$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft File: 2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft (raw, json) Hash identifier: FlGKvfzLA5/ZjWKjd9H5pdsfW0iRMb4NM1C2RBG5inM= Subject key identifier: 70:4D:3C:0C:50:08:95:7D:DD:49:D0:06:6B:19:81:B8:CF:EC:7B:FD Authority key identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F Certificate issuer: /CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F Certificate serial: 582620597F919A69FB4AA02479486F20E6D6600F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 05:45:58 +0000 Manifest this update: Tue 04 Nov 2025 05:40:58 +0000 Manifest next update: Sun 09 Nov 2025 18:48:58 +0000 Files and hashes: 1: 34352e3138382e3231362e302f32332d3233203d3e20323639383834.roa (hash: xtYzzVyhuTFcq+SJHu+xtY5iX6TtdtteDjMi5U96SfY=) 2: 323830333a663865303a3a2f33322d3332203d3e20323639383834.roa (hash: xWosyP4J3DHKvHhDZujViNOqZRkue/HUjsCj2PnW6Sc=) 3: 2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.crl (hash: rxBsqBSDU+6aR1D50g0L+zFKE8MaBD4wr5JZ+6mw9JA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.crl rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:26:20:59:7f:91:9a:69:fb:4a:a0:24:79:48:6f:20:e6:d6:60:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F Validity Not Before: Nov 4 05:40:58 2025 GMT Not After : Nov 9 18:48:58 2025 GMT Subject: CN=704D3C0C5008957DDD49D0066B1981B8CFEC7BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:4f:84:57:9d:e6:54:e3:c8:b1:e1:e9:95: d9:1c:46:b1:ed:02:15:15:9a:88:d6:5c:1f:de:1a: ab:a2:b8:77:f2:a8:a0:5a:dd:51:33:cf:ff:5d:29: ca:58:34:b5:12:37:7e:aa:9f:f5:68:21:88:da:28: 73:32:29:7d:8a:53:7c:d9:43:1d:eb:64:1f:4e:58: 64:aa:90:9b:2c:82:5c:98:00:8f:90:d9:e2:6c:98: d6:0d:a9:e3:ed:e1:7e:02:cf:1f:af:ec:37:66:b3: 20:ff:c1:4a:85:37:a5:0e:21:bd:a0:53:2b:a0:2d: 2a:bc:62:52:55:cd:4c:85:c9:9b:37:1b:b6:f8:cf: 1c:2a:63:8b:9b:b2:86:bc:52:20:f6:b5:a1:1f:26: e0:87:da:71:f9:0c:03:a7:d3:fc:04:01:36:1c:ba: b0:96:8c:e5:be:de:82:b1:db:42:b7:e1:6a:a2:5c: e5:91:91:f0:94:09:b1:76:8d:50:ed:51:c9:8b:1a: ba:64:1d:27:a7:7f:94:f0:15:22:ba:51:d5:dc:d4: 0a:de:93:01:56:87:a3:36:6d:d5:a7:d7:38:b7:41: 30:50:0d:94:f6:bd:ef:69:0b:96:ac:1c:9f:a8:62: aa:3d:69:b6:d1:d1:3a:e6:44:8b:a8:1f:13:c0:8c: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4D:3C:0C:50:08:95:7D:DD:49:D0:06:6B:19:81:B8:CF:EC:7B:FD X509v3 Authority Key Identifier: keyid:2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ae:01:51:dc:50:b3:cf:89:de:f8:81:c2:20:89:87:9a:2f: eb:55:ee:e2:7f:c8:3a:c8:9f:c5:83:cf:2f:8a:dc:a8:ac:be: a9:51:42:0d:3f:c8:97:c9:f9:ed:6c:c1:1a:6f:53:26:94:86: e9:f1:a7:c8:17:1e:70:6a:00:0c:de:23:61:0d:26:5d:fa:38: 55:fd:ce:89:4a:3a:c4:c5:ff:54:93:12:99:ca:d8:e0:be:38: 92:92:53:a8:8d:1d:21:82:7f:6b:37:a2:81:9c:25:4f:8a:17: 59:6f:e4:ba:23:b1:25:80:01:4e:f2:60:27:58:fa:ca:04:43: 2f:b8:20:57:5e:13:fc:79:c4:51:b3:32:83:15:4d:f5:c0:66: dc:45:4f:61:15:53:f7:32:7d:bd:9b:6a:d5:2a:b2:f0:02:d4: ff:8a:38:6e:9c:90:fd:aa:5e:94:b4:0a:87:ce:e4:2b:5c:1d: 0a:ba:9f:1a:18:c1:7f:55:cb:b9:94:8f:d1:85:72:29:5a:7b: 05:5e:dd:0a:69:64:ce:fe:69:f2:4b:7d:b1:9d:c8:f9:0c:b0: 16:bc:9b:0e:87:bb:27:07:33:25:c0:9a:26:5d:61:e1:57:e1: 37:80:13:46:c4:24:87:7f:17:75:54:82:d5:f0:73:87:ef:b9: 13:78:00:c4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWCYgWX+Rmmn7SqAkeUhvIObWYA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3QzFEM0JEN0MyNzdEMjI4NkFGNkI0NDYxRjZBMjc2 NDg3NkE1RjAeFw0yNTExMDQwNTQwNThaFw0yNTExMDkxODQ4NThaMDMxMTAvBgNV BAMTKDcwNEQzQzBDNTAwODk1N0RERDQ5RDAwNjZCMTk4MUI4Q0ZFQzdCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZE+EV53mVOPIseHpldkcRrHt AhUVmojWXB/eGquiuHfyqKBa3VEzz/9dKcpYNLUSN36qn/VoIYjaKHMyKX2KU3zZ Qx3rZB9OWGSqkJssglyYAI+Q2eJsmNYNqePt4X4Czx+v7DdmsyD/wUqFN6UOIb2g UyugLSq8YlJVzUyFyZs3G7b4zxwqY4ubsoa8UiD2taEfJuCH2nH5DAOn0/wEATYc urCWjOW+3oKx20K34WqiXOWRkfCUCbF2jVDtUcmLGrpkHSenf5TwFSK6UdXc1Are kwFWh6M2bdWn1zi3QTBQDZT2ve9pC5asHJ+oYqo9abbR0TrmRIuoHxPAjCkNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcE08DFAIlX3dSdAGaxmBuM/se/0wHwYDVR0j BBgwFoAULHwdO9fCd9Ioava0Rh9qJ2SHal8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMDIyMkZFMzcwN0ZDMEU4MzUxMEVFRTFGOEI0NkNCNjEw MEI3ODdCNDVEMEIyMDlCNjFGODM1RTAyMUU1QkU1LzAvMkM3QzFEM0JEN0MyNzdE MjI4NkFGNkI0NDYxRjZBMjc2NDg3NkE1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzdDMUQzQkQ3QzI3N0QyMjg2 QUY2QjQ0NjFGNkEyNzY0ODc2QTVGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjAyMjJGRTM3MDdGQzBFODM1MTBFRUUxRjhCNDZDQjYxMDBCNzg3QjQ1 RDBCMjA5QjYxRjgzNUUwMjFFNUJFNS8wLzJDN0MxRDNCRDdDMjc3RDIyODZBRjZC NDQ2MUY2QTI3NjQ4NzZBNUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfrgFR3FCzz4ne+IHCIImHmi/r Ve7if8g6yJ/Fg88vityorL6pUUINP8iXyfntbMEab1MmlIbp8afIFx5wagAM3iNh DSZd+jhV/c6JSjrExf9UkxKZytjgvjiSklOojR0hgn9rN6KBnCVPihdZb+S6I7El gAFO8mAnWPrKBEMvuCBXXhP8ecRRszKDFU31wGbcRU9hFVP3Mn29m2rVKrLwAtT/ ijhunJD9ql6UtAqHzuQrXB0Kup8aGMF/Vcu5lI/RhXIpWnsFXt0KaWTO/mnyS32x ncj5DLAWvJsOh7snBzMlwJomXWHhV+E3gBNGxCSHfxd1VILV8HOH77kTeADE -----END CERTIFICATE-----Generated at Tue Nov 4 18:05:39 2025 by rpki-client