$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft File: D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft (raw, json) Hash identifier: KtuKmfaJWzHs+mykvOwWxCmFZI5ig2Fq2/WmBcMT+bc= Subject key identifier: 2D:F9:E7:F7:E7:16:3B:E1:0D:BD:34:7C:CB:DC:90:49:EC:25:D1:BA Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 Certificate issuer: /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Certificate serial: 122AB2E11E0D6E12327AF02B3824EAFF5BBFED5C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft Manifest number: 0133 Signing time: Fri 07 Nov 2025 20:28:54 +0000 Manifest this update: Fri 07 Nov 2025 20:23:54 +0000 Manifest next update: Wed 12 Nov 2025 03:26:54 +0000 Files and hashes: 1: D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl (hash: yeMiAzd4Evjg5FS8Ei8pSdoPcb4DhHIhmFW7lkCMM28=) 2: 3133312e302e3133362e302f32322d3232203d3e203631343637.roa (hash: hIcGTsTzrbpPkkDFPHDJ/vJiVZDkozy3mhBw4FInUkg=) 3: 323830333a653538303a3a2f33322d3332203d3e203631343637.roa (hash: VPdQcvxY+Djypk/d3zIynnwjkLRuN2kmRMjzxd8Khgg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2a:b2:e1:1e:0d:6e:12:32:7a:f0:2b:38:24:ea:ff:5b:bf:ed:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Validity Not Before: Nov 7 20:23:54 2025 GMT Not After : Nov 12 03:26:54 2025 GMT Subject: CN=2DF9E7F7E7163BE10DBD347CCBDC9049EC25D1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:84:f6:57:47:0d:49:4f:e3:a6:0b:40:a0: 16:00:95:35:8a:9e:ed:71:35:91:84:49:0a:88:bb: 0b:e2:07:23:fe:9e:39:93:8f:ee:2d:28:83:48:a9: 3d:ea:a7:cc:06:f0:dd:25:b8:a1:2d:42:b8:26:1d: 8c:6a:33:5f:4b:f8:39:cd:76:9b:36:21:c8:a7:37: 72:3e:2d:99:07:a5:45:4a:1a:9c:77:91:ed:bf:d2: be:45:11:2f:44:f8:0e:f7:0a:18:86:54:05:0d:16: 4b:ec:26:fd:81:64:f0:6c:99:f0:bc:cd:a4:77:3c: 32:ec:02:d9:af:ba:be:1d:02:53:fe:ae:b4:6c:7d: 28:e9:00:cc:9d:e4:a7:55:b6:e6:b0:c1:3d:63:c1: 79:b8:51:75:38:d5:5e:b0:76:b0:f8:25:70:5c:0b: 7c:58:ef:44:a1:36:d2:88:70:44:eb:7e:62:f8:20: cc:b8:85:9e:9f:0c:52:57:20:99:46:61:4a:33:37: ef:9c:8a:4e:fa:bc:60:95:e5:4f:0e:9c:ed:12:88: 58:47:66:5d:dd:d2:08:7b:34:cc:55:bc:ad:ac:f8: 1d:38:c1:cf:66:51:27:6d:70:a6:97:80:47:25:de: df:9f:03:0b:3f:00:92:87:6f:14:8f:96:55:b1:ff: fa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F9:E7:F7:E7:16:3B:E1:0D:BD:34:7C:CB:DC:90:49:EC:25:D1:BA X509v3 Authority Key Identifier: keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7d:96:72:33:b2:c3:b2:ed:38:8a:27:2b:67:fc:31:21:23: 11:8c:eb:77:02:19:6e:ff:19:5e:b1:dc:bb:ea:2c:ba:55:90: 90:6e:00:d7:03:0a:42:d1:a2:f1:c5:e6:0e:06:37:39:73:eb: d2:49:c6:c2:f3:62:6d:31:a1:1a:c3:8d:ae:d6:7a:77:65:d1: 15:1b:01:f1:f1:bf:6b:53:bd:14:56:ee:7b:f2:c9:79:2e:ee: 35:df:48:5a:17:12:60:64:9b:7e:b2:d3:3b:e3:a1:b3:cb:7e: d2:b8:39:8b:37:41:db:16:13:05:07:99:a5:f7:1a:64:89:1e: 3a:32:20:0b:91:85:dc:b3:12:28:26:bd:ae:13:49:4c:75:a8: c0:f6:9a:43:93:12:88:35:da:6f:38:2a:12:67:9b:c6:10:93: 95:86:56:c0:f4:5e:9a:8f:8a:ab:96:9f:11:fb:4c:b2:8e:39: 95:a7:b6:53:9c:83:cc:a9:88:ff:2f:51:66:a6:c4:f2:7a:5f: c9:a3:0e:9c:7e:f4:2e:55:15:bf:3e:4b:3a:93:aa:71:02:a6: 31:aa:11:2f:5f:8e:13:a6:bc:6f:37:1a:6d:73:51:36:3b:90: 81:a1:09:6a:5c:6e:6d:77:67:e1:10:fe:a3:90:3e:a8:27:3a: 18:eb:a1:bf -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEiqy4R4NbhIyevArOCTq/1u/7VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwODczNURDRkJENDQzOUYxRjYxQTYxNzlEQkU5MjBE ODZCMUUyODAeFw0yNTExMDcyMDIzNTRaFw0yNTExMTIwMzI2NTRaMDMxMTAvBgNV BAMTKDJERjlFN0Y3RTcxNjNCRTEwREJEMzQ3Q0NCREM5MDQ5RUMyNUQxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC344T2V0cNSU/jpgtAoBYAlTWK nu1xNZGESQqIuwviByP+njmTj+4tKINIqT3qp8wG8N0luKEtQrgmHYxqM19L+DnN dps2IcinN3I+LZkHpUVKGpx3ke2/0r5FES9E+A73ChiGVAUNFkvsJv2BZPBsmfC8 zaR3PDLsAtmvur4dAlP+rrRsfSjpAMyd5KdVtuawwT1jwXm4UXU41V6wdrD4JXBc C3xY70ShNtKIcETrfmL4IMy4hZ6fDFJXIJlGYUozN++cik76vGCV5U8OnO0SiFhH Zl3d0gh7NMxVvK2s+B04wc9mUSdtcKaXgEcl3t+fAws/AJKHbxSPllWx//rrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULfnn9+cWO+ENvTR8y9yQSewl0bowHwYDVR0j BBgwFoAU0whzXc+9RDnx9hphedvpINhrHigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUY0MzdERDdEMTFGMjhDNTgzMjk1RjkzQjlDNTRDRkU5 ODAyNUNBREQyNzdBNTM2NEJDMDU2NzQ5NjE4ODY5LzAvRDMwODczNURDRkJENDQz OUYxRjYxQTYxNzlEQkU5MjBEODZCMUUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzA4NzM1RENGQkQ0NDM5RjFG NjFBNjE3OURCRTkyMEQ4NkIxRTI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFGNDM3REQ3RDExRjI4QzU4MzI5NUY5M0I5QzU0Q0ZFOTgwMjVDQURE Mjc3QTUzNjRCQzA1Njc0OTYxODg2OS8wL0QzMDg3MzVEQ0ZCRDQ0MzlGMUY2MUE2 MTc5REJFOTIwRDg2QjFFMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7fZZyM7LDsu04iicrZ/wxISMR jOt3Ahlu/xlesdy76iy6VZCQbgDXAwpC0aLxxeYOBjc5c+vSScbC82JtMaEaw42u 1np3ZdEVGwHx8b9rU70UVu578sl5Lu4130haFxJgZJt+stM746Gzy37SuDmLN0Hb FhMFB5ml9xpkiR46MiALkYXcsxIoJr2uE0lMdajA9ppDkxKINdpvOCoSZ5vGEJOV hlbA9F6aj4qrlp8R+0yyjjmVp7ZTnIPMqYj/L1FmpsTyel/Jow6cfvQuVRW/Pks6 k6pxAqYxqhEvX44TprxvNxptc1E2O5CBoQlqXG5td2fhEP6jkD6oJzoY66G/ -----END CERTIFICATE-----Generated at Fri Nov 7 22:51:34 2025 by rpki-client