$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.mft File: 2DEA145BF0F50E2678120C8945C5EB4082ED0C02.mft (raw, json) Hash identifier: hKv64qvUPHmbXMZ9H1XAPJB/WWktPDb8CZtUyEfOTdc= Subject key identifier: 61:89:96:7B:6C:16:B3:D4:1C:BB:D6:BE:2B:F9:17:5F:58:FA:4E:D3 Authority key identifier: 2D:EA:14:5B:F0:F5:0E:26:78:12:0C:89:45:C5:EB:40:82:ED:0C:02 Certificate issuer: /CN=2DEA145BF0F50E2678120C8945C5EB4082ED0C02 Certificate serial: 4BDFFC6A0E881C1B8C68957C0AC5760DBF61E730 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.mft Manifest number: 012F Signing time: Wed 05 Nov 2025 04:33:26 +0000 Manifest this update: Wed 05 Nov 2025 04:28:26 +0000 Manifest next update: Sun 09 Nov 2025 22:10:26 +0000 Files and hashes: 1: 2DEA145BF0F50E2678120C8945C5EB4082ED0C02.crl (hash: PjonJ7JD5/C20zt68f9UXZGlwhVPYZXsP7VNtcx4hb4=) 2: 34352e37312e352e302f32342d3234203d3e20323635383834.roa (hash: axxgrXP2UbmcXRR4ncHWT/2BjBWDNtV6W7b0nwI/7jI=) 3: 323830313a31323a623030303a3a2f34382d3438203d3e20323635383834.roa (hash: IUhPGZMFHcMNqJRsHkoOzTyLefs9rNfmI4OSpuY4tos=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.crl rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:df:fc:6a:0e:88:1c:1b:8c:68:95:7c:0a:c5:76:0d:bf:61:e7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEA145BF0F50E2678120C8945C5EB4082ED0C02 Validity Not Before: Nov 5 04:28:26 2025 GMT Not After : Nov 9 22:10:26 2025 GMT Subject: CN=6189967B6C16B3D41CBBD6BE2BF9175F58FA4ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:89:47:22:97:de:fc:24:6a:f6:f2:a8:9d: 4c:b6:ef:e6:ac:e2:8e:e7:8f:80:a5:95:6f:9b:3c: 62:85:57:7f:f0:91:dd:6e:ad:17:0b:18:58:c4:fc: 88:1e:2e:7a:9a:91:82:a0:0c:9d:db:38:3f:a4:af: 2c:43:ce:8b:ea:27:61:a7:3a:44:6b:b8:47:2a:3a: 64:8f:92:a8:28:ed:64:33:e3:fe:61:02:c3:72:e7: c7:a4:88:5b:e4:f8:ba:8e:6b:6d:c2:49:63:cd:dd: 69:5d:5b:f1:76:0e:28:bb:86:30:e2:53:73:4d:cd: 1e:1e:c8:44:14:49:d1:2b:f1:5c:72:e2:28:03:e3: 2c:fd:d7:03:de:4e:f8:d1:2e:c8:02:d8:04:15:6a: b2:7b:cc:4b:d9:5d:73:3c:7f:07:3a:1c:27:8d:9c: 2c:a6:ce:71:25:b5:aa:a9:64:6f:74:f0:21:05:7f: 39:63:57:e4:03:d1:89:37:29:fc:a3:83:02:1e:43: 9a:df:e0:db:02:22:31:0d:b9:3f:60:35:d0:8d:8e: 51:e9:53:18:e7:2b:55:46:7b:ee:29:2b:80:2a:20: bd:6a:92:fc:ba:c6:12:33:fa:03:6e:5d:96:52:6b: ed:4b:11:65:4f:75:0e:9a:22:4f:a6:67:b7:9e:50: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:96:7B:6C:16:B3:D4:1C:BB:D6:BE:2B:F9:17:5F:58:FA:4E:D3 X509v3 Authority Key Identifier: keyid:2D:EA:14:5B:F0:F5:0E:26:78:12:0C:89:45:C5:EB:40:82:ED:0C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:53:76:d4:a6:88:26:c7:03:cc:c7:53:f1:b1:d8:ee:30:6f: 84:68:24:e2:fe:e9:aa:76:19:32:98:cf:ca:d0:ad:f1:0f:5e: 25:d3:0f:9f:c1:9e:e5:52:38:6d:8f:8b:9e:ac:8f:63:cc:aa: 2f:0e:ea:a0:62:1e:2d:6c:a8:ff:8b:c8:0f:dc:b6:75:12:f1: 14:65:a6:8f:c9:57:69:3d:f7:ba:62:12:9a:59:4d:97:08:d5: c3:3e:ae:2b:1f:f6:b1:23:29:fa:ad:10:24:cf:b4:7f:9e:2b: 01:da:80:20:a6:b4:d2:29:56:84:e3:c0:c0:18:4a:86:f2:4a: f1:e3:5f:51:ed:68:f3:4a:dd:2b:f0:c5:06:08:ce:06:10:d3: 69:04:a2:2b:87:fa:0e:4d:85:24:f8:35:63:ed:81:b4:a6:64: e0:d1:54:d3:25:6d:29:64:5f:be:9b:4a:89:21:59:85:51:54: 83:9d:b1:df:69:b5:0a:bf:b9:04:2f:b0:31:09:cc:02:1a:ad: 16:b8:b3:dd:f7:a1:c6:9c:e1:71:32:b8:79:f3:4b:fb:d5:b1: b8:ec:cd:02:88:81:92:27:4a:0a:bf:cd:ae:20:57:0c:d8:14: c8:30:65:d9:4a:62:7c:83:79:df:a0:86:f6:13:9c:e1:72:cc: aa:0f:03:72 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUS9/8ag6IHBuMaJV8CsV2Db9h5zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQTE0NUJGMEY1MEUyNjc4MTIwQzg5NDVDNUVCNDA4 MkVEMEMwMjAeFw0yNTExMDUwNDI4MjZaFw0yNTExMDkyMjEwMjZaMDMxMTAvBgNV BAMTKDYxODk5NjdCNkMxNkIzRDQxQ0JCRDZCRTJCRjkxNzVGNThGQTRFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmIlHIpfe/CRq9vKonUy27+as 4o7nj4CllW+bPGKFV3/wkd1urRcLGFjE/IgeLnqakYKgDJ3bOD+kryxDzovqJ2Gn OkRruEcqOmSPkqgo7WQz4/5hAsNy58ekiFvk+LqOa23CSWPN3WldW/F2Dii7hjDi U3NNzR4eyEQUSdEr8Vxy4igD4yz91wPeTvjRLsgC2AQVarJ7zEvZXXM8fwc6HCeN nCymznEltaqpZG908CEFfzljV+QD0Yk3KfyjgwIeQ5rf4NsCIjENuT9gNdCNjlHp UxjnK1VGe+4pK4AqIL1qkvy6xhIz+gNuXZZSa+1LEWVPdQ6aIk+mZ7eeUH8nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYYmWe2wWs9Qcu9a+K/kXX1j6TtMwHwYDVR0j BBgwFoAULeoUW/D1DiZ4EgyJRcXrQILtDAIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FN0MxQ0JFRkM3NUUzNDI4NENGMUQxOUI4MzYxMUVFMjMw OTRBMUI1MzExNTIzN0ZEMkYzRkEyQkFFMUIxRDU3LzAvMkRFQTE0NUJGMEY1MEUy Njc4MTIwQzg5NDVDNUVCNDA4MkVEMEMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREVBMTQ1QkYwRjUwRTI2Nzgx MjBDODk0NUM1RUI0MDgyRUQwQzAyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTdDMUNCRUZDNzVFMzQyODRDRjFEMTlCODM2MTFFRTIzMDk0QTFCNTMx MTUyMzdGRDJGM0ZBMkJBRTFCMUQ1Ny8wLzJERUExNDVCRjBGNTBFMjY3ODEyMEM4 OTQ1QzVFQjQwODJFRDBDMDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZU3bUpogmxwPMx1PxsdjuMG+E aCTi/umqdhkymM/K0K3xD14l0w+fwZ7lUjhtj4uerI9jzKovDuqgYh4tbKj/i8gP 3LZ1EvEUZaaPyVdpPfe6YhKaWU2XCNXDPq4rH/axIyn6rRAkz7R/nisB2oAgprTS KVaE48DAGEqG8krx419R7WjzSt0r8MUGCM4GENNpBKIrh/oOTYUk+DVj7YG0pmTg 0VTTJW0pZF++m0qJIVmFUVSDnbHfabUKv7kEL7AxCcwCGq0WuLPd96HGnOFxMrh5 80v71bG47M0CiIGSJ0oKv82uIFcM2BTIMGXZSmJ8g3nfoIb2E5zhcsyqDwNy -----END CERTIFICATE-----Generated at Wed Nov 5 20:15:41 2025 by rpki-client