$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft File: 2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json) Hash identifier: tGEjczehCxXxc4gsMyJXVj+F2pW1NgUUe5j/OghD+wM= Subject key identifier: 35:E1:28:A5:0C:EF:E9:D2:31:D0:B8:70:EE:F5:EE:11:98:9F:80:E6 Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81 Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81 Certificate serial: 409FC592A31A2D9A82F5AEACC3F111002CC4E972 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft Manifest number: 012D Signing time: Mon 03 Nov 2025 17:59:25 +0000 Manifest this update: Mon 03 Nov 2025 17:54:25 +0000 Manifest next update: Sat 08 Nov 2025 18:44:25 +0000 Files and hashes: 1: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: /Z7LPAsuTjZ5cwTBvnVpQcKSEa9rH/diyzx0Hq8W+6o=) 2: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: GGuVym2kL4T0FmdZd9rq4sGSSWcGiS/epeSrSrFw9qw=) 3: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: y+kZpxvB2vqV6FoA3lmooqJCJtir3RHk1ikwbeAOmdU=) 4: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: Of6iNbMXQt4rFasU+t2bE8ZI8uXk4p+iSBr/ZmI4xBU=) 5: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: 1oYXiRs6rlIee7gSCsds1xIN8M3Wto/5rLLuEM7RJ/4=) 6: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: rZzDnwa0MPMnAUQI/T5MjhsAO3J26Ue6xAm2FQO/eiA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 18:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9f:c5:92:a3:1a:2d:9a:82:f5:ae:ac:c3:f1:11:00:2c:c4:e9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81 Validity Not Before: Nov 3 17:54:25 2025 GMT Not After : Nov 8 18:44:25 2025 GMT Subject: CN=35E128A50CEFE9D231D0B870EEF5EE11989F80E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5b:e3:a4:5e:6a:00:42:c3:e4:2d:fd:56:1b: 5c:c2:dd:ec:97:3d:25:f1:ce:7b:36:36:03:7a:1a: 33:d0:f5:ba:f5:23:31:78:78:d0:aa:dd:73:7c:9c: 7c:e7:b7:38:95:68:50:8c:11:ae:f6:05:8f:18:a2: 5c:b0:5e:bd:1a:cc:28:29:41:64:4f:80:f0:45:bd: 4f:8c:7e:4e:c4:09:85:57:8b:7e:21:20:66:b3:45: 6e:e9:e8:32:1c:66:68:be:c0:58:77:dd:0a:5b:ad: cc:24:10:44:aa:56:92:66:d9:ad:19:bf:1a:9c:c6: ba:fc:0d:83:2b:48:d4:9a:99:5e:32:a3:68:ed:64: 47:a9:ab:8d:05:76:52:22:f5:29:04:e8:0b:91:c4: 5d:3e:0f:18:67:62:43:c7:54:bb:c4:5b:98:cc:26: 61:08:76:dd:e9:ba:cd:af:af:e6:5a:41:1c:99:ed: 13:4f:b6:6a:5e:28:34:18:1b:4b:c8:16:4a:73:e3: 7d:fb:f5:3f:f0:24:e1:09:57:14:e4:52:21:91:c9: 96:ec:b3:72:67:62:3c:42:7d:1e:ab:63:25:03:50: b7:7f:93:1b:66:c0:d1:be:20:59:61:9f:27:6a:6c: 76:f9:fc:48:91:19:e4:f4:e9:18:88:02:0f:1d:f9: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E1:28:A5:0C:EF:E9:D2:31:D0:B8:70:EE:F5:EE:11:98:9F:80:E6 X509v3 Authority Key Identifier: keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:82:31:df:db:ec:22:60:57:61:74:71:dc:0c:dd:44:4a:7b: a7:50:74:4b:06:b0:85:89:85:cf:80:be:4e:94:1f:7c:b2:db: 2c:c9:f2:76:23:31:17:fc:b9:17:65:79:d8:53:44:fd:d1:08: 7c:72:ed:12:e8:ed:71:99:24:88:17:5d:ec:23:fe:fb:8c:09: 05:2d:a8:6b:e9:b1:e9:73:7c:c0:55:87:b4:5d:6a:24:dc:06: 86:13:43:0f:03:d2:d1:07:88:18:07:46:b5:96:5c:de:8f:4e: c1:31:1b:04:ab:a7:b2:37:34:c3:77:6f:aa:90:bc:2b:9f:ce: d5:38:1a:14:2e:57:5a:46:5a:34:e8:5b:d5:ee:f0:24:80:55: 3b:56:8a:f0:28:2e:5c:87:cf:10:0b:d2:37:f7:b2:92:32:df: 4f:ae:e2:24:64:be:26:57:da:f9:58:94:57:6e:44:92:a9:80: f3:1b:45:81:7d:32:a2:eb:ee:19:c4:6c:19:a4:92:a6:ce:e6: 09:83:81:33:12:c5:c2:7d:76:f4:e4:a3:c5:c6:0b:0e:94:ac: 20:60:e6:91:52:b6:c5:f9:d8:79:6f:39:75:05:51:53:bf:70: 11:a4:27:d6:b4:b1:4b:6c:5b:66:b9:20:65:1b:bc:bf:51:5a: 23:94:1b:db -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQJ/FkqMaLZqC9a6sw/ERACzE6XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0MjBEQTUyQzRGRUQ2NEM2NDA4MUY5NzhFODQ4NUNE ODE2MUE4MTAeFw0yNTExMDMxNzU0MjVaFw0yNTExMDgxODQ0MjVaMDMxMTAvBgNV BAMTKDM1RTEyOEE1MENFRkU5RDIzMUQwQjg3MEVFRjVFRTExOTg5RjgwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuW+OkXmoAQsPkLf1WG1zC3eyX PSXxzns2NgN6GjPQ9br1IzF4eNCq3XN8nHzntziVaFCMEa72BY8YolywXr0azCgp QWRPgPBFvU+Mfk7ECYVXi34hIGazRW7p6DIcZmi+wFh33QpbrcwkEESqVpJm2a0Z vxqcxrr8DYMrSNSamV4yo2jtZEepq40FdlIi9SkE6AuRxF0+DxhnYkPHVLvEW5jM JmEIdt3pus2vr+ZaQRyZ7RNPtmpeKDQYG0vIFkpz43379T/wJOEJVxTkUiGRyZbs s3JnYjxCfR6rYyUDULd/kxtmwNG+IFlhnydqbHb5/EiRGeT06RiIAg8d+auhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNeEopQzv6dIx0Lhw7vXuEZifgOYwHwYDVR0j BBgwFoAULUINpSxP7WTGQIH5eOhIXNgWGoEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQUIzQzExQkY0MDI1M0Y5MDU1MTA3Q0YyQUZDMUY0OUU1 NzdCREI0OTFDRkQ3QjhBNDhGODAyRkM1ODgzQjVELzAvMkQ0MjBEQTUyQzRGRUQ2 NEM2NDA4MUY5NzhFODQ4NUNEODE2MUE4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDQyMERBNTJDNEZFRDY0QzY0 MDgxRjk3OEU4NDg1Q0Q4MTYxQTgxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUFCM0MxMUJGNDAyNTNGOTA1NTEwN0NGMkFGQzFGNDlFNTc3QkRCNDkx Q0ZEN0I4QTQ4RjgwMkZDNTg4M0I1RC8wLzJENDIwREE1MkM0RkVENjRDNjQwODFG OTc4RTg0ODVDRDgxNjFBODEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAgjHf2+wiYFdhdHHcDN1ESnun UHRLBrCFiYXPgL5OlB98stssyfJ2IzEX/LkXZXnYU0T90Qh8cu0S6O1xmSSIF13s I/77jAkFLahr6bHpc3zAVYe0XWok3AaGE0MPA9LRB4gYB0a1llzej07BMRsEq6ey NzTDd2+qkLwrn87VOBoULldaRlo06FvV7vAkgFU7VorwKC5ch88QC9I397KSMt9P ruIkZL4mV9r5WJRXbkSSqYDzG0WBfTKi6+4ZxGwZpJKmzuYJg4EzEsXCfXb05KPF xgsOlKwgYOaRUrbF+dh5bzl1BVFTv3ARpCfWtLFLbFtmuSBlG7y/UVojlBvb -----END CERTIFICATE-----Generated at Wed Nov 5 20:05:16 2025 by rpki-client