$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft File: 67C6935F7C38762C3BEE650617B03328B96FF014.mft (raw, json) Hash identifier: xS/3X8Y24WvfooC3EVrUW1CCYjyoxKS87ZzDO3Cog5A= Subject key identifier: 5F:D1:68:7B:55:EA:E1:CC:30:D5:4C:F8:D6:68:86:BE:2A:A4:F8:0A Authority key identifier: 67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14 Certificate issuer: /CN=67C6935F7C38762C3BEE650617B03328B96FF014 Certificate serial: 1E006226F47E60BDA0CACA63BD57B8971B64C883 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft Manifest number: 0132 Signing time: Sat 01 Nov 2025 01:42:13 +0000 Manifest this update: Sat 01 Nov 2025 01:37:13 +0000 Manifest next update: Wed 05 Nov 2025 14:06:13 +0000 Files and hashes: 1: 3137392e34322e3137322e302f32322d3234203d3e20323633313935.roa (hash: cR3oJYSvy/dWiWfs5im7DJQJmxMs9S41tmKf9oYkVH0=) 2: 67C6935F7C38762C3BEE650617B03328B96FF014.crl (hash: T2/rPnqZPKbTa/xH06SmiverlSTKI1Ww8V0Pm6lRsEQ=) 3: 323830333a616338303a3a2f33322d3438203d3e20323633313935.roa (hash: goJ+jtnZ1erUlc3I6n+2FrokcQ8et/yiEg5v50aObxI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.crl rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:00:62:26:f4:7e:60:bd:a0:ca:ca:63:bd:57:b8:97:1b:64:c8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C6935F7C38762C3BEE650617B03328B96FF014 Validity Not Before: Nov 1 01:37:13 2025 GMT Not After : Nov 5 14:06:13 2025 GMT Subject: CN=5FD1687B55EAE1CC30D54CF8D66886BE2AA4F80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:ea:35:2a:71:2f:5d:bc:a3:6a:03:04:74: 4b:ad:e4:68:67:76:48:4b:4c:e1:5c:6d:37:ef:5a: fb:25:4c:23:77:2b:61:d8:19:d7:8d:fa:b7:38:54: e3:e9:c7:84:7c:1d:ac:6c:e6:b2:29:3c:a9:9c:08: 4c:e9:bf:f5:b1:4f:e1:43:ae:3e:e3:5a:f4:c4:04: 61:4f:4c:ed:05:b3:e7:83:fd:65:bd:54:69:ce:6f: 86:53:54:77:cd:6a:c8:b8:01:3f:34:7f:09:e0:68: 75:7c:de:70:24:4b:ae:b0:f3:a4:07:9b:12:7a:6d: 0a:b3:79:04:99:40:5f:a0:14:04:32:73:8c:44:07: 9f:fd:c3:44:11:aa:d2:3b:53:95:19:44:47:0e:ac: 15:37:85:8d:6c:28:98:48:2a:3d:6e:ee:7c:54:ed: 6f:13:36:61:62:c8:a5:69:a3:bb:42:76:9b:4a:50: c9:51:ae:0a:32:32:7f:e7:cf:e9:7a:cf:13:ec:b2: 38:3a:8f:cf:28:d7:29:21:10:13:b2:82:a2:9b:27: 75:d4:55:23:d0:9c:56:61:54:84:7a:78:ad:b4:d3: 2a:40:2c:55:ac:a5:2f:7b:f2:d7:ae:f6:d3:1b:b0: bc:f9:24:82:6d:cf:85:27:39:ff:2d:ab:bd:db:bc: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D1:68:7B:55:EA:E1:CC:30:D5:4C:F8:D6:68:86:BE:2A:A4:F8:0A X509v3 Authority Key Identifier: keyid:67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:89:36:4d:e3:d0:b0:c4:59:cf:38:aa:80:09:52:89:1f:e1: cf:c2:70:4e:0c:41:27:59:1d:8f:be:f5:89:5f:a6:0d:a1:e7: f6:e5:04:0c:65:b9:cc:88:41:e9:a0:67:55:51:ed:8b:c0:26: 43:86:df:20:80:48:22:ee:36:c4:50:07:cd:71:bd:43:cd:04: df:e6:7c:71:1f:8a:c0:41:c4:50:32:03:f3:47:e4:8d:e8:e0: 8d:72:92:c9:78:20:e0:23:b1:72:66:bb:46:65:c0:46:3e:95: 33:1e:43:df:4a:65:e2:0d:d9:15:81:77:86:1a:69:52:8f:60: 3f:f2:48:e1:c4:e1:01:1b:ca:49:d9:3b:86:1f:dd:b4:52:a8: 5a:0e:d5:2b:d1:c1:64:e1:f4:77:bb:0a:86:f7:67:e8:10:e2: 54:f0:f8:8b:e2:4e:3c:13:9c:dd:5d:8b:31:e8:18:04:b2:b1: 4a:ba:b5:37:e2:fc:50:a9:e5:e0:21:c9:25:3f:d4:09:6f:84: c1:fd:d5:82:df:25:cb:32:27:82:95:d3:af:29:7c:c7:45:96: af:d8:ea:be:37:6d:6d:99:fb:f1:42:39:b2:a8:f9:43:6a:a1: 2b:bb:c4:59:df:96:11:2e:e2:ba:98:dd:f4:fc:f0:ce:8e:94: 9b:3a:e7:c0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHgBiJvR+YL2gyspjvVe4lxtkyIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDNjkzNUY3QzM4NzYyQzNCRUU2NTA2MTdCMDMzMjhC OTZGRjAxNDAeFw0yNTExMDEwMTM3MTNaFw0yNTExMDUxNDA2MTNaMDMxMTAvBgNV BAMTKDVGRDE2ODdCNTVFQUUxQ0MzMEQ1NENGOEQ2Njg4NkJFMkFBNEY4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9+o1KnEvXbyjagMEdEut5Ghn dkhLTOFcbTfvWvslTCN3K2HYGdeN+rc4VOPpx4R8Haxs5rIpPKmcCEzpv/WxT+FD rj7jWvTEBGFPTO0Fs+eD/WW9VGnOb4ZTVHfNasi4AT80fwngaHV83nAkS66w86QH mxJ6bQqzeQSZQF+gFAQyc4xEB5/9w0QRqtI7U5UZREcOrBU3hY1sKJhIKj1u7nxU 7W8TNmFiyKVpo7tCdptKUMlRrgoyMn/nz+l6zxPssjg6j88o1ykhEBOygqKbJ3XU VSPQnFZhVIR6eK200ypALFWspS978teu9tMbsLz5JIJtz4UnOf8tq73bvMN7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUX9Foe1Xq4cww1Uz41miGviqk+AowHwYDVR0j BBgwFoAUZ8aTX3w4diw77mUGF7AzKLlv8BQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMjQ0NTY5NTg2Qjc4RkJBMjJCRDE4ODIwOUVFNzFFRDlB MUVCQjU4N0EwQzk0QjgyOEE5MkU3MjIzRDYyOTg0LzAvNjdDNjkzNUY3QzM4NzYy QzNCRUU2NTA2MTdCMDMzMjhCOTZGRjAxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82N0M2OTM1RjdDMzg3NjJDM0JF RTY1MDYxN0IwMzMyOEI5NkZGMDE0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTI0NDU2OTU4NkI3OEZCQTIyQkQxODgyMDlFRTcxRUQ5QTFFQkI1ODdB MEM5NEI4MjhBOTJFNzIyM0Q2Mjk4NC8wLzY3QzY5MzVGN0MzODc2MkMzQkVFNjUw NjE3QjAzMzI4Qjk2RkYwMTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAniTZN49CwxFnPOKqACVKJH+HP wnBODEEnWR2PvvWJX6YNoef25QQMZbnMiEHpoGdVUe2LwCZDht8ggEgi7jbEUAfN cb1DzQTf5nxxH4rAQcRQMgPzR+SN6OCNcpLJeCDgI7FyZrtGZcBGPpUzHkPfSmXi DdkVgXeGGmlSj2A/8kjhxOEBG8pJ2TuGH920UqhaDtUr0cFk4fR3uwqG92foEOJU 8PiL4k48E5zdXYsx6BgEsrFKurU34vxQqeXgIcklP9QJb4TB/dWC3yXLMieCldOv KXzHRZav2Oq+N21tmfvxQjmyqPlDaqEru8RZ35YRLuK6mN30/PDOjpSbOufA -----END CERTIFICATE-----Generated at Sat Nov 1 23:30:52 2025 by rpki-client