$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft File: 2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft (raw, json) Hash identifier: nzdPWNqbZ9+Z+PxdU7k8lo8qWP2XToGxG43kQqiF1mk= Subject key identifier: 6C:5A:BB:55:82:08:18:D0:E4:22:EE:7E:90:5E:7A:1B:CE:7D:A2:12 Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A Certificate issuer: /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Certificate serial: 5EAC8CBEFFB840F5BF02BF53011AF199039A7119 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft Manifest number: 0136 Signing time: Sat 01 Nov 2025 18:01:17 +0000 Manifest this update: Sat 01 Nov 2025 17:56:17 +0000 Manifest next update: Fri 07 Nov 2025 09:45:17 +0000 Files and hashes: 1: 3230302e35322e3132382e302f32302d3234203d3e203136353331.roa (hash: qUy2OLAZvapfc2Yrl+IUqZZqDjL6jHoskXObvTdeSVk=) 2: 3230302e37362e39362e302f32302d3234203d3e203136353331.roa (hash: CNgTTa5W9lPRLFY0Uji1+LVSgTAijkz0OIid8B19UGk=) 3: 2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl (hash: 8MtBxj5IOJe0jVTMQpTM72Q8xJ5Jd0FyvwOZeHon6bA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ac:8c:be:ff:b8:40:f5:bf:02:bf:53:01:1a:f1:99:03:9a:71:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Validity Not Before: Nov 1 17:56:17 2025 GMT Not After : Nov 7 09:45:17 2025 GMT Subject: CN=6C5ABB55820818D0E422EE7E905E7A1BCE7DA212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:63:44:b9:df:df:8b:b0:c3:7a:0d:50:dd: 77:10:de:f9:6b:14:56:c3:63:ba:e3:ac:a3:c0:c3: ac:45:77:12:22:f0:10:08:8f:e8:32:f9:50:81:9d: 7d:1a:05:00:d2:42:40:57:ba:ed:04:f5:81:3b:09: 14:1e:76:34:e8:17:4d:84:4e:b4:52:bf:25:44:95: 71:18:80:f5:b7:38:9e:49:64:38:5e:8d:42:b5:27: 75:c9:71:f1:e3:19:51:e7:08:76:5b:42:9f:1f:b6: d1:15:66:1f:e7:a5:e9:58:ab:2e:58:3f:ec:46:95: ce:19:6d:1b:47:d4:fe:7e:15:fe:57:c1:65:4d:8a: 6c:f3:3f:e9:3d:c7:b2:28:9d:23:b0:82:62:5a:34: f8:d3:4e:f9:12:90:f0:00:f8:af:e3:02:ef:6f:e1: 54:8e:68:ac:ff:b3:c1:d8:bb:10:d0:c8:d3:64:34: 1c:a7:79:c9:85:c5:32:9d:35:47:94:2f:dc:b7:e9: ef:78:d8:ec:bc:aa:3e:d0:08:cf:df:bb:6b:81:0f: 1f:60:43:a7:7f:32:4e:20:35:c7:5b:f0:ff:8b:07: f2:0e:c7:11:0a:ac:2a:d0:07:f9:a8:79:b7:81:ff: 71:4d:41:53:ce:1c:26:74:11:25:62:53:c0:66:b1: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5A:BB:55:82:08:18:D0:E4:22:EE:7E:90:5E:7A:1B:CE:7D:A2:12 X509v3 Authority Key Identifier: keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ec:d9:8f:ae:af:d8:6a:06:38:7f:fe:a1:ff:83:5b:76:f4: 53:4e:39:92:25:56:7f:56:22:f9:d6:16:b0:27:19:1b:c5:21: b7:9c:f6:b4:5f:8f:3b:2a:da:29:73:5f:43:b8:6d:24:5c:fe: b1:0f:d4:ac:17:3f:aa:3d:43:0c:db:a7:a4:94:44:d2:6d:8a: b9:bc:8b:44:92:c4:e7:28:b8:6d:74:81:e3:27:f3:48:14:c0: c0:d9:db:a9:3b:20:01:6b:db:f7:24:6f:d1:d1:00:47:a2:87: fe:b6:a7:89:0e:a2:68:33:cb:ed:56:61:29:6d:18:41:15:63: 93:4e:6b:98:a9:c3:08:87:7b:4d:16:01:21:76:3c:ba:bf:56: f2:3c:b2:c9:69:69:d2:25:23:f5:0a:27:55:9e:e1:73:83:bd: d3:58:90:9d:bf:94:18:e1:23:96:31:e0:82:60:27:ad:ac:56: bb:41:6d:21:45:e1:ff:14:bd:6c:df:24:2b:62:0f:de:99:66: d9:39:9b:db:d2:6a:cd:75:b8:1d:13:5f:d9:05:a7:02:8d:ec: 6c:b8:0a:b5:a9:e0:33:45:76:96:6e:ae:61:3a:52:9b:0c:47: 2e:79:0f:c9:84:c4:54:a1:2d:3c:c9:3c:a4:3d:36:e8:e4:b8: 0c:31:76:4d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXqyMvv+4QPW/Ar9TARrxmQOacRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCMDZFQkQyOEZFODNBNTY0RkEzREZDODNGNEY5OEFD NjIwQzk4QTAeFw0yNTExMDExNzU2MTdaFw0yNTExMDcwOTQ1MTdaMDMxMTAvBgNV BAMTKDZDNUFCQjU1ODIwODE4RDBFNDIyRUU3RTkwNUU3QTFCQ0U3REEyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWiWNEud/fi7DDeg1Q3XcQ3vlr FFbDY7rjrKPAw6xFdxIi8BAIj+gy+VCBnX0aBQDSQkBXuu0E9YE7CRQedjToF02E TrRSvyVElXEYgPW3OJ5JZDhejUK1J3XJcfHjGVHnCHZbQp8fttEVZh/npelYqy5Y P+xGlc4ZbRtH1P5+Ff5XwWVNimzzP+k9x7IonSOwgmJaNPjTTvkSkPAA+K/jAu9v 4VSOaKz/s8HYuxDQyNNkNBynecmFxTKdNUeUL9y36e942Oy8qj7QCM/fu2uBDx9g Q6d/Mk4gNcdb8P+LB/IOxxEKrCrQB/moebeB/3FNQVPOHCZ0ESViU8BmsdJlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbFq7VYIIGNDkIu5+kF56G859ohIwHwYDVR0j BBgwFoAUL7BuvSj+g6Vk+j38g/T5isYgyYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOTU0QTg0NjQyMzZGMUJBOEU2MUM3QjZENjcyODZBMDA5 M0ZGRDQwOTM0NDY1M0ZGMEQ5QTc4NjkxRjQ3NDBGLzAvMkZCMDZFQkQyOEZFODNB NTY0RkEzREZDODNGNEY5OEFDNjIwQzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkIwNkVCRDI4RkU4M0E1NjRG QTNERkM4M0Y0Rjk4QUM2MjBDOThBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzk1NEE4NDY0MjM2RjFCQThFNjFDN0I2RDY3Mjg2QTAwOTNGRkQ0MDkz NDQ2NTNGRjBEOUE3ODY5MUY0NzQwRi8wLzJGQjA2RUJEMjhGRTgzQTU2NEZBM0RG QzgzRjRGOThBQzYyMEM5OEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAP7NmPrq/YagY4f/6h/4NbdvRT TjmSJVZ/ViL51hawJxkbxSG3nPa0X487Ktopc19DuG0kXP6xD9SsFz+qPUMM26ek lETSbYq5vItEksTnKLhtdIHjJ/NIFMDA2dupOyABa9v3JG/R0QBHoof+tqeJDqJo M8vtVmEpbRhBFWOTTmuYqcMIh3tNFgEhdjy6v1byPLLJaWnSJSP1CidVnuFzg73T WJCdv5QY4SOWMeCCYCetrFa7QW0hReH/FL1s3yQrYg/emWbZOZvb0mrNdbgdE1/Z BacCjexsuAq1qeAzRXaWbq5hOlKbDEcueQ/JhMRUoS08yTykPTbo5LgMMXZN -----END CERTIFICATE-----Generated at Sun Nov 2 10:58:29 2025 by rpki-client