$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft File: 23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft (raw, json) Hash identifier: YDDki2PMQdeA7qzG75oEz0KCJ+bfkQ25HzI0c5MF158= Subject key identifier: D6:39:2E:BE:63:D9:02:D3:6E:03:5C:74:A4:C5:EB:AB:B4:B7:36:0C Authority key identifier: 23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF Certificate issuer: /CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF Certificate serial: 32103F4B945212663739AFAF23BDCDCA695B599B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft Manifest number: 0139 Signing time: Tue 28 Oct 2025 11:51:47 +0000 Manifest this update: Tue 28 Oct 2025 11:46:47 +0000 Manifest next update: Mon 03 Nov 2025 06:24:47 +0000 Files and hashes: 1: 23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl (hash: eQizFZEZfm0IqKVZPPbHj4wWdiIwK6ESlLfShCbFzDE=) 2: 323830333a396463303a3a2f33322d3438203d3e20323635373234.roa (hash: OVlNl2pJf6FocwGuKEKsKEQQZWlyrEB3VgvjOgT4Eto=) 3: 34352e362e3232342e302f32322d3234203d3e20323635373234.roa (hash: WgE8iOYRv2n/ar6/sgXzP0F/R3AIgyhDf1p9JvGGQ/I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 06:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:10:3f:4b:94:52:12:66:37:39:af:af:23:bd:cd:ca:69:5b:59:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF Validity Not Before: Oct 28 11:46:47 2025 GMT Not After : Nov 3 06:24:47 2025 GMT Subject: CN=D6392EBE63D902D36E035C74A4C5EBABB4B7360C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:36:f4:04:00:16:ae:07:15:44:21:84:33: db:90:65:af:da:6c:1c:c2:e9:45:19:a5:0d:4c:c7: 36:da:25:39:d4:e0:d4:7f:14:f4:9f:de:56:19:57: d5:6d:c7:00:a1:1a:b9:e3:10:00:69:b9:66:49:6f: e2:ab:cf:54:e9:a7:48:75:3e:51:2f:88:22:64:21: ec:e3:f6:d9:1c:eb:b1:99:80:96:d3:70:cf:7f:23: fd:88:77:bc:61:2a:be:01:87:40:ee:b4:51:ab:72: cb:e1:a6:31:01:76:8c:2b:1e:60:4a:ad:73:21:0b: b4:4f:a7:06:f0:97:9f:da:20:5a:65:c8:9e:6d:f2: c9:f7:18:fe:17:2b:77:c1:50:49:70:22:30:f1:73: d7:e8:39:bd:ef:a5:9e:b1:e8:0a:d0:e7:3b:0c:7a: 68:46:87:a6:9c:02:8d:93:d1:dd:7e:8b:b6:c4:37: 11:d3:40:d0:db:91:ef:43:d8:93:a3:b4:e1:be:a5: 1b:89:98:a1:19:92:b2:2d:16:01:13:fa:f0:0f:03: e5:6a:99:ca:6b:c3:60:16:33:e9:52:30:d1:bb:0e: 64:ea:bf:b6:f1:fe:fa:0e:5a:30:3f:f3:55:43:a5: 99:63:ec:ec:2e:07:62:fe:4b:06:73:b1:a3:60:a0: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:39:2E:BE:63:D9:02:D3:6E:03:5C:74:A4:C5:EB:AB:B4:B7:36:0C X509v3 Authority Key Identifier: keyid:23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:d9:6f:23:0a:df:d3:a8:6f:8a:7d:b1:d4:c6:d6:c9:2e:dc: e1:d1:ec:b1:da:00:cc:80:06:50:36:4e:23:ac:6c:5d:8f:a4: 06:ef:5d:b5:c7:cc:a3:e6:1b:7e:c5:e8:2f:89:c5:b1:7c:8c: 51:da:57:bd:8c:ae:65:47:be:b1:19:44:5f:a6:c0:13:64:06: a8:2e:23:07:9a:70:3b:0d:7a:06:7e:7c:32:1a:a7:10:88:5a: bd:c6:b8:28:21:87:ec:74:d6:29:31:a7:30:18:a9:ff:3c:39: 9d:2b:3b:ea:0c:c1:46:1b:a5:5a:d1:88:be:34:60:51:41:77: e9:91:74:53:08:51:2e:ba:96:4c:f2:d5:bc:c0:00:b9:47:75: 14:3c:a2:f7:33:2e:a8:d3:d2:ad:e9:9a:69:80:c5:e5:b8:84: 3e:1d:c9:73:8b:ab:99:92:a4:cb:5c:92:fb:07:43:21:69:f3: c8:7e:d9:be:c5:b7:05:5c:cf:15:3d:1c:10:97:33:19:ef:18: 0a:13:56:fa:28:a4:a1:cd:80:90:86:53:6b:0c:01:93:f7:dc: 95:a6:29:19:42:1b:00:c6:74:e5:d0:84:a6:1a:f6:b0:7d:5f: e4:5b:71:ce:01:33:21:62:ac:f8:30:46:f1:ba:0d:ea:fb:40: 63:f3:bf:9d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMhA/S5RSEmY3Oa+vI73NymlbWZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDQTQ4QzY0RTc5RTFFQ0E0REE2NTYyMTc5NEExRDM4 OTM3NzNFRjAeFw0yNTEwMjgxMTQ2NDdaFw0yNTExMDMwNjI0NDdaMDMxMTAvBgNV BAMTKEQ2MzkyRUJFNjNEOTAyRDM2RTAzNUM3NEE0QzVFQkFCQjRCNzM2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2Tb0BAAWrgcVRCGEM9uQZa/a bBzC6UUZpQ1MxzbaJTnU4NR/FPSf3lYZV9VtxwChGrnjEABpuWZJb+Krz1Tpp0h1 PlEviCJkIezj9tkc67GZgJbTcM9/I/2Id7xhKr4Bh0DutFGrcsvhpjEBdowrHmBK rXMhC7RPpwbwl5/aIFplyJ5t8sn3GP4XK3fBUElwIjDxc9foOb3vpZ6x6ArQ5zsM emhGh6acAo2T0d1+i7bENxHTQNDbke9D2JOjtOG+pRuJmKEZkrItFgET+vAPA+Vq mcprw2AWM+lSMNG7DmTqv7bx/voOWjA/81VDpZlj7OwuB2L+SwZzsaNgoC0zAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1jkuvmPZAtNuA1x0pMXrq7S3NgwwHwYDVR0j BBgwFoAUI8pIxk554eyk2mViF5Sh04k3c+8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMDNFMUI5Rjc3ODEyMDcwRDMwMjQwNkZCNDc1NjYyN0Iy OTgzNTlFMUQ2NzVCNzQzRjdFREM1NTg3RTg2NTczLzAvMjNDQTQ4QzY0RTc5RTFF Q0E0REE2NTYyMTc5NEExRDM4OTM3NzNFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yM0NBNDhDNjRFNzlFMUVDQTRE QTY1NjIxNzk0QTFEMzg5Mzc3M0VGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjAzRTFCOUY3NzgxMjA3MEQzMDI0MDZGQjQ3NTY2MjdCMjk4MzU5RTFE Njc1Qjc0M0Y3RURDNTU4N0U4NjU3My8wLzIzQ0E0OEM2NEU3OUUxRUNBNERBNjU2 MjE3OTRBMUQzODkzNzczRUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDC2W8jCt/TqG+KfbHUxtbJLtzh 0eyx2gDMgAZQNk4jrGxdj6QG7121x8yj5ht+xegvicWxfIxR2le9jK5lR76xGURf psATZAaoLiMHmnA7DXoGfnwyGqcQiFq9xrgoIYfsdNYpMacwGKn/PDmdKzvqDMFG G6Va0Yi+NGBRQXfpkXRTCFEuupZM8tW8wAC5R3UUPKL3My6o09Kt6ZppgMXluIQ+ Hclzi6uZkqTLXJL7B0MhafPIftm+xbcFXM8VPRwQlzMZ7xgKE1b6KKShzYCQhlNr DAGT99yVpikZQhsAxnTl0ISmGvawfV/kW3HOATMhYqz4MEbxug3q+0Bj87+d -----END CERTIFICATE-----Generated at Thu Oct 30 13:23:04 2025 by rpki-client