$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft File: 57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft (raw, json) Hash identifier: hwuOO2UkX81mK2EM0KO/1ZiH0Jkz1Pg7R/Sd3EfpXgQ= Subject key identifier: 2C:F4:11:0F:30:4A:A5:17:69:B2:6F:AA:C6:B4:63:1B:36:21:43:FC Authority key identifier: 57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41 Certificate issuer: /CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41 Certificate serial: 1273BAB25066C1EAAC948C20543616142CB49D71 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft Manifest number: 0132 Signing time: Wed 05 Nov 2025 06:29:28 +0000 Manifest this update: Wed 05 Nov 2025 06:24:28 +0000 Manifest next update: Mon 10 Nov 2025 18:00:28 +0000 Files and hashes: 1: 57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl (hash: vqSau6hTY30QNH7GF/6BPjoi82Bw21G4awKvmdI2muY=) 2: 323830363a3332633a3a2f33322d3332203d3e20323635353334.roa (hash: IUgTQ1jt+m23YE3hZFpP8mesUFWH4CullPoLv94DQI4=) 3: 34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa (hash: y82JpCiQWiwHdhkL+cYveCa/G6ofUko8YcVgxzajMP4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:73:ba:b2:50:66:c1:ea:ac:94:8c:20:54:36:16:14:2c:b4:9d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41 Validity Not Before: Nov 5 06:24:28 2025 GMT Not After : Nov 10 18:00:28 2025 GMT Subject: CN=2CF4110F304AA51769B26FAAC6B4631B362143FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:77:1f:81:0c:cd:ea:5a:3c:8f:e5:a5:f1: 02:3e:e2:09:6c:da:f7:5d:53:dd:0b:f4:d8:45:f8: f1:72:60:68:bf:d8:7b:b0:76:46:a0:4c:17:4f:32: 6a:dd:31:e7:b2:7a:63:aa:72:06:75:43:d0:43:05: 9a:6d:c7:57:97:b1:4e:30:25:fb:7d:23:91:72:95: ce:cf:2a:05:0b:d9:41:6a:c3:8b:ae:5e:10:20:97: d7:62:9b:10:55:f3:dd:73:00:dc:f0:d9:79:b2:d6: d9:92:a8:c1:f8:17:ae:60:26:26:a9:f8:e9:6d:7c: 03:6d:2a:3c:b0:41:7e:ec:f8:e7:d1:1e:7e:3d:0c: f0:77:21:7f:c3:5c:5e:35:c7:32:81:a1:a0:aa:5e: ea:6c:d5:36:75:40:cf:15:4b:b3:cf:69:64:f2:d3: 70:2f:03:ac:cf:b6:42:c1:f2:af:12:a7:94:6d:bb: 0a:b0:6d:28:87:99:cb:e9:ae:f4:4d:d8:bc:84:a5: 12:48:66:32:cd:10:98:b5:04:50:4b:25:51:20:be: 2b:37:f6:4d:5b:8b:cd:48:c5:da:c4:56:19:25:32: e6:a0:ff:0c:1e:07:4d:40:06:f2:b7:5c:b9:6e:09: d9:6f:b3:3c:ec:7e:dd:c6:58:79:53:21:0d:2f:f8: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F4:11:0F:30:4A:A5:17:69:B2:6F:AA:C6:B4:63:1B:36:21:43:FC X509v3 Authority Key Identifier: keyid:57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:74:6e:9d:20:9d:a0:6e:6b:e4:50:79:1f:08:5a:be:6f:da: c9:35:9a:c4:ba:e7:b5:ba:da:14:ac:1e:96:06:72:e4:5f:da: a5:c5:ad:50:23:90:6c:3e:22:21:d5:0b:c1:a1:9a:85:1d:db: 45:e2:75:03:02:77:3a:f1:49:ca:20:4b:7d:08:b7:39:e2:68: 87:02:3c:ba:e0:b8:9e:59:73:57:c9:63:c8:5d:0e:0c:71:b4: 5b:34:f8:ff:70:f5:82:e2:d0:69:ae:1c:b0:60:9b:15:7a:b3: c4:48:d8:29:97:5a:7d:9b:07:4f:25:27:cf:5f:56:03:f1:b3: eb:ba:3d:42:55:e2:3e:63:58:86:ef:dc:bf:86:1e:4b:ab:40: ec:c7:63:b6:5d:a0:19:dc:df:4d:81:b4:d3:6c:6a:e7:98:4d: b2:6a:d0:bf:d3:ef:a6:1f:80:fa:74:e3:c3:87:9d:25:04:b0: 0d:28:b4:e4:aa:cd:71:a8:14:59:52:65:e5:8c:f2:38:cc:ad: 80:01:c7:66:ac:ea:03:6e:c5:32:0c:44:d2:12:d6:95:1b:a8: 2e:fc:1d:a3:32:13:a3:7f:29:f2:9a:4f:c1:10:4d:77:7c:b5: ec:48:30:e6:16:a6:87:11:83:2e:a0:2e:bf:99:96:36:e0:18: 42:b8:04:2d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEnO6slBmweqslIwgVDYWFCy0nXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCMjBEM0VDMjE5NjFBNjUwNURDQTBBRDBCMzNEQzMz QzVDQ0Q0MTAeFw0yNTExMDUwNjI0MjhaFw0yNTExMTAxODAwMjhaMDMxMTAvBgNV BAMTKDJDRjQxMTBGMzA0QUE1MTc2OUIyNkZBQUM2QjQ2MzFCMzYyMTQzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiXcfgQzN6lo8j+Wl8QI+4gls 2vddU90L9NhF+PFyYGi/2HuwdkagTBdPMmrdMeeyemOqcgZ1Q9BDBZptx1eXsU4w Jft9I5Fylc7PKgUL2UFqw4uuXhAgl9dimxBV891zANzw2Xmy1tmSqMH4F65gJiap +OltfANtKjywQX7s+OfRHn49DPB3IX/DXF41xzKBoaCqXups1TZ1QM8VS7PPaWTy 03AvA6zPtkLB8q8Sp5RtuwqwbSiHmcvprvRN2LyEpRJIZjLNEJi1BFBLJVEgvis3 9k1bi81IxdrEVhklMuag/wweB01ABvK3XLluCdlvszzsft3GWHlTIQ0v+EmlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULPQRDzBKpRdpsm+qxrRjGzYhQ/wwHwYDVR0j BBgwFoAUV7INPsIZYaZQXcoK0LM9wzxczUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMzgyNUE3QUVCQkQ3OEUxMzQ4QzNDMDdCQkJBM0QxREJF MDQwQjE1NDlCMkI3MTEzOUU2QjgxMDhCOUYyMzgyLzAvNTdCMjBEM0VDMjE5NjFB NjUwNURDQTBBRDBCMzNEQzMzQzVDQ0Q0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0IyMEQzRUMyMTk2MUE2NTA1 RENBMEFEMEIzM0RDMzNDNUNDRDQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDM4MjVBN0FFQkJENzhFMTM0OEMzQzA3QkJCQTNEMURCRTA0MEIxNTQ5 QjJCNzExMzlFNkI4MTA4QjlGMjM4Mi8wLzU3QjIwRDNFQzIxOTYxQTY1MDVEQ0Ew QUQwQjMzREMzM0M1Q0NENDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDYdG6dIJ2gbmvkUHkfCFq+b9rJ NZrEuue1utoUrB6WBnLkX9qlxa1QI5BsPiIh1QvBoZqFHdtF4nUDAnc68UnKIEt9 CLc54miHAjy64LieWXNXyWPIXQ4McbRbNPj/cPWC4tBprhywYJsVerPESNgpl1p9 mwdPJSfPX1YD8bPruj1CVeI+Y1iG79y/hh5Lq0Dsx2O2XaAZ3N9NgbTTbGrnmE2y atC/0++mH4D6dOPDh50lBLANKLTkqs1xqBRZUmXljPI4zK2AAcdmrOoDbsUyDETS EtaVG6gu/B2jMhOjfynymk/BEE13fLXsSDDmFqaHEYMuoC6/mZY24BhCuAQt -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:34 2025 by rpki-client