$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft File: 2F04FD11390F25856E2C138CD67BF473814525F2.mft (raw, json) Hash identifier: v7geSxyTmkOzHVr8jWLJDIoAm5B8B3niirn6JoqUy6Q= Subject key identifier: 14:AF:41:BA:C0:F0:9C:E7:56:EE:2D:9D:28:53:8A:C4:2D:C9:3D:8E Authority key identifier: 2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2 Certificate issuer: /CN=2F04FD11390F25856E2C138CD67BF473814525F2 Certificate serial: 19873062622C6A586D90A8945FC607E93AAEA899 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft Manifest number: 9C Signing time: Mon 03 Nov 2025 07:38:39 +0000 Manifest this update: Mon 03 Nov 2025 07:33:39 +0000 Manifest next update: Sun 09 Nov 2025 05:52:39 +0000 Files and hashes: 1: 2F04FD11390F25856E2C138CD67BF473814525F2.crl (hash: p98c2B95PjKnM7Htzu8H3trjoqCbsd5ZwWrsp8eWEgY=) 2: 323830333a316631303a3a2f33322d3438203d3e20323732313532.roa (hash: zTSGhGTkTCAH6zsxvvBlAjk40oGDytEBhp7Bbe3b3F0=) 3: 3138312e3233322e3138342e302f32322d3234203d3e20323732313532.roa (hash: D0BBlOT/TvG3K7alLZh9sUJL9g2iXx3iUdWEBhbFLm4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.crl rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:87:30:62:62:2c:6a:58:6d:90:a8:94:5f:c6:07:e9:3a:ae:a8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F04FD11390F25856E2C138CD67BF473814525F2 Validity Not Before: Nov 3 07:33:39 2025 GMT Not After : Nov 9 05:52:39 2025 GMT Subject: CN=14AF41BAC0F09CE756EE2D9D28538AC42DC93D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:44:9d:c0:72:f6:eb:c6:ee:b4:e1:a6:24: 35:66:7f:8a:88:67:da:69:51:d4:d9:08:7f:7c:ac: a9:01:11:fd:b4:f0:4b:76:1e:41:46:1f:f4:b4:34: 42:9a:e7:85:3f:67:92:33:0d:00:71:04:3a:de:bc: 68:99:d2:69:42:df:ae:12:22:34:c6:4e:29:a9:38: 86:94:83:b5:db:e8:5d:39:7b:5c:25:9b:4d:83:83: 85:e3:4a:ff:85:b8:72:0c:99:a3:4e:4d:07:67:b3: ec:d9:f7:c4:78:67:61:eb:27:9c:9f:8d:9b:6f:45: 63:fd:8c:ca:8b:d3:c7:65:8f:aa:a1:a5:6c:f7:43: a8:6d:4e:db:27:de:72:42:c7:b8:04:ef:40:d3:9c: d6:6a:90:2c:a5:f0:9a:1c:56:b5:7a:a3:33:a4:f2: 28:d9:f6:23:3d:76:a6:3e:7d:05:c6:a8:d7:53:82: 0f:b7:9c:03:11:a4:4a:b2:ec:e4:99:88:2f:bc:a1: c3:ed:fc:36:57:08:c1:39:c8:e9:51:71:8a:fc:41: 4c:7c:9c:9c:b3:97:0f:df:a1:1b:e8:24:10:26:1e: 42:f7:27:f3:96:6d:7d:07:36:47:0c:57:f1:35:a7: d5:c4:21:b0:9c:99:a8:41:20:0c:66:8a:ab:72:e2: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AF:41:BA:C0:F0:9C:E7:56:EE:2D:9D:28:53:8A:C4:2D:C9:3D:8E X509v3 Authority Key Identifier: keyid:2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0a:27:50:c3:46:17:20:a2:a5:49:f6:d2:77:9b:46:94:ae: 91:27:87:f5:fa:a1:87:72:67:69:2d:18:92:da:7c:d8:60:91: 82:83:57:86:25:77:3e:21:1a:c8:a8:12:28:96:dd:fc:0a:2c: c0:f8:7d:41:51:d8:a6:e2:cf:5a:d3:1a:ae:fb:01:10:dd:27: 7d:b4:b1:27:d9:d4:44:68:76:17:a8:81:16:db:31:98:b5:19: 3c:b7:cc:3c:c8:04:0d:03:7c:78:5a:f9:c7:f0:92:b0:1a:b7: 04:f2:2b:9e:b6:9d:2f:f0:98:7c:5a:99:2a:29:d1:80:c8:79: b2:ca:bf:4a:76:c9:df:d5:2b:17:99:6d:cf:f1:71:2d:c0:fc: 2a:eb:5f:ef:40:98:9f:c8:96:da:46:4c:6d:39:42:9a:95:8d: 49:49:d1:39:10:1a:71:1f:53:7c:08:ab:46:9f:b9:03:ef:ab: 0a:c1:63:23:84:f6:01:08:91:72:16:35:cd:5f:06:86:98:5d: 10:be:3f:8c:94:f8:68:d5:53:ea:3a:35:4f:c7:47:f3:a6:a6: 8c:d4:00:0c:af:66:9f:e0:c6:37:12:19:e2:e9:45:34:45:40: b3:99:d7:e4:ca:99:af:5b:6b:06:06:b6:ad:5e:93:20:81:6e: cc:be:81:3c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGYcwYmIsalhtkKiUX8YH6TquqJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwNEZEMTEzOTBGMjU4NTZFMkMxMzhDRDY3QkY0NzM4 MTQ1MjVGMjAeFw0yNTExMDMwNzMzMzlaFw0yNTExMDkwNTUyMzlaMDMxMTAvBgNV BAMTKDE0QUY0MUJBQzBGMDlDRTc1NkVFMkQ5RDI4NTM4QUM0MkRDOTNEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIkSdwHL268butOGmJDVmf4qI Z9ppUdTZCH98rKkBEf208Et2HkFGH/S0NEKa54U/Z5IzDQBxBDrevGiZ0mlC364S IjTGTimpOIaUg7Xb6F05e1wlm02Dg4XjSv+FuHIMmaNOTQdns+zZ98R4Z2HrJ5yf jZtvRWP9jMqL08dlj6qhpWz3Q6htTtsn3nJCx7gE70DTnNZqkCyl8JocVrV6ozOk 8ijZ9iM9dqY+fQXGqNdTgg+3nAMRpEqy7OSZiC+8ocPt/DZXCME5yOlRcYr8QUx8 nJyzlw/foRvoJBAmHkL3J/OWbX0HNkcMV/E1p9XEIbCcmahBIAxmiqty4mARAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFK9BusDwnOdW7i2dKFOKxC3JPY4wHwYDVR0j BBgwFoAULwT9ETkPJYVuLBOM1nv0c4FFJfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENDA1M0UxNTc5M0Q4QkE3MzgxMjRCNzBGOTdENUI5MDQ2 OUZGMUEyOUIwQTU3RTE0MkFGNkRENEQ4MTExMUM5LzAvMkYwNEZEMTEzOTBGMjU4 NTZFMkMxMzhDRDY3QkY0NzM4MTQ1MjVGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjA0RkQxMTM5MEYyNTg1NkUy QzEzOENENjdCRjQ3MzgxNDUyNUYyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDQwNTNFMTU3OTNEOEJBNzM4MTI0QjcwRjk3RDVCOTA0NjlGRjFBMjlC MEE1N0UxNDJBRjZERDREODExMTFDOS8wLzJGMDRGRDExMzkwRjI1ODU2RTJDMTM4 Q0Q2N0JGNDczODE0NTI1RjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnCidQw0YXIKKlSfbSd5tGlK6R J4f1+qGHcmdpLRiS2nzYYJGCg1eGJXc+IRrIqBIolt38CizA+H1BUdim4s9a0xqu +wEQ3Sd9tLEn2dREaHYXqIEW2zGYtRk8t8w8yAQNA3x4WvnH8JKwGrcE8iuetp0v 8Jh8WpkqKdGAyHmyyr9Kdsnf1SsXmW3P8XEtwPwq61/vQJifyJbaRkxtOUKalY1J SdE5EBpxH1N8CKtGn7kD76sKwWMjhPYBCJFyFjXNXwaGmF0Qvj+MlPho1VPqOjVP x0fzpqaM1AAMr2af4MY3Ehni6UU0RUCzmdfkypmvW2sGBratXpMggW7MvoE8 -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:27 2025 by rpki-client