$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft File: 33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft (raw, json) Hash identifier: DE5tr190MV15PVrX/ZEPi6BhGUiVDm8oA4t/VmoaF3k= Subject key identifier: EC:87:C6:37:7B:AF:E2:51:E2:58:2B:53:B6:32:D6:1F:6F:A9:A4:62 Authority key identifier: 33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09 Certificate issuer: /CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509 Certificate serial: 7C16355EA67A5AE9F8E013712DC9D9170B3ED355 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft Manifest number: 2A Signing time: Fri 24 Oct 2025 12:27:51 +0000 Manifest this update: Fri 24 Oct 2025 12:22:51 +0000 Manifest next update: Wed 29 Oct 2025 23:28:51 +0000 Files and hashes: 1: 323830333a313664303a3a2f33322d3438203d3e20323734303935.roa (hash: 8kLsumzOWGClVtaQJ3HFCg9BQ37eOvtN62Cu/zYZM3g=) 2: 33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl (hash: /zP8XRmoyLdgYs+WYbTWE6ofnTfs81vX7Kg0DPhuyEo=) 3: 323830333a313664303a34303a3a2f34382d3634203d3e20323734303935.roa (hash: qQA1qgyJ0x6vvlledn5zzteWJocE4JJPyL+GGgazeR8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Oct 2025 12:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:16:35:5e:a6:7a:5a:e9:f8:e0:13:71:2d:c9:d9:17:0b:3e:d3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509 Validity Not Before: Oct 24 12:22:51 2025 GMT Not After : Oct 29 23:28:51 2025 GMT Subject: CN=EC87C6377BAFE251E2582B53B632D61F6FA9A462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:c9:5a:b0:e0:c6:c3:8e:f3:0b:6d:cb:b1: 5a:2d:c3:be:d2:8a:52:46:7d:a4:3a:65:a3:10:b9: 2d:57:3f:16:41:13:d7:7a:c6:cf:4d:25:a6:47:fc: f3:cd:5b:ae:9e:56:4b:c4:24:b1:6f:e8:f7:23:6b: b6:94:6e:71:c6:38:96:81:e2:a0:be:32:84:81:a6: a2:ac:61:c1:8d:e6:d4:ea:fa:0d:d1:22:de:22:c6: 01:88:3b:71:4e:a4:7d:50:db:c9:95:7a:5c:de:31: 8b:c1:cf:16:c3:2c:ee:b5:b6:30:6b:49:7b:06:80: 53:13:c9:8c:98:0c:bd:32:71:ff:99:48:53:58:8b: e6:03:50:54:fc:b1:bc:c2:1b:a9:bb:5c:e4:0a:01: a6:e8:e9:61:31:0f:b1:d9:01:fa:24:42:bd:12:86: 1b:02:d7:16:12:d8:c1:c4:93:01:46:66:5a:f3:19: e9:4a:d0:3e:fe:3a:81:16:52:9e:06:69:dc:f1:69: 40:13:68:a2:e6:9c:0b:2d:06:54:32:2c:34:80:15: 5e:2a:84:ce:b9:95:55:09:fa:7b:db:c7:be:7a:8f: fb:99:dc:c6:f1:ba:be:45:bb:d8:22:c9:ac:ef:cd: a6:41:e8:8d:3d:f9:2d:86:91:4f:8e:49:43:ad:9a: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:87:C6:37:7B:AF:E2:51:E2:58:2B:53:B6:32:D6:1F:6F:A9:A4:62 X509v3 Authority Key Identifier: keyid:33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:09:92:e0:5d:2a:83:f9:8d:e0:cd:d4:ff:e8:95:3e:0e:d3: e3:51:ed:58:fc:9c:6d:02:54:b8:8e:36:83:6c:3d:7e:61:22: 04:1d:c9:af:3d:cf:ac:ba:10:c7:d6:67:28:82:60:b2:65:ea: 8e:7c:b9:59:cc:5e:80:4e:41:ae:b7:ff:71:c4:03:75:eb:2a: ac:e5:12:77:c3:c6:ab:6f:b9:ce:41:25:12:6f:c7:7e:c9:d6: 23:2f:94:0f:8e:7f:93:95:a2:ff:87:6e:51:4d:42:52:fb:7f: 8a:6c:af:94:cc:aa:6c:09:ab:e3:ac:4d:94:8e:0d:40:89:7f: 9a:cd:9c:6d:ca:80:5d:c5:38:7e:90:98:e0:d0:12:bd:00:8c: 5e:53:9c:7b:93:c4:f3:6f:f6:6d:64:91:d6:ac:17:27:86:7d: 5e:e5:7e:25:62:a2:bb:50:27:36:57:6a:f2:e1:bc:ce:33:17: 32:be:12:33:56:ec:66:f3:3e:26:0d:43:02:95:97:9a:23:6c: 23:99:59:b2:81:27:f2:7c:93:7f:25:6d:f6:56:bd:bb:34:64: f7:d0:3d:96:1a:fd:5d:02:7b:0b:73:04:ea:64:58:89:79:c1: 7a:19:2c:86:58:b1:d5:83:6c:4c:39:2f:ed:cd:02:d5:4f:65: 73:0f:cd:ad -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfBY1XqZ6Wun44BNxLcnZFws+01UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFOURBMDgzMkE5QkI3MDNGNDJEQTJDRTUzNTI3QTJG MTA0RDUwOTAeFw0yNTEwMjQxMjIyNTFaFw0yNTEwMjkyMzI4NTFaMDMxMTAvBgNV BAMTKEVDODdDNjM3N0JBRkUyNTFFMjU4MkI1M0I2MzJENjFGNkZBOUE0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmslasODGw47zC23LsVotw77S ilJGfaQ6ZaMQuS1XPxZBE9d6xs9NJaZH/PPNW66eVkvEJLFv6Pcja7aUbnHGOJaB 4qC+MoSBpqKsYcGN5tTq+g3RIt4ixgGIO3FOpH1Q28mVelzeMYvBzxbDLO61tjBr SXsGgFMTyYyYDL0ycf+ZSFNYi+YDUFT8sbzCG6m7XOQKAabo6WExD7HZAfokQr0S hhsC1xYS2MHEkwFGZlrzGelK0D7+OoEWUp4GadzxaUATaKLmnAstBlQyLDSAFV4q hM65lVUJ+nvbx756j/uZ3Mbxur5Fu9giyazvzaZB6I09+S2GkU+OSUOtmhopAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7IfGN3uv4lHiWCtTtjLWH2+ppGIwHwYDVR0j BBgwFoAUM+naCDKpu3A/Qtos5TUnovEE1QkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9COTFDMDcwMTdEMTI0MkM5NTAwRkYzRjQ2QjZFREIxQUY0 RTI5MzIxQjk3ODZFOUFBQkVERUQwNzFDMTI4MjEzLzAvMzNFOURBMDgzMkE5QkI3 MDNGNDJEQTJDRTUzNTI3QTJGMTA0RDUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0U5REEwODMyQTlCQjcwM0Y0 MkRBMkNFNTM1MjdBMkYxMDRENTA5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjkxQzA3MDE3RDEyNDJDOTUwMEZGM0Y0NkI2RURCMUFGNEUyOTMyMUI5 Nzg2RTlBQUJFREVEMDcxQzEyODIxMy8wLzMzRTlEQTA4MzJBOUJCNzAzRjQyREEy Q0U1MzUyN0EyRjEwNEQ1MDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6CZLgXSqD+Y3gzdT/6JU+DtPj Ue1Y/JxtAlS4jjaDbD1+YSIEHcmvPc+suhDH1mcogmCyZeqOfLlZzF6ATkGut/9x xAN16yqs5RJ3w8arb7nOQSUSb8d+ydYjL5QPjn+TlaL/h25RTUJS+3+KbK+UzKps CavjrE2Ujg1AiX+azZxtyoBdxTh+kJjg0BK9AIxeU5x7k8Tzb/ZtZJHWrBcnhn1e 5X4lYqK7UCc2V2ry4bzOMxcyvhIzVuxm8z4mDUMClZeaI2wjmVmygSfyfJN/JW32 Vr27NGT30D2WGv1dAnsLcwTqZFiJecF6GSyGWLHVg2xMOS/tzQLVT2VzD82t -----END CERTIFICATE-----Generated at Sat Oct 25 01:33:24 2025 by rpki-client