$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft File: 1D8A96BE43E9FE347873058CD625D12612C5B798.mft (raw, json) Hash identifier: ZVfQr7wTpJPTnsO6iaMcNFyAAp99gankT0nQjUdLtvk= Subject key identifier: A4:DD:66:EE:6A:13:47:EC:92:33:12:55:AC:2E:F4:81:E6:1C:0E:A6 Authority key identifier: 1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98 Certificate issuer: /CN=1D8A96BE43E9FE347873058CD625D12612C5B798 Certificate serial: 3879B4F7AF3DCD4C15E47935ED714D06F2849668 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft Manifest number: 0131 Signing time: Wed 05 Nov 2025 11:37:12 +0000 Manifest this update: Wed 05 Nov 2025 11:32:12 +0000 Manifest next update: Mon 10 Nov 2025 23:52:12 +0000 Files and hashes: 1: 3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa (hash: 2OYXxmclU+zn+8DO74N5fJYMP5Hfgkm2n4bJx3AgWhM=) 2: 1D8A96BE43E9FE347873058CD625D12612C5B798.crl (hash: N2Dz8SgTyJUce/WjvetndNQRIkPw2ZBciQqSnhD/Ap8=) 3: 3134332e3230382e3133322e302f32322d3234203d3e203237383433.roa (hash: 1M9HWw+a5p0ojEKCRln38BHOvSzSqmQZedu63jEwcWI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:79:b4:f7:af:3d:cd:4c:15:e4:79:35:ed:71:4d:06:f2:84:96:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8A96BE43E9FE347873058CD625D12612C5B798 Validity Not Before: Nov 5 11:32:12 2025 GMT Not After : Nov 10 23:52:12 2025 GMT Subject: CN=A4DD66EE6A1347EC92331255AC2EF481E61C0EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:53:ac:f2:2f:de:61:24:2f:46:79:8b:1a: 83:6f:90:47:42:ef:0d:d5:f4:dc:35:9c:6e:31:85: 55:28:52:df:1e:f7:9b:ca:c2:dd:18:77:40:65:48: 8a:1f:5d:c8:a0:d9:f0:8c:13:59:84:c7:e7:ef:06: d3:ea:c2:fe:7f:f0:bb:1a:7b:f1:45:0d:8f:72:4e: f4:1b:79:77:9b:70:84:b1:ed:b6:f3:a5:37:a0:99: 7d:22:cf:d6:b7:40:77:f1:19:61:3f:56:d6:bb:81: 9d:90:3e:35:fa:a0:cd:89:67:e3:66:c0:56:d5:e0: a0:87:cf:75:4f:21:9a:7b:ce:7b:c7:1b:22:24:10: 67:fc:35:14:0c:da:bf:80:92:ad:70:8f:45:d2:0d: 49:c4:6d:53:d5:af:cd:63:e1:34:8f:74:2c:6b:22: 7a:7a:cd:8f:fd:b7:81:ed:ab:25:0d:51:77:1e:85: 17:86:18:36:43:4b:e8:32:cc:65:51:fe:b8:7b:d2: 5c:3e:9b:56:63:e7:c4:c0:de:5d:2b:de:3b:b3:33: dc:ad:78:c9:f2:67:48:3f:3a:10:8b:a1:9d:03:d3: 25:fe:ae:23:cb:7d:25:cb:98:1e:f3:f9:4f:ff:b3: 82:3f:13:e7:97:8c:b3:a5:92:04:36:d8:97:f8:75: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DD:66:EE:6A:13:47:EC:92:33:12:55:AC:2E:F4:81:E6:1C:0E:A6 X509v3 Authority Key Identifier: keyid:1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:39:8b:77:8b:4f:8e:68:58:4a:a8:ec:83:52:86:66:54:9d: f8:3e:c4:17:e2:db:34:83:6e:57:26:71:16:91:fe:0d:07:58: ad:ab:46:c1:90:cc:0b:21:6b:0a:ac:b2:aa:dc:bc:0e:a4:16: a0:7d:dd:ae:eb:69:c9:57:48:d4:f5:b4:bf:d8:e6:c7:99:0c: 0c:b4:3c:d2:18:ab:e9:8e:92:ad:a5:05:5d:25:32:60:f7:a7: 7d:cc:84:f3:1d:dc:6f:a1:1f:35:c4:77:99:48:a8:e3:28:af: dc:70:0f:53:95:a0:e1:d6:b0:71:2b:d5:5a:3b:d4:c6:33:ee: 72:3b:1a:34:e6:90:de:f0:c1:05:1c:54:5f:c4:4e:2d:07:f9: e0:18:da:31:b5:63:c0:33:38:7b:30:bb:a1:e3:fd:cc:4c:89: aa:20:6b:76:58:4d:e5:e4:20:bf:d1:d6:6e:ba:99:11:80:ee: 44:b0:a9:75:49:35:30:ac:d1:5a:d4:3d:bb:ab:4b:70:ed:72: ca:3e:2c:e9:d8:97:95:8c:96:b7:d7:e8:85:81:05:eb:b7:09: 6e:0e:74:81:16:6d:e7:bc:ee:16:1e:ac:16:fe:ae:68:1b:69: 50:0d:07:98:f8:f6:01:77:20:45:ae:b7:fc:bd:43:6f:f5:59: 46:d4:12:b7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOHm09689zUwV5Hk17XFNBvKElmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4QTk2QkU0M0U5RkUzNDc4NzMwNThDRDYyNUQxMjYx MkM1Qjc5ODAeFw0yNTExMDUxMTMyMTJaFw0yNTExMTAyMzUyMTJaMDMxMTAvBgNV BAMTKEE0REQ2NkVFNkExMzQ3RUM5MjMzMTI1NUFDMkVGNDgxRTYxQzBFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXplOs8i/eYSQvRnmLGoNvkEdC 7w3V9Nw1nG4xhVUoUt8e95vKwt0Yd0BlSIofXcig2fCME1mEx+fvBtPqwv5/8Lsa e/FFDY9yTvQbeXebcISx7bbzpTegmX0iz9a3QHfxGWE/Vta7gZ2QPjX6oM2JZ+Nm wFbV4KCHz3VPIZp7znvHGyIkEGf8NRQM2r+Akq1wj0XSDUnEbVPVr81j4TSPdCxr Inp6zY/9t4HtqyUNUXcehReGGDZDS+gyzGVR/rh70lw+m1Zj58TA3l0r3juzM9yt eMnyZ0g/OhCLoZ0D0yX+riPLfSXLmB7z+U//s4I/E+eXjLOlkgQ22Jf4detHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpN1m7moTR+ySMxJVrC70geYcDqYwHwYDVR0j BBgwFoAUHYqWvkPp/jR4cwWM1iXRJhLFt5gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkVGNjYxRUMyQUJBMjlFRUYzRTA3RTA0MTY4RUQxRDc4 MzUwMkM2MEE5OTg3MzIwMEJBMzdGMTkxQjQ0MDQ5LzAvMUQ4QTk2QkU0M0U5RkUz NDc4NzMwNThDRDYyNUQxMjYxMkM1Qjc5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDhBOTZCRTQzRTlGRTM0Nzg3 MzA1OENENjI1RDEyNjEyQzVCNzk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZFRjY2MUVDMkFCQTI5RUVGM0UwN0UwNDE2OEVEMUQ3ODM1MDJDNjBB OTk4NzMyMDBCQTM3RjE5MUI0NDA0OS8wLzFEOEE5NkJFNDNFOUZFMzQ3ODczMDU4 Q0Q2MjVEMTI2MTJDNUI3OTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5OYt3i0+OaFhKqOyDUoZmVJ34 PsQX4ts0g25XJnEWkf4NB1itq0bBkMwLIWsKrLKq3LwOpBagfd2u62nJV0jU9bS/ 2ObHmQwMtDzSGKvpjpKtpQVdJTJg96d9zITzHdxvoR81xHeZSKjjKK/ccA9TlaDh 1rBxK9VaO9TGM+5yOxo05pDe8MEFHFRfxE4tB/ngGNoxtWPAMzh7MLuh4/3MTImq IGt2WE3l5CC/0dZuupkRgO5EsKl1STUwrNFa1D27q0tw7XLKPizp2JeVjJa31+iF gQXrtwluDnSBFm3nvO4WHqwW/q5oG2lQDQeY+PYBdyBFrrf8vUNv9VlG1BK3 -----END CERTIFICATE-----Generated at Wed Nov 5 20:11:41 2025 by rpki-client