$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft File: DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft (raw, json) Hash identifier: /8iO/S20s4B/nbCfTTOuEumx49YZ11hct+CGWzTAAiI= Subject key identifier: 9C:D7:D8:96:3E:C7:20:CE:82:EC:41:06:89:D4:13:82:D6:04:8F:69 Authority key identifier: DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1 Certificate issuer: /CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1 Certificate serial: 4696D621219559631E04CE66EAFEC895C2F6DF22 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft Manifest number: 010C Signing time: Mon 03 Nov 2025 10:55:31 +0000 Manifest this update: Mon 03 Nov 2025 10:50:31 +0000 Manifest next update: Sun 09 Nov 2025 10:45:31 +0000 Files and hashes: 1: 3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa (hash: 8BaT5YzYP3Byrwbw/93a+QLSDNZ6kwwRMriduvdD4OE=) 2: DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl (hash: f/CxH44RdATmltK0qPTLvk+9lglL0q8JXXSVo3Gsc88=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:96:d6:21:21:95:59:63:1e:04:ce:66:ea:fe:c8:95:c2:f6:df:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1 Validity Not Before: Nov 3 10:50:31 2025 GMT Not After : Nov 9 10:45:31 2025 GMT Subject: CN=9CD7D8963EC720CE82EC410689D41382D6048F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:f8:9c:d5:78:65:68:df:66:36:00:d8:03: 6f:02:f0:87:e6:c0:5c:12:f3:8b:b1:fc:40:f0:24: 25:46:48:37:39:c7:91:30:5f:bc:8d:17:94:05:cc: 96:6e:ae:4c:6d:87:ca:32:7f:11:bd:f9:90:77:46: 5e:7d:78:29:bf:b4:f5:6f:eb:13:78:54:bd:73:97: 5d:e0:93:a8:1c:53:d3:19:06:ca:20:6c:64:ef:dc: dc:da:b9:e2:30:21:ed:00:34:c6:98:32:bb:e5:1e: 97:d0:80:7b:4d:99:1c:d7:f9:13:80:77:71:28:e8: 84:1c:bd:43:e9:8f:39:f4:4b:62:79:d0:9a:b8:cb: d2:16:53:92:31:aa:79:59:41:e3:36:23:58:a4:c2: 47:9e:53:9c:cc:6e:d6:77:f3:88:8c:dd:ff:20:c4: fd:32:c5:d1:70:58:cb:cd:20:3f:28:74:a2:d7:d1: aa:24:bb:3b:1a:fe:36:3b:eb:02:aa:46:32:22:15: 51:c1:c3:8e:0f:ac:e6:5c:88:5b:c2:e7:cd:ff:b6: ca:01:e8:85:00:bb:f8:ed:5c:fd:bd:4f:b1:fc:bb: 9e:07:0b:f2:90:a3:0a:ca:cc:67:e9:46:56:58:71: 5c:65:0e:40:49:9e:69:10:f3:d5:a9:af:26:d8:d6: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D7:D8:96:3E:C7:20:CE:82:EC:41:06:89:D4:13:82:D6:04:8F:69 X509v3 Authority Key Identifier: keyid:DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:02:6f:9c:cb:57:74:70:7e:d2:43:67:44:b7:a0:8d:00:6a: 51:b6:e6:47:6a:08:e4:ca:7c:0f:14:e2:cf:70:55:2d:12:f9: 98:86:b9:70:f5:10:b9:69:82:d2:d7:bb:e8:4d:a7:42:01:9b: 35:2e:bf:59:33:5b:62:a7:28:54:bb:c8:d9:9d:0a:c9:ca:4b: 93:bf:cd:4e:68:4b:19:ef:a3:78:36:be:8e:99:7b:8d:cf:0f: b3:fc:3d:78:0f:8e:ec:c2:90:d9:2f:c0:99:b0:ee:09:21:ec: 58:20:5c:bc:f2:89:44:42:53:96:77:1c:cc:df:1a:2e:f8:ed: 59:90:b9:e5:e9:1d:57:67:49:1e:b4:38:7e:9a:b2:81:65:d3: 10:50:80:c5:be:8e:83:76:ee:42:a0:a3:1d:fd:96:a3:d9:95: ef:6f:50:a6:49:97:60:4e:4d:27:db:7f:04:9b:d6:49:9b:53: 59:3e:47:15:38:f9:5a:97:c8:d2:9c:28:73:85:14:11:d2:09: 81:36:f9:57:57:38:4f:aa:28:bb:06:a8:9a:22:72:40:9e:0a: 1c:9d:8b:f6:b8:6f:47:e2:e6:cd:0f:2d:f5:51:bc:8d:33:41: af:f9:ce:7b:68:96:a1:2a:b1:1b:49:21:3e:e3:4b:5f:4c:fb: 34:7d:58:bb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURpbWISGVWWMeBM5m6v7IlcL23yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5QUNDRjc3NkNCRjAzNzBCM0JBMjc4M0JBN0E0QTEx NDA3MjREMTAeFw0yNTExMDMxMDUwMzFaFw0yNTExMDkxMDQ1MzFaMDMxMTAvBgNV BAMTKDlDRDdEODk2M0VDNzIwQ0U4MkVDNDEwNjg5RDQxMzgyRDYwNDhGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZyvic1XhlaN9mNgDYA28C8Ifm wFwS84ux/EDwJCVGSDc5x5EwX7yNF5QFzJZurkxth8oyfxG9+ZB3Rl59eCm/tPVv 6xN4VL1zl13gk6gcU9MZBsogbGTv3NzaueIwIe0ANMaYMrvlHpfQgHtNmRzX+ROA d3Eo6IQcvUPpjzn0S2J50Jq4y9IWU5IxqnlZQeM2I1ikwkeeU5zMbtZ384iM3f8g xP0yxdFwWMvNID8odKLX0aokuzsa/jY76wKqRjIiFVHBw44PrOZciFvC583/tsoB 6IUAu/jtXP29T7H8u54HC/KQowrKzGfpRlZYcVxlDkBJnmkQ89WprybY1rRnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnNfYlj7HIM6C7EEGidQTgtYEj2kwHwYDVR0j BBgwFoAU3JrM93bL8DcLO6J4O6ekoRQHJNEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zODlFOTE2NzhERUY5MUNFODc0NjVDQUQ0OUMwMjEyNEYw Q0YyN0IzQ0REODg1Qjg0RENDMTJBNzM2RDRCNThBLzAvREM5QUNDRjc3NkNCRjAz NzBCM0JBMjc4M0JBN0E0QTExNDA3MjREMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzlBQ0NGNzc2Q0JGMDM3MEIz QkEyNzgzQkE3QTRBMTE0MDcyNEQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzg5RTkxNjc4REVGOTFDRTg3NDY1Q0FENDlDMDIxMjRGMENGMjdCM0NE RDg4NUI4NERDQzEyQTczNkQ0QjU4QS8wL0RDOUFDQ0Y3NzZDQkYwMzcwQjNCQTI3 ODNCQTdBNEExMTQwNzI0RDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsAm+cy1d0cH7SQ2dEt6CNAGpR tuZHagjkynwPFOLPcFUtEvmYhrlw9RC5aYLS17voTadCAZs1Lr9ZM1tipyhUu8jZ nQrJykuTv81OaEsZ76N4Nr6OmXuNzw+z/D14D47swpDZL8CZsO4JIexYIFy88olE QlOWdxzM3xou+O1ZkLnl6R1XZ0ketDh+mrKBZdMQUIDFvo6Ddu5CoKMd/Zaj2ZXv b1CmSZdgTk0n238Em9ZJm1NZPkcVOPlal8jSnChzhRQR0gmBNvlXVzhPqii7Bqia InJAngocnYv2uG9H4ubNDy31UbyNM0Gv+c57aJahKrEbSSE+40tfTPs0fVi7 -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:32 2025 by rpki-client