$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft File: DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft (raw, json) Hash identifier: pIiOPxO4BEpxZYOHlQHnmCi3mcUfgUWtrFrLbYviPmw= Subject key identifier: 2D:85:54:3A:07:97:22:BC:95:DD:FC:AD:A1:A0:94:B9:65:F3:EB:DA Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79 Certificate issuer: /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979 Certificate serial: 495B2BC60D553E9ABF763060B6C6C4BBB532142F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft Manifest number: 0138 Signing time: Wed 05 Nov 2025 09:21:03 +0000 Manifest this update: Wed 05 Nov 2025 09:16:03 +0000 Manifest next update: Mon 10 Nov 2025 15:12:03 +0000 Files and hashes: 1: DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl (hash: Wb2mb0fBfFVaiC5CRkMXv18E3XPgCkxiH0GNnh4+w/c=) 2: 34352e3137382e37312e302f32342d3234203d3e20323634373538.roa (hash: tbUewBPd2mteSucpaVAXbvRl8RyLJ7N6pcsjpR4zsok=) 3: 34352e3137382e37302e302f32342d3234203d3e20323634373538.roa (hash: 6emBoJTyaEx0Qr6GypYJ1h0CD+QKNwN8prbiiYpb5qY=) 4: 34352e3137382e36382e302f32322d3232203d3e20323634373538.roa (hash: 8WbySAjgkERLU9TZsdUo5V68lCLwNkLf1nfdwz6nypE=) 5: 34352e3137382e36382e302f32342d3234203d3e20323634373538.roa (hash: /nB9ca5qaYFEZ0cnm31ssTfmc3g5DRMWdHRQyoem04k=) 6: 34352e3137382e36392e302f32342d3234203d3e20323634373538.roa (hash: K0LeNs9HjCaGqxnvzoaHCLHFezfnHVeiGr6ITtCcZ/4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5b:2b:c6:0d:55:3e:9a:bf:76:30:60:b6:c6:c4:bb:b5:32:14:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979 Validity Not Before: Nov 5 09:16:03 2025 GMT Not After : Nov 10 15:12:03 2025 GMT Subject: CN=2D85543A079722BC95DDFCADA1A094B965F3EBDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:54:2a:63:ff:c8:92:c4:f5:1f:95:52:32: 06:ed:61:1e:ad:cb:61:37:81:10:c1:e0:6f:69:1f: 2a:df:c5:cc:b3:17:27:11:73:8d:9b:42:c6:01:a2: e2:d2:76:d1:36:e6:82:93:a1:44:82:3f:19:50:16: da:0e:2f:7a:93:dc:6c:20:cb:d9:0e:0e:db:0e:c2: cb:9f:1b:76:b0:51:64:5b:ab:ae:5c:77:21:fc:69: 3e:8f:0b:8a:88:49:a9:f3:11:85:3c:d2:76:e9:e9: 5d:b0:93:aa:00:9f:9b:ae:67:ad:75:de:ea:95:b4: f7:a3:f0:3d:2d:61:b1:80:89:aa:75:2d:2a:f8:ab: d7:f9:f9:e8:4c:2f:a5:de:cf:1f:22:24:41:e8:1c: fd:92:4e:fd:bc:75:a3:27:43:70:b0:6a:74:99:5b: d8:45:5c:57:18:b9:f0:2c:56:b3:6a:8b:3b:f9:9c: b4:9f:58:77:15:42:fa:a6:f8:47:1e:16:c2:e0:21: ee:e5:86:94:df:2b:f0:b4:53:23:7f:bc:ef:8a:1c: 61:be:7b:93:ce:ed:d8:4d:15:dd:62:36:b5:17:c4: 69:a1:d1:3f:ac:73:04:94:3d:da:b0:1c:47:ac:27: de:88:6c:f7:79:7c:eb:ac:ae:c9:7f:3b:03:d2:70: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:85:54:3A:07:97:22:BC:95:DD:FC:AD:A1:A0:94:B9:65:F3:EB:DA X509v3 Authority Key Identifier: keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:22:fb:23:d5:56:b4:c2:14:59:03:2f:fe:d7:66:12:c2:53: 73:44:64:6a:68:4e:22:a5:cf:55:a7:3b:c3:67:7c:f5:81:d3: 79:42:81:e2:cd:56:ba:3a:58:c5:21:8c:58:24:44:64:78:7f: 29:b7:be:9d:29:09:7b:0b:2e:b3:26:f6:fc:b5:5e:0f:83:06: a9:62:5d:fb:0b:d2:38:b8:0f:8f:e0:69:f4:8a:18:bc:f5:b2: 8c:8f:9f:6b:fc:e4:27:42:35:a8:76:72:28:73:ee:da:2f:c6: 31:84:b4:60:df:b4:dc:93:b5:b0:1f:12:e7:4f:b6:21:1c:13: ed:ca:ee:ba:89:89:85:18:da:fd:f4:66:c5:6e:47:a6:5b:c8: 5d:5a:72:8d:f6:42:54:2a:17:63:a6:91:e8:86:7d:a2:14:0f: 97:53:0f:a5:43:5a:0f:25:29:0c:56:87:bf:6a:2c:56:44:ed: 30:a3:dd:c8:6a:bd:bd:d0:20:4b:2d:16:1c:c4:61:d6:9f:b2: 4b:d7:67:f7:ea:91:7e:cd:d8:e3:5a:1b:df:74:64:b4:8c:17: 68:b2:10:1e:13:0d:cf:82:cd:c7:93:bc:da:c4:1a:8a:32:2e: 6e:11:35:25:84:e6:0f:ec:d1:df:23:31:e8:f5:ec:ca:5e:36: 4a:72:44:c5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSVsrxg1VPpq/djBgtsbEu7UyFC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MzYyNjFFNEIzNzBCRTFBQkFFN0U1QjUwOTIxRTAw QTZENTk3OTAeFw0yNTExMDUwOTE2MDNaFw0yNTExMTAxNTEyMDNaMDMxMTAvBgNV BAMTKDJEODU1NDNBMDc5NzIyQkM5NURERkNBREExQTA5NEI5NjVGM0VCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDVQqY//IksT1H5VSMgbtYR6t y2E3gRDB4G9pHyrfxcyzFycRc42bQsYBouLSdtE25oKToUSCPxlQFtoOL3qT3Gwg y9kODtsOwsufG3awUWRbq65cdyH8aT6PC4qISanzEYU80nbp6V2wk6oAn5uuZ611 3uqVtPej8D0tYbGAiap1LSr4q9f5+ehML6Xezx8iJEHoHP2STv28daMnQ3CwanSZ W9hFXFcYufAsVrNqizv5nLSfWHcVQvqm+EceFsLgIe7lhpTfK/C0UyN/vO+KHGG+ e5PO7dhNFd1iNrUXxGmh0T+scwSUPdqwHEesJ96IbPd5fOusrsl/OwPScEb3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULYVUOgeXIryV3fytoaCUuWXz69owHwYDVR0j BBgwFoAU22NiYeSzcL4auufltQkh4AptWXkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zREYxMDcwNTczMEExRTREOEM0OTNGMjc5MEI2RjY5RDZD MTNBMTREMTExRTkxMjg0REY4OEZBQkFCRUEyRTgyLzAvREI2MzYyNjFFNEIzNzBC RTFBQkFFN0U1QjUwOTIxRTAwQTZENTk3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjYzNjI2MUU0QjM3MEJFMUFC QUU3RTVCNTA5MjFFMDBBNkQ1OTc5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0RGMTA3MDU3MzBBMUU0RDhDNDkzRjI3OTBCNkY2OUQ2QzEzQTE0RDEx MUU5MTI4NERGODhGQUJBQkVBMkU4Mi8wL0RCNjM2MjYxRTRCMzcwQkUxQUJBRTdF NUI1MDkyMUUwMEE2RDU5NzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxIvsj1Va0whRZAy/+12YSwlNz RGRqaE4ipc9VpzvDZ3z1gdN5QoHizVa6OljFIYxYJERkeH8pt76dKQl7Cy6zJvb8 tV4PgwapYl37C9I4uA+P4Gn0ihi89bKMj59r/OQnQjWodnIoc+7aL8YxhLRg37Tc k7WwHxLnT7YhHBPtyu66iYmFGNr99GbFbkemW8hdWnKN9kJUKhdjppHohn2iFA+X Uw+lQ1oPJSkMVoe/aixWRO0wo93Iar290CBLLRYcxGHWn7JL12f36pF+zdjjWhvf dGS0jBdoshAeEw3Pgs3Hk7zaxBqKMi5uETUlhOYP7NHfIzHo9ezKXjZKckTF -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:01 2025 by rpki-client