$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft File: 2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft (raw, json) Hash identifier: /sOFkvM/Jyi+VnFv1ons0bbnHfnBfFK9l2HSIgXPKP0= Subject key identifier: 3C:4D:7C:82:0B:41:E7:F0:F4:30:15:26:BC:B1:B1:72:1F:13:2C:B9 Authority key identifier: 2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E Certificate issuer: /CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E Certificate serial: 3C0EB4C211266B463D4F4726CA79A11E2E1D7C89 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft Manifest number: 0132 Signing time: Fri 07 Nov 2025 04:20:05 +0000 Manifest this update: Fri 07 Nov 2025 04:15:05 +0000 Manifest next update: Wed 12 Nov 2025 17:40:05 +0000 Files and hashes: 1: 323830313a31373a633030303a3a2f34342d3634203d3e20323732303337.roa (hash: gT7W4LIZ9d/QEhQQWyx0lvNoG8i9pGxNgt3t5mqHR4M=) 2: 2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl (hash: 3tVpqRO/wrB3Y2FTGabHU8w1sbYe0Vj/2zuv/oMqM4A=) 3: 3137392e302e3230302e302f32332d3234203d3e20323732303337.roa (hash: PKNaFKeg+XA0R8pPsaE0XNWjkab4G/BL7Kc8XqWa3UI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0e:b4:c2:11:26:6b:46:3d:4f:47:26:ca:79:a1:1e:2e:1d:7c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E Validity Not Before: Nov 7 04:15:05 2025 GMT Not After : Nov 12 17:40:05 2025 GMT Subject: CN=3C4D7C820B41E7F0F4301526BCB1B1721F132CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:5f:95:04:c4:18:fc:d0:e4:a1:34:34:da: af:8b:08:9f:c0:54:5e:37:52:47:eb:a5:70:db:53: 55:93:3f:19:a3:03:cd:05:81:7c:da:f1:d7:39:59: 5e:c4:d8:00:34:56:18:94:2f:71:fd:1f:fe:c5:5a: 4a:7e:da:b4:b4:6a:67:2e:21:0f:99:12:47:77:32: a9:ba:8c:24:03:30:a5:1f:5f:60:5f:c3:35:df:67: e6:b7:5b:14:dd:e0:0f:5d:02:62:82:a3:37:f1:3f: d3:1d:a2:41:90:c3:a9:3e:47:fc:1c:49:75:90:85: ca:47:ba:c4:b4:16:ee:22:f2:11:16:61:a1:5e:2d: 3b:62:1d:ce:fb:0e:ae:e7:26:50:14:00:a7:db:0e: c8:ef:28:3c:a8:25:35:a2:a2:2c:d6:fd:14:79:0c: 48:f9:ae:24:e9:6c:4f:af:53:71:fa:ac:b8:70:ab: aa:04:bd:b2:18:4b:0d:d1:a5:3c:e6:b1:61:60:ce: ae:c6:ae:0d:65:1a:c2:a9:6f:cd:74:77:ed:48:ca: 86:d9:29:86:42:a7:0e:7a:77:51:aa:14:d9:26:37: 62:85:85:6b:9e:6f:39:d3:fd:66:c9:73:96:7b:18: 5f:f5:73:42:99:7d:9f:af:ef:65:ad:c3:bd:46:83: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4D:7C:82:0B:41:E7:F0:F4:30:15:26:BC:B1:B1:72:1F:13:2C:B9 X509v3 Authority Key Identifier: keyid:2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1f:f4:b4:f9:66:32:c9:ab:8f:42:e6:76:b8:0e:dd:80:24: e3:e4:cf:e1:e9:ba:ff:df:a4:29:99:5b:66:82:f4:f3:60:7a: 8f:9d:74:d3:2c:c6:b7:02:33:a3:90:7d:40:3b:1e:14:2f:65: bf:c1:4e:6c:b6:33:dc:ba:7c:39:01:b7:d0:9b:14:6a:44:31: 33:ef:ae:d7:f8:b9:84:3b:48:b7:6c:89:79:2d:73:2c:23:ed: 9b:09:2a:f6:1a:0b:e9:7f:10:5c:66:bc:2b:07:97:04:07:38: b9:87:50:9f:41:39:a2:de:ce:59:2b:d2:b1:50:ad:4e:fe:01: 5a:58:44:1a:79:80:ba:3f:67:32:43:8a:87:f5:e0:e2:cb:f3: 8e:18:e0:13:50:65:ef:f5:7d:8d:90:18:4d:42:b3:12:8b:4e: 67:0e:14:7f:a6:35:37:09:48:16:cf:bc:cf:11:8d:fe:ca:0b: 91:d3:d1:9b:2f:a1:f8:1b:86:03:58:19:3e:00:a3:86:16:f0: 18:17:7e:ca:60:d3:58:b1:52:26:22:26:0a:4e:2e:bf:c3:da: 12:b3:cf:fe:33:34:df:a8:9d:eb:88:e4:0d:71:f3:87:db:4e: 77:2f:65:18:d5:7b:5a:e1:52:d0:86:90:6e:2a:b7:f0:fe:45: 7e:71:96:84 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPA60whEma0Y9T0cmynmhHi4dfIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBMTBFNkQ3QzAzMjhFNTM2NEJGNDA0MTEwNEQ1MjYy NEZGMkMyRTAeFw0yNTExMDcwNDE1MDVaFw0yNTExMTIxNzQwMDVaMDMxMTAvBgNV BAMTKDNDNEQ3QzgyMEI0MUU3RjBGNDMwMTUyNkJDQjFCMTcyMUYxMzJDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwF+VBMQY/NDkoTQ02q+LCJ/A VF43UkfrpXDbU1WTPxmjA80FgXza8dc5WV7E2AA0VhiUL3H9H/7FWkp+2rS0amcu IQ+ZEkd3Mqm6jCQDMKUfX2BfwzXfZ+a3WxTd4A9dAmKCozfxP9MdokGQw6k+R/wc SXWQhcpHusS0Fu4i8hEWYaFeLTtiHc77Dq7nJlAUAKfbDsjvKDyoJTWioizW/RR5 DEj5riTpbE+vU3H6rLhwq6oEvbIYSw3RpTzmsWFgzq7Grg1lGsKpb810d+1IyobZ KYZCpw56d1GqFNkmN2KFhWuebznT/WbJc5Z7GF/1c0KZfZ+v72Wtw71Gg/5tAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPE18ggtB5/D0MBUmvLGxch8TLLkwHwYDVR0j BBgwFoAUK6EObXwDKOU2S/QEEQTVJiT/LC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QzBDODQzM0U3NzBCMUJEMjJGRkE0QTc2NjE1NTZCNEM3 OTU2MTE2QjA3MjBBMjc2RTA2RDFDODFEODlBNTg4LzAvMkJBMTBFNkQ3QzAzMjhF NTM2NEJGNDA0MTEwNEQ1MjYyNEZGMkMyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQkExMEU2RDdDMDMyOEU1MzY0 QkY0MDQxMTA0RDUyNjI0RkYyQzJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEMwQzg0MzNFNzcwQjFCRDIyRkZBNEE3NjYxNTU2QjRDNzk1NjExNkIw NzIwQTI3NkUwNkQxQzgxRDg5QTU4OC8wLzJCQTEwRTZEN0MwMzI4RTUzNjRCRjQw NDExMDRENTI2MjRGRjJDMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5H/S0+WYyyauPQuZ2uA7dgCTj 5M/h6br/36QpmVtmgvTzYHqPnXTTLMa3AjOjkH1AOx4UL2W/wU5stjPcunw5AbfQ mxRqRDEz767X+LmEO0i3bIl5LXMsI+2bCSr2GgvpfxBcZrwrB5cEBzi5h1CfQTmi 3s5ZK9KxUK1O/gFaWEQaeYC6P2cyQ4qH9eDiy/OOGOATUGXv9X2NkBhNQrMSi05n DhR/pjU3CUgWz7zPEY3+yguR09GbL6H4G4YDWBk+AKOGFvAYF37KYNNYsVImIiYK Ti6/w9oSs8/+MzTfqJ3riOQNcfOH2053L2UY1Xta4VLQhpBuKrfw/kV+cZaE -----END CERTIFICATE-----Generated at Fri Nov 7 08:49:31 2025 by rpki-client