$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft File: 476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft (raw, json) Hash identifier: go+M1btAyizWHQ+D86S/HVBu7Cv1NQUi0HoAv1A44fQ= Subject key identifier: AD:90:E9:5D:A8:80:C8:47:66:A8:B3:B0:77:32:2E:1A:D6:3B:87:AD Authority key identifier: 47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97 Certificate issuer: /CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97 Certificate serial: 5C740130458134055A6FD18A3161FE4FA6C0CBA5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft Manifest number: 0130 Signing time: Sun 02 Nov 2025 17:30:02 +0000 Manifest this update: Sun 02 Nov 2025 17:25:02 +0000 Manifest next update: Sat 08 Nov 2025 03:05:02 +0000 Files and hashes: 1: 476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl (hash: a5ts6BTasSmO6IBeL3dcmYNpE2Q4qHDo870xPyw5Jh0=) 2: 34352e3232382e35362e302f32322d3235203d3e20323632313936.roa (hash: 1paSyIbcNo09aB8KkRmC8FkyosP+fpYmegEmdh3Smck=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:74:01:30:45:81:34:05:5a:6f:d1:8a:31:61:fe:4f:a6:c0:cb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97 Validity Not Before: Nov 2 17:25:02 2025 GMT Not After : Nov 8 03:05:02 2025 GMT Subject: CN=AD90E95DA880C84766A8B3B077322E1AD63B87AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:17:a0:c7:ce:be:63:cc:a9:7f:46:16:77: 32:0c:96:28:39:44:b3:2c:74:23:f5:c8:d5:9c:5d: e4:be:9d:8d:1d:b7:43:84:5c:7d:93:bc:36:e9:18: 85:16:a1:58:ec:5f:d6:e4:79:10:2d:6d:c7:d6:c4: 8a:eb:df:83:99:f2:64:fb:f8:1c:20:4a:aa:d5:9d: 57:e8:a3:5b:aa:f5:00:1a:69:62:a1:33:59:1e:a7: 93:7a:1b:5b:15:65:0f:30:d4:65:96:bb:cb:29:8e: cd:ef:0d:a6:7e:a9:aa:59:49:7c:58:0c:6e:77:d7: 2a:f1:96:0d:46:eb:8b:d9:ee:f4:a6:97:c7:4a:1c: d4:ba:25:3a:7c:d1:d9:5b:1c:b3:21:f5:06:b2:7a: 37:06:1a:0e:e9:1d:45:1c:e3:2f:2f:ac:2e:72:f7: f0:e8:09:fe:b0:f7:fd:77:cd:23:28:c1:a0:ca:b6: cd:d7:d2:16:a3:a8:8e:56:30:44:ad:e6:d3:8f:47: 23:78:9f:b9:03:78:7f:31:6a:bc:ba:11:04:44:cf: 40:d6:68:26:8e:0f:52:12:bd:90:6d:53:8c:49:e4: 8d:d6:10:64:9f:8d:d7:01:46:e5:d5:70:e0:fb:fa: 2b:9e:35:45:8c:d6:fb:1d:f7:0a:31:ca:33:f0:1b: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:90:E9:5D:A8:80:C8:47:66:A8:B3:B0:77:32:2E:1A:D6:3B:87:AD X509v3 Authority Key Identifier: keyid:47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bf:1a:10:81:16:25:f6:6a:8a:6d:51:cc:02:a8:c0:12:5a: 9c:56:e5:4a:c6:5e:18:4d:b6:97:9d:6f:bd:6a:fb:0b:15:27: 97:17:2c:20:c4:bb:2f:2a:01:0f:98:37:1d:e1:8f:6c:a8:c8: b8:bb:8e:26:d4:87:0e:32:89:d9:e5:bb:64:5b:d9:9f:39:5b: b4:6b:f0:48:81:da:01:36:8f:27:95:75:51:b3:53:16:d3:1b: 04:a7:58:55:b1:19:17:73:20:c2:f4:13:67:ed:b2:a2:0f:23: a8:f1:6b:4c:39:ed:66:0f:60:c5:d0:69:c3:93:56:f1:31:22: 26:0b:70:7a:cc:7d:58:f7:7d:6a:35:82:06:2c:fb:ee:53:05: 1e:40:ba:4f:97:da:d8:32:8d:31:56:db:56:e0:14:db:fe:8b: 07:12:43:60:96:2a:27:fc:2e:d2:74:e7:83:b7:c5:2b:b9:4c: 1a:f7:b2:f3:fb:9d:65:ec:44:6b:56:36:95:99:f5:23:ec:45: 51:e8:b9:20:ec:31:3e:17:66:c0:55:16:5f:9b:48:37:08:c4: 88:85:a6:26:b6:f7:b6:6d:40:6c:67:d7:aa:63:1b:05:83:2d: 53:9e:4e:d6:0a:41:93:99:e5:92:cb:c8:76:cd:b3:cc:86:6c: 7d:ac:20:60 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXHQBMEWBNAVab9GKMWH+T6bAy6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2RUI2MUYxN0I0OUNEODhBMERCNkFCRUQyRTk2NkE2 MUFBQUE5NzAeFw0yNTExMDIxNzI1MDJaFw0yNTExMDgwMzA1MDJaMDMxMTAvBgNV BAMTKEFEOTBFOTVEQTg4MEM4NDc2NkE4QjNCMDc3MzIyRTFBRDYzQjg3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHRegx86+Y8ypf0YWdzIMlig5 RLMsdCP1yNWcXeS+nY0dt0OEXH2TvDbpGIUWoVjsX9bkeRAtbcfWxIrr34OZ8mT7 +BwgSqrVnVfoo1uq9QAaaWKhM1kep5N6G1sVZQ8w1GWWu8spjs3vDaZ+qapZSXxY DG531yrxlg1G64vZ7vSml8dKHNS6JTp80dlbHLMh9QayejcGGg7pHUUc4y8vrC5y 9/DoCf6w9/13zSMowaDKts3X0hajqI5WMESt5tOPRyN4n7kDeH8xary6EQREz0DW aCaOD1ISvZBtU4xJ5I3WEGSfjdcBRuXVcOD7+iueNUWM1vsd9woxyjPwGyU7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrZDpXaiAyEdmqLOwdzIuGtY7h60wHwYDVR0j BBgwFoAUR262Hxe0nNiKDbar7S6WamGqqpcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQUJFREZDQjJGMkVEMTIwRjA4NTFDRTJFODdCRDczNkVG ODE5MEMxNzNBQkM4NURCNUExMDQ3RTU4MTg3MTM2LzAvNDc2RUI2MUYxN0I0OUNE ODhBMERCNkFCRUQyRTk2NkE2MUFBQUE5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZFQjYxRjE3QjQ5Q0Q4OEEw REI2QUJFRDJFOTY2QTYxQUFBQTk3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0FCRURGQ0IyRjJFRDEyMEYwODUxQ0UyRTg3QkQ3MzZFRjgxOTBDMTcz QUJDODVEQjVBMTA0N0U1ODE4NzEzNi8wLzQ3NkVCNjFGMTdCNDlDRDg4QTBEQjZB QkVEMkU5NjZBNjFBQUFBOTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9vxoQgRYl9mqKbVHMAqjAElqc VuVKxl4YTbaXnW+9avsLFSeXFywgxLsvKgEPmDcd4Y9sqMi4u44m1IcOMonZ5btk W9mfOVu0a/BIgdoBNo8nlXVRs1MW0xsEp1hVsRkXcyDC9BNn7bKiDyOo8WtMOe1m D2DF0GnDk1bxMSImC3B6zH1Y931qNYIGLPvuUwUeQLpPl9rYMo0xVttW4BTb/osH EkNglion/C7SdOeDt8UruUwa97Lz+51l7ERrVjaVmfUj7EVR6Lkg7DE+F2bAVRZf m0g3CMSIhaYmtve2bUBsZ9eqYxsFgy1Tnk7WCkGTmeWSy8h2zbPMhmx9rCBg -----END CERTIFICATE-----Generated at Sun Nov 2 21:04:40 2025 by rpki-client