:64:16:0b:68:26: a0:5d:47:79:d3:c4:5b:24:09:61:0c:0e:f3:b4:41: 6b:fd:78:4a:47:01:ff:41:f2:b9:cf:d5:bd:de:bf: b2:f4:c2:95:2a:a1:09:3a:62:d0:9c:5a:6c:58:b3: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:65:56:D4:39:32:2A:CE:52:9B:4A:AA:79:1F:46:F0:B0:9A:ED X509v3 Authority Key Identifier: keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:fd:b8:bb:43:7b:db:57:c9:22:fc:37:40:ef:9e:7d:63:40: 88:1f:7b:4e:cf:74:1a:aa:23:0b:3c:4b:ac:ad:9b:ef:f2:42: 33:97:08:c9:18:cc:56:ac:66:e4:37:4f:8e:4b:a7:3b:af:e7: ae:63:70:ae:b9:32:fb:ef:b2:45:fe:7f:fb:ad:fb:03:19:fa: 12:83:61:21:42:64:53:88:22:29:34:1b:8a:87:5e:70:8e:e2: a3:5c:07:3c:84:ee:2a:b0:34:d9:c9:cd:8b:32:4c:ca:4b:6c: 23:ed:99:cd:12:2c:ff:de:12:ea:e1:6c:e5:c5:33:2a:63:1a: c9:30:91:1f:88:11:cd:cd:c3:6c:c8:98:c0:56:e3:59:82:4e: 8c:56:95:55:b6:52:74:fd:1f:76:32:fe:59:ae:db:50:5c:bf: 7d:cc:28:3d:03:1b:08:52:d1:b5:e9:eb:50:71:76:0a:c0:cc: d1:3f:a4:0c:d3:30:2d:1d:6e:ee:28:e0:9e:0f:73:98:4d:01: c3:9b:46:74:1f:db:41:fd:aa:b8:86:15:ff:f6:62:40:a9:72: d1:24:d0:7e:d2:00:6e:1a:86:9f:10:07:c8:9f:9e:82:14:cf: c9:52:d8:c4:2c:91:77:f7:77:ec:22:07:ab:26:7c:55:70:6b: 91:5e:91:58 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSpka4Kty4IsBn6F9z4B+gQ/2tTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCMDZFQkQyOEZFODNBNTY0RkEzREZDODNGNEY5OEFD NjIwQzk4QTAeFw0yNTExMDQwOTQzMTNaFw0yNTExMDgyMDQyMTNaMDMxMTAvBgNV BAMTKEExQzE2NTU2RDQzOTMyMkFDRTUyOUI0QUFBNzkxRjQ2RjBCMDlBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z+2UF5+SzRYSN5YT2gdwHazE OgtinejWl+RYcANHxcNmlCduCS4KuX1r11oAxfI4zD1sPVJtrjQF2dBSshO/LvlW 9jONHW594UrGHyLAsaA0U0PXjzfIhli+aC3WS0qmuU10KUpvLt2vlQ4R47/BptDF 6cR6ui48HJ0IcZHchKClG8+oCMMWjnBu18O1dEZWr8pUN/bAVUPaKxO5YCZopM9x W10XxHecNQxoWnIQwaWmPvKSmQmPQGEKeTlMuULaOHd3fZQlFhZ0zGtkFgtoJqBd R3nTxFskCWEMDvO0QWv9eEpHAf9B8rnP1b3ev7L0wpUqoQk6YtCcWmxYs+6zAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUocFlVtQ5MirOUptKqnkfRvCwmu0wHwYDVR0j BBgwFoAUL7BuvSj+g6Vk+j38g/T5isYgyYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOTU0QTg0NjQyMzZGMUJBOEU2MUM3QjZENjcyODZBMDA5 M0ZGRDQwOTM0NDY1M0ZGMEQ5QTc4NjkxRjQ3NDBGLzAvMkZCMDZFQkQyOEZFODNB NTY0RkEzREZDODNGNEY5OEFDNjIwQzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkIwNkVCRDI4RkU4M0E1NjRG QTNERkM4M0Y0Rjk4QUM2MjBDOThBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzk1NEE4NDY0MjM2RjFCQThFNjFDN0I2RDY3Mjg2QTAwOTNGRkQ0MDkz NDQ2NTNGRjBEOUE3ODY5MUY0NzQwRi8wLzJGQjA2RUJEMjhGRTgzQTU2NEZBM0RG QzgzRjRGOThBQzYyMEM5OEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX/bi7Q3vbV8ki/DdA7559Y0CI H3tOz3QaqiMLPEusrZvv8kIzlwjJGMxWrGbkN0+OS6c7r+euY3CuuTL777JF/n/7 rfsDGfoSg2EhQmRTiCIpNBuKh15wjuKjXAc8hO4qsDTZyc2LMkzKS2wj7ZnNEiz/ 3hLq4WzlxTMqYxrJMJEfiBHNzcNsyJjAVuNZgk6MVpVVtlJ0/R92Mv5ZrttQXL99 zCg9AxsIUtG16etQcXYKwMzRP6QM0zAtHW7uKOCeD3OYTQHDm0Z0H9tB/aq4hhX/ 9mJAqXLRJNB+0gBuGoafEAfIn56CFM/JUtjELJF393fsIgerJnxVcGuRXpFY -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:23 2025 by rpki-client