$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft File: 43329E371650BF65E90EB0576A6F24E54A8D8258.mft (raw, json) Hash identifier: GJ9ooPF/UqZ5e9eQcJKww9zXRIzQz/vaPLOrHILE3wY= Subject key identifier: B8:31:D1:BD:B3:FD:35:36:0C:FC:59:DC:71:05:0F:83:AA:12:D8:9D Authority key identifier: 43:32:9E:37:16:50:BF:65:E9:0E:B0:57:6A:6F:24:E5:4A:8D:82:58 Certificate issuer: /CN=43329E371650BF65E90EB0576A6F24E54A8D8258 Certificate serial: 20631953EC0C9C2F268D3CE36BB5A5CA9A878903 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43329E371650BF65E90EB0576A6F24E54A8D8258.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft Manifest number: 0132 Signing time: Fri 14 Nov 2025 13:37:13 +0000 Manifest this update: Fri 14 Nov 2025 13:32:13 +0000 Manifest next update: Thu 20 Nov 2025 03:55:13 +0000 Files and hashes: 1: 43329E371650BF65E90EB0576A6F24E54A8D8258.crl (hash: 9KgOJChSIF8KIS5MZsJsMKh9cBs13Op5ZOMKFF5MoP8=) 2: 3139312e3234312e36322e302f32332d3233203d3e20323733323332.roa (hash: jmoSkNe2WKB+8EZaKpQcGA1P5V3I1oueZcPEi1sLHYU=) 3: 3138362e3139352e3234372e302f32342d3234203d3e20323730303830.roa (hash: 1JRx02YNSp//oaGaqdKNVJdSTIav0lpGpspYzenrr/Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.crl rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43329E371650BF65E90EB0576A6F24E54A8D8258.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Nov 2025 23:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:63:19:53:ec:0c:9c:2f:26:8d:3c:e3:6b:b5:a5:ca:9a:87:89:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43329E371650BF65E90EB0576A6F24E54A8D8258 Validity Not Before: Nov 14 13:32:13 2025 GMT Not After : Nov 20 03:55:13 2025 GMT Subject: CN=B831D1BDB3FD35360CFC59DC71050F83AA12D89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:bf:0e:73:ae:fe:a9:5f:fb:91:fd:8a:e9:01: 6e:24:88:1b:cc:62:d4:4f:a4:ed:49:6c:c7:8f:8b: ce:24:c5:a3:e6:14:da:9a:93:eb:54:99:11:8f:d8: 6a:a8:93:86:63:2c:fa:83:5f:13:41:68:13:e9:95: 4b:54:e2:23:44:93:ee:00:0e:e4:ec:43:9d:09:45: b8:f2:89:c9:39:67:5c:e7:98:36:a5:41:20:1c:0e: 59:24:ce:12:a6:77:e3:1e:2c:20:1e:80:1d:68:c7: 0d:2c:2a:29:ad:e3:14:11:24:12:c8:b0:6f:0a:75: 64:54:a3:10:3c:80:9c:07:ea:d2:0b:de:56:74:5e: 1b:19:68:f4:ac:9c:3b:b9:5e:56:77:f3:70:7a:00: 35:3e:a0:6a:2c:1e:4a:d2:57:1a:b4:26:84:92:6c: 5b:8e:5f:a7:66:28:27:de:e0:22:27:c6:02:86:51: 0b:f9:ae:e2:db:fb:8f:64:fe:fb:eb:20:e8:a2:b0: 66:fc:94:27:a6:5c:3d:93:29:6c:da:d2:1a:9d:de: 94:c8:c3:bd:e0:4e:fc:e5:0d:19:fc:38:3c:19:36: c9:37:23:eb:89:fb:0e:e2:ab:66:c3:ab:7a:33:39: c0:6a:c1:40:23:6a:bd:6f:7d:d1:b7:76:0a:99:5c: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:D1:BD:B3:FD:35:36:0C:FC:59:DC:71:05:0F:83:AA:12:D8:9D X509v3 Authority Key Identifier: keyid:43:32:9E:37:16:50:BF:65:E9:0E:B0:57:6A:6F:24:E5:4A:8D:82:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43329E371650BF65E90EB0576A6F24E54A8D8258.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:66:a9:1c:29:12:64:8e:0b:26:35:4f:53:54:ef:ac:2d:8f: 39:46:87:01:a6:f2:f8:26:f4:b2:b4:67:39:23:b4:62:b4:de: df:6a:ca:8b:35:ac:58:9d:3e:f3:6e:eb:dd:44:45:ca:82:d3: 33:ce:aa:f5:84:73:19:43:d0:71:07:92:f5:f1:12:cd:fc:90: 18:37:68:99:c5:c7:61:43:e0:b0:a1:5a:57:01:4c:f6:30:cc: 65:c7:2e:15:5b:77:06:18:28:47:28:7e:0b:62:5d:2a:e6:b1: 33:13:2d:71:fe:97:14:29:f8:bc:ce:06:f6:aa:cc:3b:c0:69: 47:62:2e:ab:44:e6:c9:cb:a2:16:7c:e1:89:11:f3:d3:68:ba: 2d:72:fd:6c:3e:99:1e:36:a8:c5:0a:91:b0:bc:2a:42:df:3d: a2:7c:ac:8e:d6:77:b3:8d:d4:31:fb:af:38:4f:c4:ab:c1:0b: 5d:86:cb:36:b5:0f:5d:71:3a:60:50:53:6f:30:b1:88:28:f4: 8c:c2:d2:c3:ca:e7:38:06:03:cd:fb:09:ba:72:71:2e:e7:5c: 0e:34:a5:25:91:6b:1d:f8:6e:9f:59:e0:db:da:5a:c5:99:e8: 08:e7:00:1f:44:7f:c3:98:69:a2:dd:a3:04:a7:e1:b6:5c:f8: 92:3f:55:47 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIGMZU+wMnC8mjTzja7WlypqHiQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzMjlFMzcxNjUwQkY2NUU5MEVCMDU3NkE2RjI0RTU0 QThEODI1ODAeFw0yNTExMTQxMzMyMTNaFw0yNTExMjAwMzU1MTNaMDMxMTAvBgNV BAMTKEI4MzFEMUJEQjNGRDM1MzYwQ0ZDNTlEQzcxMDUwRjgzQUExMkQ4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7vw5zrv6pX/uR/YrpAW4kiBvM YtRPpO1JbMePi84kxaPmFNqak+tUmRGP2Gqok4ZjLPqDXxNBaBPplUtU4iNEk+4A DuTsQ50JRbjyick5Z1znmDalQSAcDlkkzhKmd+MeLCAegB1oxw0sKimt4xQRJBLI sG8KdWRUoxA8gJwH6tIL3lZ0XhsZaPSsnDu5XlZ383B6ADU+oGosHkrSVxq0JoSS bFuOX6dmKCfe4CInxgKGUQv5ruLb+49k/vvrIOiisGb8lCemXD2TKWza0hqd3pTI w73gTvzlDRn8ODwZNsk3I+uJ+w7iq2bDq3ozOcBqwUAjar1vfdG3dgqZXNdpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuDHRvbP9NTYM/FnccQUPg6oS2J0wHwYDVR0j BBgwFoAUQzKeNxZQv2XpDrBXam8k5UqNglgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GQ0M0REEzMjE3ODE3Q0ZBMkVEN0NBMDU4QTIyODMzNEMy NEIzQzM4RENCMDIwOEUzMjYxMTA2QzNCQjE0ODE4LzAvNDMzMjlFMzcxNjUwQkY2 NUU5MEVCMDU3NkE2RjI0RTU0QThEODI1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzMyOUUzNzE2NTBCRjY1RTkw RUIwNTc2QTZGMjRFNTRBOEQ4MjU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkNDNERBMzIxNzgxN0NGQTJFRDdDQTA1OEEyMjgzMzRDMjRCM0MzOERD QjAyMDhFMzI2MTEwNkMzQkIxNDgxOC8wLzQzMzI5RTM3MTY1MEJGNjVFOTBFQjA1 NzZBNkYyNEU1NEE4RDgyNTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANZqkcKRJkjgsmNU9TVO+sLY85 RocBpvL4JvSytGc5I7RitN7fasqLNaxYnT7zbuvdREXKgtMzzqr1hHMZQ9BxB5L1 8RLN/JAYN2iZxcdhQ+CwoVpXAUz2MMxlxy4VW3cGGChHKH4LYl0q5rEzEy1x/pcU Kfi8zgb2qsw7wGlHYi6rRObJy6IWfOGJEfPTaLotcv1sPpkeNqjFCpGwvCpC3z2i fKyO1nezjdQx+684T8SrwQtdhss2tQ9dcTpgUFNvMLGIKPSMwtLDyuc4BgPN+wm6 cnEu51wONKUlkWsd+G6fWeDb2lrFmegI5wAfRH/DmGmi3aMEp+G2XPiSP1VH -----END CERTIFICATE-----Generated at Sun Nov 16 20:22:15 2025 by rpki-client