$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.mft File: 8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.mft (raw, json) Hash identifier: t26PNYajeJBvCSQqkMBglMYUlrjcvz103HuXFX9dWR4= Subject key identifier: 89:FF:72:A6:2F:F4:FA:01:B5:F9:D4:0F:FC:CC:24:93:ED:9A:79:EC Authority key identifier: 8B:2D:4D:D9:A5:FD:DF:A2:02:16:31:B2:87:ED:0E:62:17:68:AF:4C Certificate issuer: /CN=8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C Certificate serial: 5B35CDCCC7A7A6550E5ADDA180E05F86046F6F4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.mft Manifest number: AF Signing time: Mon 20 Oct 2025 21:40:45 +0000 Manifest this update: Mon 20 Oct 2025 21:35:45 +0000 Manifest next update: Sat 25 Oct 2025 22:24:45 +0000 Files and hashes: 1: 3139302e322e38382e302f32312d3234203d3e203238303931.roa (hash: RexUQlHIaMJpzNDOcxnfWJzXVgwYeFwWz3NpCtwH/kU=) 2: 8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.crl (hash: DiAz34+RZkw5t6kT9belMgkEBFUdwxN3DBvZBSJzf5Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.crl rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:35:cd:cc:c7:a7:a6:55:0e:5a:dd:a1:80:e0:5f:86:04:6f:6f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C Validity Not Before: Oct 20 21:35:45 2025 GMT Not After : Oct 25 22:24:45 2025 GMT Subject: CN=89FF72A62FF4FA01B5F9D40FFCCC2493ED9A79EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ce:fd:c3:35:c0:f0:2c:0d:3f:0f:a1:75:6a: cf:3b:ff:48:d7:f5:c7:f7:59:61:a3:d7:da:4c:14: 33:37:c0:04:1f:74:a9:34:e5:c2:a1:47:80:18:e0: 3c:88:0c:d1:d0:c1:44:6b:3c:69:1c:2f:a8:21:d9: c2:72:a4:a1:77:98:f4:68:f9:33:71:0b:87:10:01: 20:21:a7:34:68:72:8f:f4:f6:5d:e6:93:c4:41:3a: bb:85:5b:59:28:4e:68:95:36:17:e8:eb:f6:18:55: fb:91:90:28:46:26:24:e7:ab:ed:2b:87:b5:c8:6b: 30:58:b8:1d:e5:0f:68:ef:e8:97:b3:ef:06:c0:5e: 0c:23:8f:fe:62:17:5e:9d:79:d8:60:49:a7:db:18: d4:d5:d3:2a:18:d1:af:58:a6:92:76:19:66:91:ee: 60:af:24:9e:ea:ae:45:80:b5:be:cf:34:ea:54:6a: 42:13:d9:c2:a2:c3:ba:d6:5a:55:2e:7c:54:e0:13: 85:e8:5b:93:5a:d7:70:3e:0f:1e:33:84:e4:d0:14: 90:ba:dc:42:cc:2c:d6:4b:6a:29:69:7a:0a:3a:3f: cf:1b:f1:cf:8a:09:50:e8:cd:23:32:b4:06:f2:48: 3e:de:ec:94:59:ee:81:d0:0a:e0:e3:a2:82:a3:b4: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:72:A6:2F:F4:FA:01:B5:F9:D4:0F:FC:CC:24:93:ED:9A:79:EC X509v3 Authority Key Identifier: keyid:8B:2D:4D:D9:A5:FD:DF:A2:02:16:31:B2:87:ED:0E:62:17:68:AF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:57:61:17:6e:6b:52:4e:55:1c:48:45:fb:22:1b:65:f2: 77:77:72:97:9b:c8:bc:d5:24:30:57:74:aa:0f:d8:07:ac:51: f9:49:a4:22:f3:e9:6b:81:10:75:38:e9:ae:11:f9:ed:ba:02: 55:9b:99:28:e1:f2:b1:6f:f5:a2:86:95:d4:b9:0f:58:64:5b: 65:d7:5c:ee:d5:1e:ae:74:23:15:94:1a:86:55:e5:c7:fd:4d: 7b:86:56:de:30:2d:ee:d8:66:54:62:d8:17:ea:52:89:3a:48: 67:fe:60:3d:7e:05:de:f5:05:7c:c7:36:47:28:ab:20:9b:68: 5d:45:e3:82:37:40:79:bd:2b:24:5b:35:43:45:e2:c5:3c:b9: 22:a7:0d:a9:cb:47:43:02:03:e4:be:c5:f7:cf:73:7c:12:ce: cb:d2:cf:51:46:61:e7:ab:2a:8d:60:cb:8f:4b:57:51:89:3b: 76:0a:00:3a:e1:c5:ea:4c:41:00:4e:84:a0:6a:0a:a8:25:9c: 2d:a5:38:7a:2d:be:c5:b1:20:4f:24:8b:c6:ed:ac:78:4e:b9: 3d:70:fa:89:d4:9e:bd:18:63:d9:b8:88:7c:54:b7:c1:73:cd: 0c:27:ad:48:1a:ff:8f:55:f6:e6:15:c6:da:62:76:21:fb:11: 73:0e:2b:09 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWzXNzMenplUOWt2hgOBfhgRvb0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyRDRERDlBNUZEREZBMjAyMTYzMUIyODdFRDBFNjIx NzY4QUY0QzAeFw0yNTEwMjAyMTM1NDVaFw0yNTEwMjUyMjI0NDVaMDMxMTAvBgNV BAMTKDg5RkY3MkE2MkZGNEZBMDFCNUY5RDQwRkZDQ0MyNDkzRUQ5QTc5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVzv3DNcDwLA0/D6F1as87/0jX 9cf3WWGj19pMFDM3wAQfdKk05cKhR4AY4DyIDNHQwURrPGkcL6gh2cJypKF3mPRo +TNxC4cQASAhpzRoco/09l3mk8RBOruFW1koTmiVNhfo6/YYVfuRkChGJiTnq+0r h7XIazBYuB3lD2jv6Jez7wbAXgwjj/5iF16dedhgSafbGNTV0yoY0a9YppJ2GWaR 7mCvJJ7qrkWAtb7PNOpUakIT2cKiw7rWWlUufFTgE4XoW5Na13A+Dx4zhOTQFJC6 3ELMLNZLailpego6P88b8c+KCVDozSMytAbySD7e7JRZ7oHQCuDjooKjtOHtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUif9ypi/0+gG1+dQP/Mwkk+2aeewwHwYDVR0j BBgwFoAUiy1N2aX936ICFjGyh+0OYhdor0wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85N0I3RkMzRkM1RDU0QkJFODIyNEM5NEQwN0FGNzlBRDND RDE0RjkyQjVGOUE3NzNFREJEOEMyRjIzOThCRTQ1LzAvOEIyRDRERDlBNUZEREZB MjAyMTYzMUIyODdFRDBFNjIxNzY4QUY0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QjJENEREOUE1RkRERkEyMDIx NjMxQjI4N0VEMEU2MjE3NjhBRjRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTdCN0ZDM0ZDNUQ1NEJCRTgyMjRDOTREMDdBRjc5QUQzQ0QxNEY5MkI1 RjlBNzczRURCRDhDMkYyMzk4QkU0NS8wLzhCMkQ0REQ5QTVGRERGQTIwMjE2MzFC Mjg3RUQwRTYyMTc2OEFGNEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4G1dhF25rUk5VHEhF+yIbZfJ3 d3KXm8i81SQwV3SqD9gHrFH5SaQi8+lrgRB1OOmuEfntugJVm5ko4fKxb/WihpXU uQ9YZFtl11zu1R6udCMVlBqGVeXH/U17hlbeMC3u2GZUYtgX6lKJOkhn/mA9fgXe 9QV8xzZHKKsgm2hdReOCN0B5vSskWzVDReLFPLkipw2py0dDAgPkvsX3z3N8Es7L 0s9RRmHnqyqNYMuPS1dRiTt2CgA64cXqTEEAToSgagqoJZwtpTh6Lb7FsSBPJIvG 7ax4Trk9cPqJ1J69GGPZuIh8VLfBc80MJ61IGv+PVfbmFcbaYnYh+xFzDisJ -----END CERTIFICATE-----Generated at Tue Oct 21 02:36:58 2025 by rpki-client