$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft File: AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft (raw, json) Hash identifier: bZX2LO7cFj6Q6fGuQEV37jcQeYkWGHfxDdzTWkkW398= Subject key identifier: DD:3A:58:D4:8B:64:6D:97:47:24:0D:C1:AA:63:A9:67:D5:95:7E:4E Authority key identifier: AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92 Certificate issuer: /CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192 Certificate serial: 076883706BF8CCD26DC88936E493942AD1457B00 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft Manifest number: 0136 Signing time: Wed 05 Nov 2025 13:02:58 +0000 Manifest this update: Wed 05 Nov 2025 12:57:58 +0000 Manifest next update: Tue 11 Nov 2025 03:13:58 +0000 Files and hashes: 1: AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl (hash: v8p0QbTW1H1W4VxhCSfKGMeiGwc06Jy12otIaWo8P8U=) 2: 3133312e37322e3133362e302f32322d3234203d3e20323732303433.roa (hash: 1x91KxcDGe+GzaszHkOoQot0dXtb858whFYeE+Z/9yw=) 3: 3133312e37322e3133382e302f32342d3234203d3e20323733393533.roa (hash: 2dALEtw56Az1FhPka9rqXHuT0QttK5olewK/LDfITdE=) 4: 323830333a366431303a3a2f33322d3438203d3e20323732303433.roa (hash: b9P/rcapiUVJVoMIUbs61w+bxgbDlpcWOXE3nzpjduc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:68:83:70:6b:f8:cc:d2:6d:c8:89:36:e4:93:94:2a:d1:45:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192 Validity Not Before: Nov 5 12:57:58 2025 GMT Not After : Nov 11 03:13:58 2025 GMT Subject: CN=DD3A58D48B646D9747240DC1AA63A967D5957E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:8b:aa:59:3f:6e:0e:0f:09:de:a5:06:59: 40:63:7c:ed:b9:85:d1:f8:09:a1:8a:15:57:92:1a: 4b:f5:c0:72:95:ee:20:3d:6d:ad:45:00:b9:db:bb: fd:64:f8:ab:96:11:0e:6a:a9:56:10:ad:8f:db:82: ba:7c:82:aa:93:0f:68:58:20:52:12:94:1e:88:98: 14:99:bf:6f:26:dd:00:74:1a:ba:84:f4:e7:f8:0e: a7:04:df:a6:e6:b5:15:a2:7e:8f:3f:00:a6:1e:a5: 8f:5f:3b:06:9d:79:e3:67:32:5b:84:53:82:a7:46: 6d:8d:18:1a:2b:70:1d:a2:3e:5d:41:09:ab:9e:28: f5:1d:e5:0d:b4:65:90:db:a0:9b:82:16:cf:ca:41: f7:3e:37:b9:b9:92:ec:68:1c:63:f3:80:93:0e:4f: c6:21:94:ed:86:86:bc:0c:a9:e9:25:da:e0:7e:a1: 82:22:31:72:84:55:7b:77:63:f1:b4:9d:2e:ae:b1: fa:a8:7f:f3:95:94:67:00:09:0e:84:b1:c7:09:7b: 57:10:57:8c:bd:3b:c7:10:69:fb:9e:f0:60:e7:db: ba:53:96:17:99:62:7c:44:45:9a:fe:27:70:08:d6: 61:89:74:a4:56:13:c0:fa:0d:f8:d7:d2:68:f8:c9: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3A:58:D4:8B:64:6D:97:47:24:0D:C1:AA:63:A9:67:D5:95:7E:4E X509v3 Authority Key Identifier: keyid:AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:52:8b:05:61:d4:2a:10:9b:24:8c:e7:02:2b:db:d5:94:34: 62:81:4f:a0:2e:59:4a:90:20:63:2f:30:9e:c1:46:65:17:7a: 77:79:e5:20:51:33:db:d9:f4:2c:44:05:55:70:b7:8a:c9:49: d2:b1:26:26:84:b3:49:4a:f6:2a:28:dd:50:75:1b:a4:f5:28: 95:32:50:92:f5:8a:e8:27:31:dd:a8:af:0e:b0:e4:72:68:53: bd:15:d3:08:f9:a5:6e:88:d7:30:3b:74:98:d4:20:ef:61:c2: 06:d7:39:65:ae:f6:f1:d6:3e:35:5c:57:14:e4:86:84:01:9c: c0:2d:c4:ed:8d:c2:b6:c3:5b:50:8e:62:69:fb:c5:bc:d2:f5: 7a:a3:a2:bd:93:d7:a6:f6:27:21:55:0c:75:e9:b8:ca:37:de: b4:95:96:31:5d:9b:fb:85:85:d3:e5:c6:f9:bc:66:97:af:bf: fc:55:4f:05:ae:31:81:25:a2:f1:e7:81:7e:20:03:79:7c:09: c9:49:d9:6d:6a:16:df:6c:a2:84:62:5b:35:d9:83:ab:9e:f3: 75:b4:c3:c7:dd:2b:cc:3e:9b:b2:83:98:7c:1c:63:f7:69:54: e8:01:1d:c4:ac:21:aa:0a:61:bf:ef:ed:90:6d:d6:a1:7a:a9: 23:32:f4:e7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB2iDcGv4zNJtyIk25JOUKtFFewAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwQUM1QzgxODgzMTRGOTNGOERBQjI5NjFBMEIyMUIw QjNCMjE5MjAeFw0yNTExMDUxMjU3NThaFw0yNTExMTEwMzEzNThaMDMxMTAvBgNV BAMTKEREM0E1OEQ0OEI2NDZEOTc0NzI0MERDMUFBNjNBOTY3RDU5NTdFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJouqWT9uDg8J3qUGWUBjfO25 hdH4CaGKFVeSGkv1wHKV7iA9ba1FALnbu/1k+KuWEQ5qqVYQrY/bgrp8gqqTD2hY IFISlB6ImBSZv28m3QB0GrqE9Of4DqcE36bmtRWifo8/AKYepY9fOwadeeNnMluE U4KnRm2NGBorcB2iPl1BCaueKPUd5Q20ZZDboJuCFs/KQfc+N7m5kuxoHGPzgJMO T8YhlO2GhrwMqekl2uB+oYIiMXKEVXt3Y/G0nS6usfqof/OVlGcACQ6EsccJe1cQ V4y9O8cQafue8GDn27pTlheZYnxERZr+J3AI1mGJdKRWE8D6DfjX0mj4yZEhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3TpY1ItkbZdHJA3BqmOpZ9WVfk4wHwYDVR0j BBgwFoAUrQrFyBiDFPk/jaspYaCyGws7IZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQUEyRUJCNjg3MTk1RkQ0OTg0NEUxRDBEMzExNUU5MkNE QTYxMDNCMzk5NEIwRDYzMDNEMTZCMTc5OUIzMzdCLzAvQUQwQUM1QzgxODgzMTRG OTNGOERBQjI5NjFBMEIyMUIwQjNCMjE5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDBBQzVDODE4ODMxNEY5M0Y4 REFCMjk2MUEwQjIxQjBCM0IyMTkyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUFBMkVCQjY4NzE5NUZENDk4NDRFMUQwRDMxMTVFOTJDREE2MTAzQjM5 OTRCMEQ2MzAzRDE2QjE3OTlCMzM3Qi8wL0FEMEFDNUM4MTg4MzE0RjkzRjhEQUIy OTYxQTBCMjFCMEIzQjIxOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqUosFYdQqEJskjOcCK9vVlDRi gU+gLllKkCBjLzCewUZlF3p3eeUgUTPb2fQsRAVVcLeKyUnSsSYmhLNJSvYqKN1Q dRuk9SiVMlCS9YroJzHdqK8OsORyaFO9FdMI+aVuiNcwO3SY1CDvYcIG1zllrvbx 1j41XFcU5IaEAZzALcTtjcK2w1tQjmJp+8W80vV6o6K9k9em9ichVQx16bjKN960 lZYxXZv7hYXT5cb5vGaXr7/8VU8FrjGBJaLx54F+IAN5fAnJSdltahbfbKKEYls1 2YOrnvN1tMPH3SvMPpuyg5h8HGP3aVToAR3ErCGqCmG/7+2QbdaheqkjMvTn -----END CERTIFICATE-----Generated at Wed Nov 5 15:50:52 2025 by rpki-client