$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft File: 624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft (raw, json) Hash identifier: Rh2ef9rpOku5vcYGnlOfZLs/ZiaicqjEOUytqw5DcAc= Subject key identifier: 68:6E:C6:F4:58:CD:ED:E9:55:C2:70:BA:09:8B:B7:2D:34:F5:5D:09 Authority key identifier: 62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B Certificate issuer: /CN=624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B Certificate serial: 2144B35D01C0788BD4909F8C88C27FCD2219CFB6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft Manifest number: 012D Signing time: Sat 01 Nov 2025 22:13:36 +0000 Manifest this update: Sat 01 Nov 2025 22:08:36 +0000 Manifest next update: Fri 07 Nov 2025 13:16:36 +0000 Files and hashes: 1: 34352e3233362e3132302e302f32342d3234203d3e20323637373031.roa (hash: bmum2s1w22oQU/VrJujrS7JPeByoon/M8CZSItGzqlU=) 2: 624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.crl (hash: j+eJ1qi9IbGVNKRE6XE6djIs6St76E9bvkKNz22jiSo=) 3: 323830333a373461303a3a2f33322d3332203d3e20323637373031.roa (hash: n9wLWSjN0sLcPLDAa+98oweoKzmEpDQAqL3tJhsLP80=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.crl rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:44:b3:5d:01:c0:78:8b:d4:90:9f:8c:88:c2:7f:cd:22:19:cf:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B Validity Not Before: Nov 1 22:08:36 2025 GMT Not After : Nov 7 13:16:36 2025 GMT Subject: CN=686EC6F458CDEDE955C270BA098BB72D34F55D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:67:47:a3:60:ef:7d:12:35:c7:fd:cc:d7: 27:c9:7d:30:90:1d:69:4b:a4:b5:07:00:6f:2d:5e: cf:fe:93:3c:8a:d1:e1:3d:5a:39:eb:68:4e:10:11: 9b:4f:43:6a:09:15:2f:56:f3:9e:fa:08:1c:18:d8: e9:b6:f4:c5:e9:6a:f4:d6:d4:b5:3c:1a:8c:91:1a: 48:e8:69:7e:12:4b:a3:79:24:d8:17:04:22:11:41: ff:cc:f4:cc:97:f9:bf:a0:de:99:38:15:78:f7:82: ae:ce:60:5c:68:15:1b:68:19:d0:c9:1a:72:85:c5: cb:1a:81:7d:1d:e8:08:51:2e:d3:c5:ab:ba:c8:0f: 63:63:9d:34:19:6e:56:02:e8:38:d4:b8:6c:3a:07: 1e:9a:96:f6:0e:1d:92:c4:ea:f7:94:67:3d:e6:5c: a9:a0:d7:3b:f8:7a:a3:4d:83:9a:58:22:1f:b1:e6: ae:80:fe:03:08:28:93:9c:15:a0:03:47:d9:6a:0c: ca:4b:e0:e0:de:1f:7d:af:0c:f2:b9:ab:4c:e4:00: 24:f3:36:65:7e:d0:aa:a2:ae:b5:0e:fc:6f:9d:96: 5f:8e:a6:7e:db:ca:8f:74:c0:9b:53:34:a4:4c:3b: d5:d1:62:3b:12:94:45:36:7a:72:5e:00:0e:b4:3d: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6E:C6:F4:58:CD:ED:E9:55:C2:70:BA:09:8B:B7:2D:34:F5:5D:09 X509v3 Authority Key Identifier: keyid:62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:da:6f:8e:88:80:f9:6c:19:e5:58:98:82:14:5e:76:58:85: 9b:de:53:bd:8d:3f:26:51:4e:f3:7f:cc:08:dc:b5:3c:f9:42: 5c:e1:9b:ff:d4:18:01:d7:30:6c:f6:4b:cf:af:99:3c:b7:13: ec:d0:80:33:9c:cd:2d:05:55:bd:67:3d:f0:16:a3:5a:a4:85: a7:4c:22:21:9b:f2:fa:9b:98:e0:9d:32:13:86:9d:59:74:69: dc:e2:ac:6f:d8:f7:c9:bf:fd:a3:7a:70:5f:4b:6f:91:f2:32: 1e:9c:bb:75:53:2b:7f:67:a3:c4:23:47:e8:65:d9:3b:a5:77: 83:99:48:f6:0b:e5:a9:af:b0:cd:83:26:a1:68:1c:53:8f:a5: da:55:9d:83:bd:8a:53:35:21:02:a2:26:ca:c2:cb:40:10:09: 80:78:de:04:d4:b7:11:d0:3f:b5:91:54:7a:93:c0:f8:4c:96: c7:a6:f8:84:14:3d:a6:76:35:16:cf:96:9e:e0:5e:fa:3d:b0: 24:c6:60:8a:23:b6:de:fd:29:7b:1c:a4:56:16:f1:09:ff:48: 79:6e:49:a2:cf:12:3e:f6:0f:43:d6:89:40:90:0d:f3:90:27: ad:49:a8:8d:6d:ca:0a:af:cc:ab:69:4b:19:b3:7a:ce:50:0f: 49:d1:22:d4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIUSzXQHAeIvUkJ+MiMJ/zSIZz7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0QjBEMzFEQTBDMjY3RkQyNEZFNUUwNTVBQTYyOTdB N0M0REY0QjAeFw0yNTExMDEyMjA4MzZaFw0yNTExMDcxMzE2MzZaMDMxMTAvBgNV BAMTKDY4NkVDNkY0NThDREVERTk1NUMyNzBCQTA5OEJCNzJEMzRGNTVEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40GdHo2DvfRI1x/3M1yfJfTCQ HWlLpLUHAG8tXs/+kzyK0eE9WjnraE4QEZtPQ2oJFS9W8576CBwY2Om29MXpavTW 1LU8GoyRGkjoaX4SS6N5JNgXBCIRQf/M9MyX+b+g3pk4FXj3gq7OYFxoFRtoGdDJ GnKFxcsagX0d6AhRLtPFq7rID2NjnTQZblYC6DjUuGw6Bx6alvYOHZLE6veUZz3m XKmg1zv4eqNNg5pYIh+x5q6A/gMIKJOcFaADR9lqDMpL4ODeH32vDPK5q0zkACTz NmV+0KqirrUO/G+dll+Opn7byo90wJtTNKRMO9XRYjsSlEU2enJeAA60PSGzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaG7G9FjN7elVwnC6CYu3LTT1XQkwHwYDVR0j BBgwFoAUYksNMdoMJn/ST+XgVapil6fE30swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMUI0MzUzNDc3RjM5MjkyNjY1QUE1RURBNjUzNzI5RDQ1 RTE0NzdGQjJFNjMwMTk3NkY0RDA2QzcyODU3RDY4LzAvNjI0QjBEMzFEQTBDMjY3 RkQyNEZFNUUwNTVBQTYyOTdBN0M0REY0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjRCMEQzMURBMEMyNjdGRDI0 RkU1RTA1NUFBNjI5N0E3QzRERjRCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzFCNDM1MzQ3N0YzOTI5MjY2NUFBNUVEQTY1MzcyOUQ0NUUxNDc3RkIy RTYzMDE5NzZGNEQwNkM3Mjg1N0Q2OC8wLzYyNEIwRDMxREEwQzI2N0ZEMjRGRTVF MDU1QUE2Mjk3QTdDNERGNEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC32m+OiID5bBnlWJiCFF52WIWb 3lO9jT8mUU7zf8wI3LU8+UJc4Zv/1BgB1zBs9kvPr5k8txPs0IAznM0tBVW9Zz3w FqNapIWnTCIhm/L6m5jgnTIThp1ZdGnc4qxv2PfJv/2jenBfS2+R8jIenLt1Uyt/ Z6PEI0foZdk7pXeDmUj2C+Wpr7DNgyahaBxTj6XaVZ2DvYpTNSECoibKwstAEAmA eN4E1LcR0D+1kVR6k8D4TJbHpviEFD2mdjUWz5ae4F76PbAkxmCKI7be/Sl7HKRW FvEJ/0h5bkmizxI+9g9D1olAkA3zkCetSaiNbcoKr8yraUsZs3rOUA9J0SLU -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:03 2025 by rpki-client