$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.mft File: F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.mft (raw, json) Hash identifier: c5NF8Mb2ymnC5vqNPcfeSranHR4a9vyaKZc/aLdWlOI= Subject key identifier: 5A:41:19:16:15:48:84:C9:6B:32:D9:94:72:5E:6C:1D:70:9C:EC:0F Authority key identifier: F7:3C:D7:8F:DE:AB:A7:DF:B3:E1:34:73:A6:BF:E1:2B:E9:0D:0B:32 Certificate issuer: /CN=F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32 Certificate serial: 7B7AEE6A857F0A00BD09789AD40ABB69D0A012E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 08:32:31 +0000 Manifest this update: Tue 04 Nov 2025 08:27:31 +0000 Manifest next update: Sun 09 Nov 2025 04:28:31 +0000 Files and hashes: 1: 3230302e31302e3134302e302f32342d3332203d3e203130343532.roa (hash: /XDyXycatnkArYYFAKUQZn7r1MXbyNxrV2ohaJ0zFqk=) 2: F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.crl (hash: sZNDGyYcWvzEUOFKl+Gg3d/dm2TBWnRqShqi6EfQies=) 3: 3230302e31302e3134302e302f32342d3235203d3e203237383835.roa (hash: v+v6xvdSfwowd+MtMHkUsyHSrRzjAK2NFsar174C8jA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.crl rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7a:ee:6a:85:7f:0a:00:bd:09:78:9a:d4:0a:bb:69:d0:a0:12:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32 Validity Not Before: Nov 4 08:27:31 2025 GMT Not After : Nov 9 04:28:31 2025 GMT Subject: CN=5A411916154884C96B32D994725E6C1D709CEC0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:2d:1f:15:26:3e:15:21:bd:2f:c8:86:22: 7b:bd:9c:54:5d:c8:80:2c:ca:fe:35:74:8b:b0:08: 51:27:02:99:f4:36:9b:b2:8b:5c:c4:d9:fa:b3:97: 63:07:7f:a7:f3:12:69:8a:bf:d4:b5:a0:24:01:f9: b0:98:be:20:6c:7c:ff:ca:0a:be:53:d9:aa:04:62: a5:85:76:ae:38:d0:e9:74:66:bb:75:e6:4b:15:ca: d1:cf:d1:70:dd:8d:f9:e5:33:1b:3f:35:e0:ab:9b: d3:e7:57:eb:b4:e2:db:83:c4:fe:f4:ac:f7:bf:25: 9a:b0:9a:e0:9a:45:ee:43:2d:20:f8:05:ab:8b:ad: 75:5d:0a:e4:68:f4:e4:43:4f:13:f4:59:1f:a8:20: cb:fc:74:c9:aa:45:5b:9d:aa:32:f8:fc:75:1e:25: 83:85:56:b9:2a:af:60:ab:04:c7:03:77:0d:f4:93: 3d:f4:a1:a2:48:b2:18:f2:36:a4:5f:39:79:68:29: 64:7c:df:e9:30:1b:96:45:72:53:0d:b0:2b:d9:30: 27:a7:bb:57:87:0e:75:ee:37:94:dc:0c:69:b2:ef: a5:3f:d9:be:24:94:2e:9a:7c:31:dc:c4:2c:d9:b4: 10:47:e7:51:63:78:88:35:96:91:4d:00:49:46:df: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:41:19:16:15:48:84:C9:6B:32:D9:94:72:5E:6C:1D:70:9C:EC:0F X509v3 Authority Key Identifier: keyid:F7:3C:D7:8F:DE:AB:A7:DF:B3:E1:34:73:A6:BF:E1:2B:E9:0D:0B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:db:9f:70:2b:0f:25:b3:6f:69:eb:01:cb:51:ba:88:3e:41: 0f:1b:e5:62:24:f3:aa:52:af:1b:67:b2:93:54:ce:79:3a:a8: 23:97:31:04:4b:de:21:23:74:44:c4:15:96:1f:6a:e7:91:e5: 4c:e0:a8:6d:32:04:15:7c:5f:84:d1:e9:df:1c:e7:ca:29:c8: f6:8e:f3:05:af:b8:ce:6e:b2:fe:13:40:15:41:bd:51:3f:6c: 9c:d8:b0:86:32:53:7f:96:db:ee:d6:60:66:e0:50:98:68:ca: 43:d5:f8:8b:8f:f9:c3:d8:d5:2d:c5:d8:5f:e2:a4:d5:09:72: 06:05:4a:be:35:53:d9:7a:c1:6d:7d:76:3f:c1:0e:44:4b:00: 35:2e:e0:d0:3b:dd:f5:60:2b:0d:9c:25:0b:88:8f:bc:4e:65: c1:8f:bb:a1:11:a0:ad:11:ea:4f:9f:a8:db:2c:0c:c3:07:3e: 0a:f9:87:0d:1c:00:74:c4:14:1f:e2:c3:62:d4:39:35:a6:30: 99:fa:d5:9e:3f:ff:9d:66:08:a4:4c:34:94:ac:4c:c6:e2:20: 70:cb:39:d6:ff:d2:bd:52:97:90:c7:6f:ef:52:16:6f:31:48: f9:fc:18:ce:d3:b0:d5:0c:f8:49:38:47:98:3f:1a:be:72:81: 6e:4c:47:cc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUe3ruaoV/CgC9CXia1Aq7adCgEuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjczQ0Q3OEZERUFCQTdERkIzRTEzNDczQTZCRkUxMkJF OTBEMEIzMjAeFw0yNTExMDQwODI3MzFaFw0yNTExMDkwNDI4MzFaMDMxMTAvBgNV BAMTKDVBNDExOTE2MTU0ODg0Qzk2QjMyRDk5NDcyNUU2QzFENzA5Q0VDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDy0fFSY+FSG9L8iGInu9nFRd yIAsyv41dIuwCFEnApn0Npuyi1zE2fqzl2MHf6fzEmmKv9S1oCQB+bCYviBsfP/K Cr5T2aoEYqWFdq440Ol0Zrt15ksVytHP0XDdjfnlMxs/NeCrm9PnV+u04tuDxP70 rPe/JZqwmuCaRe5DLSD4BauLrXVdCuRo9ORDTxP0WR+oIMv8dMmqRVudqjL4/HUe JYOFVrkqr2CrBMcDdw30kz30oaJIshjyNqRfOXloKWR83+kwG5ZFclMNsCvZMCen u1eHDnXuN5TcDGmy76U/2b4klC6afDHcxCzZtBBH51FjeIg1lpFNAElG37uPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWkEZFhVIhMlrMtmUcl5sHXCc7A8wHwYDVR0j BBgwFoAU9zzXj96rp9+z4TRzpr/hK+kNCzIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRkY3NUU4MzBBODQxRjlGNDFFNTBDRDEwM0ZEQUEzQTI4 NkU0N0I0QTBBQkUyNzAyMjUyRUY4NEU4MTA5NzA5LzAvRjczQ0Q3OEZERUFCQTdE RkIzRTEzNDczQTZCRkUxMkJFOTBEMEIzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNzNDRDc4RkRFQUJBN0RGQjNF MTM0NzNBNkJGRTEyQkU5MEQwQjMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkZGNzVFODMwQTg0MUY5RjQxRTUwQ0QxMDNGREFBM0EyODZFNDdCNEEw QUJFMjcwMjI1MkVGODRFODEwOTcwOS8wL0Y3M0NENzhGREVBQkE3REZCM0UxMzQ3 M0E2QkZFMTJCRTkwRDBCMzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs259wKw8ls29p6wHLUbqIPkEP G+ViJPOqUq8bZ7KTVM55OqgjlzEES94hI3RExBWWH2rnkeVM4KhtMgQVfF+E0enf HOfKKcj2jvMFr7jObrL+E0AVQb1RP2yc2LCGMlN/ltvu1mBm4FCYaMpD1fiLj/nD 2NUtxdhf4qTVCXIGBUq+NVPZesFtfXY/wQ5ESwA1LuDQO931YCsNnCULiI+8TmXB j7uhEaCtEepPn6jbLAzDBz4K+YcNHAB0xBQf4sNi1Dk1pjCZ+tWeP/+dZgikTDSU rEzG4iBwyznW/9K9UpeQx2/vUhZvMUj5/BjO07DVDPhJOEeYPxq+coFuTEfM -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:57 2025 by rpki-client