$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft File: 2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft (raw, json) Hash identifier: ZCxE/73nX2tg1mNuOFZBCv7BaRE+B1ELGpZri3B3jiY= Subject key identifier: C8:2F:B9:F1:21:3B:11:F8:E6:C3:C4:07:99:81:13:4F:30:5F:A2:79 Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4 Certificate issuer: /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4 Certificate serial: 2AC408E3C8E08F0A514F96F62332A46BDA2CE0A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft Manifest number: 012B Signing time: Fri 31 Oct 2025 01:23:56 +0000 Manifest this update: Fri 31 Oct 2025 01:18:56 +0000 Manifest next update: Thu 06 Nov 2025 00:03:56 +0000 Files and hashes: 1: 2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl (hash: lRSUjVweTxDYvYM+E/52NS5E8QcaaFnmywCTedXyvgE=) 2: 34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (hash: sdD+4az659s6PD/uvKDKPjyLukQcDb0M4eaD4Sw7zZo=) 3: 323830333a653761303a3a2f33322d3438203d3e20323637373736.roa (hash: alMGoBqK3FeYPL0E0LiSfPdjIOJjyY4NWnb1+5599ls=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c4:08:e3:c8:e0:8f:0a:51:4f:96:f6:23:32:a4:6b:da:2c:e0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4 Validity Not Before: Oct 31 01:18:56 2025 GMT Not After : Nov 6 00:03:56 2025 GMT Subject: CN=C82FB9F1213B11F8E6C3C4079981134F305FA279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:1a:4f:ea:a6:14:bf:37:c1:1d:d4:ae:d2: cb:c7:5d:1c:16:23:eb:4f:bb:67:9d:00:21:8b:58: ef:be:91:9a:f5:2b:6f:7a:e7:47:b8:24:46:20:6e: dc:56:4d:8a:85:84:b2:ca:cc:c7:5a:a8:ca:a7:ff: a0:f5:7a:65:99:5f:b0:f3:ed:f0:18:3f:b2:ff:0d: d9:1f:82:18:e3:3e:c9:1e:87:95:2c:f7:a8:3b:f6: f3:00:53:9a:ce:33:00:70:ba:2a:1a:d6:17:ab:9b: b9:b7:7b:cc:5a:3e:dc:e4:91:d2:fa:a5:e5:11:46: 32:45:5e:a3:d8:e8:d2:3e:3e:c8:ef:5d:33:35:a4: fc:dc:96:4c:ec:82:77:a7:a9:c6:ee:47:4c:d9:31: 63:ac:67:59:29:26:4f:2d:cf:ce:38:04:de:97:31: a6:2c:d4:57:d6:52:be:2b:4e:f1:ef:d6:e0:45:4d: 24:49:8d:3a:af:86:e6:ef:06:25:1b:b6:00:fd:47: 15:1e:cc:de:a5:a7:fa:9e:22:b8:e8:fa:86:d2:4b: a7:17:83:a8:51:9b:2a:99:22:f3:e7:49:2e:1c:a2: af:e0:36:de:32:f6:e9:db:ce:2e:13:f2:6b:ec:7e: 24:c8:65:f2:a2:6c:9f:e9:66:72:85:d2:f1:98:60: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2F:B9:F1:21:3B:11:F8:E6:C3:C4:07:99:81:13:4F:30:5F:A2:79 X509v3 Authority Key Identifier: keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b3:67:5a:b2:68:8e:f1:bd:3a:81:04:03:a0:25:57:08:37: 5f:12:01:a4:82:01:97:4f:d0:fe:3c:3f:fc:d4:89:03:5f:10: c9:30:23:43:e5:db:02:07:93:bc:c6:90:b8:2f:05:fd:95:33: 53:c2:84:73:a7:fc:74:1b:e8:7a:f1:96:a3:1e:56:5c:f7:2e: 08:08:4f:67:bf:26:e4:d1:20:c4:2b:4e:57:e5:5a:0a:ce:e6: 06:be:a9:cb:e8:ef:14:0e:33:47:97:0d:28:f4:13:05:82:a1: 6b:65:04:4c:a1:b5:e5:0a:71:a9:cf:b9:a3:2f:86:94:a4:30: 50:a1:c7:d3:ba:2b:c6:11:34:d5:cf:67:a3:6a:78:91:f1:17: a2:4a:c7:37:17:49:64:75:ef:02:43:7e:52:93:9f:d3:78:48: 70:d7:a1:d8:28:ff:0b:00:72:71:65:8a:8f:69:32:68:23:52: 3e:9b:7d:a4:ef:c2:25:e2:d5:27:ff:db:da:0f:76:b5:63:16: 75:fe:43:29:6c:f7:a0:3a:1e:fa:93:41:60:f2:bb:77:84:72: d8:95:de:53:38:e0:22:ba:cf:41:6c:2d:90:9f:0b:84:72:3d: c4:6f:39:01:3f:53:58:8b:89:3a:d8:2d:8f:b7:78:ca:3f:90: a3:d0:a6:1f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKsQI48jgjwpRT5b2IzKka9os4KMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MkFDQzBDM0FFNDcwNzY5MUU1MEE2RDQ5ODg4NTFE QzU1OThENDAeFw0yNTEwMzEwMTE4NTZaFw0yNTExMDYwMDAzNTZaMDMxMTAvBgNV BAMTKEM4MkZCOUYxMjEzQjExRjhFNkMzQzQwNzk5ODExMzRGMzA1RkEyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNBpP6qYUvzfBHdSu0svHXRwW I+tPu2edACGLWO++kZr1K29650e4JEYgbtxWTYqFhLLKzMdaqMqn/6D1emWZX7Dz 7fAYP7L/DdkfghjjPskeh5Us96g79vMAU5rOMwBwuioa1herm7m3e8xaPtzkkdL6 peURRjJFXqPY6NI+PsjvXTM1pPzclkzsgnenqcbuR0zZMWOsZ1kpJk8tz844BN6X MaYs1FfWUr4rTvHv1uBFTSRJjTqvhubvBiUbtgD9RxUezN6lp/qeIrjo+obSS6cX g6hRmyqZIvPnSS4coq/gNt4y9unbzi4T8mvsfiTIZfKibJ/pZnKF0vGYYNUBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyC+58SE7Efjmw8QHmYETTzBfonkwHwYDVR0j BBgwFoAUKXKswMOuRwdpHlCm1JiIUdxVmNQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wODlCMDhEQjZFNjM5RDAxQzE0RkIxNzFGRjQzMzg5NDVD NjJFM0VCRDJDQTU4OEEwQzZCMDBFMzVDNjlBQUE5LzAvMjk3MkFDQzBDM0FFNDcw NzY5MUU1MEE2RDQ5ODg4NTFEQzU1OThENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTcyQUNDMEMzQUU0NzA3Njkx RTUwQTZENDk4ODg1MURDNTU5OEQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDg5QjA4REI2RTYzOUQwMUMxNEZCMTcxRkY0MzM4OTQ1QzYyRTNFQkQy Q0E1ODhBMEM2QjAwRTM1QzY5QUFBOS8wLzI5NzJBQ0MwQzNBRTQ3MDc2OTFFNTBB NkQ0OTg4ODUxREM1NTk4RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2s2dasmiO8b06gQQDoCVXCDdf EgGkggGXT9D+PD/81IkDXxDJMCND5dsCB5O8xpC4LwX9lTNTwoRzp/x0G+h68Zaj HlZc9y4ICE9nvybk0SDEK05X5VoKzuYGvqnL6O8UDjNHlw0o9BMFgqFrZQRMobXl CnGpz7mjL4aUpDBQocfTuivGETTVz2ejaniR8ReiSsc3F0lkde8CQ35Sk5/TeEhw 16HYKP8LAHJxZYqPaTJoI1I+m32k78Il4tUn/9vaD3a1YxZ1/kMpbPegOh76k0Fg 8rt3hHLYld5TOOAius9BbC2QnwuEcj3EbzkBP1NYi4k62C2Pt3jKP5Cj0KYf -----END CERTIFICATE-----Generated at Sun Nov 2 11:43:22 2025 by rpki-client