$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.mft File: 24E49374E540033D3850F3DEB6307B9396818D78.mft (raw, json) Hash identifier: 0C67qFRbgE7En5mzTumWFSz2tSscUqqSa4OwF8VDTk4= Subject key identifier: CB:0D:13:28:AB:B0:B9:0F:E5:06:1A:FA:2B:1E:95:99:C6:54:89:86 Authority key identifier: 24:E4:93:74:E5:40:03:3D:38:50:F3:DE:B6:30:7B:93:96:81:8D:78 Certificate issuer: /CN=24E49374E540033D3850F3DEB6307B9396818D78 Certificate serial: 3BDB0E217981EB117F33B7F0E78E2CE46E6DF8B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.mft Manifest number: 011F Signing time: Mon 20 Oct 2025 01:07:01 +0000 Manifest this update: Mon 20 Oct 2025 01:02:01 +0000 Manifest next update: Sat 25 Oct 2025 20:01:01 +0000 Files and hashes: 1: 323830333a636631303a3a2f33322d3438203d3e20323732313139.roa (hash: wdn0bT+aUjmcpRB9I9CPSFT9z/fdJjBM+ABDk5au6i0=) 2: 24E49374E540033D3850F3DEB6307B9396818D78.crl (hash: 1uaKQY8VJpmUNHdW5gM3DfPY3tDZosxB4H7VDWYZNBU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.crl rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:db:0e:21:79:81:eb:11:7f:33:b7:f0:e7:8e:2c:e4:6e:6d:f8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24E49374E540033D3850F3DEB6307B9396818D78 Validity Not Before: Oct 20 01:02:01 2025 GMT Not After : Oct 25 20:01:01 2025 GMT Subject: CN=CB0D1328ABB0B90FE5061AFA2B1E9599C6548986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:b4:c2:72:97:f8:70:f5:74:2b:8c:24:ba: 97:84:56:5a:05:e9:65:ef:bf:33:4b:51:20:8b:6b: e6:e0:da:49:c3:e9:18:ea:16:a0:23:eb:de:3b:71: 40:f9:be:31:6d:d6:5d:f1:4d:f2:68:6b:c1:c6:d6: 55:e8:61:ff:53:c1:e6:de:58:2c:e3:bb:7a:26:cd: 31:fd:48:32:66:6e:8b:8e:5d:fa:c3:f4:2e:7f:6b: 6a:d4:f4:bc:a0:60:5e:2b:db:28:66:30:30:a2:9b: 8f:c0:97:65:65:42:a3:10:73:69:43:be:29:33:ac: 35:46:db:82:2a:06:53:6c:08:b6:60:50:76:bc:ea: 3e:3a:a8:b3:20:79:78:a5:c8:e2:47:5b:e1:f3:2b: 49:8d:76:55:5e:a3:52:47:19:0e:c8:46:47:c2:7f: 54:55:b3:59:7c:18:cf:7b:ed:85:97:9f:03:ac:38: c4:c8:d0:26:30:ea:5e:02:c9:17:04:34:0a:69:07: 1e:98:f5:99:f0:2f:7b:16:29:2d:1b:ed:77:d2:9f: 08:ec:9a:b2:1c:1c:67:7f:dc:36:e4:43:ac:a9:1f: ef:39:8e:58:12:93:0e:76:69:69:d7:f2:81:ee:38: 9a:8d:b9:d3:5d:cd:c3:13:7a:e0:73:9e:84:b9:09: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:13:28:AB:B0:B9:0F:E5:06:1A:FA:2B:1E:95:99:C6:54:89:86 X509v3 Authority Key Identifier: keyid:24:E4:93:74:E5:40:03:3D:38:50:F3:DE:B6:30:7B:93:96:81:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:77:19:fa:f1:1a:95:77:f4:3a:da:95:63:19:a6:3e:32:42: 20:00:a3:80:22:c3:47:93:08:ad:91:a7:e3:f1:3f:4b:87:b9: f8:43:b0:75:76:b7:b7:d5:fd:79:f7:bc:23:0c:c0:86:36:f0: 19:94:81:53:32:59:73:dc:ef:03:11:30:ef:22:40:40:8f:0b: 6f:07:4a:22:75:28:0e:e9:d2:58:26:8c:db:3c:9e:52:0c:37: 1e:55:b2:3f:cc:76:98:06:8f:34:28:7a:44:19:8a:6a:35:0a: 01:b0:cd:d1:ad:98:22:a9:d7:e6:57:3c:59:92:69:a4:b5:ee: 2f:62:fd:35:d4:fe:46:c2:0d:8d:07:02:2f:de:9c:bb:b0:1d: 80:43:c0:37:d2:38:0c:3c:8e:b9:a3:7a:9d:81:51:b7:94:fe: 9a:08:ba:35:f1:56:80:7d:4a:f5:40:0c:e3:a2:cb:19:c8:19: 70:0e:a8:df:f7:5d:92:e4:aa:48:30:43:a7:d4:dc:e5:88:d3: 65:15:14:b1:2f:af:c1:02:48:42:64:be:09:94:ff:d9:f3:23: 87:33:0b:82:27:3c:21:ff:11:06:06:b5:03:bf:91:d3:bb:4c: 44:42:9f:42:eb:30:3f:22:2d:0a:90:35:20:c8:47:a0:51:b4: bd:d6:53:95 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUO9sOIXmB6xF/M7fw544s5G5t+LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRFNDkzNzRFNTQwMDMzRDM4NTBGM0RFQjYzMDdCOTM5 NjgxOEQ3ODAeFw0yNTEwMjAwMTAyMDFaFw0yNTEwMjUyMDAxMDFaMDMxMTAvBgNV BAMTKENCMEQxMzI4QUJCMEI5MEZFNTA2MUFGQTJCMUU5NTk5QzY1NDg5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYbTCcpf4cPV0K4wkupeEVloF 6WXvvzNLUSCLa+bg2knD6RjqFqAj6947cUD5vjFt1l3xTfJoa8HG1lXoYf9Twebe WCzju3omzTH9SDJmbouOXfrD9C5/a2rU9LygYF4r2yhmMDCim4/Al2VlQqMQc2lD vikzrDVG24IqBlNsCLZgUHa86j46qLMgeXilyOJHW+HzK0mNdlVeo1JHGQ7IRkfC f1RVs1l8GM977YWXnwOsOMTI0CYw6l4CyRcENAppBx6Y9ZnwL3sWKS0b7XfSnwjs mrIcHGd/3DbkQ6ypH+85jlgSkw52aWnX8oHuOJqNudNdzcMTeuBznoS5CcZXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyw0TKKuwuQ/lBhr6Kx6VmcZUiYYwHwYDVR0j BBgwFoAUJOSTdOVAAz04UPPetjB7k5aBjXgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRTIyQkI2NUI5QTE5RUNFNDIxQzVDNjFDMDY2REFDMDkx MTZEQTE4MUZBMTY4MkM5QjU3QzE4NUYwREE3QkMyLzAvMjRFNDkzNzRFNTQwMDMz RDM4NTBGM0RFQjYzMDdCOTM5NjgxOEQ3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEU0OTM3NEU1NDAwMzNEMzg1 MEYzREVCNjMwN0I5Mzk2ODE4RDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkUyMkJCNjVCOUExOUVDRTQyMUM1QzYxQzA2NkRBQzA5MTE2REExODFG QTE2ODJDOUI1N0MxODVGMERBN0JDMi8wLzI0RTQ5Mzc0RTU0MDAzM0QzODUwRjNE RUI2MzA3QjkzOTY4MThENzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbdxn68RqVd/Q62pVjGaY+MkIg AKOAIsNHkwitkafj8T9Lh7n4Q7B1dre31f1597wjDMCGNvAZlIFTMllz3O8DETDv IkBAjwtvB0oidSgO6dJYJozbPJ5SDDceVbI/zHaYBo80KHpEGYpqNQoBsM3RrZgi qdfmVzxZkmmkte4vYv011P5Gwg2NBwIv3py7sB2AQ8A30jgMPI65o3qdgVG3lP6a CLo18VaAfUr1QAzjossZyBlwDqjf912S5KpIMEOn1NzliNNlFRSxL6/BAkhCZL4J lP/Z8yOHMwuCJzwh/xEGBrUDv5HTu0xEQp9C6zA/Ii0KkDUgyEegUbS91lOV -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:49 2025 by rpki-client