$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft File: 9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft (raw, json) Hash identifier: RfyMiFyTAI8RqsLrylIWF3szArqvDr5aS/xvhi7hN04= Subject key identifier: 88:82:F0:94:BB:C8:81:7D:53:C6:7E:46:77:DA:B5:BD:44:39:49:99 Authority key identifier: 9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2 Certificate issuer: /CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2 Certificate serial: 31B2DF4471D54B7DBFE64AD01A219BED8BD49C36 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft Manifest number: 0131 Signing time: Sun 02 Nov 2025 06:53:34 +0000 Manifest this update: Sun 02 Nov 2025 06:48:34 +0000 Manifest next update: Fri 07 Nov 2025 23:39:34 +0000 Files and hashes: 1: 323830333a613065303a3a2f33322d3332203d3e20323639393131.roa (hash: czmjKJMijgcKcFxG66379lDfcnANxdsAiUVYYZ1Snbs=) 2: 9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl (hash: 78bNGkHAr8ziBeoj6Ok50ONzrpq1ssqholgAmuPiFW0=) 3: 34352e3138372e3230382e302f32332d3234203d3e20323639393131.roa (hash: zDbXMpnyQYiZ6Us70ahGcIiZ1F1FGHLw1988EA8LiSY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:df:44:71:d5:4b:7d:bf:e6:4a:d0:1a:21:9b:ed:8b:d4:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2 Validity Not Before: Nov 2 06:48:34 2025 GMT Not After : Nov 7 23:39:34 2025 GMT Subject: CN=8882F094BBC8817D53C67E4677DAB5BD44394999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:ab:d3:02:23:e0:3e:16:0a:f0:5a:4d:05: 74:e6:95:b9:df:38:a1:9c:fb:48:3b:f2:46:4a:23: 56:e8:be:a8:22:69:9d:d2:8a:04:af:e8:82:cc:4f: 6b:0c:92:d7:36:67:ed:6c:77:c5:0c:53:20:da:c1: 7d:83:0f:1b:69:f5:31:99:ee:eb:f5:6d:1c:40:0f: 67:8a:25:ba:c4:ce:26:d7:e4:f3:9d:d1:a9:b7:07: 08:18:0c:ac:2b:18:16:5e:4e:72:32:28:70:ca:9f: 22:c3:dc:45:ad:1b:c6:4c:6e:9a:9c:e3:11:4f:6d: 3b:2a:50:72:26:75:65:ff:f2:86:42:c3:67:06:ae: de:f0:52:2e:ad:36:ff:d5:cf:2c:4f:1a:28:f8:26: e9:7b:6f:de:aa:d2:d3:b1:79:16:7c:9b:d4:27:0f: 19:a9:10:b8:78:da:e3:60:3f:47:5a:4a:7a:2e:4c: 0b:6d:1d:76:25:ab:ab:28:08:04:9d:5c:39:d9:5f: 87:6a:b6:f5:c0:6a:ac:3f:38:02:b5:ab:ac:b3:79: c3:6c:e9:12:60:96:87:8c:a5:c9:f9:07:02:d1:e1: 5c:1d:29:97:98:92:7c:e9:ad:91:17:26:21:0b:8c: 2c:83:1e:8e:9d:75:1c:68:1a:d6:53:c2:29:e8:3b: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:82:F0:94:BB:C8:81:7D:53:C6:7E:46:77:DA:B5:BD:44:39:49:99 X509v3 Authority Key Identifier: keyid:9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:85:00:00:e7:1a:2e:e0:b1:36:43:29:f7:ce:70:94:52:21: 34:87:3a:19:0a:68:d6:4d:44:9a:23:8b:c5:af:fc:93:34:df: 73:f9:1f:06:7a:f1:d6:1f:99:2f:04:8f:4f:30:e2:60:06:dc: 81:e8:69:8c:7c:74:6d:27:71:a7:93:26:15:f5:ba:60:1d:bd: 2e:33:0b:af:51:4f:cd:51:f8:85:1c:46:65:60:76:a5:14:31: bf:1d:38:aa:69:75:1f:28:0b:7c:71:a2:01:80:7a:d6:44:da: 14:58:c2:bb:15:92:2b:5c:1e:fd:a4:33:53:88:98:41:2d:89: bd:b0:cb:5d:9b:e3:33:26:4a:43:db:85:54:a0:ad:8c:15:4a: e1:31:9b:9a:0d:08:76:e1:5e:f4:07:10:76:10:ef:07:65:6e: 01:c3:65:c1:8a:78:59:00:21:42:4f:94:81:40:8e:b3:87:5d: 51:d3:d2:45:7c:c1:db:9b:30:18:11:d1:ad:88:77:f5:08:4e: 55:3c:50:b1:52:12:13:fb:da:2a:65:62:a7:35:05:c5:c2:c7: b3:23:ce:34:46:39:00:bd:cb:a8:70:00:83:e1:c5:cd:fb:d7: 32:7c:d2:ae:b2:03:29:79:d0:b0:83:e7:49:22:b1:85:57:68: ef:27:73:d3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMbLfRHHVS32/5krQGiGb7YvUnDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMzMTk4RTY1Qzc4M0FGOTlENkE3NDNEOTkzRTBDMzc3 MEI3NkVFMjAeFw0yNTExMDIwNjQ4MzRaFw0yNTExMDcyMzM5MzRaMDMxMTAvBgNV BAMTKDg4ODJGMDk0QkJDODgxN0Q1M0M2N0U0Njc3REFCNUJENDQzOTQ5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3avTAiPgPhYK8FpNBXTmlbnf OKGc+0g78kZKI1bovqgiaZ3SigSv6ILMT2sMktc2Z+1sd8UMUyDawX2DDxtp9TGZ 7uv1bRxAD2eKJbrEzibX5POd0am3BwgYDKwrGBZeTnIyKHDKnyLD3EWtG8ZMbpqc 4xFPbTsqUHImdWX/8oZCw2cGrt7wUi6tNv/VzyxPGij4Jul7b96q0tOxeRZ8m9Qn DxmpELh42uNgP0daSnouTAttHXYlq6soCASdXDnZX4dqtvXAaqw/OAK1q6yzecNs 6RJgloeMpcn5BwLR4VwdKZeYknzprZEXJiELjCyDHo6ddRxoGtZTwinoOxAnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiILwlLvIgX1Txn5Gd9q1vUQ5SZkwHwYDVR0j BBgwFoAUnDGY5lx4OvmdanQ9mT4MN3C3buIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMzNFRjUwQTc5QjA5MzhFNTVCQTMyRDEyREUyM0I5MUEx RDJDNzJGMjI3RjQyNDgzNDZGRDAyNzg1QzI0QTg3LzAvOUMzMTk4RTY1Qzc4M0FG OTlENkE3NDNEOTkzRTBDMzc3MEI3NkVFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzMxOThFNjVDNzgzQUY5OUQ2 QTc0M0Q5OTNFMEMzNzcwQjc2RUUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTMzRUY1MEE3OUIwOTM4RTU1QkEzMkQxMkRFMjNCOTFBMUQyQzcyRjIy N0Y0MjQ4MzQ2RkQwMjc4NUMyNEE4Ny8wLzlDMzE5OEU2NUM3ODNBRjk5RDZBNzQz RDk5M0UwQzM3NzBCNzZFRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDhQAA5xou4LE2Qyn3znCUUiE0 hzoZCmjWTUSaI4vFr/yTNN9z+R8GevHWH5kvBI9PMOJgBtyB6GmMfHRtJ3GnkyYV 9bpgHb0uMwuvUU/NUfiFHEZlYHalFDG/HTiqaXUfKAt8caIBgHrWRNoUWMK7FZIr XB79pDNTiJhBLYm9sMtdm+MzJkpD24VUoK2MFUrhMZuaDQh24V70BxB2EO8HZW4B w2XBinhZACFCT5SBQI6zh11R09JFfMHbmzAYEdGtiHf1CE5VPFCxUhIT+9oqZWKn NQXFwsezI840RjkAvcuocACD4cXN+9cyfNKusgMpedCwg+dJIrGFV2jvJ3PT -----END CERTIFICATE-----Generated at Sun Nov 2 21:00:30 2025 by rpki-client