$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.mft File: 33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.mft (raw, json) Hash identifier: uR+OREZTFuzLoZxGFNbwAN2HAgSJlLb8G3JJJnNv488= Subject key identifier: CE:8D:56:BF:16:A1:88:69:3B:01:3E:F8:EA:67:45:16:0A:9D:4C:88 Authority key identifier: 33:FB:DC:29:F8:EA:02:92:74:E5:D3:ED:2E:2C:CE:16:FA:82:26:C4 Certificate issuer: /CN=33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4 Certificate serial: 47F83F5D74831ED109B385592B7A2C13DF655061 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.mft Manifest number: D8 Signing time: Mon 20 Oct 2025 16:07:04 +0000 Manifest this update: Mon 20 Oct 2025 16:02:04 +0000 Manifest next update: Sun 26 Oct 2025 03:44:04 +0000 Files and hashes: 1: 323830333a623239303a3a2f33322d3438203d3e20323732383638.roa (hash: qL3o2hBWwVrZvg4wV6XQ6vkZhvDijHfptkRo9DfWTpU=) 2: 33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.crl (hash: z7MZtB5igYqHLUZM6XCqTHOPavQwDlVsPy+BNfvHeak=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.crl rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f8:3f:5d:74:83:1e:d1:09:b3:85:59:2b:7a:2c:13:df:65:50:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4 Validity Not Before: Oct 20 16:02:04 2025 GMT Not After : Oct 26 03:44:04 2025 GMT Subject: CN=CE8D56BF16A188693B013EF8EA6745160A9D4C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:fe:41:7a:6c:4f:cd:26:e2:e1:1f:c0:9a: 14:78:68:89:2a:95:c8:7a:48:1d:d0:8a:e2:40:f3: 6c:1d:cc:a5:d2:fb:04:c0:a7:b0:fa:a4:59:37:08: 20:42:58:60:b6:6e:46:9c:46:2b:3b:ee:a9:40:19: f8:f3:a7:ea:0e:18:76:59:5f:a4:d0:27:02:61:e4: 49:bc:9a:94:9a:46:84:2a:d0:64:e2:e7:47:32:10: c8:15:9d:56:17:79:21:c5:02:50:1f:f1:bf:4e:1f: 48:31:18:d5:7c:1c:57:af:0f:be:48:14:b5:e0:39: bd:10:c2:d0:60:e5:c7:95:81:d1:a2:54:bc:6b:91: 01:1b:ab:bd:2b:8f:ca:3f:7e:ca:1b:f2:3b:f0:31: 67:75:f9:ec:57:f3:fd:98:08:66:c3:86:56:98:be: a2:71:07:cb:52:21:50:36:c9:13:dc:21:4d:50:0f: bc:d9:59:b5:98:69:3d:5e:ab:e4:61:42:68:6f:75: 0e:b4:58:23:b2:6d:18:83:a4:0c:22:8c:47:42:a4: e0:de:51:87:48:64:b0:48:9b:0d:56:32:72:0f:2e: de:74:a6:eb:1b:1c:13:64:22:fa:d7:91:74:5f:31: dd:99:42:b1:20:4c:f2:3d:2f:e8:79:b8:25:30:63: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8D:56:BF:16:A1:88:69:3B:01:3E:F8:EA:67:45:16:0A:9D:4C:88 X509v3 Authority Key Identifier: keyid:33:FB:DC:29:F8:EA:02:92:74:E5:D3:ED:2E:2C:CE:16:FA:82:26:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ff:ec:4c:ce:4a:57:e0:93:f5:37:96:d3:a8:7a:61:b0:db: 7f:d4:22:5b:ac:e5:cb:b1:29:7a:a1:11:13:0e:e4:ff:11:1c: ec:a1:22:66:c0:42:b0:7b:30:15:3d:d2:67:26:83:09:09:5f: cd:6e:7d:a1:95:0f:fb:2c:87:95:e5:c9:2d:20:07:8c:4d:89: 2c:7b:b3:99:c1:fd:e5:25:c0:b7:27:9f:11:fc:9f:09:84:08: cc:55:8d:29:92:6c:4a:ec:32:2c:f6:af:32:4e:93:19:2c:fa: 29:2c:40:21:eb:24:12:a1:45:fa:80:3c:4c:19:8f:c7:0e:ab: e9:d9:20:8c:e1:4c:61:f3:8d:6e:f6:5b:55:c0:f0:c9:00:68: 09:3d:f2:de:9e:29:a1:71:59:a0:a9:83:f8:f4:32:b3:1b:68: a5:27:c0:b3:51:38:0a:9b:48:80:78:f2:86:83:e3:72:66:ec: 14:df:5c:12:d3:15:c3:2c:71:ae:64:e8:5c:7c:47:23:91:a3: 2a:ab:e9:f8:13:b4:9d:de:24:d4:2e:2a:cf:5b:d1:b8:7f:62: 7a:65:8b:58:06:ba:e5:b1:37:af:fb:97:b4:b0:09:4e:6d:65: 24:7b:f4:22:2c:31:80:87:fb:5d:dd:10:aa:37:69:59:4d:31: 87:7f:74:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUR/g/XXSDHtEJs4VZK3osE99lUGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGQkRDMjlGOEVBMDI5Mjc0RTVEM0VEMkUyQ0NFMTZG QTgyMjZDNDAeFw0yNTEwMjAxNjAyMDRaFw0yNTEwMjYwMzQ0MDRaMDMxMTAvBgNV BAMTKENFOEQ1NkJGMTZBMTg4NjkzQjAxM0VGOEVBNjc0NTE2MEE5RDRDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IP5BemxPzSbi4R/AmhR4aIkq lch6SB3QiuJA82wdzKXS+wTAp7D6pFk3CCBCWGC2bkacRis77qlAGfjzp+oOGHZZ X6TQJwJh5Em8mpSaRoQq0GTi50cyEMgVnVYXeSHFAlAf8b9OH0gxGNV8HFevD75I FLXgOb0QwtBg5ceVgdGiVLxrkQEbq70rj8o/fsob8jvwMWd1+exX8/2YCGbDhlaY vqJxB8tSIVA2yRPcIU1QD7zZWbWYaT1eq+RhQmhvdQ60WCOybRiDpAwijEdCpODe UYdIZLBImw1WMnIPLt50pusbHBNkIvrXkXRfMd2ZQrEgTPI9L+h5uCUwY5qlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzo1WvxahiGk7AT746mdFFgqdTIgwHwYDVR0j BBgwFoAUM/vcKfjqApJ05dPtLizOFvqCJsQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83OTgwQzJFMjY5Q0Q5QUNEMTkxOUNDMjhCQTkxNjlERDRE OEVFREQ0ODJBRTc2QTkxMjZDQ0Y2RjU0REI3Q0UwLzAvMzNGQkRDMjlGOEVBMDI5 Mjc0RTVEM0VEMkUyQ0NFMTZGQTgyMjZDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0ZCREMyOUY4RUEwMjkyNzRF NUQzRUQyRTJDQ0UxNkZBODIyNkM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzk4MEMyRTI2OUNEOUFDRDE5MTlDQzI4QkE5MTY5REQ0RDhFRURENDgy QUU3NkE5MTI2Q0NGNkY1NERCN0NFMC8wLzMzRkJEQzI5RjhFQTAyOTI3NEU1RDNF RDJFMkNDRTE2RkE4MjI2QzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCS/+xMzkpX4JP1N5bTqHphsNt/ 1CJbrOXLsSl6oRETDuT/ERzsoSJmwEKwezAVPdJnJoMJCV/Nbn2hlQ/7LIeV5ckt IAeMTYkse7OZwf3lJcC3J58R/J8JhAjMVY0pkmxK7DIs9q8yTpMZLPopLEAh6yQS oUX6gDxMGY/HDqvp2SCM4Uxh841u9ltVwPDJAGgJPfLenimhcVmgqYP49DKzG2il J8CzUTgKm0iAePKGg+NyZuwU31wS0xXDLHGuZOhcfEcjkaMqq+n4E7Sd3iTULirP W9G4f2J6ZYtYBrrlsTev+5e0sAlObWUke/QiLDGAh/td3RCqN2lZTTGHf3R+ -----END CERTIFICATE-----Generated at Tue Oct 21 00:43:40 2025 by rpki-client