$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft File: 18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft (raw, json) Hash identifier: kvHCqsWAbryZfxMoPyy5zLTMABoJIVF4/Fyf/fqek2Q= Subject key identifier: F2:1D:37:06:4C:95:1D:0B:41:F9:1A:CA:22:C7:98:DA:C8:5E:FE:1C Authority key identifier: 18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5 Certificate issuer: /CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5 Certificate serial: 25C6957E47296A6077D421E6B77DC205C7A8D8F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 15:51:28 +0000 Manifest this update: Tue 04 Nov 2025 15:46:28 +0000 Manifest next update: Sun 09 Nov 2025 10:26:28 +0000 Files and hashes: 1: 323830333a626331303a3a2f33322d3332203d3e20323731383833.roa (hash: TDT0EM+y0efyoRma/01SoHPFpnovMIuKaEtjyyxANKk=) 2: 3139302e3131332e33362e302f32322d3234203d3e20323731383833.roa (hash: EqS/RdMoigSetxQE28lRPAsgS+QX7IyjVlENBU6ymMo=) 3: 18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl (hash: sy+uLP6vmYg26mzmJHLIAZ4aySw3NCmcu2JPkPD9sX4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c6:95:7e:47:29:6a:60:77:d4:21:e6:b7:7d:c2:05:c7:a8:d8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5 Validity Not Before: Nov 4 15:46:28 2025 GMT Not After : Nov 9 10:26:28 2025 GMT Subject: CN=F21D37064C951D0B41F91ACA22C798DAC85EFE1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:7a:44:ee:63:25:21:e0:99:da:8b:a2:14: 7d:63:6f:a7:cc:ba:44:9e:17:a3:e9:b9:1e:58:85: 1c:48:f9:62:42:7c:0e:ed:24:9c:6c:09:e7:32:c4: 6e:ab:05:44:9e:e3:b5:18:1d:47:73:0d:fd:e6:20: 1f:58:81:1c:d2:43:38:1d:4f:43:65:fa:1d:9d:77: bb:08:19:0b:a7:9b:9f:1d:ca:47:ba:38:6f:0f:75: 56:9b:4f:d1:c2:a3:80:83:a5:e7:84:45:2c:dd:16: 64:1e:58:18:2a:64:61:ff:3d:2e:af:c7:45:23:1c: f3:3f:90:b8:dc:49:71:9b:03:f6:6c:88:98:32:fe: 58:26:e1:b1:fe:3b:06:ec:cf:59:8f:80:8b:17:03: 64:40:66:e0:ed:14:5d:3b:c2:ed:5f:3f:b1:60:67: a4:16:69:4b:aa:b6:7c:ac:0b:d8:81:bb:42:ea:9f: 5e:79:76:ba:ee:3e:03:0a:a3:99:b2:e1:0b:be:96: 90:9e:2f:f0:0a:20:0d:04:04:74:71:46:9d:1c:19: 71:36:6a:14:6b:d2:0d:74:4b:bd:b4:94:10:72:a5: ec:eb:7d:7a:5a:fc:82:a4:ee:8d:c6:5b:9b:86:da: 13:94:cb:db:33:89:f3:f7:29:94:ba:84:52:f3:f2: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1D:37:06:4C:95:1D:0B:41:F9:1A:CA:22:C7:98:DA:C8:5E:FE:1C X509v3 Authority Key Identifier: keyid:18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:16:f6:ba:0e:28:51:64:43:38:b7:a8:f7:ee:6a:29:38:cc: 5b:aa:b5:5c:b5:7c:42:9f:5e:b0:2d:70:a4:41:d8:e7:9d:82: cf:11:48:12:81:88:d2:b2:02:e7:c7:63:8e:6b:6a:cc:6b:bc: e1:cb:41:96:5c:c7:cc:f1:10:82:f3:8d:b3:63:21:af:5e:c3: a1:df:06:96:8a:5e:fa:c6:09:a2:63:0a:b2:9e:73:5a:91:b1: c4:a1:5b:9b:8c:da:fc:45:eb:49:2d:69:68:3b:fc:e0:4c:5f: d7:6d:38:d7:cf:15:a5:e4:18:a4:3b:57:b4:4c:d6:84:1c:b2: e7:bc:5b:c7:32:c9:5e:c1:3c:f3:ae:c2:92:e3:70:e5:db:15: 70:d8:39:de:36:6a:25:10:e1:7f:52:e6:31:b5:3d:d9:2c:26: 3b:b0:c7:86:25:96:dd:2c:1c:1b:3c:a4:21:da:af:d9:15:c8: 71:2b:93:23:26:31:a0:a6:34:5f:01:b3:d3:3b:9a:bd:55:2b: e8:f4:ed:b7:da:70:3e:7b:29:47:86:7d:d1:27:64:22:d0:65: e8:7d:ef:8d:3c:da:e9:da:d8:2e:75:34:01:0f:15:18:48:a3: 08:75:72:c9:65:33:a5:15:57:65:cf:88:e6:ae:29:2c:ad:45: 52:39:16:45 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJcaVfkcpamB31CHmt33CBceo2PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThEMDI1RTg4OEM5MzJFMzVGOUIyMjAxNUI1OEZDN0M5 QUZENTBBNTAeFw0yNTExMDQxNTQ2MjhaFw0yNTExMDkxMDI2MjhaMDMxMTAvBgNV BAMTKEYyMUQzNzA2NEM5NTFEMEI0MUY5MUFDQTIyQzc5OERBQzg1RUZFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcknpE7mMlIeCZ2ouiFH1jb6fM ukSeF6PpuR5YhRxI+WJCfA7tJJxsCecyxG6rBUSe47UYHUdzDf3mIB9YgRzSQzgd T0Nl+h2dd7sIGQunm58dyke6OG8PdVabT9HCo4CDpeeERSzdFmQeWBgqZGH/PS6v x0UjHPM/kLjcSXGbA/ZsiJgy/lgm4bH+Owbsz1mPgIsXA2RAZuDtFF07wu1fP7Fg Z6QWaUuqtnysC9iBu0Lqn155drruPgMKo5my4Qu+lpCeL/AKIA0EBHRxRp0cGXE2 ahRr0g10S720lBBypezrfXpa/IKk7o3GW5uG2hOUy9szifP3KZS6hFLz8un5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8h03BkyVHQtB+RrKIseY2she/hwwHwYDVR0j BBgwFoAUGNAl6IjJMuNfmyIBW1j8fJr9UKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNjE1NDQ5MTFFNjE1QkVDNjQxNEMwRTYxM0JFNkUyMThF NDJDOTRGQjRFRjNBMzFCNkY3MEI2MDAwRjg5QjA1LzAvMThEMDI1RTg4OEM5MzJF MzVGOUIyMjAxNUI1OEZDN0M5QUZENTBBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOEQwMjVFODg4QzkzMkUzNUY5 QjIyMDE1QjU4RkM3QzlBRkQ1MEE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTYxNTQ0OTExRTYxNUJFQzY0MTRDMEU2MTNCRTZFMjE4RTQyQzk0RkI0 RUYzQTMxQjZGNzBCNjAwMEY4OUIwNS8wLzE4RDAyNUU4ODhDOTMyRTM1RjlCMjIw MTVCNThGQzdDOUFGRDUwQTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOFva6DihRZEM4t6j37mopOMxb qrVctXxCn16wLXCkQdjnnYLPEUgSgYjSsgLnx2OOa2rMa7zhy0GWXMfM8RCC842z YyGvXsOh3waWil76xgmiYwqynnNakbHEoVubjNr8RetJLWloO/zgTF/XbTjXzxWl 5BikO1e0TNaEHLLnvFvHMslewTzzrsKS43Dl2xVw2DneNmolEOF/UuYxtT3ZLCY7 sMeGJZbdLBwbPKQh2q/ZFchxK5MjJjGgpjRfAbPTO5q9VSvo9O232nA+eylHhn3R J2Qi0GXofe+NPNrp2tgudTQBDxUYSKMIdXLJZTOlFVdlz4jmriksrUVSORZF -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:57 2025 by rpki-client