$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft File: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft (raw, json) Hash identifier: dHLNhuV5EuCJjei0n5aKyMiwP4J2QFaHYQFO5ox0+K0= Subject key identifier: BE:A1:8D:0D:14:C5:C1:07:36:3C:15:58:E0:0A:EE:89:54:02:65:8C Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA Certificate issuer: /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Certificate serial: 6A61610C75C79ACC8641A74CECEC6A25A072C696 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft Manifest number: 0130 Signing time: Sun 19 Oct 2025 16:31:37 +0000 Manifest this update: Sun 19 Oct 2025 16:26:37 +0000 Manifest next update: Fri 24 Oct 2025 00:51:37 +0000 Files and hashes: 1: 323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (hash: QDGdpSjompnHuxfIn7sQ3auNFSevURCMD9/TvRt/Q38=) 2: 3137392e302e39362e302f32322d3234203d3e20323731383736.roa (hash: Cw0vZv2Jgj2wqXBPQxsE5Dhkvc4LI4K/2JStcyGfQ/w=) 3: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl (hash: V1FwNvBTU5YFncP0MuoMHkZ3k6LZw62uvv/1I2vMJXs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:61:61:0c:75:c7:9a:cc:86:41:a7:4c:ec:ec:6a:25:a0:72:c6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Validity Not Before: Oct 19 16:26:37 2025 GMT Not After : Oct 24 00:51:37 2025 GMT Subject: CN=BEA18D0D14C5C107363C1558E00AEE895402658C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:e6:04:8b:4c:e0:35:cd:f4:00:92:ae:83: 8b:ed:11:00:b7:03:9c:49:53:7f:1f:74:ec:c0:ee: 8c:c4:b0:74:ad:bf:29:fc:8e:81:c0:0b:09:13:ad: ca:52:a5:3b:3d:df:1e:58:39:f7:5a:25:1b:48:fb: 61:bd:6c:a7:28:4d:e8:c8:83:aa:60:c1:d2:db:0a: 2d:ad:84:d4:0a:45:11:ff:e7:6c:a1:f3:fa:9b:9b: c1:31:19:11:18:b9:82:af:59:c2:78:a8:f7:66:ce: fe:da:fe:69:7a:31:ef:6f:02:b8:44:d8:d0:44:9a: 4f:68:65:c2:9a:eb:4c:a1:4e:5e:06:26:4f:8f:2d: 0d:54:17:d2:fb:e4:f9:9e:38:84:85:86:88:7b:a7: a0:4c:a4:67:dc:97:95:0d:42:00:66:3a:5c:b3:c1: 16:f1:eb:8c:47:11:fa:07:37:31:b4:30:f8:f6:79: fc:82:b4:5f:89:5c:0b:df:8e:0a:6f:18:36:77:63: fd:cb:ba:14:2f:5b:e5:13:5d:a9:00:62:c4:ae:f8: 87:28:6c:07:1a:fc:af:5d:83:86:03:08:5c:02:c3: 95:fa:8e:49:d8:99:18:59:23:d7:0a:9d:25:f2:4e: f1:fa:54:09:51:dd:7a:dc:3f:2a:46:60:78:bd:6f: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:8D:0D:14:C5:C1:07:36:3C:15:58:E0:0A:EE:89:54:02:65:8C X509v3 Authority Key Identifier: keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:81:c4:e0:51:fa:01:42:bd:dc:68:4e:5b:20:48:a5:5f:33: e2:79:7a:4d:3e:2c:46:60:93:e4:4d:d2:29:d7:37:a2:1a:29: bb:91:13:13:65:b3:c9:d8:24:ad:cb:d8:52:ce:53:bc:0c:c5: 56:45:cb:f5:90:79:ed:8d:f0:03:74:5c:94:96:17:1d:f9:0f: 1c:e7:63:e1:70:94:8e:e3:67:bc:22:4a:1b:d1:b8:ce:de:c5: f3:08:9a:b1:c4:4a:54:74:86:a1:be:b8:dc:f9:81:1d:c1:c7: 67:42:55:fc:81:25:f4:9c:49:89:2a:d7:75:7f:d2:45:58:0d: 4d:f6:0d:8c:c1:b1:5a:6c:29:94:16:fc:c5:d2:71:a2:0d:5b: bb:b6:b0:7d:7e:59:0c:f9:bd:dd:db:8c:cf:43:77:a4:7f:71: 70:80:a4:cc:f6:70:82:44:e3:23:23:f2:c3:e6:f7:10:30:f7: 2e:78:08:87:71:89:0f:50:57:65:fe:83:81:10:5c:4f:f6:75: d5:28:71:3d:66:bc:85:27:1d:79:91:c9:48:5c:d9:f0:5f:c2: 7d:aa:ec:e2:5a:7e:9d:53:75:de:26:2b:f6:e7:35:6f:19:53: e2:92:0c:8a:7e:23:d0:f2:60:8f:d7:ad:5a:14:e1:a9:03:23: 37:07:d3:cf -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUamFhDHXHmsyGQadM7OxqJaByxpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI4NjIwQUNFQTg4NDI0OTU2ODU1MDJDMkRENjU5QTQ0 QkRBQUFGQTAeFw0yNTEwMTkxNjI2MzdaFw0yNTEwMjQwMDUxMzdaMDMxMTAvBgNV BAMTKEJFQTE4RDBEMTRDNUMxMDczNjNDMTU1OEUwMEFFRTg5NTQwMjY1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshuYEi0zgNc30AJKug4vtEQC3 A5xJU38fdOzA7ozEsHStvyn8joHACwkTrcpSpTs93x5YOfdaJRtI+2G9bKcoTejI g6pgwdLbCi2thNQKRRH/52yh8/qbm8ExGREYuYKvWcJ4qPdmzv7a/ml6Me9vArhE 2NBEmk9oZcKa60yhTl4GJk+PLQ1UF9L75PmeOISFhoh7p6BMpGfcl5UNQgBmOlyz wRbx64xHEfoHNzG0MPj2efyCtF+JXAvfjgpvGDZ3Y/3LuhQvW+UTXakAYsSu+Ico bAca/K9dg4YDCFwCw5X6jknYmRhZI9cKnSXyTvH6VAlR3XrcPypGYHi9b3K9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvqGNDRTFwQc2PBVY4AruiVQCZYwwHwYDVR0j BBgwFoAUK4YgrOqIQklWhVAsLdZZpEvaqvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRDExMjc2ODM1Mjk0RUFFNTMwQzc4QzQ3MTk2Q0ZGMzBD QTRCQjA0NTU3QzY4Rjg5RTQ0M0NGMzhGNUI2NjBDLzAvMkI4NjIwQUNFQTg4NDI0 OTU2ODU1MDJDMkRENjU5QTQ0QkRBQUFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjg2MjBBQ0VBODg0MjQ5NTY4 NTUwMkMyREQ2NTlBNDRCREFBQUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUQxMTI3NjgzNTI5NEVBRTUzMEM3OEM0NzE5NkNGRjMwQ0E0QkIwNDU1 N0M2OEY4OUU0NDNDRjM4RjVCNjYwQy8wLzJCODYyMEFDRUE4ODQyNDk1Njg1NTAy QzJERDY1OUE0NEJEQUFBRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAigcTgUfoBQr3caE5bIEilXzPi eXpNPixGYJPkTdIp1zeiGim7kRMTZbPJ2CSty9hSzlO8DMVWRcv1kHntjfADdFyU lhcd+Q8c52PhcJSO42e8Ikob0bjO3sXzCJqxxEpUdIahvrjc+YEdwcdnQlX8gSX0 nEmJKtd1f9JFWA1N9g2MwbFabCmUFvzF0nGiDVu7trB9flkM+b3d24zPQ3ekf3Fw gKTM9nCCROMjI/LD5vcQMPcueAiHcYkPUFdl/oOBEFxP9nXVKHE9ZryFJx15kclI XNnwX8J9quziWn6dU3XeJiv25zVvGVPikgyKfiPQ8mCP161aFOGpAyM3B9PP -----END CERTIFICATE-----Generated at Mon Oct 20 00:36:04 2025 by rpki-client