$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft File: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft (raw, json) Hash identifier: m57yrYzk6ccOloO1SwmdpGrnBm0zm3groLvA817tcBw= Subject key identifier: B5:28:1E:B0:60:E0:12:3F:B4:31:13:C1:F8:B6:57:07:01:D6:5C:3A Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 Certificate issuer: /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Certificate serial: 50A37CE0D343651EDF1080A8042396DD340875EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft Manifest number: 0132 Signing time: Sat 01 Nov 2025 08:36:32 +0000 Manifest this update: Sat 01 Nov 2025 08:31:32 +0000 Manifest next update: Wed 05 Nov 2025 17:32:32 +0000 Files and hashes: 1: 34352e3136342e3130382e302f32322d3234203d3e203238343431.roa (hash: FZ/ToJSDVA+/z6gj7agzP3+M2/gq86aV54y856+5jAs=) 2: 323830363a3330633a3a2f33322d3438203d3e20323730313733.roa (hash: JRsnL/EF5Mvh3uIexqf/lKD0Frgj2yJLic8Lrr5SfrE=) 3: 323830363a3330633a3a2f33322d3332203d3e203238343431.roa (hash: vIOhJjECWzttZKOV+dVCoi9TcFOasaJL+FAuiQqhZoY=) 4: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl (hash: AKmXqzSotErP3Kn4Vy1Ep5OlwiZGwJgzMOs6EJtVnng=) 5: 34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa (hash: 4VUCnUrOTEFJUAMerXLjzJe+4pxzRGbnHxoBswqshlY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a3:7c:e0:d3:43:65:1e:df:10:80:a8:04:23:96:dd:34:08:75:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Validity Not Before: Nov 1 08:31:32 2025 GMT Not After : Nov 5 17:32:32 2025 GMT Subject: CN=B5281EB060E0123FB43113C1F8B6570701D65C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:7c:bd:ed:61:26:22:fd:12:cd:95:8b:6e: 75:b0:3e:93:73:db:68:20:48:46:83:9c:1f:05:52: f2:67:30:0d:ac:57:0c:d3:d8:77:31:b9:50:fe:56: 91:53:8c:ef:7f:58:fe:12:f8:8c:75:9c:e0:03:df: 0f:f3:6d:bd:ea:fd:0f:81:02:3e:6b:49:d3:98:73: a3:25:bd:b0:d3:f4:f5:80:34:16:b9:4c:40:18:c2: e4:4a:d8:35:b3:50:70:17:a5:07:f9:6c:dd:08:44: 4b:28:ab:25:09:61:26:53:6d:d7:23:9d:8a:ac:36: 62:f7:7a:80:b4:a3:4d:73:cd:f0:51:fe:23:6e:17: f8:47:f4:9d:31:00:62:df:03:af:73:14:35:eb:17: 50:df:eb:45:e5:c4:3a:e6:68:a1:cc:6d:aa:dd:ab: 90:ec:fb:95:12:59:3b:c6:2a:4d:56:67:fb:97:bf: 19:f6:97:50:76:ab:3c:09:93:db:91:48:40:e3:9e: 39:9a:9f:a1:ff:27:d2:c7:1e:6d:4a:6c:b5:34:96: 49:c8:12:67:10:d3:ea:63:45:be:84:64:b9:d7:47: ce:22:52:77:2f:ef:52:99:eb:5d:fa:83:e0:3b:db: db:fb:9e:98:10:88:4a:76:88:55:e2:94:3c:79:68: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:28:1E:B0:60:E0:12:3F:B4:31:13:C1:F8:B6:57:07:01:D6:5C:3A X509v3 Authority Key Identifier: keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:80:f0:8d:90:3b:99:c3:b0:70:d2:7b:6d:50:fd:ea:23:ab: e6:8b:0d:1c:ad:70:25:f7:49:ca:39:eb:72:0e:76:9c:3a:71: 3e:83:73:4d:06:3a:95:44:cf:11:12:ce:73:c1:e3:9b:ab:53: fa:b6:52:07:43:bd:45:19:95:e3:27:a2:50:e8:1c:5d:42:4c: 99:1b:d2:aa:ea:f8:d1:e1:b6:4d:0b:a3:13:2d:30:bf:74:85: a4:aa:e9:da:70:c5:e3:58:d1:13:3c:20:a9:a9:e7:9f:ae:73: 94:66:b1:04:d1:19:66:5d:d8:ef:29:2e:04:37:0d:55:84:60: 28:2b:81:82:65:1a:ea:c8:5a:00:e3:f6:29:50:a0:23:a2:d2: 41:f9:37:31:41:32:28:1b:3c:1d:d7:93:39:61:22:4c:92:f4: 19:a4:1f:7e:12:06:24:0d:2f:73:89:2d:c3:ca:76:90:4b:7f: d1:6f:d9:db:8c:67:09:04:db:9a:e3:3b:fa:bf:98:7c:00:f5: bf:f3:0f:57:b5:2e:bb:4c:a9:e2:9a:b1:57:98:3d:be:49:a5: 16:8f:7d:18:9d:9c:b8:a9:9f:71:8f:93:7f:88:df:fc:da:ed: d3:75:0c:e6:5c:3c:a0:20:96:a7:39:73:1e:d2:5e:7d:d2:b6: ea:16:33:49 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUKN84NNDZR7fEICoBCOW3TQIdeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkxQkYyNjRFM0RGQkUyOUE1RDUyQUUyNENFMTI0M0RG NkYzOThDMjAeFw0yNTExMDEwODMxMzJaFw0yNTExMDUxNzMyMzJaMDMxMTAvBgNV BAMTKEI1MjgxRUIwNjBFMDEyM0ZCNDMxMTNDMUY4QjY1NzA3MDFENjVDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7ny97WEmIv0SzZWLbnWwPpNz 22ggSEaDnB8FUvJnMA2sVwzT2HcxuVD+VpFTjO9/WP4S+Ix1nOAD3w/zbb3q/Q+B Aj5rSdOYc6MlvbDT9PWANBa5TEAYwuRK2DWzUHAXpQf5bN0IREsoqyUJYSZTbdcj nYqsNmL3eoC0o01zzfBR/iNuF/hH9J0xAGLfA69zFDXrF1Df60XlxDrmaKHMbard q5Ds+5USWTvGKk1WZ/uXvxn2l1B2qzwJk9uRSEDjnjman6H/J9LHHm1KbLU0lknI EmcQ0+pjRb6EZLnXR84iUncv71KZ6136g+A729v7npgQiEp2iFXilDx5aKiZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUtSgesGDgEj+0MRPB+LZXBwHWXDowHwYDVR0j BBgwFoAUKRvyZOPfviml1SriTOEkPfbzmMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkE3NzEzNzdBMzUzMDgxODg4MURDMjIyNjcwNUE1OEIx OTVCRDZFQzAzNTEwMzgyMTE3RTkyRUU5NjFEM0E5LzAvMjkxQkYyNjRFM0RGQkUy OUE1RDUyQUUyNENFMTI0M0RGNkYzOThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTFCRjI2NEUzREZCRTI5QTVE NTJBRTI0Q0UxMjQzREY2RjM5OEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZBNzcxMzc3QTM1MzA4MTg4ODFEQzIyMjY3MDVBNThCMTk1QkQ2RUMw MzUxMDM4MjExN0U5MkVFOTYxRDNBOS8wLzI5MUJGMjY0RTNERkJFMjlBNUQ1MkFF MjRDRTEyNDNERjZGMzk4QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFgPCNkDuZw7Bw0nttUP3qI6vm iw0crXAl90nKOetyDnacOnE+g3NNBjqVRM8REs5zweObq1P6tlIHQ71FGZXjJ6JQ 6BxdQkyZG9Kq6vjR4bZNC6MTLTC/dIWkqunacMXjWNETPCCpqeefrnOUZrEE0Rlm XdjvKS4ENw1VhGAoK4GCZRrqyFoA4/YpUKAjotJB+TcxQTIoGzwd15M5YSJMkvQZ pB9+EgYkDS9ziS3DynaQS3/Rb9nbjGcJBNua4zv6v5h8APW/8w9XtS67TKnimrFX mD2+SaUWj30YnZy4qZ9xj5N/iN/82u3TdQzmXDygIJanOXMe0l590rbqFjNJ -----END CERTIFICATE-----Generated at Sun Nov 2 10:03:54 2025 by rpki-client