$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft File: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft (raw, json) Hash identifier: 8bvWcstlRYT5Sdn7EutJiSUj/rEN9UvPaXhUBqlbR78= Subject key identifier: FF:C2:B6:13:86:8E:A7:E5:74:D8:23:47:9B:4A:87:30:4D:8D:4D:F8 Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 Certificate issuer: /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Certificate serial: 18C88BEBB1A7E911CC4EE5619316366395E502F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 10:38:43 +0000 Manifest this update: Tue 04 Nov 2025 10:33:43 +0000 Manifest next update: Sun 09 Nov 2025 15:34:43 +0000 Files and hashes: 1: 3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa (hash: rihQQJVFtZKUDCwHDYSaMs0ULFC3fG8dHmriGQNp/VM=) 2: 3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa (hash: lFSysIKlLWf7JB59Euh1O3A3OikH4P+rns7uXXpwjWg=) 3: 323830333a623431303a3a2f33322d3332203d3e20323731383634.roa (hash: Q2PshefDUXGnhMVo308cN4VQhDiScT++G8OK9eTiar4=) 4: 3139302e3131332e33332e302f32342d3234203d3e20323731383634.roa (hash: azN9pRvg5DpbUa7YhuECMfpkA3UkUWDg8qQJHMhMr7A=) 5: 3139302e3131332e33322e302f32322d3234203d3e20323731383634.roa (hash: Ykcu8jC4UzsyZvhSzf6AMozsyx0Qjpsc4oSXGJYv0m4=) 6: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl (hash: O+2/5iCvK3EcQZgpWbv1iqW3QMaYslpypCa0bfErAZA=) 7: 3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa (hash: whz10X8rtZzGp5KMzk05l4IUJVXM4z7n6YqJR8ewZes=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c8:8b:eb:b1:a7:e9:11:cc:4e:e5:61:93:16:36:63:95:e5:02:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Validity Not Before: Nov 4 10:33:43 2025 GMT Not After : Nov 9 15:34:43 2025 GMT Subject: CN=FFC2B613868EA7E574D823479B4A87304D8D4DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:8a:c5:40:a4:f6:39:10:5a:ba:4c:c2:d6: 90:d2:8e:24:83:6f:8c:32:cb:ed:ea:9d:04:b7:8c: a4:19:36:07:0c:8a:01:3b:0a:42:90:d7:78:b0:d4: d7:c8:17:46:c1:1c:37:f0:f6:af:2e:40:11:6c:33: e2:8c:09:c2:55:fe:e9:22:ea:f2:af:7b:77:8c:96: b6:7c:03:00:12:e6:cd:20:79:81:7a:88:d9:26:14: 25:db:91:93:7c:09:fa:29:0e:28:1a:f3:21:c4:50: 9e:1a:8a:63:44:53:de:c4:1c:bd:32:19:91:a5:ba: d4:95:c7:8c:45:69:3e:04:07:6b:a9:e2:ad:7a:30: f6:c3:74:3e:97:83:f4:78:42:c8:20:85:9a:c0:50: 30:0b:c5:67:69:5c:75:88:5c:aa:3d:65:15:ea:dc: 16:c0:29:fd:82:70:7a:69:ba:3a:98:5d:be:c7:4f: 6b:84:fe:69:31:d3:bf:19:48:70:1b:68:43:d6:e2: ff:15:45:77:cc:c1:7a:61:eb:b9:22:57:f0:c4:70: d2:8b:bd:cf:61:d4:1c:67:b2:0e:87:1f:87:95:25: 99:9c:53:78:7d:a5:73:97:3c:4a:49:c6:1c:4a:dc: ed:ba:82:cd:ce:d4:9d:01:98:b3:ee:c9:c3:09:12: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:B6:13:86:8E:A7:E5:74:D8:23:47:9B:4A:87:30:4D:8D:4D:F8 X509v3 Authority Key Identifier: keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:47:90:4b:ad:01:c3:32:50:94:e7:b3:3a:b2:ed:bd:2a:13: 97:56:50:5b:68:28:70:a8:92:d7:17:3c:f2:53:0f:e5:5b:c6: 7c:dd:56:fd:ce:c0:d0:b0:fd:10:5b:d4:37:af:6a:53:56:e9: f1:bc:46:f1:61:6c:b6:7b:de:74:28:5a:a9:30:e7:31:28:a1: d5:25:a1:49:14:75:79:dc:97:66:b4:69:62:f6:8c:5e:6f:0d: 52:e7:1b:07:d7:da:7e:49:00:25:1f:45:0d:00:07:8d:12:d3: 8d:70:e7:fc:d9:29:6c:21:cf:75:6d:ee:3f:e6:b6:d1:a8:ae: 4c:e2:7a:50:79:58:75:b5:90:0b:91:c2:d8:67:53:40:4f:d9: 94:20:55:9a:69:72:bc:3c:87:4d:62:2d:91:8a:dd:07:45:43: 14:a2:3a:a1:44:ce:01:76:30:b1:ff:b5:c3:7b:bc:26:7e:5d: df:e4:4a:e8:ee:8f:8b:87:e5:1c:dc:6b:4e:90:56:2d:12:2d: 27:5f:08:db:5a:e9:b3:3b:38:5d:82:d4:58:43:7b:c5:bd:b5: 01:bf:c5:f3:33:91:a4:c1:c5:22:83:3f:8a:d3:79:d4:2a:dc: 51:16:a3:9b:c7:93:ad:f0:95:64:73:88:19:2d:af:fb:db:a2: c0:e6:cd:53 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGMiL67Gn6RHMTuVhkxY2Y5XlAvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1MTdENEJBQUI4NUQzQzhGNTAwOEY0MEJDNDhCMjFD QkVBNzJCODAeFw0yNTExMDQxMDMzNDNaFw0yNTExMDkxNTM0NDNaMDMxMTAvBgNV BAMTKEZGQzJCNjEzODY4RUE3RTU3NEQ4MjM0NzlCNEE4NzMwNEQ4RDRERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83IrFQKT2ORBaukzC1pDSjiSD b4wyy+3qnQS3jKQZNgcMigE7CkKQ13iw1NfIF0bBHDfw9q8uQBFsM+KMCcJV/uki 6vKve3eMlrZ8AwAS5s0geYF6iNkmFCXbkZN8CfopDiga8yHEUJ4aimNEU97EHL0y GZGlutSVx4xFaT4EB2up4q16MPbDdD6Xg/R4QsgghZrAUDALxWdpXHWIXKo9ZRXq 3BbAKf2CcHppujqYXb7HT2uE/mkx078ZSHAbaEPW4v8VRXfMwXph67kiV/DEcNKL vc9h1Bxnsg6HH4eVJZmcU3h9pXOXPEpJxhxK3O26gs3O1J0BmLPuycMJEsInAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/8K2E4aOp+V02CNHm0qHME2NTfgwHwYDVR0j BBgwFoAU6lF9S6q4XTyPUAj0C8SLIcvqcrgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QTNDNjVFMDExMzhBNzk3Q0MxQ0Q4OEI3QjMyQTgwRjE1 NjQyMzE2MDg3QzI5NTEzRDNEQUMyQjExMTdBMzY4LzAvRUE1MTdENEJBQUI4NUQz QzhGNTAwOEY0MEJDNDhCMjFDQkVBNzJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQTUxN0Q0QkFBQjg1RDNDOEY1 MDA4RjQwQkM0OEIyMUNCRUE3MkI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEEzQzY1RTAxMTM4QTc5N0NDMUNEODhCN0IzMkE4MEYxNTY0MjMxNjA4 N0MyOTUxM0QzREFDMkIxMTE3QTM2OC8wL0VBNTE3RDRCQUFCODVEM0M4RjUwMDhG NDBCQzQ4QjIxQ0JFQTcyQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWR5BLrQHDMlCU57M6su29KhOX VlBbaChwqJLXFzzyUw/lW8Z83Vb9zsDQsP0QW9Q3r2pTVunxvEbxYWy2e950KFqp MOcxKKHVJaFJFHV53JdmtGli9oxebw1S5xsH19p+SQAlH0UNAAeNEtONcOf82Sls Ic91be4/5rbRqK5M4npQeVh1tZALkcLYZ1NAT9mUIFWaaXK8PIdNYi2Rit0HRUMU ojqhRM4BdjCx/7XDe7wmfl3f5Ero7o+Lh+Uc3GtOkFYtEi0nXwjbWumzOzhdgtRY Q3vFvbUBv8XzM5GkwcUigz+K03nUKtxRFqObx5Ot8JVkc4gZLa/726LA5s1T -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:12 2025 by rpki-client