$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft File: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json) Hash identifier: auG9N7YBC2r0Kf0jmC3zye4z9PNfE/n5y7tMpU2j9ZA= Subject key identifier: E5:0E:A0:AE:C4:66:7D:F8:05:E5:F9:BB:EB:AD:49:71:67:67:5B:24 Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Certificate serial: 2FA62803B05B08976CE2DE4C63E43236B9689E71 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 10:58:59 +0000 Manifest this update: Tue 04 Nov 2025 10:53:59 +0000 Manifest next update: Sat 08 Nov 2025 22:50:59 +0000 Files and hashes: 1: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=) 2: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=) 3: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=) 4: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: t72q96UUr+0MVUlzvmweJ02PbGTBZlwpTFU2mypIS0M=) 5: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=) 6: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=) 7: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 22:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a6:28:03:b0:5b:08:97:6c:e2:de:4c:63:e4:32:36:b9:68:9e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Validity Not Before: Nov 4 10:53:59 2025 GMT Not After : Nov 8 22:50:59 2025 GMT Subject: CN=E50EA0AEC4667DF805E5F9BBEBAD497167675B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:d8:b5:cc:55:62:44:8f:21:de:99:98:59: 01:c0:af:c6:72:2d:34:6e:9e:47:51:d8:4f:37:70: 44:af:85:07:61:38:79:50:ed:7a:e9:d8:3f:e5:4a: b0:60:c1:3f:ad:5d:a6:5d:da:be:c1:4c:df:dc:33: a0:25:fd:be:ac:ca:b7:2c:e9:60:8c:3c:30:56:5d: 72:99:9f:36:e6:6f:f2:53:2a:33:e3:a8:61:fd:ba: 8d:42:8c:f1:c1:f3:5a:74:bd:36:1d:a7:20:f3:1f: 1f:00:00:9d:90:2b:fe:37:99:6b:c5:db:83:5a:45: 2f:d4:fe:ea:32:e8:2c:b5:02:93:23:01:2d:79:16: a2:a2:89:f3:db:75:8d:8d:11:9d:9b:a2:bf:d4:62: c2:f2:c7:ec:26:a8:49:ca:fe:ee:5e:18:ce:96:e1: cc:ad:05:77:33:61:66:72:7c:2f:f9:c9:a5:54:c5: 9c:4d:e6:6e:4d:21:5f:d7:ec:22:0d:ca:67:d3:cc: c8:6f:ce:fd:b6:1b:37:f0:fa:f3:fb:42:7b:76:b2: 95:b7:a9:ed:47:16:6b:ea:49:cf:e0:75:61:d7:15: 83:2f:67:0f:60:60:e8:b2:05:4d:f9:49:c9:5f:74: 7b:3d:35:92:c1:13:40:27:62:0a:f3:fc:83:7f:aa: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:A0:AE:C4:66:7D:F8:05:E5:F9:BB:EB:AD:49:71:67:67:5B:24 X509v3 Authority Key Identifier: keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:83:76:b5:bd:ff:bc:49:e3:19:4b:6d:d5:66:a0:f0:d4:b5: b1:3e:2b:d8:f5:7f:96:df:98:08:04:6d:aa:4a:35:36:0a:25: fc:da:47:bf:03:c3:5a:57:9c:4f:cb:92:ba:b6:8c:99:3a:63: d3:f1:62:b5:50:d7:48:e3:5d:54:34:c5:51:85:3c:f6:b1:d6: 3b:0b:2d:c9:b6:e0:44:7c:cc:38:ff:46:5d:19:aa:66:44:6e: e0:f0:2a:c2:18:50:cf:03:f7:d9:09:fe:47:7f:b7:ff:d1:6a: be:eb:6e:4d:7b:f2:89:5d:02:8e:22:7c:77:ef:2b:d2:36:78: dd:d1:0f:ec:2c:65:87:44:da:da:18:62:f6:39:66:2a:5a:58: 80:25:a9:66:ce:ce:d7:ac:52:0e:1f:5b:49:e8:26:35:c3:75: 80:83:5b:df:68:c6:fd:f6:92:ea:76:8d:37:ff:2d:0b:43:5c: 36:c2:0d:31:cd:e7:27:74:79:c2:0c:8a:c2:ab:81:45:f1:2e: 10:26:27:a6:e4:c2:4b:e5:0f:99:57:bf:28:b0:2c:9c:24:ac: d5:98:e4:10:43:e1:55:0b:3e:62:8a:f5:38:32:ce:cc:51:f0: 38:20:35:44:e8:50:9f:08:0a:5a:bc:f2:eb:8a:28:c2:ea:2a: 1f:20:d2:4f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL6YoA7BbCJds4t5MY+QyNrlonnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1 QzI2NDA2QTAeFw0yNTExMDQxMDUzNTlaFw0yNTExMDgyMjUwNTlaMDMxMTAvBgNV BAMTKEU1MEVBMEFFQzQ2NjdERjgwNUU1RjlCQkVCQUQ0OTcxNjc2NzVCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3b9i1zFViRI8h3pmYWQHAr8Zy LTRunkdR2E83cESvhQdhOHlQ7Xrp2D/lSrBgwT+tXaZd2r7BTN/cM6Al/b6syrcs 6WCMPDBWXXKZnzbmb/JTKjPjqGH9uo1CjPHB81p0vTYdpyDzHx8AAJ2QK/43mWvF 24NaRS/U/uoy6Cy1ApMjAS15FqKiifPbdY2NEZ2bor/UYsLyx+wmqEnK/u5eGM6W 4cytBXczYWZyfC/5yaVUxZxN5m5NIV/X7CINymfTzMhvzv22Gzfw+vP7Qnt2spW3 qe1HFmvqSc/gdWHXFYMvZw9gYOiyBU35SclfdHs9NZLBE0AnYgrz/IN/qkqJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5Q6grsRmffgF5fm7661JcWdnWyQwHwYDVR0j BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1 MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzI1RjI4RUYwRDBGOTNBNTI4QjM1RTA3 RjA0RENDRDdDNUMyNjQwNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtg3a1vf+8SeMZS23VZqDw1LWx PivY9X+W35gIBG2qSjU2CiX82ke/A8NaV5xPy5K6toyZOmPT8WK1UNdI411UNMVR hTz2sdY7Cy3JtuBEfMw4/0ZdGapmRG7g8CrCGFDPA/fZCf5Hf7f/0Wq+625Ne/KJ XQKOInx37yvSNnjd0Q/sLGWHRNraGGL2OWYqWliAJalmzs7XrFIOH1tJ6CY1w3WA g1vfaMb99pLqdo03/y0LQ1w2wg0xzecndHnCDIrCq4FF8S4QJiem5MJL5Q+ZV78o sCycJKzVmOQQQ+FVCz5iivU4Ms7MUfA4IDVE6FCfCApavPLriijC6iofINJP -----END CERTIFICATE-----Generated at Wed Nov 5 15:51:14 2025 by rpki-client