$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft File: 2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft (raw, json) Hash identifier: vNEm671ioL/xiM2kNumcrRl7X6FXbJXGPhV5HgVYkbg= Subject key identifier: 29:85:E5:4D:65:D2:5D:71:72:5E:A2:E9:33:19:02:53:A6:D1:CA:35 Authority key identifier: 2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0 Certificate issuer: /CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0 Certificate serial: 75E30306084C0166DD956F3C3CD354FEAFA9F31E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft Manifest number: 012D Signing time: Thu 30 Oct 2025 19:25:38 +0000 Manifest this update: Thu 30 Oct 2025 19:20:38 +0000 Manifest next update: Wed 05 Nov 2025 17:35:38 +0000 Files and hashes: 1: 34352e3137352e36342e302f32322d3234203d3e20323633363836.roa (hash: TJ+igW/YrUcosQrIwNfQipcoW/x6+LywdR0fClvRIfw=) 2: 2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl (hash: AmRcvnjFJOaHUiK9hT9OOecOZ4/oBoWFdoWKO6OHFtw=) 3: 323830333a626336303a3a2f33322d3438203d3e20323634373733.roa (hash: Zsl7muYxcZ67isD4Zg7u1qDtM/Ls31dJ2jj3C1DNnrU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e3:03:06:08:4c:01:66:dd:95:6f:3c:3c:d3:54:fe:af:a9:f3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0 Validity Not Before: Oct 30 19:20:38 2025 GMT Not After : Nov 5 17:35:38 2025 GMT Subject: CN=2985E54D65D25D71725EA2E933190253A6D1CA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:50:fb:87:58:9e:21:c4:92:c9:da:76:cf: 85:4e:c7:4e:ab:dc:1e:8d:51:66:e1:57:37:f8:ed: 83:01:0b:ab:4d:f9:22:12:75:37:df:f1:9d:ee:3f: 25:fa:8f:e1:53:b9:bf:ae:f1:b8:40:31:e2:02:4e: 2f:fd:fc:6d:6b:27:3b:60:a1:76:c4:f6:83:59:33: 80:28:11:ad:3e:81:4f:47:d2:e1:c7:18:64:6f:b2: 50:be:da:5c:8e:54:b9:3a:6f:75:64:5e:24:57:05: e9:45:e0:58:93:3c:48:58:cd:c6:e1:cc:21:17:dc: 6b:97:2e:c8:8b:48:6e:f5:62:bd:1a:50:3b:19:1a: e8:e8:54:44:87:7f:cf:d2:86:bc:4e:c7:05:ec:b3: b1:7f:62:a9:90:18:b5:7e:8c:f0:11:a7:dc:5b:4c: 3e:26:68:2a:29:1d:67:c5:71:10:59:2c:03:9f:64: f4:92:18:b9:8a:8f:a1:15:76:09:b5:12:38:9a:2d: 9c:61:ac:9a:70:a8:16:4c:ee:8c:86:5e:7b:b1:f6: 79:cf:2f:e0:3b:67:7c:3e:74:6b:33:59:a3:7a:1e: 0d:21:41:9c:89:72:8e:b2:32:2e:34:a6:be:b7:5f: 0f:3d:7c:6d:6a:3c:ce:03:3b:5b:ad:94:0b:2c:b8: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:85:E5:4D:65:D2:5D:71:72:5E:A2:E9:33:19:02:53:A6:D1:CA:35 X509v3 Authority Key Identifier: keyid:2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:11:21:57:43:c3:47:61:5f:6a:66:85:fa:ee:41:ba:52:7f: bc:61:73:88:68:a9:f7:a0:e7:d8:87:ab:18:12:c1:59:f8:1c: 5f:91:54:01:53:6c:6a:b1:56:55:22:82:18:e3:f8:7c:ff:d5: 3b:b0:08:42:07:43:66:02:05:86:a2:93:c2:91:e7:84:49:7f: 6e:c5:ae:d1:53:60:11:3f:f1:95:07:77:09:5a:72:5f:08:e9: d3:3d:ba:d1:6b:e9:b0:a7:ad:72:b1:aa:c8:f2:c6:43:11:1c: 29:89:e1:f8:e6:77:27:bc:bd:f1:63:cb:e3:34:c2:aa:8e:2e: e5:a6:1c:1d:64:f2:4e:59:e1:85:3c:57:01:f5:af:05:8a:08: 81:18:2a:8e:f6:e0:97:ed:9a:a0:6e:ac:46:05:47:73:95:15: c7:7b:4f:3a:3a:bd:13:20:3a:c2:b8:c6:6b:2a:48:06:a7:3f: ec:15:25:bb:7e:af:fd:3a:fa:12:7e:e6:c3:5a:08:1e:82:f5: 0d:45:f0:cf:6a:34:91:81:33:b9:cb:5b:69:3c:d5:5b:de:5e: 06:86:9b:0a:01:5d:05:7d:2b:a6:c9:78:40:15:67:8a:8d:d4: db:e7:dd:8f:c9:c3:4e:ff:b6:fe:28:31:b1:de:0e:d1:5a:00: ab:83:f4:12 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdeMDBghMAWbdlW88PNNU/q+p8x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEQUEzQUNDOUNBNEJGQzkyMTlGQjY1Q0I0NjRDOUI5 QzRCOTREMDAeFw0yNTEwMzAxOTIwMzhaFw0yNTExMDUxNzM1MzhaMDMxMTAvBgNV BAMTKDI5ODVFNTRENjVEMjVENzE3MjVFQTJFOTMzMTkwMjUzQTZEMUNBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfRlD7h1ieIcSSydp2z4VOx06r 3B6NUWbhVzf47YMBC6tN+SISdTff8Z3uPyX6j+FTub+u8bhAMeICTi/9/G1rJztg oXbE9oNZM4AoEa0+gU9H0uHHGGRvslC+2lyOVLk6b3VkXiRXBelF4FiTPEhYzcbh zCEX3GuXLsiLSG71Yr0aUDsZGujoVESHf8/ShrxOxwXss7F/YqmQGLV+jPARp9xb TD4maCopHWfFcRBZLAOfZPSSGLmKj6EVdgm1EjiaLZxhrJpwqBZM7oyGXnux9nnP L+A7Z3w+dGszWaN6Hg0hQZyJco6yMi40pr63Xw89fG1qPM4DO1utlAssuNQjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKYXlTWXSXXFyXqLpMxkCU6bRyjUwHwYDVR0j BBgwFoAUL9qjrMnKS/ySGftly0ZMm5xLlNAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNzAwREMyQkNDMTJGM0QyOEQ5NDExNEZGRjFDODA3Qjc1 NzcxNEVBQUIyQ0M3RjAxMEVEMEFCNzIwNUMxNEVGLzAvMkZEQUEzQUNDOUNBNEJG QzkyMTlGQjY1Q0I0NjRDOUI5QzRCOTREMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkRBQTNBQ0M5Q0E0QkZDOTIx OUZCNjVDQjQ2NEM5QjlDNEI5NEQwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTcwMERDMkJDQzEyRjNEMjhEOTQxMTRGRkYxQzgwN0I3NTc3MTRFQUFC MkNDN0YwMTBFRDBBQjcyMDVDMTRFRi8wLzJGREFBM0FDQzlDQTRCRkM5MjE5RkI2 NUNCNDY0QzlCOUM0Qjk0RDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjESFXQ8NHYV9qZoX67kG6Un+8 YXOIaKn3oOfYh6sYEsFZ+BxfkVQBU2xqsVZVIoIY4/h8/9U7sAhCB0NmAgWGopPC keeESX9uxa7RU2ARP/GVB3cJWnJfCOnTPbrRa+mwp61ysarI8sZDERwpieH45ncn vL3xY8vjNMKqji7lphwdZPJOWeGFPFcB9a8FigiBGCqO9uCX7ZqgbqxGBUdzlRXH e086Or0TIDrCuMZrKkgGpz/sFSW7fq/9OvoSfubDWggegvUNRfDPajSRgTO5y1tp PNVb3l4GhpsKAV0FfSumyXhAFWeKjdTb592PycNO/7b+KDGx3g7RWgCrg/QS -----END CERTIFICATE-----Generated at Sun Nov 2 11:46:21 2025 by rpki-client