$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft File: 33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft (raw, json) Hash identifier: HI11br/mIySkxJ+Xzvz1vRTBtzsx99psFB2mFsOIZtU= Subject key identifier: 71:87:C9:D4:65:CB:38:A2:5C:AE:3C:02:24:09:6F:89:E8:B9:21:0C Authority key identifier: 33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09 Certificate issuer: /CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509 Certificate serial: 42A2BE75C4E15A3F97B146EBC50E3F7DF1787B5E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft Manifest number: 27 Signing time: Mon 20 Oct 2025 08:52:24 +0000 Manifest this update: Mon 20 Oct 2025 08:47:24 +0000 Manifest next update: Fri 24 Oct 2025 13:28:24 +0000 Files and hashes: 1: 33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl (hash: jc5zbjbOyaOsiGCYxAG2i0WYBfVdNKr4HaoG76wN6XI=) 2: 323830333a313664303a3a2f33322d3438203d3e20323734303935.roa (hash: 8kLsumzOWGClVtaQJ3HFCg9BQ37eOvtN62Cu/zYZM3g=) 3: 323830333a313664303a34303a3a2f34382d3634203d3e20323734303935.roa (hash: qQA1qgyJ0x6vvlledn5zzteWJocE4JJPyL+GGgazeR8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a2:be:75:c4:e1:5a:3f:97:b1:46:eb:c5:0e:3f:7d:f1:78:7b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509 Validity Not Before: Oct 20 08:47:24 2025 GMT Not After : Oct 24 13:28:24 2025 GMT Subject: CN=7187C9D465CB38A25CAE3C0224096F89E8B9210C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fe:1d:c6:1f:08:36:a7:38:0b:d8:3b:9d:8a: cd:64:cd:a5:9f:72:35:a0:ad:e5:c6:34:c6:45:d3: e0:28:58:b0:a7:1f:a9:28:cc:18:ab:44:19:e7:eb: 9c:7b:01:c0:82:9c:77:e6:f5:28:bd:b0:32:4f:be: 79:0f:78:eb:cc:bb:9a:99:a6:c6:f8:28:c2:2c:25: 3e:6f:5e:85:34:50:16:f6:d5:0c:9f:0e:42:c8:5b: 32:46:b4:00:b0:3f:96:ad:9a:9f:e2:d5:92:a0:93: a8:7c:d7:68:db:da:fa:05:89:83:e1:79:93:fd:47: 2b:6b:83:dc:3c:a5:28:82:8f:ad:6e:d2:47:6f:18: 23:94:09:de:ad:ad:b2:cb:8a:f4:1e:98:be:e5:9c: 39:ce:34:3b:20:64:ce:0f:f1:98:41:7f:7f:4a:ce: b1:6a:17:ad:70:dc:0c:83:6d:e9:71:ad:32:d3:96: 36:de:82:e9:d6:19:e3:b1:3e:f1:d8:bf:9b:8f:ee: 16:6c:12:ea:5d:68:7c:d7:60:45:a7:ff:f6:63:97: fa:53:43:a0:6e:ae:dc:48:0c:82:46:4b:2b:28:e7: 89:ef:06:ef:95:e1:3b:f5:4a:23:23:78:49:1b:a5: db:40:80:db:9e:53:15:e0:a9:65:c8:9c:d1:fc:98: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:C9:D4:65:CB:38:A2:5C:AE:3C:02:24:09:6F:89:E8:B9:21:0C X509v3 Authority Key Identifier: keyid:33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:07:82:b6:8e:33:3f:4e:4a:a0:a3:0a:77:91:81:78:cb:55: ec:52:c4:a7:03:52:ac:ce:f1:62:c5:d8:7f:32:c3:13:07:a8: 04:69:be:ed:ff:a2:eb:53:57:94:44:6d:56:67:a8:91:23:f0: cc:d4:ad:9d:7e:7a:3e:3a:ed:b0:c1:25:c9:e7:4a:93:ae:5f: 27:f9:7f:d2:95:bf:e5:a6:b3:30:3b:9b:34:09:d9:03:6a:f4: 85:7a:b5:7c:27:a4:8f:5a:2b:7a:41:6f:cd:21:f3:87:b3:2c: a6:11:91:94:e2:60:40:7a:42:a5:0a:0a:c3:14:68:01:b2:d7: 34:69:69:4c:be:cd:f8:50:ae:19:bb:65:f0:77:5c:86:99:30: 35:0a:56:06:8d:b3:a4:28:e6:06:ef:ea:d6:07:f1:35:60:7a: 4c:da:5b:b4:44:5c:f9:34:02:da:f0:fc:88:b6:08:bf:cd:7f: 7e:b5:ac:8c:d4:8c:68:97:d9:36:b3:45:16:83:e9:53:ba:99: ac:3e:49:96:34:c0:62:2a:74:73:7f:67:01:33:56:1d:17:6d: fb:e2:5c:3f:e9:1b:6c:11:92:f3:4b:3f:f9:04:aa:27:f8:74: 5e:6a:7c:f8:cf:90:63:90:38:34:57:ab:f1:21:91:d6:97:02: 46:8a:ea:a5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQqK+dcThWj+XsUbrxQ4/ffF4e14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFOURBMDgzMkE5QkI3MDNGNDJEQTJDRTUzNTI3QTJG MTA0RDUwOTAeFw0yNTEwMjAwODQ3MjRaFw0yNTEwMjQxMzI4MjRaMDMxMTAvBgNV BAMTKDcxODdDOUQ0NjVDQjM4QTI1Q0FFM0MwMjI0MDk2Rjg5RThCOTIxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4/h3GHwg2pzgL2Dudis1kzaWf cjWgreXGNMZF0+AoWLCnH6kozBirRBnn65x7AcCCnHfm9Si9sDJPvnkPeOvMu5qZ psb4KMIsJT5vXoU0UBb21QyfDkLIWzJGtACwP5atmp/i1ZKgk6h812jb2voFiYPh eZP9Rytrg9w8pSiCj61u0kdvGCOUCd6trbLLivQemL7lnDnONDsgZM4P8ZhBf39K zrFqF61w3AyDbelxrTLTljbegunWGeOxPvHYv5uP7hZsEupdaHzXYEWn//Zjl/pT Q6BurtxIDIJGSyso54nvBu+V4Tv1SiMjeEkbpdtAgNueUxXgqWXInNH8mMvDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcYfJ1GXLOKJcrjwCJAlviei5IQwwHwYDVR0j BBgwFoAUM+naCDKpu3A/Qtos5TUnovEE1QkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9COTFDMDcwMTdEMTI0MkM5NTAwRkYzRjQ2QjZFREIxQUY0 RTI5MzIxQjk3ODZFOUFBQkVERUQwNzFDMTI4MjEzLzAvMzNFOURBMDgzMkE5QkI3 MDNGNDJEQTJDRTUzNTI3QTJGMTA0RDUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0U5REEwODMyQTlCQjcwM0Y0 MkRBMkNFNTM1MjdBMkYxMDRENTA5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjkxQzA3MDE3RDEyNDJDOTUwMEZGM0Y0NkI2RURCMUFGNEUyOTMyMUI5 Nzg2RTlBQUJFREVEMDcxQzEyODIxMy8wLzMzRTlEQTA4MzJBOUJCNzAzRjQyREEy Q0U1MzUyN0EyRjEwNEQ1MDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOB4K2jjM/Tkqgowp3kYF4y1Xs UsSnA1KszvFixdh/MsMTB6gEab7t/6LrU1eURG1WZ6iRI/DM1K2dfno+Ou2wwSXJ 50qTrl8n+X/Slb/lprMwO5s0CdkDavSFerV8J6SPWit6QW/NIfOHsyymEZGU4mBA ekKlCgrDFGgBstc0aWlMvs34UK4Zu2Xwd1yGmTA1ClYGjbOkKOYG7+rWB/E1YHpM 2lu0RFz5NALa8PyItgi/zX9+tayM1Ixol9k2s0UWg+lTupmsPkmWNMBiKnRzf2cB M1YdF2374lw/6RtsEZLzSz/5BKon+HReanz4z5BjkDg0V6vxIZHWlwJGiuql -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:04 2025 by rpki-client