$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft File: 2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft (raw, json) Hash identifier: IvOMFz2r4BO1tcvy46OiryxzgHoTlZx4ca2HCQOGQ7Q= Subject key identifier: 96:B0:98:8D:D9:9B:C9:A4:E7:FD:D2:AC:75:6E:B8:93:A5:DB:06:D2 Authority key identifier: 2E:9F:A3:F3:5A:2B:5E:2A:62:F1:28:B1:E1:1A:64:14:B4:2D:71:09 Certificate issuer: /CN=2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109 Certificate serial: 1EFFE172539A4DF00357DA92986FA9122B222F72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft Manifest number: 011F Signing time: Mon 20 Oct 2025 16:37:27 +0000 Manifest this update: Mon 20 Oct 2025 16:32:27 +0000 Manifest next update: Sat 25 Oct 2025 00:47:27 +0000 Files and hashes: 1: 2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.crl (hash: bGCcLrQhVu1Q+xEpj3/5x4FRX+oWW4ySFzIvaTxwEwM=) 2: 323830333a633635303a3a2f33322d3338203d3e20323733313935.roa (hash: 8m0f5PclBCHBuZXUTvMyiRH+0eyLvwg/tr49N7kRTKQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.crl rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ff:e1:72:53:9a:4d:f0:03:57:da:92:98:6f:a9:12:2b:22:2f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109 Validity Not Before: Oct 20 16:32:27 2025 GMT Not After : Oct 25 00:47:27 2025 GMT Subject: CN=96B0988DD99BC9A4E7FDD2AC756EB893A5DB06D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:4c:e1:8a:82:77:6d:a6:d2:57:21:22:08: fa:f1:7b:f5:a5:9e:44:7d:d2:b6:80:16:d9:bd:14: ce:3b:58:d2:19:46:2b:2e:23:d7:a0:f3:c3:d5:61: f2:f0:05:5f:b2:06:67:62:5f:38:ed:cf:d0:38:4e: 67:d6:42:8b:f6:8e:f1:2b:ef:27:9e:69:30:77:c3: 98:33:50:1f:31:34:3e:bd:a9:3d:ee:3a:c1:28:5b: c4:ec:be:be:46:46:4e:dd:dc:37:16:bd:1e:7c:0c: 99:ac:81:f7:52:36:20:62:80:e0:a7:64:6f:49:c4: ae:da:58:3e:ee:da:14:21:0f:c4:00:3d:91:24:78: 70:70:bb:d7:1f:11:c0:48:d2:a1:b9:d8:c6:ee:46: 41:85:62:9f:7d:8b:01:7d:8f:6a:37:44:1f:a0:27: 3d:68:08:a0:91:1d:36:6b:dc:ae:ba:ed:95:ae:17: 3e:a0:4f:42:12:fb:6b:0b:36:ea:30:4b:5d:29:46: 7e:08:de:21:25:84:40:48:70:be:41:ba:81:0b:31: a8:d9:b6:67:33:89:ba:53:c4:45:31:0a:2a:63:9d: 05:32:1c:ae:38:69:ae:ac:50:1d:d7:6f:04:5d:27: c4:6f:45:53:1f:0d:09:a5:2f:d9:36:77:14:5d:fe: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B0:98:8D:D9:9B:C9:A4:E7:FD:D2:AC:75:6E:B8:93:A5:DB:06:D2 X509v3 Authority Key Identifier: keyid:2E:9F:A3:F3:5A:2B:5E:2A:62:F1:28:B1:E1:1A:64:14:B4:2D:71:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f4:69:bf:cf:15:6d:e4:ef:d1:e2:e2:08:56:fc:4d:4d:2f: cc:e4:55:82:f0:01:ce:58:4e:f8:ef:41:46:85:ba:a8:db:48: 66:5d:ca:d3:03:eb:ec:a3:ce:c9:50:d8:79:71:c4:17:2e:97: 9e:75:54:11:f3:5a:33:65:3f:8b:64:c9:53:11:12:73:fc:11: bd:c8:ef:fa:c0:e8:78:44:8b:43:2d:6f:ef:25:d7:2c:18:90: 77:36:33:75:57:37:d0:74:e9:8e:47:ae:63:95:8e:08:6e:d2: 9a:fd:65:8d:db:4a:d5:e8:db:98:12:58:4c:f2:a1:13:1b:86: e4:1a:dc:64:c9:ce:93:96:87:f1:57:92:5b:03:73:ed:6f:e9: 06:dd:99:7f:14:d0:a9:d8:43:ce:b6:c7:13:5b:35:aa:8f:94: e5:06:45:52:8e:a0:74:2d:bc:11:ba:f2:ba:06:4e:82:d3:37: fa:da:5e:1d:30:62:39:c3:b9:54:2e:d3:c9:3c:f4:1f:4a:cf: e2:b8:46:98:0e:7b:00:d5:59:1b:4d:0d:59:16:69:35:d0:82: 43:bc:b3:d3:22:85:0b:dc:20:02:c7:07:3f:8d:05:d4:ab:f6: ca:87:f3:e9:3d:2c:3e:2e:d0:bd:df:a1:da:f9:9b:aa:85:46: 07:02:9d:41 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHv/hclOaTfADV9qSmG+pEisiL3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5RkEzRjM1QTJCNUUyQTYyRjEyOEIxRTExQTY0MTRC NDJENzEwOTAeFw0yNTEwMjAxNjMyMjdaFw0yNTEwMjUwMDQ3MjdaMDMxMTAvBgNV BAMTKDk2QjA5ODhERDk5QkM5QTRFN0ZERDJBQzc1NkVCODkzQTVEQjA2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELUzhioJ3babSVyEiCPrxe/Wl nkR90raAFtm9FM47WNIZRisuI9eg88PVYfLwBV+yBmdiXzjtz9A4TmfWQov2jvEr 7yeeaTB3w5gzUB8xND69qT3uOsEoW8Tsvr5GRk7d3DcWvR58DJmsgfdSNiBigOCn ZG9JxK7aWD7u2hQhD8QAPZEkeHBwu9cfEcBI0qG52MbuRkGFYp99iwF9j2o3RB+g Jz1oCKCRHTZr3K667ZWuFz6gT0IS+2sLNuowS10pRn4I3iElhEBIcL5BuoELMajZ tmczibpTxEUxCipjnQUyHK44aa6sUB3XbwRdJ8RvRVMfDQmlL9k2dxRd/oaDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlrCYjdmbyaTn/dKsdW64k6XbBtIwHwYDVR0j BBgwFoAULp+j81orXipi8Six4RpkFLQtcQkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FODNFOTUzMEZEMjUyM0FDQzQ4RTkxNzYxMDJBNzZDODNF NDFDQUNBODc0QTFGODE5QUExOEFGMkExOTQxRDc4LzAvMkU5RkEzRjM1QTJCNUUy QTYyRjEyOEIxRTExQTY0MTRCNDJENzEwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTlGQTNGMzVBMkI1RTJBNjJG MTI4QjFFMTFBNjQxNEI0MkQ3MTA5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTgzRTk1MzBGRDI1MjNBQ0M0OEU5MTc2MTAyQTc2QzgzRTQxQ0FDQTg3 NEExRjgxOUFBMThBRjJBMTk0MUQ3OC8wLzJFOUZBM0YzNUEyQjVFMkE2MkYxMjhC MUUxMUE2NDE0QjQyRDcxMDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBz9Gm/zxVt5O/R4uIIVvxNTS/M 5FWC8AHOWE7470FGhbqo20hmXcrTA+vso87JUNh5ccQXLpeedVQR81ozZT+LZMlT ERJz/BG9yO/6wOh4RItDLW/vJdcsGJB3NjN1VzfQdOmOR65jlY4IbtKa/WWN20rV 6NuYElhM8qETG4bkGtxkyc6TlofxV5JbA3Ptb+kG3Zl/FNCp2EPOtscTWzWqj5Tl BkVSjqB0LbwRuvK6Bk6C0zf62l4dMGI5w7lULtPJPPQfSs/iuEaYDnsA1VkbTQ1Z Fmk10IJDvLPTIoUL3CACxwc/jQXUq/bKh/PpPSw+LtC936Ha+ZuqhUYHAp1B -----END CERTIFICATE-----Generated at Mon Oct 20 22:55:28 2025 by rpki-client