$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft File: 6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft (raw, json) Hash identifier: ObNulQtd187MX+oxxGMINkEA0gdDnsVk9JtEAOQMZ+4= Subject key identifier: D7:27:7B:77:11:D5:F5:BE:9A:E5:AE:DA:36:96:2E:E7:0E:7D:0A:C2 Authority key identifier: 6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A Certificate issuer: /CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A Certificate serial: 2E2C492967FB11F99D29317A99CC186E09293B83 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft Manifest number: 0139 Signing time: Wed 05 Nov 2025 18:05:44 +0000 Manifest this update: Wed 05 Nov 2025 18:00:44 +0000 Manifest next update: Tue 11 Nov 2025 04:55:44 +0000 Files and hashes: 1: 6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl (hash: i2NxIz3Sh0osuw/BjSWlpsRkTqnhnNeALMdVFyZiG2o=) 2: 3133382e302e3138342e302f32322d3234203d3e20323633373336.roa (hash: LreV3pWxeKKCikUJg8gOiT+QcUPi7aBmdK7BJoLjxII=) 3: 323830333a333738303a3a2f33322d3438203d3e20323633373336.roa (hash: JsfkzHgd62PLshMgZRGVLPzkv986/0klf+PAgJXraxY=) 4: 3137302e3233392e3132382e302f32322d3234203d3e20323633373336.roa (hash: ZjuXBLq6kh06FNk3nUx9QMlVljFchcVqsd6haxB6b9U=) 5: 3134332e3133372e32302e302f32322d3234203d3e20323633373336.roa (hash: KDXCOis003itqjsQnqa89/YB7rkYgCnu5yCRyjBrmdM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2c:49:29:67:fb:11:f9:9d:29:31:7a:99:cc:18:6e:09:29:3b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A Validity Not Before: Nov 5 18:00:44 2025 GMT Not After : Nov 11 04:55:44 2025 GMT Subject: CN=D7277B7711D5F5BE9AE5AEDA36962EE70E7D0AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:31:96:99:e7:29:f2:e7:48:ee:71:58:d3: ee:fd:fb:d7:f8:0b:74:a0:03:63:29:51:0e:03:5b: 50:25:03:e3:43:c8:ad:67:54:6a:a7:8c:8f:3d:ed: 4a:df:51:fd:4d:33:a0:61:53:e2:09:2a:d7:db:d2: 38:cc:58:14:2f:32:8e:b1:f4:66:f6:4d:17:4b:d6: 77:ed:c2:82:7b:0d:58:69:94:41:0b:13:1e:d4:20: 1c:56:90:18:59:c3:ee:af:c1:11:60:52:77:5e:6c: d0:6c:f9:2f:aa:09:63:0f:90:d4:3f:5b:d8:bd:8c: f4:83:cf:53:c8:69:f3:48:eb:87:67:28:60:9e:42: 1e:8b:48:d9:ff:1d:79:2a:5a:d9:37:76:97:c5:b1: 81:0b:d9:29:68:ce:f0:6c:cb:29:f4:b9:7a:c2:c7: e2:c5:33:41:9c:04:d1:5c:53:8d:16:cd:be:53:ae: ca:4a:f0:25:77:76:c1:61:a3:ca:d2:e6:c4:c1:c4: 33:79:7f:01:7d:ca:1e:18:2a:36:52:5c:20:a9:59: b7:00:6f:2b:97:d2:71:e2:bb:43:4c:2a:3b:3a:42: 94:35:3a:18:5d:02:46:05:fe:b6:c6:11:7d:d7:4c: bf:16:a2:11:f5:7d:6e:fa:3a:b9:1e:be:4b:1d:29: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:7B:77:11:D5:F5:BE:9A:E5:AE:DA:36:96:2E:E7:0E:7D:0A:C2 X509v3 Authority Key Identifier: keyid:6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:13:6c:b5:cf:88:67:d9:73:38:70:8c:66:42:28:eb:b5:a8: 54:44:ac:3c:4d:89:81:c6:d2:76:f2:95:9c:8c:01:e6:c5:2c: d8:a5:63:62:29:5b:2b:83:52:9b:e4:80:e3:83:b3:8e:11:94: f3:a2:68:9f:96:fe:ee:41:ea:17:63:f2:d3:6d:60:03:03:53: b2:5d:fb:39:d0:67:0b:6f:71:2c:48:84:d4:d7:be:e7:82:25: 22:ac:c3:6d:52:f0:e5:8b:96:f5:36:b4:40:54:49:b5:54:2a: ff:ca:6d:b7:4d:a3:0e:f4:18:ca:7c:5e:9b:20:a5:22:12:d5: c3:ce:1e:8e:58:84:55:e3:1f:72:ac:ac:39:db:84:46:ba:f1: b8:34:94:01:07:c7:f5:e5:df:cf:3b:b6:66:ee:f8:54:3e:6a: a0:28:a2:f2:05:54:24:d7:18:bf:ff:73:b7:ec:aa:96:5b:e4: 77:10:38:d3:cc:b6:b1:38:bf:e5:b7:65:f6:82:c9:4e:cd:84: 2a:69:6c:66:37:29:7e:52:7c:ed:a4:0b:03:70:9f:15:a9:31: 0e:4e:60:83:e7:8f:99:85:d8:98:af:98:be:55:0e:e5:82:38: 9b:30:7b:ca:e0:a3:75:c1:83:1b:31:74:b3:aa:46:2a:b2:bc: aa:ee:57:ed -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULixJKWf7EfmdKTF6mcwYbgkpO4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzRkMzRDFFRjE0OTdCNjUwRUE0QjhGMjM4QzcxRjI0 MkNDRDg4QTAeFw0yNTExMDUxODAwNDRaFw0yNTExMTEwNDU1NDRaMDMxMTAvBgNV BAMTKEQ3Mjc3Qjc3MTFENUY1QkU5QUU1QUVEQTM2OTYyRUU3MEU3RDBBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeODGWmecp8udI7nFY0+79+9f4 C3SgA2MpUQ4DW1AlA+NDyK1nVGqnjI897UrfUf1NM6BhU+IJKtfb0jjMWBQvMo6x 9Gb2TRdL1nftwoJ7DVhplEELEx7UIBxWkBhZw+6vwRFgUndebNBs+S+qCWMPkNQ/ W9i9jPSDz1PIafNI64dnKGCeQh6LSNn/HXkqWtk3dpfFsYEL2SlozvBsyyn0uXrC x+LFM0GcBNFcU40Wzb5TrspK8CV3dsFho8rS5sTBxDN5fwF9yh4YKjZSXCCpWbcA byuX0nHiu0NMKjs6QpQ1OhhdAkYF/rbGEX3XTL8WohH1fW76OrkevksdKfArAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1yd7dxHV9b6a5a7aNpYu5w59CsIwHwYDVR0j BBgwFoAUbT/D0e8Ul7ZQ6kuPI4xx8kLM2IowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNDg5RURERUREMTY4NDBCMjg1QkNGMTExNTNERDFBMDRC MTgwRTUxODI2RjNCMTIxMTg0Rjc1MEM4MjRGRjg4LzAvNkQzRkMzRDFFRjE0OTdC NjUwRUE0QjhGMjM4QzcxRjI0MkNDRDg4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDNGQzNEMUVGMTQ5N0I2NTBF QTRCOEYyMzhDNzFGMjQyQ0NEODhBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTQ4OUVEREVERDE2ODQwQjI4NUJDRjExMTUzREQxQTA0QjE4MEU1MTgy NkYzQjEyMTE4NEY3NTBDODI0RkY4OC8wLzZEM0ZDM0QxRUYxNDk3QjY1MEVBNEI4 RjIzOEM3MUYyNDJDQ0Q4OEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWE2y1z4hn2XM4cIxmQijrtahU RKw8TYmBxtJ28pWcjAHmxSzYpWNiKVsrg1Kb5IDjg7OOEZTzomiflv7uQeoXY/LT bWADA1OyXfs50GcLb3EsSITU177ngiUirMNtUvDli5b1NrRAVEm1VCr/ym23TaMO 9BjKfF6bIKUiEtXDzh6OWIRV4x9yrKw524RGuvG4NJQBB8f15d/PO7Zm7vhUPmqg KKLyBVQk1xi//3O37KqWW+R3EDjTzLaxOL/lt2X2gslOzYQqaWxmNyl+UnztpAsD cJ8VqTEOTmCD54+ZhdiYr5i+VQ7lgjibMHvK4KN1wYMbMXSzqkYqsryq7lft -----END CERTIFICATE-----Generated at Wed Nov 5 22:49:19 2025 by rpki-client