$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft File: 24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft (raw, json) Hash identifier: UvPK79D0iTVo3Ds5W4gry4N/Tk34a+Yk8rRwIniW0YU= Subject key identifier: 34:6E:3E:8A:F8:72:88:2C:DF:61:16:AB:A4:43:1A:4B:E0:45:D2:A1 Authority key identifier: 24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF Certificate issuer: /CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF Certificate serial: 22C8969A8B8A7B6DBEF76223885F2C3F9A507666 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft Manifest number: 0133 Signing time: Wed 22 Oct 2025 16:49:05 +0000 Manifest this update: Wed 22 Oct 2025 16:44:05 +0000 Manifest next update: Tue 28 Oct 2025 15:57:05 +0000 Files and hashes: 1: 323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa (hash: s04QAhlw8XOKF9yrmP/+sP2zJGFRoN4KYWctsrnPhkI=) 2: 24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl (hash: chmLp59C/d4qERyRAvxsYnwC4pDVCLtj5mpu8kbcoxo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Oct 2025 12:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c8:96:9a:8b:8a:7b:6d:be:f7:62:23:88:5f:2c:3f:9a:50:76:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF Validity Not Before: Oct 22 16:44:05 2025 GMT Not After : Oct 28 15:57:05 2025 GMT Subject: CN=346E3E8AF872882CDF6116ABA4431A4BE045D2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:98:46:07:1c:93:94:2e:c3:cc:33:2a:59: 6d:0c:63:9d:f1:01:5d:11:ac:9a:fc:a9:12:2d:d7: cb:62:83:6c:56:61:dc:5c:bb:62:2b:85:c9:cc:7c: 0c:68:6e:43:fa:f5:65:4e:99:0f:e3:23:d1:24:d8: b2:02:34:06:17:cb:37:d6:86:f4:3c:17:43:56:0a: 65:6b:67:ee:4f:cb:6b:e8:61:13:79:b0:5e:68:ef: 7d:57:89:a1:db:16:90:f0:8c:35:df:69:3d:85:62: c6:97:f0:33:5b:3c:09:51:0b:50:12:40:b5:c0:0d: 4a:ca:d0:b4:c5:fd:f9:07:0d:47:16:34:65:d4:e7: c5:4a:7b:79:35:b9:93:77:89:ea:7c:41:8f:a8:66: 07:1b:a3:a1:f7:ce:79:1a:f4:35:f8:c2:c2:39:11: 88:d1:59:41:66:07:97:5d:61:da:31:de:6e:c3:f9: 24:86:84:11:fe:14:df:4a:ff:51:77:2b:47:57:85: d6:aa:ab:79:5c:c8:56:a2:8f:bb:d7:67:73:33:6e: 21:cb:4d:7e:5d:a4:90:7c:43:3a:0d:08:59:4c:0d: ca:71:ec:4e:ca:f3:6e:75:08:45:e2:b7:c8:e3:52: ca:75:01:b9:f0:98:b3:c8:f0:9d:4a:03:80:47:df: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6E:3E:8A:F8:72:88:2C:DF:61:16:AB:A4:43:1A:4B:E0:45:D2:A1 X509v3 Authority Key Identifier: keyid:24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9f:b4:4b:b3:cd:83:d7:a8:a6:26:64:39:d3:36:9d:f7:0a: ed:5f:cd:e4:5e:2f:cb:b2:79:44:b9:1f:e2:c9:01:70:30:a0: 6c:1f:33:8a:e4:fb:72:02:05:f6:8d:e9:53:8c:f8:73:80:3e: 2c:65:de:62:24:6f:39:c2:ca:03:f3:de:f6:9b:8b:30:7c:7d: 14:a6:60:04:67:cf:af:cf:ab:5f:53:8a:ee:5c:2f:da:d2:a6: 3f:0f:ac:da:91:be:5c:6e:57:19:8e:27:99:72:91:e8:7f:db: 37:d5:30:c9:69:19:9d:44:eb:b7:c0:d2:21:77:02:a8:dc:a1: 36:a2:04:f9:f1:4d:41:e8:ce:c3:a9:ff:8b:9b:18:13:a3:22: a0:73:29:94:99:9e:d5:79:03:22:43:de:9d:c8:7e:5d:a7:e9: 32:b3:23:d9:11:d3:24:55:10:a2:53:08:87:1e:38:13:9e:5a: 0d:9a:05:5e:64:c3:74:f4:17:aa:09:6e:7a:88:05:bc:9a:90: 57:b1:54:5e:5f:48:78:08:6a:18:52:61:02:ac:46:e7:32:e0: a1:9a:05:c5:56:d1:ac:c6:52:71:12:21:cb:34:ab:88:af:13: 38:b5:ff:ab:4d:ab:41:c6:0a:1f:97:ce:39:1d:d5:a4:6e:1d: 77:e5:2e:d3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIsiWmouKe22+92IjiF8sP5pQdmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBQjRFRjBDREU1Q0JDNTJFMTI1RTYzNEM2ODIzN0M0 NkQwRjhDRjAeFw0yNTEwMjIxNjQ0MDVaFw0yNTEwMjgxNTU3MDVaMDMxMTAvBgNV BAMTKDM0NkUzRThBRjg3Mjg4MkNERjYxMTZBQkE0NDMxQTRCRTA0NUQyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmJhGBxyTlC7DzDMqWW0MY53x AV0RrJr8qRIt18tig2xWYdxcu2IrhcnMfAxobkP69WVOmQ/jI9Ek2LICNAYXyzfW hvQ8F0NWCmVrZ+5Py2voYRN5sF5o731XiaHbFpDwjDXfaT2FYsaX8DNbPAlRC1AS QLXADUrK0LTF/fkHDUcWNGXU58VKe3k1uZN3iep8QY+oZgcbo6H3znka9DX4wsI5 EYjRWUFmB5ddYdox3m7D+SSGhBH+FN9K/1F3K0dXhdaqq3lcyFaij7vXZ3MzbiHL TX5dpJB8QzoNCFlMDcpx7E7K8251CEXit8jjUsp1AbnwmLPI8J1KA4BH390lAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNG4+ivhyiCzfYRarpEMaS+BF0qEwHwYDVR0j BBgwFoAUJKtO8M3ly8UuEl5jTGgjfEbQ+M8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOUI0NUEzNTI4QjhFM0JFRDlCRTdGNzlDQUI0OTVBNjFC NzMxNDU3M0RCRDlGOUNEMzNERTQ4OTc5MUVDQ0I5LzAvMjRBQjRFRjBDREU1Q0JD NTJFMTI1RTYzNEM2ODIzN0M0NkQwRjhDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEFCNEVGMENERTVDQkM1MkUx MjVFNjM0QzY4MjM3QzQ2RDBGOENGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDlCNDVBMzUyOEI4RTNCRUQ5QkU3Rjc5Q0FCNDk1QTYxQjczMTQ1NzNE QkQ5RjlDRDMzREU0ODk3OTFFQ0NCOS8wLzI0QUI0RUYwQ0RFNUNCQzUyRTEyNUU2 MzRDNjgyMzdDNDZEMEY4Q0YubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyn7RLs82D16imJmQ50zad9wrt X83kXi/LsnlEuR/iyQFwMKBsHzOK5PtyAgX2jelTjPhzgD4sZd5iJG85wsoD8972 m4swfH0UpmAEZ8+vz6tfU4ruXC/a0qY/D6zakb5cblcZjieZcpHof9s31TDJaRmd ROu3wNIhdwKo3KE2ogT58U1B6M7Dqf+LmxgToyKgcymUmZ7VeQMiQ96dyH5dp+ky syPZEdMkVRCiUwiHHjgTnloNmgVeZMN09BeqCW56iAW8mpBXsVReX0h4CGoYUmEC rEbnMuChmgXFVtGsxlJxEiHLNKuIrxM4tf+rTatBxgofl845HdWkbh135S7T -----END CERTIFICATE-----Generated at Fri Oct 24 14:41:40 2025 by rpki-client