$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.mft File: 98432974DFA0347371D335D3A9EF625584C48F45.mft (raw, json) Hash identifier: fR1nYjek9WFENGVG3RXKJrmNT8S8IOj2PedOeddlwH4= Subject key identifier: ED:5D:2F:CE:9E:30:43:F0:33:13:98:C7:A5:C0:59:F6:E5:6F:36:F0 Authority key identifier: 98:43:29:74:DF:A0:34:73:71:D3:35:D3:A9:EF:62:55:84:C4:8F:45 Certificate issuer: /CN=98432974DFA0347371D335D3A9EF625584C48F45 Certificate serial: 0515AD9FC85F2804B49F118FA78322A57832B1C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98432974DFA0347371D335D3A9EF625584C48F45.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 21:09:23 +0000 Manifest this update: Tue 04 Nov 2025 21:04:23 +0000 Manifest next update: Sun 09 Nov 2025 03:10:23 +0000 Files and hashes: 1: 98432974DFA0347371D335D3A9EF625584C48F45.crl (hash: XjN7g+Q2XDULalMyiiS3YKXzigWEaL0uIjlH1XUSKxk=) 2: 34352e3232342e3130302e302f32322d3234203d3e20323731373937.roa (hash: eBaViA23n1+Rm1HhJ1b6l5DQNd/6PecR8o2BH2Sw290=) 3: 323830333a383031303a3a2f33322d3634203d3e20323731373937.roa (hash: tCQysc2zwLNAdPlVGQz/xrTg21tY6T6ot/1uBbP+VsQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.crl rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98432974DFA0347371D335D3A9EF625584C48F45.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:15:ad:9f:c8:5f:28:04:b4:9f:11:8f:a7:83:22:a5:78:32:b1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98432974DFA0347371D335D3A9EF625584C48F45 Validity Not Before: Nov 4 21:04:23 2025 GMT Not After : Nov 9 03:10:23 2025 GMT Subject: CN=ED5D2FCE9E3043F0331398C7A5C059F6E56F36F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:5f:d3:97:a4:d1:21:ae:fa:1e:97:64:f4: 51:74:e7:1b:38:6f:5d:c9:ee:48:63:5d:07:21:af: f8:a7:a0:d6:d1:da:f7:f3:33:90:f3:ce:2c:8b:52: f8:a7:44:8c:df:30:04:45:6b:e3:c5:e6:bf:c0:2a: a5:da:59:e3:32:76:04:d0:cb:ae:c1:17:ff:41:7f: 7d:3a:2a:42:70:cd:b5:f2:e8:27:bc:49:b7:98:71: cf:83:a1:e2:d7:37:cf:0d:03:9c:90:f6:13:9e:70: c5:99:5a:b0:d5:19:d2:ab:14:d8:d6:d1:70:2a:77: 36:da:df:3f:22:b0:fd:81:04:73:b6:da:bd:44:ef: 73:01:e1:3f:75:df:24:fa:b1:47:b5:68:e5:bf:f1: 46:c2:fc:f4:db:ba:39:e5:a4:19:84:49:8a:55:95: 59:ed:90:65:89:0b:11:12:41:e0:2f:26:19:c4:d2: c8:b2:db:6e:75:74:4e:67:70:38:93:b1:82:63:c1: 0e:e3:b5:d1:d1:5f:d2:9c:d4:84:6c:9c:b6:05:aa: cf:14:3c:98:c8:37:eb:ca:fe:fe:3c:e2:83:95:f8: d9:94:73:cc:7f:22:ff:c9:5f:eb:d2:20:f0:31:63: 56:f9:12:1b:ae:21:53:fb:5d:70:7a:67:51:0c:14: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5D:2F:CE:9E:30:43:F0:33:13:98:C7:A5:C0:59:F6:E5:6F:36:F0 X509v3 Authority Key Identifier: keyid:98:43:29:74:DF:A0:34:73:71:D3:35:D3:A9:EF:62:55:84:C4:8F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98432974DFA0347371D335D3A9EF625584C48F45.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:56:5f:ae:b5:c3:aa:88:f4:96:9e:cc:2b:83:e5:79:a2:49: 5c:a7:48:50:0e:ad:8f:19:9b:28:fa:e6:99:12:94:ed:e9:58: 5c:ce:9c:3b:c4:69:e4:a7:04:fc:91:bf:58:c2:f5:0d:f9:74: b1:b8:38:2b:89:4e:d3:e9:84:f2:88:3d:bf:97:a1:6f:fa:10: 1c:e2:c5:6e:60:39:2e:7f:80:1f:49:ec:db:b6:37:fc:23:4c: 14:2a:a7:7d:31:7b:c5:d5:bf:b9:6c:5e:5b:3c:2b:c9:1e:b6: ed:93:7d:5a:b2:51:26:b1:8a:af:39:e7:d1:f0:1e:1d:8c:7a: b1:b5:81:0c:ed:ea:cb:5b:7b:d3:a2:84:68:ca:9f:a7:57:a7: 82:66:55:d3:61:fa:f7:6c:20:10:ea:6f:00:ff:dc:bc:7a:ff: 85:b7:bd:71:1f:9b:dd:b5:81:84:14:3c:1e:06:ef:6a:3b:e9: d5:2d:5b:5a:ee:7e:f3:3e:9e:29:73:69:2c:af:10:09:43:a9: 1e:89:7e:6f:28:15:10:b6:4c:86:0c:8c:26:6b:b3:96:b0:50: 91:12:79:23:45:c5:1b:f3:17:db:bd:7d:e3:e6:b4:d9:c8:26: 1c:ed:a6:c6:e3:28:7e:08:a1:95:6f:25:51:60:4d:e2:c2:e5: f2:23:48:cd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBRWtn8hfKAS0nxGPp4MipXgysccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg0MzI5NzRERkEwMzQ3MzcxRDMzNUQzQTlFRjYyNTU4 NEM0OEY0NTAeFw0yNTExMDQyMTA0MjNaFw0yNTExMDkwMzEwMjNaMDMxMTAvBgNV BAMTKEVENUQyRkNFOUUzMDQzRjAzMzEzOThDN0E1QzA1OUY2RTU2RjM2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxV/Tl6TRIa76Hpdk9FF05xs4 b13J7khjXQchr/inoNbR2vfzM5DzziyLUvinRIzfMARFa+PF5r/AKqXaWeMydgTQ y67BF/9Bf306KkJwzbXy6Ce8SbeYcc+DoeLXN88NA5yQ9hOecMWZWrDVGdKrFNjW 0XAqdzba3z8isP2BBHO22r1E73MB4T913yT6sUe1aOW/8UbC/PTbujnlpBmESYpV lVntkGWJCxESQeAvJhnE0siy2251dE5ncDiTsYJjwQ7jtdHRX9Kc1IRsnLYFqs8U PJjIN+vK/v484oOV+NmUc8x/Iv/JX+vSIPAxY1b5EhuuIVP7XXB6Z1EMFM7VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7V0vzp4wQ/AzE5jHpcBZ9uVvNvAwHwYDVR0j BBgwFoAUmEMpdN+gNHNx0zXTqe9iVYTEj0UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMzI0NTdDNjAwNDBBMEU0NDI3MjVFOURENTUyNDk5RjM1 Mjc4MUZCQ0I1NjE0OUU2QjIxMEVFN0M0Rjc1RUUyLzAvOTg0MzI5NzRERkEwMzQ3 MzcxRDMzNUQzQTlFRjYyNTU4NEM0OEY0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODQzMjk3NERGQTAzNDczNzFE MzM1RDNBOUVGNjI1NTg0QzQ4RjQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDMyNDU3QzYwMDQwQTBFNDQyNzI1RTlERDU1MjQ5OUYzNTI3ODFGQkNC NTYxNDlFNkIyMTBFRTdDNEY3NUVFMi8wLzk4NDMyOTc0REZBMDM0NzM3MUQzMzVE M0E5RUY2MjU1ODRDNDhGNDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6Vl+utcOqiPSWnswrg+V5oklc p0hQDq2PGZso+uaZEpTt6Vhczpw7xGnkpwT8kb9YwvUN+XSxuDgriU7T6YTyiD2/ l6Fv+hAc4sVuYDkuf4AfSezbtjf8I0wUKqd9MXvF1b+5bF5bPCvJHrbtk31aslEm sYqvOefR8B4djHqxtYEM7erLW3vTooRoyp+nV6eCZlXTYfr3bCAQ6m8A/9y8ev+F t71xH5vdtYGEFDweBu9qO+nVLVta7n7zPp4pc2ksrxAJQ6keiX5vKBUQtkyGDIwm a7OWsFCREnkjRcUb8xfbvX3j5rTZyCYc7abG4yh+CKGVbyVRYE3iwuXyI0jN -----END CERTIFICATE-----Generated at Wed Nov 5 20:12:22 2025 by rpki-client