$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft File: 9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft (raw, json) Hash identifier: OVakP7TWA0OaUZqx/5II8kOLec2SCP5i/YpOKWisDmo= Subject key identifier: 89:A3:DB:87:F5:55:54:C6:C5:CD:33:73:BB:DF:D2:75:E6:67:9C:A0 Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57 Certificate issuer: /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57 Certificate serial: 076D921F2A0F3383741439C0CED250011D038CC0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft Manifest number: 012E Signing time: Sun 02 Nov 2025 15:29:02 +0000 Manifest this update: Sun 02 Nov 2025 15:24:02 +0000 Manifest next update: Sat 08 Nov 2025 14:04:02 +0000 Files and hashes: 1: 34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa (hash: oJJaJoFZxUNzBMlvhfvo7IAThHzSf5QJWUMkr7EArxc=) 2: 9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl (hash: P35zVWdPWtXhmaYLKN25c15KJWb557MUWLhlUh2+aqg=) 3: 323830333a663532303a3a2f33322d3332203d3e20323636363935.roa (hash: Jz9l++h+Q5ySZsde2g2nHxqBnS+LLHoermhB+X99QIM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 14:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6d:92:1f:2a:0f:33:83:74:14:39:c0:ce:d2:50:01:1d:03:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57 Validity Not Before: Nov 2 15:24:02 2025 GMT Not After : Nov 8 14:04:02 2025 GMT Subject: CN=89A3DB87F55554C6C5CD3373BBDFD275E6679CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:db:bd:1f:f5:6f:6a:82:2a:ea:69:82:fd: 59:c3:bc:8f:88:ec:70:12:3b:a1:41:ad:8a:f3:3b: 4a:72:62:ed:f2:4f:28:72:d4:34:6a:c2:79:85:fd: 53:cd:41:fa:d3:54:14:d1:30:52:c4:d9:a6:4d:1e: ba:71:0b:eb:a6:c3:47:cb:47:c0:a9:dd:54:19:48: ab:53:69:ab:6e:98:f8:ef:50:e8:2a:38:80:73:4b: aa:fe:0f:ff:38:2e:0c:f8:dc:c6:cf:36:cf:48:0e: 1d:f6:1a:a5:98:bc:e2:69:44:19:15:6c:2f:e5:0f: 93:ce:15:35:8c:5c:94:80:d2:0c:23:ae:3e:37:0f: 21:92:b0:ea:44:75:1c:01:7c:18:f0:01:5f:89:f7: bb:d5:28:cc:0a:bb:06:83:34:13:7f:45:e1:a3:b2: bf:ab:2b:46:1c:49:e5:6c:d7:3b:dd:67:16:55:32: bc:5d:66:cd:27:1b:44:eb:23:17:c3:1a:a5:5a:86: da:ca:81:68:b0:15:c5:45:c4:19:49:d6:a0:44:95: 02:15:b5:fd:2b:f2:a5:3b:d8:0d:51:33:15:a9:a3: 84:53:96:00:29:2c:60:b3:7e:cd:4d:67:8a:e3:9b: 83:87:fc:0a:1c:13:ad:2a:f4:a9:f6:64:16:bf:4c: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:DB:87:F5:55:54:C6:C5:CD:33:73:BB:DF:D2:75:E6:67:9C:A0 X509v3 Authority Key Identifier: keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fe:35:be:fd:cb:16:91:6e:ca:d0:d1:fb:1b:f1:97:b5:e8: 88:ca:dd:d1:b1:8a:75:f2:e6:e2:8e:95:3a:29:d0:d6:bc:03: 8f:0e:57:78:3c:d1:c1:0c:03:4e:31:00:89:75:5f:c9:c2:08: bb:0f:a0:79:ce:e1:27:f4:72:b5:48:85:22:2f:85:6d:69:71: 1d:9c:eb:a4:ee:98:5f:ee:85:9f:57:e0:4f:bf:71:ca:bb:18: 68:c0:19:3d:0b:7a:64:d0:68:74:5f:71:2b:57:b5:c5:2a:8e: 3d:dd:1e:91:03:27:07:dc:c4:81:ed:4d:ca:44:a6:21:aa:82: d8:93:1b:51:6a:f3:d6:c6:01:ed:76:06:d6:d6:6c:b9:43:8f: f0:64:3e:18:b7:7c:e0:09:f1:a6:f8:ea:bd:00:34:ec:b1:45: 32:4d:24:59:de:33:49:17:27:a5:ac:41:02:25:f5:03:e8:ad: 9e:98:90:2d:54:e6:a3:c4:5f:13:64:ac:d7:19:65:76:1f:5c: 71:58:ba:34:a1:ba:f4:0b:7a:e5:25:86:43:0a:b2:4a:a4:7e: 0e:3a:6e:c2:3e:da:6d:b7:cb:d4:eb:f9:b1:d9:b4:cc:30:2c: c3:12:83:0c:38:92:06:3c:c1:2e:03:fa:56:05:0f:5e:5c:a6: da:fc:41:6e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB22SHyoPM4N0FDnAztJQAR0DjMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2RTU2NkNDRkIzOTZGNTBBQTBFRThCNjAxMUNEMTdF N0FGMkU1NzAeFw0yNTExMDIxNTI0MDJaFw0yNTExMDgxNDA0MDJaMDMxMTAvBgNV BAMTKDg5QTNEQjg3RjU1NTU0QzZDNUNEMzM3M0JCREZEMjc1RTY2NzlDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9S9u9H/VvaoIq6mmC/VnDvI+I 7HASO6FBrYrzO0pyYu3yTyhy1DRqwnmF/VPNQfrTVBTRMFLE2aZNHrpxC+umw0fL R8Cp3VQZSKtTaatumPjvUOgqOIBzS6r+D/84Lgz43MbPNs9IDh32GqWYvOJpRBkV bC/lD5POFTWMXJSA0gwjrj43DyGSsOpEdRwBfBjwAV+J97vVKMwKuwaDNBN/ReGj sr+rK0YcSeVs1zvdZxZVMrxdZs0nG0TrIxfDGqVahtrKgWiwFcVFxBlJ1qBElQIV tf0r8qU72A1RMxWpo4RTlgApLGCzfs1NZ4rjm4OH/AocE60q9Kn2ZBa/TEMLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiaPbh/VVVMbFzTNzu9/SdeZnnKAwHwYDVR0j BBgwFoAUnm5WbM+zlvUKoO6LYBHNF+evLlcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQjQ5ODI4MzU1Q0FFNzhCOEE3MTYyRUMzMkYzNzFFNjVD RDg0MEE4MjIzQzMwNTRBMzNCNUM3REFFODE3RTIzLzAvOUU2RTU2NkNDRkIzOTZG NTBBQTBFRThCNjAxMUNEMTdFN0FGMkU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTZFNTY2Q0NGQjM5NkY1MEFB MEVFOEI2MDExQ0QxN0U3QUYyRTU3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0I0OTgyODM1NUNBRTc4QjhBNzE2MkVDMzJGMzcxRTY1Q0Q4NDBBODIy M0MzMDU0QTMzQjVDN0RBRTgxN0UyMy8wLzlFNkU1NjZDQ0ZCMzk2RjUwQUEwRUU4 QjYwMTFDRDE3RTdBRjJFNTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8/jW+/csWkW7K0NH7G/GXteiI yt3RsYp18ubijpU6KdDWvAOPDld4PNHBDANOMQCJdV/Jwgi7D6B5zuEn9HK1SIUi L4VtaXEdnOuk7phf7oWfV+BPv3HKuxhowBk9C3pk0Gh0X3ErV7XFKo493R6RAycH 3MSB7U3KRKYhqoLYkxtRavPWxgHtdgbW1my5Q4/wZD4Yt3zgCfGm+Oq9ADTssUUy TSRZ3jNJFyelrEECJfUD6K2emJAtVOajxF8TZKzXGWV2H1xxWLo0obr0C3rlJYZD CrJKpH4OOm7CPtptt8vU6/mx2bTMMCzDEoMMOJIGPMEuA/pWBQ9eXKba/EFu -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:42 2025 by rpki-client