$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft File: 2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft (raw, json) Hash identifier: G+GiofpieNT+kMmlfWnYGmNh2PJVXqad67PLIR7scKY= Subject key identifier: 33:CC:BD:B4:6B:E0:B5:3B:A1:35:3C:61:B5:82:9A:94:C4:B2:2A:C5 Authority key identifier: 2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41 Certificate issuer: /CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41 Certificate serial: 7BD1E19E5BB3092CFBB6D961FDDADB6D00A24DD4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft Manifest number: 32 Signing time: Sun 26 Oct 2025 01:47:07 +0000 Manifest this update: Sun 26 Oct 2025 01:42:07 +0000 Manifest next update: Fri 31 Oct 2025 16:15:07 +0000 Files and hashes: 1: 3138362e36342e39362e302f32312d3234203d3e203532343330.roa (hash: odiDAQPXm/RSZtQYjFfcLTdCPZixdMRvDKgNO4nPIQI=) 2: 323830333a393530303a3a2f33322d3438203d3e203532343330.roa (hash: U9Mq+Gi8Z8joOk/RSRP12pFseCixpikunYEFBOBCP8E=) 3: 2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl (hash: p2rqn2s3CSC4nsUTTbDyegyGzgt7hNb416nphfZPwww=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d1:e1:9e:5b:b3:09:2c:fb:b6:d9:61:fd:da:db:6d:00:a2:4d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41 Validity Not Before: Oct 26 01:42:07 2025 GMT Not After : Oct 31 16:15:07 2025 GMT Subject: CN=33CCBDB46BE0B53BA1353C61B5829A94C4B22AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:41:8d:65:6f:0a:80:2f:50:f1:c9:cc:d6: 41:a2:4f:a1:63:29:f6:4f:f6:ba:0c:80:44:b9:13: e0:56:74:ac:36:9a:f6:c6:d8:80:9e:a2:31:c0:1c: 7b:08:d4:c2:a9:72:ee:07:bf:1c:c9:1d:ac:63:e9: 6c:55:26:f4:a0:bf:ca:94:62:a4:0c:08:b6:91:a1: c1:09:f1:7a:08:86:c4:81:05:41:28:6f:0d:55:a5: ad:5e:e1:57:fd:04:8c:7f:66:82:56:46:e4:a4:1f: 0a:02:47:11:a3:36:2f:ca:83:55:8c:11:6f:42:19: f8:e5:1b:2d:3d:be:07:21:b5:43:dc:7d:d3:b5:8c: 2c:72:4e:42:2e:de:70:04:16:db:e5:fb:42:b5:10: 3a:34:2e:04:cb:6d:0f:2f:34:97:f7:d1:f2:58:41: 38:ab:86:b8:2a:72:bd:6f:d4:63:42:e0:7b:14:17: 54:3f:8e:00:e8:51:83:6f:78:27:e6:59:b8:36:ce: a6:0c:58:47:8a:80:f0:e4:1e:c3:34:60:ce:6f:a3: 02:65:ea:02:bc:7d:8f:b9:ba:ce:d6:65:12:76:a1: b1:95:31:56:f4:18:4d:21:75:e6:ab:70:e0:3a:d7: 72:05:bd:bd:ef:cf:f8:5d:84:be:a2:8f:98:43:76: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CC:BD:B4:6B:E0:B5:3B:A1:35:3C:61:B5:82:9A:94:C4:B2:2A:C5 X509v3 Authority Key Identifier: keyid:2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1a:5b:08:63:b4:d2:67:af:ec:c2:3b:9d:af:20:66:8a:cf: 07:d1:62:3f:25:97:58:06:8d:91:3b:2c:a7:40:05:97:4d:c2: ee:55:a0:60:1c:e5:1a:7e:46:1d:2d:b9:79:35:aa:2b:5a:ff: 28:f6:7f:79:ad:bb:6d:8f:52:18:be:94:79:2c:72:28:56:d5: 66:d8:62:6b:4f:2f:b0:26:7d:7e:08:f7:f5:7e:6d:ca:94:25: 43:a5:15:b6:1c:bf:a0:4a:2f:ae:09:ac:f1:ad:dd:ed:f1:55: 1a:81:62:2e:78:28:57:e5:93:7d:49:3a:21:02:cd:96:49:78: 1f:ed:e6:db:be:ae:99:02:23:73:20:10:cf:4f:c8:e3:d4:94: 6a:44:42:7a:36:f7:2a:64:24:62:b9:94:9a:8b:d4:1a:b1:0e: 73:66:21:ce:60:29:9c:f3:69:f5:95:f0:f3:7c:c4:08:87:af: a8:fa:8f:45:fc:cb:f1:97:b8:cf:66:54:50:d8:9f:ba:1e:8d: bc:a9:8e:f2:29:3f:78:94:fc:53:1c:d0:9b:7e:e8:ec:3e:45: ea:be:d5:8a:d3:d2:dc:0c:d0:23:93:fb:2b:94:df:76:3e:5c: dd:25:8d:1f:3d:f9:4a:0f:f2:22:1c:6d:b9:6e:a9:25:9b:2b: d8:85:1c:83 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUe9HhnluzCSz7ttlh/drbbQCiTdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMzNkE2NzBDNTNBMjdGNjVCOEVGN0YzMDlGMDcwOTdE Q0VGN0E0MTAeFw0yNTEwMjYwMTQyMDdaFw0yNTEwMzExNjE1MDdaMDMxMTAvBgNV BAMTKDMzQ0NCREI0NkJFMEI1M0JBMTM1M0M2MUI1ODI5QTk0QzRCMjJBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfEGNZW8KgC9Q8cnM1kGiT6Fj KfZP9roMgES5E+BWdKw2mvbG2ICeojHAHHsI1MKpcu4HvxzJHaxj6WxVJvSgv8qU YqQMCLaRocEJ8XoIhsSBBUEobw1Vpa1e4Vf9BIx/ZoJWRuSkHwoCRxGjNi/Kg1WM EW9CGfjlGy09vgchtUPcfdO1jCxyTkIu3nAEFtvl+0K1EDo0LgTLbQ8vNJf30fJY QTirhrgqcr1v1GNC4HsUF1Q/jgDoUYNveCfmWbg2zqYMWEeKgPDkHsM0YM5vowJl 6gK8fY+5us7WZRJ2obGVMVb0GE0hdearcOA613IFvb3vz/hdhL6ij5hDdv9LAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUM8y9tGvgtTuhNTxhtYKalMSyKsUwHwYDVR0j BBgwFoAULDamcMU6J/ZbjvfzCfBwl9zvekEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NTdBMjBDMENGRjE3OEMyMjI3NDQ2NjVFNzFBOTE4NEZB Qjk5Mzc5QzMxNDM0NjhCREU4NEQwOUM1RTY0RDgwLzAvMkMzNkE2NzBDNTNBMjdG NjVCOEVGN0YzMDlGMDcwOTdEQ0VGN0E0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzM2QTY3MEM1M0EyN0Y2NUI4 RUY3RjMwOUYwNzA5N0RDRUY3QTQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDU3QTIwQzBDRkYxNzhDMjIyNzQ0NjY1RTcxQTkxODRGQUI5OTM3OUMz MTQzNDY4QkRFODREMDlDNUU2NEQ4MC8wLzJDMzZBNjcwQzUzQTI3RjY1QjhFRjdG MzA5RjA3MDk3RENFRjdBNDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeGlsIY7TSZ6/swjudryBmis8H 0WI/JZdYBo2ROyynQAWXTcLuVaBgHOUafkYdLbl5NaorWv8o9n95rbttj1IYvpR5 LHIoVtVm2GJrTy+wJn1+CPf1fm3KlCVDpRW2HL+gSi+uCazxrd3t8VUagWIueChX 5ZN9STohAs2WSXgf7ebbvq6ZAiNzIBDPT8jj1JRqREJ6NvcqZCRiuZSai9QasQ5z ZiHOYCmc82n1lfDzfMQIh6+o+o9F/Mvxl7jPZlRQ2J+6Ho28qY7yKT94lPxTHNCb fujsPkXqvtWK09LcDNAjk/srlN92PlzdJY0fPflKD/IiHG25bqklmyvYhRyD -----END CERTIFICATE-----Generated at Sun Oct 26 11:34:25 2025 by rpki-client