$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft File: 2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft (raw, json) Hash identifier: +lbyRfPtywC+qLKcQUupwcyezFRqvFhdy+QcOnOOnak= Subject key identifier: 79:C0:E8:26:81:BD:40:37:DB:FA:8D:7C:17:E8:77:02:CD:C9:85:46 Authority key identifier: 2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9 Certificate issuer: /CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9 Certificate serial: 300AF77A2B899802B1B2CF5D00436FE8DC614F9D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft Manifest number: 0134 Signing time: Tue 04 Nov 2025 01:23:19 +0000 Manifest this update: Tue 04 Nov 2025 01:18:19 +0000 Manifest next update: Sun 09 Nov 2025 23:57:19 +0000 Files and hashes: 1: 2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl (hash: AJLvp40BYoa/YO8ZjaE005wDEGOnQdtTO8nSOl5zpAk=) 2: 3230302e35382e3234302e302f32312d3234203d3e20323635373231.roa (hash: 7HolFbVvC5bEDrcK4sqhAfqq4tuDbBqg/QFGwBgl2ro=) 3: 34352e36352e3234342e302f32322d3234203d3e20323635373231.roa (hash: SK577UfZ4BSuNBPgeLAhn/0duy0WJ+vSxJa9/kdW4qg=) 4: 323830333a346463303a3a2f33322d3438203d3e20323635373231.roa (hash: 9eINwRSHdoIllB2qpGnBwWIaRHXOv28j3zAloDR8YXY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0a:f7:7a:2b:89:98:02:b1:b2:cf:5d:00:43:6f:e8:dc:61:4f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9 Validity Not Before: Nov 4 01:18:19 2025 GMT Not After : Nov 9 23:57:19 2025 GMT Subject: CN=79C0E82681BD4037DBFA8D7C17E87702CDC98546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:ce:3f:85:88:92:93:00:0a:f3:0f:fe:66: 62:b3:e2:31:5e:2f:f7:5d:27:e7:c5:2e:c4:4b:31: cf:a8:58:63:4b:7b:d9:8e:37:01:b8:65:16:c5:91: b3:87:9b:fc:94:dd:8e:b6:cf:18:5f:05:1a:f3:03: 6e:92:e7:b2:a1:1e:49:f8:15:16:70:df:d0:db:90: c8:75:1c:5d:fc:68:ce:8a:10:03:e1:87:7c:c7:06: 5b:d6:60:eb:73:d4:1b:3d:13:b4:bf:c4:62:eb:62: ec:15:04:28:68:bb:18:cd:11:60:ef:c6:2e:7a:c7: 2a:eb:7c:58:4e:60:37:95:68:42:c4:77:1f:45:6c: 86:9d:55:0e:13:da:7c:e2:83:17:f7:f5:af:b4:a6: d3:85:6d:e0:db:46:31:db:aa:0b:d8:d9:c5:de:d0: 6c:7a:88:44:93:33:6f:ae:40:5e:41:70:44:56:21: 2e:44:d2:10:1a:7e:93:1b:49:f4:cd:fe:1c:70:d0: aa:49:0e:c6:f3:45:ae:e9:f2:ad:44:c0:6e:05:9e: 15:d4:fc:c2:7c:88:72:fd:dc:45:b1:3a:04:c0:15: ec:7c:3a:cd:1b:2f:f1:3e:a5:95:83:02:34:b1:b3: ff:18:b5:93:47:49:00:7e:a1:a3:82:53:fd:4e:49: 47:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C0:E8:26:81:BD:40:37:DB:FA:8D:7C:17:E8:77:02:CD:C9:85:46 X509v3 Authority Key Identifier: keyid:2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:85:40:98:5f:b1:08:63:0d:0a:5d:14:70:30:cc:96:bb:01: d8:fd:d1:84:98:ed:8e:a3:fb:3c:86:de:0c:3c:a5:fc:0b:2f: 69:45:40:9a:4b:4e:29:7f:2c:75:13:a0:23:52:f4:ec:94:9e: 1f:15:36:01:ec:8d:c9:0d:b3:30:3b:57:c5:f8:70:91:2c:79: 4a:ec:36:86:d7:e5:3b:c6:eb:52:d0:72:26:f2:18:85:d6:fa: 44:c5:44:c2:af:9f:01:89:7e:db:41:cf:9f:f0:e3:ad:b2:54: 2d:93:b2:55:a0:b5:d9:ee:3a:d5:9f:16:be:f3:7e:49:0b:71: 15:d9:5b:20:4b:00:45:d3:14:8c:38:ea:4f:4b:46:ae:c7:57: f9:f2:d9:44:7e:85:f8:22:ca:5a:8b:c8:94:21:71:2d:ff:0e: 0e:d2:1c:00:65:aa:f6:76:26:45:68:10:0d:bf:f1:80:92:c7: f4:b6:da:1c:9a:37:fa:dc:f7:30:30:3e:06:ac:8f:5e:c5:e3: 63:47:78:00:62:50:c7:80:a1:3b:31:89:a7:4a:14:fe:7f:bd: 9f:49:84:82:f4:cd:0a:7b:b8:2a:92:48:93:55:7e:ea:cf:7b: 9c:35:a2:90:03:39:0d:ff:c4:90:50:0e:10:fe:19:53:f0:98: 66:14:b1:c6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMAr3eiuJmAKxss9dAENv6NxhT50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4QzM2ODBENkY4OEI3MkVDMDZGMTMyNkNBQTBBMzQ4 QUU0RkFBOTAeFw0yNTExMDQwMTE4MTlaFw0yNTExMDkyMzU3MTlaMDMxMTAvBgNV BAMTKDc5QzBFODI2ODFCRDQwMzdEQkZBOEQ3QzE3RTg3NzAyQ0RDOTg1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/s4/hYiSkwAK8w/+ZmKz4jFe L/ddJ+fFLsRLMc+oWGNLe9mONwG4ZRbFkbOHm/yU3Y62zxhfBRrzA26S57KhHkn4 FRZw39DbkMh1HF38aM6KEAPhh3zHBlvWYOtz1Bs9E7S/xGLrYuwVBChouxjNEWDv xi56xyrrfFhOYDeVaELEdx9FbIadVQ4T2nzigxf39a+0ptOFbeDbRjHbqgvY2cXe 0Gx6iESTM2+uQF5BcERWIS5E0hAafpMbSfTN/hxw0KpJDsbzRa7p8q1EwG4FnhXU /MJ8iHL93EWxOgTAFex8Os0bL/E+pZWDAjSxs/8YtZNHSQB+oaOCU/1OSUdFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUecDoJoG9QDfb+o18F+h3As3JhUYwHwYDVR0j BBgwFoAUL4w2gNb4i3LsBvEybKoKNIrk+qkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTA3MjUwNTU2MjBDMUE1MkYwOUU5REJCQUJFQjNCMDEy ODAzQjdDMjUzODgxRkM0QTZDMzk0MkYxNUVDNDA3LzAvMkY4QzM2ODBENkY4OEI3 MkVDMDZGMTMyNkNBQTBBMzQ4QUU0RkFBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjhDMzY4MEQ2Rjg4QjcyRUMw NkYxMzI2Q0FBMEEzNDhBRTRGQUE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwNzI1MDU1NjIwQzFBNTJGMDlFOURCQkFCRUIzQjAxMjgwM0I3QzI1 Mzg4MUZDNEE2QzM5NDJGMTVFQzQwNy8wLzJGOEMzNjgwRDZGODhCNzJFQzA2RjEz MjZDQUEwQTM0OEFFNEZBQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPhUCYX7EIYw0KXRRwMMyWuwHY /dGEmO2Oo/s8ht4MPKX8Cy9pRUCaS04pfyx1E6AjUvTslJ4fFTYB7I3JDbMwO1fF +HCRLHlK7DaG1+U7xutS0HIm8hiF1vpExUTCr58BiX7bQc+f8OOtslQtk7JVoLXZ 7jrVnxa+835JC3EV2VsgSwBF0xSMOOpPS0aux1f58tlEfoX4Ispai8iUIXEt/w4O 0hwAZar2diZFaBANv/GAksf0ttocmjf63PcwMD4GrI9exeNjR3gAYlDHgKE7MYmn ShT+f72fSYSC9M0Ke7gqkkiTVX7qz3ucNaKQAzkN/8SQUA4Q/hlT8JhmFLHG -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:25 2025 by rpki-client