$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft File: 9D2820894F6D41941116396B192CCF8017618F44.mft (raw, json) Hash identifier: 0UlDReclr029w7TjYzqAOzhaVCtjNbhevKPP9pLG/H4= Subject key identifier: AC:57:58:F7:94:63:78:DC:7D:A3:20:24:82:5D:FD:66:60:83:88:3D Authority key identifier: 9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 Certificate issuer: /CN=9D2820894F6D41941116396B192CCF8017618F44 Certificate serial: 53272CE4A5CA037878E098E7B4F51149EFA9D919 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft Manifest number: 013A Signing time: Sat 01 Nov 2025 08:01:12 +0000 Manifest this update: Sat 01 Nov 2025 07:56:12 +0000 Manifest next update: Thu 06 Nov 2025 05:45:12 +0000 Files and hashes: 1: 3133312e3232312e36342e302f32322d3234203d3e20323635373938.roa (hash: H1conceKs3KYf0BCP7SqZQsJe7CkX4TRtQ2icAnCBCU=) 2: 323830333a636238303a3a2f33322d3438203d3e20323635373938.roa (hash: aCU6Rs9ePNEUWEjA4LL/xRFEOkM8xbSGTT38sL74FoA=) 3: 9D2820894F6D41941116396B192CCF8017618F44.crl (hash: 9gPfv0p/yQJCoOm8UTCsxP2DG1mrpotMQHKK21iFJ4I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:27:2c:e4:a5:ca:03:78:78:e0:98:e7:b4:f5:11:49:ef:a9:d9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D2820894F6D41941116396B192CCF8017618F44 Validity Not Before: Nov 1 07:56:12 2025 GMT Not After : Nov 6 05:45:12 2025 GMT Subject: CN=AC5758F7946378DC7DA32024825DFD666083883D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:6b:13:89:f3:30:9b:b0:1c:35:a0:46:c9: 6d:a8:8b:7e:cf:b9:bd:bb:7a:11:04:3e:a4:b1:c0: 00:b2:8e:fb:da:b9:26:e3:f0:5f:0a:66:ec:40:b6: b9:66:18:b8:7f:e8:68:50:79:73:e7:2a:bc:59:c4: d5:b9:44:13:b3:24:42:70:db:f2:65:9b:17:3d:7b: 8e:59:38:a2:3e:b4:84:12:85:7f:bf:90:46:d3:6b: 91:ae:e9:ad:a2:7c:94:03:ef:d4:02:83:5f:fb:d7: b2:df:cb:e7:30:06:04:c0:3f:46:58:97:04:29:1f: 15:bc:01:8d:77:1e:14:b8:99:6c:ea:22:79:4b:d2: 93:80:27:0a:2a:8a:1e:8c:63:2d:9f:d7:d6:a1:0b: b3:14:da:a9:1b:2b:62:50:83:6d:8f:c4:31:38:c0: 20:8f:c4:4e:c0:c5:18:92:3e:f6:b7:2a:f8:8a:94: aa:80:5e:36:e3:9a:a6:5b:31:7f:20:41:64:65:c5: a0:b9:44:e1:a8:8e:db:1f:36:5d:24:08:97:f6:83: b1:23:0f:07:65:0f:de:14:ad:ec:3f:41:b4:85:57: 24:1e:da:93:65:66:46:a1:b6:32:a3:bf:44:ba:41: 31:16:c1:3e:39:e1:6c:d2:6f:65:df:dc:ae:5f:db: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:57:58:F7:94:63:78:DC:7D:A3:20:24:82:5D:FD:66:60:83:88:3D X509v3 Authority Key Identifier: keyid:9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:83:bd:30:46:66:9e:80:ee:17:5f:a3:94:8b:df:10:7c:5d: a1:f7:c7:37:2d:4d:d4:e8:f0:1c:cb:e8:59:e3:f9:42:17:8c: 7f:fb:0d:17:39:bb:1a:a6:95:42:97:5a:57:c1:e1:cb:5a:46: ab:f6:23:f0:ef:53:fa:40:a1:42:59:64:78:b2:58:a4:a9:4b: 4e:24:1c:35:3b:b9:5a:eb:68:b6:53:81:dc:8f:f9:96:a1:fc: 97:22:65:f1:72:be:0b:6d:cf:fa:16:e5:e8:18:5b:c5:f7:af: 4d:f4:f4:58:b6:11:b3:ac:1c:86:c1:b9:0d:3a:47:b0:ae:bc: b2:e0:5b:ee:18:c3:66:11:86:f6:d5:c2:e5:f9:66:54:27:e0: 0e:e3:9f:97:1f:7f:12:09:23:1a:ee:bf:3f:ba:49:e3:9a:70: 71:4c:1c:56:4f:89:a7:40:96:bf:36:b6:5d:64:64:80:ef:ee: 24:ff:68:3f:21:e9:a3:de:d4:ab:3d:5a:f8:98:e7:f0:1b:6a: 5f:ef:89:b5:39:ac:85:4e:46:d3:fd:55:28:f0:5e:4c:a8:11: d2:6c:b5:fb:6e:e7:4b:2b:9c:1c:27:d4:d6:1f:46:a3:38:a7: 7d:6e:c0:b8:9b:a0:09:22:ae:cb:9e:22:64:08:85:c2:1c:8f: e9:29:57:63 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUycs5KXKA3h44JjntPURSe+p2RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyODIwODk0RjZENDE5NDExMTYzOTZCMTkyQ0NGODAx NzYxOEY0NDAeFw0yNTExMDEwNzU2MTJaFw0yNTExMDYwNTQ1MTJaMDMxMTAvBgNV BAMTKEFDNTc1OEY3OTQ2Mzc4REM3REEzMjAyNDgyNURGRDY2NjA4Mzg4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyf2sTifMwm7AcNaBGyW2oi37P ub27ehEEPqSxwACyjvvauSbj8F8KZuxAtrlmGLh/6GhQeXPnKrxZxNW5RBOzJEJw 2/Jlmxc9e45ZOKI+tIQShX+/kEbTa5Gu6a2ifJQD79QCg1/717Lfy+cwBgTAP0ZY lwQpHxW8AY13HhS4mWzqInlL0pOAJwoqih6MYy2f19ahC7MU2qkbK2JQg22PxDE4 wCCPxE7AxRiSPva3KviKlKqAXjbjmqZbMX8gQWRlxaC5ROGojtsfNl0kCJf2g7Ej DwdlD94Urew/QbSFVyQe2pNlZkahtjKjv0S6QTEWwT454WzSb2Xf3K5f27QlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrFdY95RjeNx9oyAkgl39ZmCDiD0wHwYDVR0j BBgwFoAUnSggiU9tQZQRFjlrGSzPgBdhj0QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMjBENjU1Q0UxNjA5QzI0NkU4OUJEQzEwNDJFNTFDNDY3 ODAxQTdEMENFNjdDOUZEQURDNjMwN0Q3MzI1QjYyLzAvOUQyODIwODk0RjZENDE5 NDExMTYzOTZCMTkyQ0NGODAxNzYxOEY0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDI4MjA4OTRGNkQ0MTk0MTEx NjM5NkIxOTJDQ0Y4MDE3NjE4RjQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjIwRDY1NUNFMTYwOUMyNDZFODlCREMxMDQyRTUxQzQ2NzgwMUE3RDBD RTY3QzlGREFEQzYzMDdENzMyNUI2Mi8wLzlEMjgyMDg5NEY2RDQxOTQxMTE2Mzk2 QjE5MkNDRjgwMTc2MThGNDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFg70wRmaegO4XX6OUi98QfF2h 98c3LU3U6PAcy+hZ4/lCF4x/+w0XObsappVCl1pXweHLWkar9iPw71P6QKFCWWR4 slikqUtOJBw1O7la62i2U4Hcj/mWofyXImXxcr4Lbc/6FuXoGFvF969N9PRYthGz rByGwbkNOkewrryy4FvuGMNmEYb21cLl+WZUJ+AO45+XH38SCSMa7r8/uknjmnBx TBxWT4mnQJa/NrZdZGSA7+4k/2g/Iemj3tSrPVr4mOfwG2pf74m1OayFTkbT/VUo 8F5MqBHSbLX7budLK5wcJ9TWH0ajOKd9bsC4m6AJIq7LniJkCIXCHI/pKVdj -----END CERTIFICATE-----Generated at Sun Nov 2 10:35:05 2025 by rpki-client