$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft File: 5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft (raw, json) Hash identifier: 9sixT6V/M6yfGlSRlpRIfshsQQ8gudnPcHJXw0ADj1o= Subject key identifier: 29:C8:17:24:EE:DA:C8:B1:1B:98:FB:1B:82:69:F0:B8:76:38:64:52 Authority key identifier: 5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D Certificate issuer: /CN=5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D Certificate serial: 50BD6B1921ECFE01C6DE3B262DC85157B3235204 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft Manifest number: 012C Signing time: Tue 04 Nov 2025 19:13:23 +0000 Manifest this update: Tue 04 Nov 2025 19:08:23 +0000 Manifest next update: Sun 09 Nov 2025 08:24:23 +0000 Files and hashes: 1: 323830313a31323a3130303a3a2f34342d3434203d3e20323731383138.roa (hash: fwJSYWjgisNo4olKjqVOIOIGUcZXlTdUlogUdAzyFnw=) 2: 5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.crl (hash: +0l1Zgsg7DHCYA7vDLg6X5JNOdQr0GfG+wME8w5ycnw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.crl rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bd:6b:19:21:ec:fe:01:c6:de:3b:26:2d:c8:51:57:b3:23:52:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D Validity Not Before: Nov 4 19:08:23 2025 GMT Not After : Nov 9 08:24:23 2025 GMT Subject: CN=29C81724EEDAC8B11B98FB1B8269F0B876386452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:f0:b0:48:81:af:f5:ca:34:8c:c3:f0:19: 52:e2:b9:34:2c:59:6b:35:c3:47:2c:b9:bc:5a:96: c6:fe:9d:a8:19:64:bf:f0:33:73:17:8d:22:5b:4f: 3b:a6:2b:85:1f:ce:ff:87:b7:cf:5a:94:58:67:b1: cb:b2:1e:84:ee:ce:0a:cb:01:52:d8:01:25:f2:0b: 3a:b6:bb:f2:96:1d:b5:ab:1c:26:d4:e3:fd:bd:aa: 4f:0a:22:d2:a7:16:d2:87:d4:77:cf:61:ed:3e:b5: fe:ae:a8:cc:0d:61:c7:6c:30:0d:d3:90:5a:f8:50: 33:9b:18:55:b3:37:83:db:64:98:c9:77:16:f0:e2: 22:a7:01:2d:13:f6:61:22:35:77:d6:0b:a7:b5:54: 54:89:a4:eb:fd:49:33:e8:c5:49:e7:b7:0a:f1:51: 7e:9b:57:8c:25:24:f8:73:1c:c0:94:1f:73:57:66: 81:63:f0:f9:03:53:fa:1a:f4:70:5a:12:62:27:8d: 21:95:63:c1:3d:35:7c:de:7b:e9:e3:93:fc:ab:34: dc:81:c8:73:49:e0:66:77:28:4e:49:e5:70:31:12: e3:16:9f:bf:d5:6e:d3:55:a4:df:2c:6a:c2:a1:89: 05:34:26:f3:d7:5b:65:e1:b5:cc:42:bd:04:b3:c9: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C8:17:24:EE:DA:C8:B1:1B:98:FB:1B:82:69:F0:B8:76:38:64:52 X509v3 Authority Key Identifier: keyid:5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:58:c9:ac:4d:af:9f:6a:c0:e6:53:ec:93:34:54:5c:7c:c5: d3:82:a0:a1:d2:63:f0:42:4e:ed:60:6a:63:e3:82:76:61:fb: db:08:7e:bd:10:2b:20:6d:79:6b:ac:0a:d5:e7:8c:2d:3b:95: 3b:f2:4b:a1:33:5a:b9:16:dd:3b:fd:b6:9c:16:4b:12:44:bc: dc:ae:6a:0b:63:a1:69:1d:d9:cb:fe:4e:17:25:7a:99:64:94: 0e:2e:16:a8:96:f2:d7:2c:40:d3:41:1e:a9:92:8e:9e:88:6a: 3f:17:7d:19:39:0f:9d:d8:dc:de:7a:80:3b:71:9c:d7:d0:11: 39:53:9b:ec:51:d3:41:b7:e0:ed:7d:6d:80:b4:c3:ad:91:53: b8:3b:39:eb:56:44:77:9b:fb:2f:c9:a8:35:ef:8a:3a:62:17: ef:8b:e7:8e:61:d6:59:4c:e5:04:59:a1:f6:9a:6c:db:4c:8d: d8:4c:b7:f4:d2:7f:a9:0c:02:36:33:ab:e6:85:ce:2a:6b:0d: 88:8a:3e:3e:f6:0c:22:34:f2:c1:04:63:91:3a:2a:40:8a:38: 38:8f:41:1b:49:d0:e4:00:a1:d7:b8:dc:4e:d5:0d:b4:9c:6f: a2:b3:b0:f7:69:2e:2c:73:a5:5f:f3:38:26:c5:46:7a:01:c9: f7:9d:11:9d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUL1rGSHs/gHG3jsmLchRV7MjUgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE3RkU0MzUwRDJBMDlFOTE2NDZDMERFNkM0QTNGQTY3 Q0VCQkIzRDAeFw0yNTExMDQxOTA4MjNaFw0yNTExMDkwODI0MjNaMDMxMTAvBgNV BAMTKDI5QzgxNzI0RUVEQUM4QjExQjk4RkIxQjgyNjlGMEI4NzYzODY0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0fCwSIGv9co0jMPwGVLiuTQs WWs1w0csubxalsb+nagZZL/wM3MXjSJbTzumK4Ufzv+Ht89alFhnscuyHoTuzgrL AVLYASXyCzq2u/KWHbWrHCbU4/29qk8KItKnFtKH1HfPYe0+tf6uqMwNYcdsMA3T kFr4UDObGFWzN4PbZJjJdxbw4iKnAS0T9mEiNXfWC6e1VFSJpOv9STPoxUnntwrx UX6bV4wlJPhzHMCUH3NXZoFj8PkDU/oa9HBaEmInjSGVY8E9NXzee+njk/yrNNyB yHNJ4GZ3KE5J5XAxEuMWn7/VbtNVpN8sasKhiQU0JvPXW2XhtcxCvQSzyf09AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKcgXJO7ayLEbmPsbgmnwuHY4ZFIwHwYDVR0j BBgwFoAUWn/kNQ0qCekWRsDebEo/pnzruz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wODVDMjcxNEI2NkJCQUQyNERBOEE5RUQ2RjA1MTZFQTBD QjAyNzU4MUEzNjAzMzM3QjE0MDJCM0NBOTQ4ODcwLzAvNUE3RkU0MzUwRDJBMDlF OTE2NDZDMERFNkM0QTNGQTY3Q0VCQkIzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QTdGRTQzNTBEMkEwOUU5MTY0 NkMwREU2QzRBM0ZBNjdDRUJCQjNELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDg1QzI3MTRCNjZCQkFEMjREQThBOUVENkYwNTE2RUEwQ0IwMjc1ODFB MzYwMzMzN0IxNDAyQjNDQTk0ODg3MC8wLzVBN0ZFNDM1MEQyQTA5RTkxNjQ2QzBE RTZDNEEzRkE2N0NFQkJCM0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyWMmsTa+fasDmU+yTNFRcfMXT gqCh0mPwQk7tYGpj44J2YfvbCH69ECsgbXlrrArV54wtO5U78kuhM1q5Ft07/bac FksSRLzcrmoLY6FpHdnL/k4XJXqZZJQOLhaolvLXLEDTQR6pko6eiGo/F30ZOQ+d 2NzeeoA7cZzX0BE5U5vsUdNBt+DtfW2AtMOtkVO4OznrVkR3m/svyag174o6Yhfv i+eOYdZZTOUEWaH2mmzbTI3YTLf00n+pDAI2M6vmhc4qaw2Iij4+9gwiNPLBBGOR OipAijg4j0EbSdDkAKHXuNxO1Q20nG+is7D3aS4sc6Vf8zgmxUZ6Acn3nRGd -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:22 2025 by rpki-client