$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.mft File: B24CA78B7CA9E704118D756771FB5D680776F2CF.mft (raw, json) Hash identifier: J9itPBx0fuYbWsC6NMc7U7A93IhedRpXCV8OX9abawM= Subject key identifier: 09:C5:8C:F0:34:5E:D7:37:BF:93:17:94:B6:C4:62:AE:D6:95:5C:F4 Authority key identifier: B2:4C:A7:8B:7C:A9:E7:04:11:8D:75:67:71:FB:5D:68:07:76:F2:CF Certificate issuer: /CN=B24CA78B7CA9E704118D756771FB5D680776F2CF Certificate serial: 423D28B2D4CD28E502BF20B9754445C6F0D13188 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 16:43:35 +0000 Manifest this update: Mon 03 Nov 2025 16:38:35 +0000 Manifest next update: Sat 08 Nov 2025 12:27:35 +0000 Files and hashes: 1: 323830333a616232303a3a2f33322d3438203d3e20323636373432.roa (hash: kfwM6z22cdjOjkmeYZEhSxzAfNEaDQzAfWS4UHkO/CM=) 2: 34352e3233302e3136382e302f32322d3234203d3e20323636373432.roa (hash: xC8Bs3k5W3ZwAp9inVgXC7pk+D5yYYTvXNvO2rxLbC8=) 3: B24CA78B7CA9E704118D756771FB5D680776F2CF.crl (hash: +RMgm0MGhbz/ZiM7Is9X44t1dBoGAwXeNeEW1BF7kYc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.crl rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 12:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3d:28:b2:d4:cd:28:e5:02:bf:20:b9:75:44:45:c6:f0:d1:31:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B24CA78B7CA9E704118D756771FB5D680776F2CF Validity Not Before: Nov 3 16:38:35 2025 GMT Not After : Nov 8 12:27:35 2025 GMT Subject: CN=09C58CF0345ED737BF931794B6C462AED6955CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:2e:0a:9c:cd:8f:89:98:b8:d1:76:73:35: de:55:a6:6a:aa:fb:a6:8b:d6:7b:3b:43:3f:e3:04: 36:8d:35:56:d0:43:36:66:55:58:cc:b2:1e:b6:94: 08:b2:88:7d:37:ec:cd:76:9e:b0:2c:cb:b0:a2:2f: 41:54:df:fb:54:2f:7e:1a:26:35:e6:fe:f8:5f:b9: b3:b0:e9:62:22:66:78:68:2f:a3:01:df:a5:7e:82: 00:c4:f4:21:d9:59:af:86:26:c6:b2:81:e7:50:89: bd:6f:59:2f:83:51:3e:26:96:1e:6c:69:f8:75:18: f4:8c:50:80:ab:fc:f1:67:c9:6c:fd:3f:18:3b:aa: dd:31:db:b7:dd:53:63:b3:bf:b9:c3:3a:34:34:ec: 4f:d1:6b:80:08:b8:34:9b:5c:c8:55:d8:52:25:a5: fb:37:26:aa:1b:fb:79:25:08:c9:d3:6d:2c:fb:fb: 5f:93:d2:54:25:1f:d7:36:61:38:93:5a:be:4c:84: 88:12:f1:90:d2:08:34:3f:31:4d:ad:d6:06:e5:0c: 0a:97:d7:83:7f:0c:b9:59:81:89:be:e9:f0:7f:f6: f9:71:08:a0:01:59:c5:c1:43:ad:40:88:ff:df:00: a8:77:18:36:c4:03:25:18:81:0b:c4:75:63:ee:ad: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C5:8C:F0:34:5E:D7:37:BF:93:17:94:B6:C4:62:AE:D6:95:5C:F4 X509v3 Authority Key Identifier: keyid:B2:4C:A7:8B:7C:A9:E7:04:11:8D:75:67:71:FB:5D:68:07:76:F2:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74BA078ED5E11994C15D78B8CE6A4FE52869D076EE17E4859B31FEF29CB9C376/0/B24CA78B7CA9E704118D756771FB5D680776F2CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f5:46:f9:5c:ef:86:48:10:c3:11:aa:4a:b1:6b:fc:ec:7c: 1f:db:ad:ae:39:ff:eb:43:96:67:0c:09:c7:a7:22:e9:63:4a: 50:e0:a6:aa:b0:95:f7:51:4c:bd:d8:22:bb:64:f8:ee:f3:3b: 85:4a:34:a7:f2:eb:03:88:96:18:4f:0e:3c:e6:6c:37:33:b7: e7:a5:38:f2:08:48:31:67:4d:a6:df:5e:ee:c9:f3:e2:b6:eb: d2:de:12:45:85:e7:a1:0b:5b:9f:7e:4d:20:03:1c:ba:d7:10: c1:fd:ff:d0:c0:d1:f7:a8:ce:c3:f5:b6:44:fb:5b:33:51:d8: 8f:12:a1:34:8f:c1:0f:17:3e:a0:ef:57:03:1c:4a:17:cb:d1: e7:f4:fd:bc:aa:da:00:80:67:63:18:b8:99:70:f3:55:e4:86: f3:c1:93:bf:be:93:f7:d7:9b:09:e9:e3:f0:3e:c1:40:13:ee: a5:c2:4c:21:59:04:b7:2d:4f:9b:6e:b5:2d:d1:8f:29:a1:12: aa:ad:77:26:3b:37:52:e0:54:23:97:3c:13:d0:79:17:f8:e2: 6b:2f:88:06:20:ad:a5:fe:c4:32:3f:30:2b:99:2b:e2:69:8e: 74:14:6f:47:d3:f2:49:51:c1:3c:79:d0:c2:ba:27:57:aa:cf: 3d:07:41:b4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQj0ostTNKOUCvyC5dURFxvDRMYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI0Q0E3OEI3Q0E5RTcwNDExOEQ3NTY3NzFGQjVENjgw Nzc2RjJDRjAeFw0yNTExMDMxNjM4MzVaFw0yNTExMDgxMjI3MzVaMDMxMTAvBgNV BAMTKDA5QzU4Q0YwMzQ1RUQ3MzdCRjkzMTc5NEI2QzQ2MkFFRDY5NTVDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSC4KnM2PiZi40XZzNd5Vpmqq +6aL1ns7Qz/jBDaNNVbQQzZmVVjMsh62lAiyiH037M12nrAsy7CiL0FU3/tUL34a JjXm/vhfubOw6WIiZnhoL6MB36V+ggDE9CHZWa+GJsaygedQib1vWS+DUT4mlh5s afh1GPSMUICr/PFnyWz9Pxg7qt0x27fdU2Ozv7nDOjQ07E/Ra4AIuDSbXMhV2FIl pfs3Jqob+3klCMnTbSz7+1+T0lQlH9c2YTiTWr5MhIgS8ZDSCDQ/MU2t1gblDAqX 14N/DLlZgYm+6fB/9vlxCKABWcXBQ61AiP/fAKh3GDbEAyUYgQvEdWPurU25AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCcWM8DRe1ze/kxeUtsRirtaVXPQwHwYDVR0j BBgwFoAUskyni3yp5wQRjXVncftdaAd28s8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NEJBMDc4RUQ1RTExOTk0QzE1RDc4QjhDRTZBNEZFNTI4 NjlEMDc2RUUxN0U0ODU5QjMxRkVGMjlDQjlDMzc2LzAvQjI0Q0E3OEI3Q0E5RTcw NDExOEQ3NTY3NzFGQjVENjgwNzc2RjJDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMjRDQTc4QjdDQTlFNzA0MTE4 RDc1Njc3MUZCNUQ2ODA3NzZGMkNGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzRCQTA3OEVENUUxMTk5NEMxNUQ3OEI4Q0U2QTRGRTUyODY5RDA3NkVF MTdFNDg1OUIzMUZFRjI5Q0I5QzM3Ni8wL0IyNENBNzhCN0NBOUU3MDQxMThENzU2 NzcxRkI1RDY4MDc3NkYyQ0YubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS9Ub5XO+GSBDDEapKsWv87Hwf 262uOf/rQ5ZnDAnHpyLpY0pQ4KaqsJX3UUy92CK7ZPju8zuFSjSn8usDiJYYTw48 5mw3M7fnpTjyCEgxZ02m317uyfPituvS3hJFheehC1uffk0gAxy61xDB/f/QwNH3 qM7D9bZE+1szUdiPEqE0j8EPFz6g71cDHEoXy9Hn9P28qtoAgGdjGLiZcPNV5Ibz wZO/vpP315sJ6ePwPsFAE+6lwkwhWQS3LU+bbrUt0Y8poRKqrXcmOzdS4FQjlzwT 0HkX+OJrL4gGIK2l/sQyPzArmSviaY50FG9H0/JJUcE8edDCuidXqs89B0G0 -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:49 2025 by rpki-client