$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.mft File: D47E678D8A41F4FB7348F091558FB10E0E209FB9.mft (raw, json) Hash identifier: JIvp2bxCb9gCfGnd7vn+NtCNzirSaPp4BuhHclpsP8Y= Subject key identifier: CC:BB:5E:08:54:1A:86:71:B2:BE:01:FA:91:F8:6E:21:D9:F6:AC:FC Authority key identifier: D4:7E:67:8D:8A:41:F4:FB:73:48:F0:91:55:8F:B1:0E:0E:20:9F:B9 Certificate issuer: /CN=D47E678D8A41F4FB7348F091558FB10E0E209FB9 Certificate serial: 56A6E210ECE8337ABE614E175E1F86155C9ED2AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.mft Manifest number: 58 Signing time: Wed 05 Nov 2025 14:28:40 +0000 Manifest this update: Wed 05 Nov 2025 14:23:40 +0000 Manifest next update: Sun 09 Nov 2025 15:57:40 +0000 Files and hashes: 1: D47E678D8A41F4FB7348F091558FB10E0E209FB9.crl (hash: vK8+gqgfGFAQKI6s3o6eAT0T3bz89fKS630Um3NV1fA=) 2: 323830363a3431363a3a2f33322d3438203d3e20323732333638.roa (hash: dpEHMpsSDk5KcTUaUlNO6Bs+10mddxduRzdCcUPq8FE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.crl rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a6:e2:10:ec:e8:33:7a:be:61:4e:17:5e:1f:86:15:5c:9e:d2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D47E678D8A41F4FB7348F091558FB10E0E209FB9 Validity Not Before: Nov 5 14:23:40 2025 GMT Not After : Nov 9 15:57:40 2025 GMT Subject: CN=CCBB5E08541A8671B2BE01FA91F86E21D9F6ACFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a6:4f:70:86:dc:53:ac:ed:79:48:97:a1:ac: 5d:b3:b9:72:76:33:35:ee:10:83:e4:b8:26:5e:7a: 90:97:fa:fb:eb:f2:a5:65:49:13:37:d6:0d:a8:33: d4:ee:a8:dc:17:04:7d:55:dc:23:ce:8d:a9:4b:d3: 09:fa:1a:aa:e3:21:fa:e2:89:e6:6f:16:5d:1d:20: a3:5e:d6:62:a7:c4:89:4b:3f:53:c1:79:3b:11:00: d2:79:c5:ba:8f:e8:33:e3:08:a5:94:35:3b:e7:ae: 54:d3:78:2f:da:fc:79:06:e1:6f:68:e9:3f:88:6d: e8:cc:ad:c5:fc:5d:d1:9d:35:a0:43:d2:21:a2:4a: 89:b3:29:0f:bc:5a:73:09:da:c7:cb:4e:8f:ef:bf: 4b:0c:6b:4d:ea:4a:4e:3f:d7:a0:03:8b:df:d3:df: 70:56:12:cc:48:f0:74:82:fc:f2:63:07:bd:eb:bf: 5d:86:37:5f:98:e2:26:3f:26:c7:8a:54:eb:e9:dc: 0e:7a:f7:ff:fc:61:bb:48:0f:8b:47:03:02:2a:0b: a3:27:38:65:ca:8f:3c:8d:25:49:0f:36:8f:3e:28: 7f:c2:12:25:6b:0b:82:d9:ac:9d:62:bb:88:d6:94: 0f:2d:b3:6d:64:30:33:55:a7:e6:16:18:38:9c:35: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BB:5E:08:54:1A:86:71:B2:BE:01:FA:91:F8:6E:21:D9:F6:AC:FC X509v3 Authority Key Identifier: keyid:D4:7E:67:8D:8A:41:F4:FB:73:48:F0:91:55:8F:B1:0E:0E:20:9F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b7:8b:5f:fb:32:73:05:9f:dd:c4:90:47:d1:9d:56:93:8f: d7:a6:21:9a:b9:b1:fa:f1:5c:3f:a7:09:83:d6:35:82:01:ae: 00:85:8d:93:e7:45:39:48:f2:4c:33:c2:4c:61:7e:83:93:b3: 6c:94:9f:18:e6:14:a6:bc:de:82:37:60:1c:30:92:53:1c:e3: 5a:80:3f:7b:37:f0:3a:68:83:8f:91:28:2a:d9:35:fe:a9:88: a2:67:a7:4e:5f:4e:5b:33:9e:8b:06:9a:ed:4d:bc:49:2b:e2: cd:ae:84:59:54:67:64:ab:1b:34:82:8e:93:f6:7b:04:c5:51: 8d:20:c2:e2:f5:16:5e:ff:f1:b4:50:20:71:2a:09:fb:87:20: 64:98:ba:c8:71:db:f7:ff:36:26:42:ec:36:2e:ba:a2:13:55: c0:c1:0c:19:62:12:a6:ca:a4:36:ff:80:1a:22:42:01:77:fd: 13:17:ac:1b:80:1e:a0:05:98:bf:0f:de:e6:9f:21:ea:fd:92: 0c:db:f8:ea:a2:3b:6d:60:e9:8a:15:d8:71:4c:41:78:ec:fa: 34:e6:d1:9f:69:ae:19:a8:85:c6:10:a7:e3:42:13:4f:7a:38: 39:d0:44:b1:3b:b3:ca:b6:85:5f:01:8f:80:a3:77:c2:e5:b3: 51:30:18:7a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVqbiEOzoM3q+YU4XXh+GFVye0qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3RTY3OEQ4QTQxRjRGQjczNDhGMDkxNTU4RkIxMEUw RTIwOUZCOTAeFw0yNTExMDUxNDIzNDBaFw0yNTExMDkxNTU3NDBaMDMxMTAvBgNV BAMTKENDQkI1RTA4NTQxQTg2NzFCMkJFMDFGQTkxRjg2RTIxRDlGNkFDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLpk9whtxTrO15SJehrF2zuXJ2 MzXuEIPkuCZeepCX+vvr8qVlSRM31g2oM9TuqNwXBH1V3CPOjalL0wn6GqrjIfri ieZvFl0dIKNe1mKnxIlLP1PBeTsRANJ5xbqP6DPjCKWUNTvnrlTTeC/a/HkG4W9o 6T+IbejMrcX8XdGdNaBD0iGiSomzKQ+8WnMJ2sfLTo/vv0sMa03qSk4/16ADi9/T 33BWEsxI8HSC/PJjB73rv12GN1+Y4iY/JseKVOvp3A569//8YbtID4tHAwIqC6Mn OGXKjzyNJUkPNo8+KH/CEiVrC4LZrJ1iu4jWlA8ts21kMDNVp+YWGDicNaqfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzLteCFQahnGyvgH6kfhuIdn2rPwwHwYDVR0j BBgwFoAU1H5njYpB9PtzSPCRVY+xDg4gn7kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMUVCRjU1QTU1RjIxNjIzQUQ4MDE2MTUxQTY3NDY2RjA3 QUQ5OEExMzUyRDhCRjYxRUFBRkQ3NzYzQkZCNTQ0LzAvRDQ3RTY3OEQ4QTQxRjRG QjczNDhGMDkxNTU4RkIxMEUwRTIwOUZCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDdFNjc4RDhBNDFGNEZCNzM0 OEYwOTE1NThGQjEwRTBFMjA5RkI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDFFQkY1NUE1NUYyMTYyM0FEODAxNjE1MUE2NzQ2NkYwN0FEOThBMTM1 MkQ4QkY2MUVBQUZENzc2M0JGQjU0NC8wL0Q0N0U2NzhEOEE0MUY0RkI3MzQ4RjA5 MTU1OEZCMTBFMEUyMDlGQjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXt4tf+zJzBZ/dxJBH0Z1Wk4/X piGaubH68Vw/pwmD1jWCAa4AhY2T50U5SPJMM8JMYX6Dk7NslJ8Y5hSmvN6CN2Ac MJJTHONagD97N/A6aIOPkSgq2TX+qYiiZ6dOX05bM56LBprtTbxJK+LNroRZVGdk qxs0go6T9nsExVGNIMLi9RZe//G0UCBxKgn7hyBkmLrIcdv3/zYmQuw2LrqiE1XA wQwZYhKmyqQ2/4AaIkIBd/0TF6wbgB6gBZi/D97mnyHq/ZIM2/jqojttYOmKFdhx TEF47Po05tGfaa4ZqIXGEKfjQhNPejg50ESxO7PKtoVfAY+Ao3fC5bNRMBh6 -----END CERTIFICATE-----Generated at Wed Nov 5 20:16:25 2025 by rpki-client