$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.mft File: F229131AE00917D21FA8649A03866823F3A6B161.mft (raw, json) Hash identifier: rH/OGSf3NPU2+/zXk22ZINwUE/zVi0W2g8oVplPWhXU= Subject key identifier: 84:A1:59:9B:FA:56:E9:86:02:7C:2D:68:0E:8B:3F:6A:62:93:E6:77 Authority key identifier: F2:29:13:1A:E0:09:17:D2:1F:A8:64:9A:03:86:68:23:F3:A6:B1:61 Certificate issuer: /CN=F229131AE00917D21FA8649A03866823F3A6B161 Certificate serial: 4946B2C2650968588D24EA89A4BFEE4D2D5DB221 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F229131AE00917D21FA8649A03866823F3A6B161.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.mft Manifest number: 012A Signing time: Tue 04 Nov 2025 18:12:51 +0000 Manifest this update: Tue 04 Nov 2025 18:07:51 +0000 Manifest next update: Mon 10 Nov 2025 16:33:51 +0000 Files and hashes: 1: 323830333a666230303a3a2f33322d3332203d3e20323632323438.roa (hash: T7hrIqmGYAs0LT2GNODz58xJ7sC0WT2OXRrgJSR5QRM=) 2: 3137392e36332e3139322e302f32312d3231203d3e20323632323438.roa (hash: KCNd4sAEyybh87vVc6yn7xwBAci+PXV5M1QnKsnxfxU=) 3: F229131AE00917D21FA8649A03866823F3A6B161.crl (hash: V5R0Cnichm8AdKlL7r56jSsvdnUd8EoKOa2GyjrrnRs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.crl rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F229131AE00917D21FA8649A03866823F3A6B161.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:46:b2:c2:65:09:68:58:8d:24:ea:89:a4:bf:ee:4d:2d:5d:b2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F229131AE00917D21FA8649A03866823F3A6B161 Validity Not Before: Nov 4 18:07:51 2025 GMT Not After : Nov 10 16:33:51 2025 GMT Subject: CN=84A1599BFA56E986027C2D680E8B3F6A6293E677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:ee:64:d6:2d:5b:63:c7:8d:88:48:7f:a5: 99:ec:58:5a:ff:7f:52:bb:3d:d1:4e:26:29:37:7e: 26:49:fc:37:72:a7:20:c1:32:6b:78:a5:cd:4d:b4: e2:6c:6e:4d:f0:2f:99:d9:13:2f:1a:62:20:1d:df: 8d:04:e3:3e:91:de:ce:bb:58:bf:f2:5e:8e:c8:60: 84:5e:11:1f:be:44:53:55:81:2e:e6:73:d7:a8:c8: 75:f2:dc:6c:c9:d9:e8:b0:e3:27:61:d9:c0:38:ec: 5f:80:96:72:72:70:16:31:7c:93:58:b3:74:4e:21: c3:17:23:f9:e6:6c:c4:9a:cc:ee:ce:62:d9:3f:79: 3c:93:50:f3:88:26:44:c6:05:4f:9a:ed:46:0a:02: ff:99:49:17:9a:e9:fe:49:0b:d5:cc:10:75:64:f0: 77:d4:c5:da:f0:19:d7:ec:cd:7c:5a:ba:9c:a9:6a: 7f:dd:e4:23:bd:61:94:80:39:be:48:02:11:61:9c: b4:b7:23:33:1a:9d:80:96:2a:1c:c8:5b:e7:b3:6d: 51:6c:55:24:3a:68:ec:31:c2:d9:2b:f6:30:0e:00: 0e:86:33:43:d9:78:a6:92:f2:be:c9:02:3a:b7:88: 04:c0:0f:70:af:c4:88:19:d7:70:02:28:0a:bd:33: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A1:59:9B:FA:56:E9:86:02:7C:2D:68:0E:8B:3F:6A:62:93:E6:77 X509v3 Authority Key Identifier: keyid:F2:29:13:1A:E0:09:17:D2:1F:A8:64:9A:03:86:68:23:F3:A6:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F229131AE00917D21FA8649A03866823F3A6B161.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:40:17:c3:46:e1:98:41:bf:8f:35:f2:a0:c7:84:b1:1d:e8: 67:6c:d8:7f:47:07:fc:dc:1d:cf:71:03:4a:86:b4:19:32:45: 04:13:fa:b5:2f:83:6a:ed:5d:0b:ee:bc:81:9c:7b:60:5e:d4: b5:cc:03:ab:f4:0a:f7:0b:a4:32:e9:62:29:92:9a:37:ad:db: ee:94:53:4b:d2:a6:ea:da:8f:08:a8:18:7a:93:b0:31:ef:99: 3b:0e:7d:18:ab:e3:11:60:05:5e:2e:15:b0:5f:5e:f2:09:ec: 4a:6c:6c:88:80:21:91:99:d7:2e:97:53:90:1d:b8:a2:e1:43: 2c:f4:29:4e:29:33:af:8b:1c:50:68:11:94:b4:30:ac:62:64: 6b:66:18:27:15:5d:ec:69:d1:91:62:3f:05:81:82:8f:49:41: 15:49:75:ee:95:ca:47:7b:cc:3a:1e:df:ab:3b:04:63:c0:e5: 12:6e:b0:62:e8:95:a7:47:ef:13:e8:bb:14:77:2e:b9:13:cb: 67:bb:c3:6e:2a:92:cb:d0:3a:d4:65:ae:2c:c4:53:9a:48:a5: 0d:4f:8c:e8:6f:22:fb:33:5d:ad:bd:54:d1:9a:67:14:fa:a7: a9:3d:19:dc:f1:93:2d:d9:bf:b4:8a:c4:bf:dd:58:79:d3:34: cd:47:79:67 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSUaywmUJaFiNJOqJpL/uTS1dsiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyOTEzMUFFMDA5MTdEMjFGQTg2NDlBMDM4NjY4MjNG M0E2QjE2MTAeFw0yNTExMDQxODA3NTFaFw0yNTExMTAxNjMzNTFaMDMxMTAvBgNV BAMTKDg0QTE1OTlCRkE1NkU5ODYwMjdDMkQ2ODBFOEIzRjZBNjI5M0U2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCll+5k1i1bY8eNiEh/pZnsWFr/ f1K7PdFOJik3fiZJ/DdypyDBMmt4pc1NtOJsbk3wL5nZEy8aYiAd340E4z6R3s67 WL/yXo7IYIReER++RFNVgS7mc9eoyHXy3GzJ2eiw4ydh2cA47F+AlnJycBYxfJNY s3ROIcMXI/nmbMSazO7OYtk/eTyTUPOIJkTGBU+a7UYKAv+ZSRea6f5JC9XMEHVk 8HfUxdrwGdfszXxaupypan/d5CO9YZSAOb5IAhFhnLS3IzManYCWKhzIW+ezbVFs VSQ6aOwxwtkr9jAOAA6GM0PZeKaS8r7JAjq3iATAD3CvxIgZ13ACKAq9M1qFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhKFZm/pW6YYCfC1oDos/amKT5ncwHwYDVR0j BBgwFoAU8ikTGuAJF9IfqGSaA4ZoI/OmsWEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNThFOERDODU4QjVBMTRDMUI0MjVENzM1NzIzNkFDNjU2 Mjg3ODgyNkI1MTgwOTVGMjgwNjE2OTJDMUQ5NkY5LzAvRjIyOTEzMUFFMDA5MTdE MjFGQTg2NDlBMDM4NjY4MjNGM0E2QjE2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMjI5MTMxQUUwMDkxN0QyMUZB ODY0OUEwMzg2NjgyM0YzQTZCMTYxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTU4RThEQzg1OEI1QTE0QzFCNDI1RDczNTcyMzZBQzY1NjI4Nzg4MjZC NTE4MDk1RjI4MDYxNjkyQzFEOTZGOS8wL0YyMjkxMzFBRTAwOTE3RDIxRkE4NjQ5 QTAzODY2ODIzRjNBNkIxNjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApQBfDRuGYQb+PNfKgx4SxHehn bNh/Rwf83B3PcQNKhrQZMkUEE/q1L4Nq7V0L7ryBnHtgXtS1zAOr9Ar3C6Qy6WIp kpo3rdvulFNL0qbq2o8IqBh6k7Ax75k7Dn0Yq+MRYAVeLhWwX17yCexKbGyIgCGR mdcul1OQHbii4UMs9ClOKTOvixxQaBGUtDCsYmRrZhgnFV3sadGRYj8FgYKPSUEV SXXulcpHe8w6Ht+rOwRjwOUSbrBi6JWnR+8T6LsUdy65E8tnu8NuKpLL0DrUZa4s xFOaSKUNT4zobyL7M12tvVTRmmcU+qepPRnc8ZMt2b+0isS/3Vh50zTNR3ln -----END CERTIFICATE-----Generated at Wed Nov 5 05:30:25 2025 by rpki-client