$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft File: 4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft (raw, json) Hash identifier: KFAHgzUCOG+qq1V9b/vKLYnA+n6/ldlccwmQTjsqYWE= Subject key identifier: DD:2A:C6:7D:58:9A:58:59:AC:37:17:58:D2:15:AB:8B:D1:A0:38:48 Authority key identifier: 4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20 Certificate issuer: /CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720 Certificate serial: 5B96A54D27179B19C28EA9C405E28B81386C7BEF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft Manifest number: D9 Signing time: Mon 20 Oct 2025 15:01:26 +0000 Manifest this update: Mon 20 Oct 2025 14:56:26 +0000 Manifest next update: Sat 25 Oct 2025 21:04:26 +0000 Files and hashes: 1: 34352e3136382e3233322e302f32322d3234203d3e203238333934.roa (hash: 6FAzLTO0RSqkT6qWQ+0JBJCN1N4/qhas8EPvVvsICpg=) 2: 323830363a3331613a3a2f33322d3438203d3e203238333934.roa (hash: LYae6E4+xuGKXOOpNU0GbfgI22Vew+Y88jUqdMgpQhE=) 3: 4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl (hash: 98DExWw40xmDBpLim4C9oHUF5nd33+/eFL/6+PDW/gg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:96:a5:4d:27:17:9b:19:c2:8e:a9:c4:05:e2:8b:81:38:6c:7b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720 Validity Not Before: Oct 20 14:56:26 2025 GMT Not After : Oct 25 21:04:26 2025 GMT Subject: CN=DD2AC67D589A5859AC371758D215AB8BD1A03848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:bf:24:5d:57:5c:af:85:62:a9:58:12:10: 7d:c2:b7:72:30:af:f7:e9:86:7e:dc:a8:29:7a:a6: b5:88:aa:82:f8:5d:fe:9c:a9:d2:4d:c0:20:ca:30: 7e:8e:75:dd:fc:8d:f8:ff:36:91:d0:34:9b:10:c5: 8d:8e:8f:65:04:44:89:ea:13:85:b4:74:a1:2c:30: de:b3:da:15:04:15:9e:ac:67:70:8f:76:9c:0c:57: af:9b:7b:f8:f1:9a:60:7c:d6:03:58:69:15:9a:75: 4b:9e:6f:06:10:5b:00:14:62:f3:1d:af:03:c7:8a: 89:ac:33:4d:7c:9c:4b:49:5a:b0:cd:60:94:f7:47: 94:04:fe:e0:bd:4d:60:a4:c2:4d:d4:1c:10:4e:a3: 66:37:64:b9:2c:e7:c2:4a:76:ba:40:23:f5:03:b6: 9e:c1:56:ad:2d:3d:2d:8a:d9:cf:d8:74:bc:16:c5: bb:ff:53:52:b3:77:b0:a3:1d:08:25:53:bc:ae:9d: ca:69:67:98:56:f3:c0:03:b0:7d:88:9f:ad:37:9b: ba:a8:61:3a:a6:5c:74:4c:7d:60:7d:21:06:d3:a3: 71:3b:25:44:d0:bf:9a:c7:b9:48:ac:a9:86:e6:e1: 91:c5:10:71:06:85:ed:9e:fe:5b:9c:ae:f4:df:17: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:C6:7D:58:9A:58:59:AC:37:17:58:D2:15:AB:8B:D1:A0:38:48 X509v3 Authority Key Identifier: keyid:4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:66:ad:9b:48:33:97:40:f4:10:eb:b5:69:e5:5b:2c:2f:e5: 44:7d:ad:02:4b:69:9a:a3:28:8b:84:1b:45:37:56:ff:9b:41: 4c:a2:83:98:5c:b6:3f:6c:31:12:d3:03:e8:4f:35:3a:bf:6d: 46:31:56:3d:37:9e:25:1c:f1:fb:1a:4c:6d:c8:7b:24:8b:cb: 26:f3:4a:61:46:33:28:06:b1:c4:99:9b:e0:ec:8e:f6:6b:51: 4e:21:fa:75:ed:e2:3f:5f:48:e3:e3:56:4d:af:dc:e5:91:4a: 93:36:01:c6:81:7f:4d:3f:70:2d:b9:c7:6d:9e:bc:8c:ef:e7: db:10:b3:38:68:0a:14:1f:43:fb:44:f2:dc:05:2d:e2:79:ed: 9d:8c:10:c2:50:3f:e5:d1:17:5e:eb:ab:cf:34:76:61:ed:c1: 7a:16:f5:ec:8c:d7:e8:e4:b3:88:20:8b:d6:cf:9a:20:a2:98: 4b:2a:ed:57:a9:69:70:26:92:ff:bc:e6:63:f3:d7:18:b9:68: c6:0f:25:30:94:cf:33:84:e9:14:d1:07:2d:f0:8b:97:ac:23: 7e:bb:8c:6a:83:7a:63:fd:88:4e:7e:b6:c7:e7:a9:e6:01:c6: 66:0b:e0:29:4c:bb:75:d9:a0:1d:13:a5:64:24:7e:5c:7a:19: 00:17:99:c1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW5alTScXmxnCjqnEBeKLgThse+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMjkyMUQxQjMwQTNFMEY2OUFCMkUxQTBGOTdCMDJC QTU5MDcyMDAeFw0yNTEwMjAxNDU2MjZaFw0yNTEwMjUyMTA0MjZaMDMxMTAvBgNV BAMTKEREMkFDNjdENTg5QTU4NTlBQzM3MTc1OEQyMTVBQjhCRDFBMDM4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk78kXVdcr4ViqVgSEH3Ct3Iw r/fphn7cqCl6prWIqoL4Xf6cqdJNwCDKMH6Odd38jfj/NpHQNJsQxY2Oj2UERInq E4W0dKEsMN6z2hUEFZ6sZ3CPdpwMV6+be/jxmmB81gNYaRWadUuebwYQWwAUYvMd rwPHiomsM018nEtJWrDNYJT3R5QE/uC9TWCkwk3UHBBOo2Y3ZLks58JKdrpAI/UD tp7BVq0tPS2K2c/YdLwWxbv/U1Kzd7CjHQglU7yuncppZ5hW88ADsH2In603m7qo YTqmXHRMfWB9IQbTo3E7JUTQv5rHuUisqYbm4ZHFEHEGhe2e/lucrvTfFwNPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3SrGfViaWFmsNxdY0hWri9GgOEgwHwYDVR0j BBgwFoAUTtKSHRswo+D2mrLhoPl7ArpZByAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRTk2M0E3NEFDMUQyNDFFOEUxRTk3NUI4QzlDMUNCRTNG QkFCRkMxMTMzNjMyMTgxRUQ4NTRFOUVCREFBOTQwLzAvNEVEMjkyMUQxQjMwQTNF MEY2OUFCMkUxQTBGOTdCMDJCQTU5MDcyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RUQyOTIxRDFCMzBBM0UwRjY5 QUIyRTFBMEY5N0IwMkJBNTkwNzIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0U5NjNBNzRBQzFEMjQxRThFMUU5NzVCOEM5QzFDQkUzRkJBQkZDMTEz MzYzMjE4MUVEODU0RTlFQkRBQTk0MC8wLzRFRDI5MjFEMUIzMEEzRTBGNjlBQjJF MUEwRjk3QjAyQkE1OTA3MjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOZq2bSDOXQPQQ67Vp5VssL+VE fa0CS2maoyiLhBtFN1b/m0FMooOYXLY/bDES0wPoTzU6v21GMVY9N54lHPH7Gkxt yHski8sm80phRjMoBrHEmZvg7I72a1FOIfp17eI/X0jj41ZNr9zlkUqTNgHGgX9N P3AtucdtnryM7+fbELM4aAoUH0P7RPLcBS3iee2djBDCUD/l0Rde66vPNHZh7cF6 FvXsjNfo5LOIIIvWz5ogophLKu1XqWlwJpL/vOZj89cYuWjGDyUwlM8zhOkU0Qct 8IuXrCN+u4xqg3pj/YhOfrbH56nmAcZmC+ApTLt12aAdE6VkJH5cehkAF5nB -----END CERTIFICATE-----Generated at Mon Oct 20 20:23:26 2025 by rpki-client