$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft File: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft (raw, json) Hash identifier: 3hqUM4TXlcL42xyCMUNQAo5fZVhJKcHK2t31cTBz07M= Subject key identifier: A3:23:DE:37:56:2D:6C:B6:54:5A:CE:D5:B3:DF:DA:1A:6B:16:41:D6 Authority key identifier: D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0 Certificate issuer: /CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0 Certificate serial: 6F3F8A858D3E3D14F83AEA2A619FF6B8AAADCC27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft Manifest number: 33 Signing time: Tue 04 Nov 2025 07:26:55 +0000 Manifest this update: Tue 04 Nov 2025 07:21:55 +0000 Manifest next update: Sat 08 Nov 2025 22:51:55 +0000 Files and hashes: 1: 323830333a343165303a3a2f33322d3332203d3e20323639393935.roa (hash: 9a73hHXsUpINg4/Jlvrnj1XEPuNRON7CSa8QHkSYsnI=) 2: 3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa (hash: HTar7+pZfbldc2ylEfFBE6h06Z0KculQNaqKWJvTnig=) 3: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl (hash: 0jH437LweEnnHbbSyv0s2FDHW/fUDqV1wey5XWdoLHg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 22:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3f:8a:85:8d:3e:3d:14:f8:3a:ea:2a:61:9f:f6:b8:aa:ad:cc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0 Validity Not Before: Nov 4 07:21:55 2025 GMT Not After : Nov 8 22:51:55 2025 GMT Subject: CN=A323DE37562D6CB6545ACED5B3DFDA1A6B1641D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:97:50:c8:b4:a2:32:c5:26:b6:bd:4a:d6: a3:d2:50:41:7e:16:4d:cd:73:36:c9:d1:a3:d2:83: 28:95:b6:79:22:a1:01:90:83:a2:f0:c5:ad:e8:ff: ce:3a:4c:80:e4:e9:3f:eb:ed:e4:23:8b:23:ab:b9: 7f:89:f3:f7:82:8a:53:34:dd:82:36:bf:21:8e:55: 64:d5:b5:84:00:7a:84:76:35:1b:6f:1e:7a:ce:6d: 4e:31:f2:cf:b9:6d:38:05:38:c2:8c:1c:76:68:8d: e6:c0:8a:21:13:54:91:a5:64:fd:9f:ac:65:41:e0: 32:7d:92:75:a7:01:be:d6:cf:c4:aa:59:5f:b7:bb: a1:28:68:43:31:e0:74:02:a4:e1:b5:63:c6:d9:fe: 03:69:67:1b:d4:59:98:ab:1d:24:02:5b:22:59:73: 7e:c6:e7:92:eb:d4:68:31:56:02:27:14:29:15:c4: 90:50:c6:84:58:f6:95:19:c0:57:70:34:d5:e4:49: c4:dd:21:3d:17:ea:25:5c:f2:72:c5:5f:99:12:08: e1:3b:c1:bd:54:8c:70:af:f9:f5:27:02:c7:63:91: 83:a3:5a:7e:10:bf:23:bc:04:11:6a:5f:86:f0:6b: b2:f7:ec:d4:5b:34:d4:ca:2c:d3:85:aa:c6:5a:56: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:DE:37:56:2D:6C:B6:54:5A:CE:D5:B3:DF:DA:1A:6B:16:41:D6 X509v3 Authority Key Identifier: keyid:D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e5:cd:b9:00:65:f5:d5:23:04:cd:01:86:e4:e8:dd:2e:07: 72:5c:e1:e1:26:5a:ff:6f:5d:13:1f:c2:6c:95:43:ea:c4:3c: a2:8e:46:7c:de:af:eb:8e:a6:ac:2a:94:41:ab:3e:9d:cd:47: 3b:1d:9b:f3:43:a1:f4:5a:0a:d0:2a:81:ef:5e:8d:ae:53:13: 52:a8:d7:ee:c2:59:b8:6c:cc:03:5e:55:3d:19:2f:1b:91:f8: be:a2:92:96:02:54:e8:80:22:91:48:91:82:3d:ae:3b:2c:62: 39:2d:ff:d8:e9:de:e4:ae:f0:eb:21:67:eb:3c:54:21:c9:d4: 23:ab:5f:3d:65:2d:25:fb:fd:e6:26:db:57:dd:3b:8d:92:2b: 49:7e:9e:a5:8e:6c:d7:6a:0f:fb:0b:93:de:91:91:2f:21:81: 2a:49:89:e7:b5:1e:0c:64:a5:d2:1f:15:26:12:00:ac:65:86: d9:d8:7c:57:ed:09:ca:3e:3a:e8:c2:45:69:d3:3b:38:61:52: c3:f8:03:f1:f1:1e:92:e8:7f:a6:fa:32:a0:5d:e5:83:b7:33: fc:71:8b:38:56:dd:12:16:e1:0d:06:66:ec:cd:75:e8:c0:14: e1:81:74:91:40:cd:02:25:8a:68:36:d6:47:2d:eb:6f:17:0d: 57:ac:67:17 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbz+KhY0+PRT4OuoqYZ/2uKqtzCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTBBM0U4MjM3RkZCNjFBMUU1RkY1QTMzNTk1RDRB QjREQzlFMDAeFw0yNTExMDQwNzIxNTVaFw0yNTExMDgyMjUxNTVaMDMxMTAvBgNV BAMTKEEzMjNERTM3NTYyRDZDQjY1NDVBQ0VENUIzREZEQTFBNkIxNjQxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4R5dQyLSiMsUmtr1K1qPSUEF+ Fk3NczbJ0aPSgyiVtnkioQGQg6Lwxa3o/846TIDk6T/r7eQjiyOruX+J8/eCilM0 3YI2vyGOVWTVtYQAeoR2NRtvHnrObU4x8s+5bTgFOMKMHHZojebAiiETVJGlZP2f rGVB4DJ9knWnAb7Wz8SqWV+3u6EoaEMx4HQCpOG1Y8bZ/gNpZxvUWZirHSQCWyJZ c37G55Lr1GgxVgInFCkVxJBQxoRY9pUZwFdwNNXkScTdIT0X6iVc8nLFX5kSCOE7 wb1UjHCv+fUnAsdjkYOjWn4QvyO8BBFqX4bwa7L37NRbNNTKLNOFqsZaVrJ7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoyPeN1YtbLZUWs7Vs9/aGmsWQdYwHwYDVR0j BBgwFoAU2KkKPoI3/7YaHl/1ozWV1KtNyeAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMEY4NzBFMDdFMEUyMzNFQThFQzk2RUE3RjQ5MDc3Qjc1 OEVGNTE2NEE1Qzk3RjMwNjQyQUI1NzgyQTY5OUIyLzAvRDhBOTBBM0U4MjM3RkZC NjFBMUU1RkY1QTMzNTk1RDRBQjREQzlFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEE5MEEzRTgyMzdGRkI2MUEx RTVGRjVBMzM1OTVENEFCNERDOUUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDBGODcwRTA3RTBFMjMzRUE4RUM5NkVBN0Y0OTA3N0I3NThFRjUxNjRB NUM5N0YzMDY0MkFCNTc4MkE2OTlCMi8wL0Q4QTkwQTNFODIzN0ZGQjYxQTFFNUZG NUEzMzU5NUQ0QUI0REM5RTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR5c25AGX11SMEzQGG5OjdLgdy XOHhJlr/b10TH8JslUPqxDyijkZ83q/rjqasKpRBqz6dzUc7HZvzQ6H0WgrQKoHv Xo2uUxNSqNfuwlm4bMwDXlU9GS8bkfi+opKWAlTogCKRSJGCPa47LGI5Lf/Y6d7k rvDrIWfrPFQhydQjq189ZS0l+/3mJttX3TuNkitJfp6ljmzXag/7C5PekZEvIYEq SYnntR4MZKXSHxUmEgCsZYbZ2HxX7QnKPjrowkVp0zs4YVLD+APx8R6S6H+m+jKg XeWDtzP8cYs4Vt0SFuENBmbszXXowBThgXSRQM0CJYpoNtZHLetvFw1XrGcX -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:59 2025 by rpki-client