$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft File: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft (raw, json) Hash identifier: WSrDMl6OPbRhWmTxjQpZe3A3qrIkgyWq8RX5o5NLtOM= Subject key identifier: 1C:8A:D4:C2:AD:F0:CD:0F:A3:DD:BA:46:F1:1E:AA:74:F8:88:1D:E4 Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE Certificate issuer: /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE Certificate serial: 6BFE70F9D6F082CC8E4069A2D39F302BDCB97408 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft Manifest number: 013B Signing time: Sun 02 Nov 2025 13:53:09 +0000 Manifest this update: Sun 02 Nov 2025 13:48:09 +0000 Manifest next update: Sat 08 Nov 2025 09:50:09 +0000 Files and hashes: 1: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl (hash: eKhe4VhFzFh7CnTpdAoCIBIS9LSXJWxLdE1i59U478w=) 2: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (hash: M6ORRmOjHmMsQNf1kdyef1dJN1SWSdh126U+iO1IFbI=) 3: 323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (hash: U8WxyTNq4zMrD7zIgmZG7H6X5lZodDFo/vZmQoIl41A=) 4: 3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (hash: zqIKyXjJi80cBIksZ5XjThzAWTyFD1sdNLptjXJQgX8=) 5: 3134332e302e38302e302f32322d3234203d3e20323632323331.roa (hash: swrsgDe0o9qSKgaY5vzkAmT9scHwb/lYIccWTU1JQlo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 09:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fe:70:f9:d6:f0:82:cc:8e:40:69:a2:d3:9f:30:2b:dc:b9:74:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE Validity Not Before: Nov 2 13:48:09 2025 GMT Not After : Nov 8 09:50:09 2025 GMT Subject: CN=1C8AD4C2ADF0CD0FA3DDBA46F11EAA74F8881DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:71:2b:be:30:a0:20:cc:2d:5b:d6:60:c9: 15:c4:87:51:c7:99:fb:cd:b6:9f:2a:d8:17:30:ab: 79:d6:1b:79:bc:9f:34:6e:62:8f:4b:f7:cd:41:29: 0f:d6:d3:af:f3:60:03:c1:df:84:46:8c:22:8a:72: 93:d6:4e:8c:19:88:78:7b:33:2f:24:fb:2b:33:9a: 39:33:b5:f3:06:e0:e2:ca:b3:b1:bb:07:d4:67:da: 20:a9:e6:fe:6e:20:2d:f9:f7:39:d2:07:08:bf:03: 49:9c:d4:ee:8b:94:bb:c3:4c:56:83:6b:ca:6d:a2: ee:69:79:cf:66:eb:9f:17:2a:6d:ea:bd:ff:9d:bd: 59:f3:a3:cb:2e:bd:9e:12:cc:db:03:ad:0e:75:15: 3c:11:85:bb:61:e5:b7:7d:22:e6:35:36:92:19:3b: 53:2d:f8:b8:7c:48:c3:76:7d:e2:b0:39:fb:66:e7: ce:52:a7:0c:94:52:91:9c:e4:50:07:64:bf:70:0c: 4b:b8:68:60:e6:23:af:d5:f7:f5:9e:b6:5d:65:5d: 73:a7:39:39:96:42:8c:68:89:eb:6b:dd:f8:97:d4: 41:2b:a8:b4:ab:c8:8a:80:fc:8b:5d:ff:ad:0e:c0: fa:4e:08:c5:07:78:21:0c:3e:11:41:9f:e0:f0:a1: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8A:D4:C2:AD:F0:CD:0F:A3:DD:BA:46:F1:1E:AA:74:F8:88:1D:E4 X509v3 Authority Key Identifier: keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f6:49:76:cc:f3:37:3d:07:aa:5b:f8:58:5f:48:cd:8a:e8: 63:c6:47:38:53:5f:97:e1:34:be:62:a3:bb:f6:c3:4f:89:e0: 88:f0:01:8a:c9:02:fb:dd:05:48:b7:c6:9c:3c:b3:3c:a1:9e: 76:ee:27:f7:47:be:58:13:11:b6:f6:1d:df:58:d9:e0:37:86: a8:90:f7:3b:c9:61:fa:3f:de:00:5a:60:86:a9:a9:ba:d1:93: e2:f8:7f:97:66:ba:e1:0e:76:0f:6d:2a:7d:8e:6f:92:f7:53: 1d:c1:61:bc:d4:bb:28:83:f8:7d:d5:f5:0e:b3:db:ae:f7:eb: 06:36:b5:8d:3a:99:1f:f8:0d:bb:ac:3c:b2:a3:0b:f2:f0:9a: 01:35:1a:0e:2e:a6:da:d2:b6:c5:9a:af:d6:8b:b5:e3:19:3d: 38:e8:18:9f:12:4e:f6:99:82:ea:b8:47:3e:cd:b9:c6:ad:79: eb:59:b2:9d:12:e0:5c:36:f3:43:05:6f:85:f1:20:23:61:3f: 68:95:c4:6a:c4:2e:da:38:ef:ea:90:5e:49:3c:a5:0a:4b:f9: db:f0:d2:11:be:8f:02:54:e6:4f:a7:61:cd:37:e7:40:bb:c7: 14:73:70:68:1b:d0:41:31:25:d3:d0:13:28:ab:2f:fa:20:4d: d1:a3:c7:12 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa/5w+dbwgsyOQGmi058wK9y5dAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIzM0I1QzlGQjA1MDMyRUU0RDMyM0Y1ODk4NEM5QkIy MzUzRjlBRTAeFw0yNTExMDIxMzQ4MDlaFw0yNTExMDgwOTUwMDlaMDMxMTAvBgNV BAMTKDFDOEFENEMyQURGMENEMEZBM0REQkE0NkYxMUVBQTc0Rjg4ODFERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnWnErvjCgIMwtW9ZgyRXEh1HH mfvNtp8q2Bcwq3nWG3m8nzRuYo9L981BKQ/W06/zYAPB34RGjCKKcpPWTowZiHh7 My8k+yszmjkztfMG4OLKs7G7B9Rn2iCp5v5uIC359znSBwi/A0mc1O6LlLvDTFaD a8ptou5pec9m658XKm3qvf+dvVnzo8suvZ4SzNsDrQ51FTwRhbth5bd9IuY1NpIZ O1Mt+Lh8SMN2feKwOftm585SpwyUUpGc5FAHZL9wDEu4aGDmI6/V9/Wetl1lXXOn OTmWQoxoietr3fiX1EErqLSryIqA/Itd/60OwPpOCMUHeCEMPhFBn+DwoeIfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHIrUwq3wzQ+j3bpG8R6qdPiIHeQwHwYDVR0j BBgwFoAUQjO1yfsFAy7k0yP1iYTJuyNT+a4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQUYwMkU4MjI1MTQ2NDREMzBFQjlDNjMzNTA3NTYyMEFG RUM4OTNCREI5OTQwRkExRUEyNTY4RkJERDhDQjE3LzAvNDIzM0I1QzlGQjA1MDMy RUU0RDMyM0Y1ODk4NEM5QkIyMzUzRjlBRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjMzQjVDOUZCMDUwMzJFRTRE MzIzRjU4OTg0QzlCQjIzNTNGOUFFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkFGMDJFODIyNTE0NjQ0RDMwRUI5QzYzMzUwNzU2MjBBRkVDODkzQkRC OTk0MEZBMUVBMjU2OEZCREQ4Q0IxNy8wLzQyMzNCNUM5RkIwNTAzMkVFNEQzMjNG NTg5ODRDOUJCMjM1M0Y5QUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ9kl2zPM3PQeqW/hYX0jNiuhj xkc4U1+X4TS+YqO79sNPieCI8AGKyQL73QVIt8acPLM8oZ527if3R75YExG29h3f WNngN4aokPc7yWH6P94AWmCGqam60ZPi+H+XZrrhDnYPbSp9jm+S91MdwWG81Lso g/h91fUOs9uu9+sGNrWNOpkf+A27rDyyowvy8JoBNRoOLqba0rbFmq/Wi7XjGT04 6BifEk72mYLquEc+zbnGrXnrWbKdEuBcNvNDBW+F8SAjYT9olcRqxC7aOO/qkF5J PKUKS/nb8NIRvo8CVOZPp2HNN+dAu8cUc3BoG9BBMSXT0BMoqy/6IE3Ro8cS -----END CERTIFICATE-----Generated at Tue Nov 4 07:28:10 2025 by rpki-client