$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft File: B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft (raw, json) Hash identifier: LrGarx4rTwoQSJYgujVGbvw0rAMMuA23c+YEKP1jUe8= Subject key identifier: 3A:42:34:4D:E2:EB:70:DF:1A:9E:6D:D6:BB:42:63:66:AA:3E:33:3A Authority key identifier: B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6 Certificate issuer: /CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6 Certificate serial: 5DB8D4F030BBD1C64F60C19EC56561452190E294 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft Manifest number: 0136 Signing time: Mon 03 Nov 2025 01:29:13 +0000 Manifest this update: Mon 03 Nov 2025 01:24:13 +0000 Manifest next update: Sat 08 Nov 2025 22:16:13 +0000 Files and hashes: 1: B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl (hash: tUx7bYFJFa8cUV1zK0UuE4mzfK5pcw3u9iecgp2S8qA=) 2: 3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa (hash: iDyk+TiXFCbj+nnln621ZDV/UgNb8+rpg6axZqO/oLM=) 3: 323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa (hash: GA7YN/JvrN/mOd9/Euc6T6r4iImRh6AHHOvP5bHYuJA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 22:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b8:d4:f0:30:bb:d1:c6:4f:60:c1:9e:c5:65:61:45:21:90:e2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6 Validity Not Before: Nov 3 01:24:13 2025 GMT Not After : Nov 8 22:16:13 2025 GMT Subject: CN=3A42344DE2EB70DF1A9E6DD6BB426366AA3E333A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:e2:b2:09:ce:e6:7c:b2:af:6a:e3:79:fd: 93:54:e6:d6:d2:dc:b3:65:c8:59:17:a6:1f:83:f5: a1:e1:31:a7:64:30:73:86:02:7f:54:cd:09:73:a2: 73:bc:fb:3f:2d:ab:ae:d5:f3:d0:55:af:47:a8:8d: a9:5a:9d:69:32:87:cf:08:fc:9f:ad:57:18:46:81: 2e:53:0d:27:6a:2a:86:ce:63:16:f2:e3:b0:a5:1f: 1a:73:a5:4b:f1:8d:22:f0:59:4e:26:df:8e:c6:4b: e7:fc:cd:dc:b9:e1:34:6e:69:84:6b:c2:fa:3d:7c: 35:39:75:5d:d8:8f:fa:82:4e:ee:37:09:8d:0c:7c: fc:4a:a7:62:ca:a4:d6:5e:20:bc:99:b4:e9:a5:f3: 61:a7:73:e4:ee:1b:26:cb:fa:02:17:db:63:7b:78: 91:49:27:5c:f1:32:04:b6:4a:47:8d:ef:74:dc:92: 31:11:42:de:9b:cf:f5:1c:3f:9a:c8:48:8a:6d:89: 3c:9f:ad:57:3e:32:29:c2:bb:c0:64:39:0f:d8:26: c9:3c:f9:38:2c:82:94:ea:f6:35:e5:58:3e:49:5f: 92:e6:f5:6d:e6:9a:fd:05:52:de:50:72:f0:04:4f: 5b:30:bd:c0:e3:1f:7b:a7:b0:aa:df:6a:e0:a2:1f: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:34:4D:E2:EB:70:DF:1A:9E:6D:D6:BB:42:63:66:AA:3E:33:3A X509v3 Authority Key Identifier: keyid:B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1f:2f:e9:3a:fe:f9:7b:98:48:93:71:e2:44:e5:bb:63:78: ff:33:c5:34:74:35:c5:fa:41:03:db:f1:b1:46:29:e2:3f:c4: bf:6f:6a:55:bb:1e:fd:65:25:0c:ec:d8:00:4a:c4:3c:f0:17: bc:ab:14:d8:ca:ab:26:c0:b5:72:07:2d:99:3b:19:00:bc:be: 7a:c7:4c:1f:b9:11:3d:4b:e0:19:40:8c:ee:8e:d3:dc:3f:70: c3:22:1e:39:4e:52:1b:60:5a:e1:33:66:f4:94:19:3d:0c:ef: 2b:b3:e8:a0:02:d2:77:f5:7a:ae:d8:3b:0c:5f:29:45:81:06: 72:44:83:4b:a3:b4:14:72:d2:56:29:16:61:ac:05:dd:ab:17: 8c:60:ab:53:13:81:42:74:74:ef:c6:19:92:4f:32:da:3a:77: 35:f1:f5:84:90:4a:6d:1a:47:6d:3f:b2:da:14:40:a5:e9:65: eb:53:3e:f5:82:42:84:8c:d4:df:13:16:ef:d9:d5:57:35:06: e6:99:f1:cd:05:d3:d2:d6:7b:72:88:0d:a6:6d:03:2f:ce:35: 11:8c:79:d7:85:3d:66:30:52:01:a2:f0:e9:05:32:bf:93:a0: e1:a4:99:5e:bc:6d:9a:d6:72:b8:05:69:24:14:e2:a0:d2:d2: dd:2d:95:f5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXbjU8DC70cZPYMGexWVhRSGQ4pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlDODY5NUM4QTgxRUY4OUNGOUZBN0I0MkUxNTlFOThB OEVDMEJCNjAeFw0yNTExMDMwMTI0MTNaFw0yNTExMDgyMjE2MTNaMDMxMTAvBgNV BAMTKDNBNDIzNDRERTJFQjcwREYxQTlFNkRENkJCNDI2MzY2QUEzRTMzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSuKyCc7mfLKvauN5/ZNU5tbS 3LNlyFkXph+D9aHhMadkMHOGAn9UzQlzonO8+z8tq67V89BVr0eojalanWkyh88I /J+tVxhGgS5TDSdqKobOYxby47ClHxpzpUvxjSLwWU4m347GS+f8zdy54TRuaYRr wvo9fDU5dV3Yj/qCTu43CY0MfPxKp2LKpNZeILyZtOml82Gnc+TuGybL+gIX22N7 eJFJJ1zxMgS2SkeN73TckjERQt6bz/UcP5rISIptiTyfrVc+MinCu8BkOQ/YJsk8 +TgsgpTq9jXlWD5JX5Lm9W3mmv0FUt5QcvAET1swvcDjH3unsKrfauCiH0nTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOkI0TeLrcN8anm3Wu0JjZqo+MzowHwYDVR0j BBgwFoAUuchpXIqB74nPn6e0LhWemKjsC7YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQkYxMUQ0NDI2QTM1MkYwRkJFMUQ2N0IyNDQ4MjlFOUQ2 MUFERkQzMDZDRjgwN0ZFRDkyRDUwMTFFNTFFOEM2LzAvQjlDODY5NUM4QTgxRUY4 OUNGOUZBN0I0MkUxNTlFOThBOEVDMEJCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUM4Njk1QzhBODFFRjg5Q0Y5 RkE3QjQyRTE1OUU5OEE4RUMwQkI2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0JGMTFENDQyNkEzNTJGMEZCRTFENjdCMjQ0ODI5RTlENjFBREZEMzA2 Q0Y4MDdGRUQ5MkQ1MDExRTUxRThDNi8wL0I5Qzg2OTVDOEE4MUVGODlDRjlGQTdC NDJFMTU5RTk4QThFQzBCQjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApHy/pOv75e5hIk3HiROW7Y3j/ M8U0dDXF+kED2/GxRiniP8S/b2pVux79ZSUM7NgASsQ88Be8qxTYyqsmwLVyBy2Z OxkAvL56x0wfuRE9S+AZQIzujtPcP3DDIh45TlIbYFrhM2b0lBk9DO8rs+igAtJ3 9Xqu2DsMXylFgQZyRINLo7QUctJWKRZhrAXdqxeMYKtTE4FCdHTvxhmSTzLaOnc1 8fWEkEptGkdtP7LaFECl6WXrUz71gkKEjNTfExbv2dVXNQbmmfHNBdPS1ntyiA2m bQMvzjURjHnXhT1mMFIBovDpBTK/k6DhpJlevG2a1nK4BWkkFOKg0tLdLZX1 -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:15 2025 by rpki-client