$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft File: D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft (raw, json) Hash identifier: t29/vGWPH2FeXuciYEkU1cVVDwDi8dOu3clGUxs1KlE= Subject key identifier: 40:E7:13:22:E8:99:C3:0D:20:AE:4C:CE:03:E2:61:5E:B5:86:AB:0E Authority key identifier: D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7 Certificate issuer: /CN=D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7 Certificate serial: 05EFDC4097FF620301E322A4845C8B9701E2FA69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 12:09:33 +0000 Manifest this update: Tue 04 Nov 2025 12:04:33 +0000 Manifest next update: Sun 09 Nov 2025 14:46:33 +0000 Files and hashes: 1: D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.crl (hash: 32JxJRDyEBjaEWgrIBeqFF+/Omuu1d/gJzmIIU+OWN4=) 2: 3139302e39392e38382e302f32322d3234203d3e203532323436.roa (hash: DYDfZBRHm5MRw+ZJ1PxfNM1YSbyDkrhD0SKalU607kk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.crl rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ef:dc:40:97:ff:62:03:01:e3:22:a4:84:5c:8b:97:01:e2:fa:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7 Validity Not Before: Nov 4 12:04:33 2025 GMT Not After : Nov 9 14:46:33 2025 GMT Subject: CN=40E71322E899C30D20AE4CCE03E2615EB586AB0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:63:5d:ba:6c:e8:5a:31:89:7a:d8:cf:b5: 94:42:b4:ed:7e:2b:67:3e:24:82:08:d0:64:f3:f6: 99:33:fb:04:b8:29:67:f7:b3:66:9c:20:ec:9f:54: 42:5c:e5:6c:0c:9b:1b:bd:10:4c:a8:e0:f1:1c:ef: 7e:77:d2:2a:82:dd:ec:38:93:09:1c:8c:52:a9:82: ec:76:fd:16:fb:ae:3a:eb:b4:ae:4c:c1:fe:81:4e: 4a:e3:72:de:91:04:b6:18:0a:28:83:8d:62:be:b4: e0:1f:40:54:e5:05:09:a3:56:3a:9f:98:b2:76:e5: ec:3f:a6:05:21:07:06:a5:a9:a4:d5:2d:5a:a3:50: c2:a8:13:6d:be:e9:46:75:c6:d8:f9:cf:0b:ce:ed: 2d:d5:e8:80:87:34:b5:84:13:6e:f0:99:21:bd:87: 52:a1:9a:ea:95:12:c7:b0:14:63:06:b5:fd:28:f6: 50:55:f2:d8:e4:e8:4d:78:0f:2c:a7:5f:53:72:25: c8:b8:ba:d4:1b:4c:a8:b1:6b:9a:71:ac:66:28:f4: 4f:8c:d2:a4:2f:5c:e7:ab:d0:de:5e:2d:7c:7d:f3: 93:04:84:33:89:9d:72:ba:c9:19:fd:d7:d9:9b:43: ca:a8:1d:6e:23:66:3f:42:a7:d8:23:f4:1d:dd:72: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:13:22:E8:99:C3:0D:20:AE:4C:CE:03:E2:61:5E:B5:86:AB:0E X509v3 Authority Key Identifier: keyid:D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:15:b1:af:72:03:0f:ba:c6:dc:3b:40:41:8b:45:1a:af:ba: 10:a4:19:9c:e9:23:85:9d:5c:0c:0c:15:ef:60:ff:e2:b2:3c: fa:c0:d2:bf:8f:94:e2:2b:be:9f:6e:82:db:29:ff:ac:ba:88: d6:30:70:45:33:85:23:28:b7:ae:da:43:1b:86:b8:98:a5:b2: f4:ac:fc:2f:43:c0:65:a2:f0:4c:a0:71:94:e5:dc:d5:92:41: f8:1e:24:b0:54:ff:d5:77:a0:8f:17:14:8b:9c:6b:c3:06:0c: 55:6c:4c:b9:8d:04:78:e2:68:a9:d6:4f:92:43:1a:52:59:a3: 6a:e0:f9:a8:0e:75:ad:c8:a2:21:41:e5:02:06:f5:bb:94:0a: 8c:6a:f9:63:eb:ae:01:e5:9a:b8:a8:01:ee:be:ec:2f:a7:ea: 50:77:5a:b0:28:35:06:4b:2a:2c:c2:24:98:72:a4:b4:f5:27: cf:e5:75:d0:64:46:83:0d:59:9c:f9:0a:41:a1:1e:82:59:f2: f0:18:bc:cb:51:13:60:23:84:ec:a3:f2:ef:10:49:1f:15:b4: 70:0b:f3:a6:aa:e5:30:50:af:27:77:3f:65:12:9e:6e:2a:1a: 3f:cc:3a:4e:ea:7c:d6:5d:d3:e8:d6:2c:b0:79:2a:71:9e:a2: 7f:6d:4e:18 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBe/cQJf/YgMB4yKkhFyLlwHi+mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwQUY4MDg4Q0ZDRkMzQTUyRDMxOEQ1OEM5Q0ZEMTIx Q0U2RjdDNzAeFw0yNTExMDQxMjA0MzNaFw0yNTExMDkxNDQ2MzNaMDMxMTAvBgNV BAMTKDQwRTcxMzIyRTg5OUMzMEQyMEFFNENDRTAzRTI2MTVFQjU4NkFCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7amNdumzoWjGJetjPtZRCtO1+ K2c+JIII0GTz9pkz+wS4KWf3s2acIOyfVEJc5WwMmxu9EEyo4PEc73530iqC3ew4 kwkcjFKpgux2/Rb7rjrrtK5Mwf6BTkrjct6RBLYYCiiDjWK+tOAfQFTlBQmjVjqf mLJ25ew/pgUhBwalqaTVLVqjUMKoE22+6UZ1xtj5zwvO7S3V6ICHNLWEE27wmSG9 h1KhmuqVEsewFGMGtf0o9lBV8tjk6E14DyynX1NyJci4utQbTKixa5pxrGYo9E+M 0qQvXOer0N5eLXx985MEhDOJnXK6yRn919mbQ8qoHW4jZj9Cp9gj9B3dct8dAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQOcTIuiZww0grkzOA+JhXrWGqw4wHwYDVR0j BBgwFoAU1gr4CIz8/DpS0xjVjJz9Ehzm98cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80RkVCQzkxMjZDMEUwQTdFMDNGN0U1NTM2RjhFNTlEQjlB QzMwQzAzNjNDNTUxMkFEOUU3RjJEMzA0ODNBMTZFLzAvRDYwQUY4MDg4Q0ZDRkMz QTUyRDMxOEQ1OEM5Q0ZEMTIxQ0U2RjdDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjBBRjgwODhDRkNGQzNBNTJE MzE4RDU4QzlDRkQxMjFDRTZGN0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEZFQkM5MTI2QzBFMEE3RTAzRjdFNTUzNkY4RTU5REI5QUMzMEMwMzYz QzU1MTJBRDlFN0YyRDMwNDgzQTE2RS8wL0Q2MEFGODA4OENGQ0ZDM0E1MkQzMThE NThDOUNGRDEyMUNFNkY3QzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWFbGvcgMPusbcO0BBi0Uar7oQ pBmc6SOFnVwMDBXvYP/isjz6wNK/j5TiK76fboLbKf+suojWMHBFM4UjKLeu2kMb hriYpbL0rPwvQ8BlovBMoHGU5dzVkkH4HiSwVP/Vd6CPFxSLnGvDBgxVbEy5jQR4 4mip1k+SQxpSWaNq4PmoDnWtyKIhQeUCBvW7lAqMavlj664B5Zq4qAHuvuwvp+pQ d1qwKDUGSyoswiSYcqS09SfP5XXQZEaDDVmc+QpBoR6CWfLwGLzLURNgI4Tso/Lv EEkfFbRwC/OmquUwUK8ndz9lEp5uKho/zDpO6nzWXdPo1iyweSpxnqJ/bU4Y -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:27 2025 by rpki-client