$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft File: D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft (raw, json) Hash identifier: fMI2f0BSRDCScw2WNFjc8yoDtjbZ/u/MQxZ+F4dNrBw= Subject key identifier: AC:1D:A4:74:F7:D9:AD:16:92:6B:1C:18:53:A5:79:6C:1A:0F:94:A0 Authority key identifier: D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D Certificate issuer: /CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D Certificate serial: 402A68B35160EDD39DD7408D638657073318B5F5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 18:53:13 +0000 Manifest this update: Tue 04 Nov 2025 18:48:13 +0000 Manifest next update: Mon 10 Nov 2025 10:17:13 +0000 Files and hashes: 1: 323830313a31633a363030303a3a2f34382d3438203d3e203237393839.roa (hash: zWRzwkU3U2w/7cO7JNoP1GxybD6i84sLt7wAy8vFNc8=) 2: D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl (hash: 55IYe8H2hyD5n4rXJZV8AxIhJTvpgwSkdZY//SqiY0g=) 3: 3230312e3133312e34392e302f32342d3234203d3e203237393839.roa (hash: t5Yygeg7fRc+HKiC11K6szZcfX+T4s6L8OEESiCAWUE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2a:68:b3:51:60:ed:d3:9d:d7:40:8d:63:86:57:07:33:18:b5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D Validity Not Before: Nov 4 18:48:13 2025 GMT Not After : Nov 10 10:17:13 2025 GMT Subject: CN=AC1DA474F7D9AD16926B1C1853A5796C1A0F94A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:83:e7:0d:4d:bf:e7:ae:f7:6f:a7:c2:c6: 0f:e8:34:e8:fe:d0:26:fa:f8:3a:57:14:ea:15:4b: 9b:e2:34:53:2e:da:07:e3:17:8a:0d:41:3e:d9:ad: e9:c7:22:cd:7f:36:3c:25:02:3a:9f:84:c4:72:28: 38:08:75:a0:ed:85:4f:e4:0e:1d:50:af:5d:88:0b: 34:13:91:dc:6a:40:11:8d:d7:34:c3:0a:79:25:58: fa:84:72:c0:13:a1:f7:a5:9c:2a:72:c6:13:82:90: 82:ed:7d:a7:3b:d6:64:03:9a:31:cb:0c:75:47:ae: f3:fb:f8:94:2f:ba:0f:d7:c3:00:29:c5:76:8a:72: b0:f3:9c:24:be:2d:56:70:df:93:ed:63:fd:d2:37: 77:77:45:89:db:ad:d8:0e:e3:00:7f:db:f4:aa:ac: c0:6c:bc:f5:d0:31:e2:06:04:aa:15:c9:2b:df:53: 0a:18:f0:d1:de:cd:6c:25:38:79:01:70:82:b9:97: 3b:1a:54:1f:bb:1c:60:aa:a9:3b:fa:37:76:73:84: df:33:34:09:32:e4:1d:81:39:f9:6b:58:ac:e8:de: 9d:f8:ea:7b:24:0d:00:68:97:b2:0c:f9:2e:b4:49: 5c:46:33:4d:1e:0c:a0:9a:22:33:5b:4b:e9:3b:91: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1D:A4:74:F7:D9:AD:16:92:6B:1C:18:53:A5:79:6C:1A:0F:94:A0 X509v3 Authority Key Identifier: keyid:D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0b:53:c4:18:f4:ea:39:9b:9a:a0:00:5b:6a:a6:16:c1:52: f5:49:3f:56:2a:fc:15:8e:57:9f:4a:1a:0f:6c:e3:12:69:43: d2:bf:6c:2d:fd:a8:37:81:6c:a9:d7:56:9f:31:cc:23:e5:3f: 4f:d7:b3:ed:8f:1e:d1:1a:b5:eb:16:43:0b:b7:78:a2:08:3f: f3:d1:45:cf:e0:8b:99:f1:65:1e:70:4e:b3:bc:3a:f4:a2:c1: a8:7c:6e:29:7a:a9:91:f6:ac:a5:28:ca:35:28:31:c8:ae:f5: 5b:e7:ac:da:f7:62:96:f0:d8:af:9a:d2:d7:04:54:f2:b9:f1: 7d:d5:c2:64:34:0e:7c:24:20:47:ba:be:6e:1c:cc:1b:18:34: 3d:2e:4c:7c:92:8f:c1:53:38:e9:ea:64:79:91:46:67:43:26: 96:cd:ee:d0:64:77:93:72:87:82:b0:da:aa:11:f2:b1:31:81: a4:72:31:42:bc:82:e2:09:89:91:41:8d:40:41:02:8a:3b:7d: 59:d6:81:d7:a7:19:4d:fc:17:0b:e6:8c:3c:dd:c2:9e:f6:73: 40:45:9c:6b:e3:89:1f:2f:3e:dc:3e:0f:b2:e8:a0:de:49:0c: 8e:f0:a1:5c:3b:46:1b:a1:6c:50:44:bd:19:e0:40:4d:d0:a5: fd:74:10:8e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQCpos1Fg7dOd10CNY4ZXBzMYtfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGQjc5NTgxNzA4MkEzMkE4RjNFNURBRTQzN0RFNkQw Q0E4NUUxRDAeFw0yNTExMDQxODQ4MTNaFw0yNTExMTAxMDE3MTNaMDMxMTAvBgNV BAMTKEFDMURBNDc0RjdEOUFEMTY5MjZCMUMxODUzQTU3OTZDMUEwRjk0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4q4PnDU2/5673b6fCxg/oNOj+ 0Cb6+DpXFOoVS5viNFMu2gfjF4oNQT7ZrenHIs1/NjwlAjqfhMRyKDgIdaDthU/k Dh1Qr12ICzQTkdxqQBGN1zTDCnklWPqEcsATofelnCpyxhOCkILtfac71mQDmjHL DHVHrvP7+JQvug/XwwApxXaKcrDznCS+LVZw35PtY/3SN3d3RYnbrdgO4wB/2/Sq rMBsvPXQMeIGBKoVySvfUwoY8NHezWwlOHkBcIK5lzsaVB+7HGCqqTv6N3ZzhN8z NAky5B2BOflrWKzo3p346nskDQBol7IM+S60SVxGM00eDKCaIjNbS+k7kWv5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrB2kdPfZrRaSaxwYU6V5bBoPlKAwHwYDVR0j BBgwFoAU0vt5WBcIKjKo8+Xa5DfebQyoXh0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Mzg4MTQ0Q0MxNDQ1RDE5QUI1NjhEMzcwNEY1N0M0MTA2 RjRBNTk2RTBCRDk0RDU3M0JCMDQ2NUJDOTZFQTg3LzAvRDJGQjc5NTgxNzA4MkEz MkE4RjNFNURBRTQzN0RFNkQwQ0E4NUUxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkZCNzk1ODE3MDgyQTMyQThG M0U1REFFNDM3REU2RDBDQTg1RTFELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTM4ODE0NENDMTQ0NUQxOUFCNTY4RDM3MDRGNTdDNDEwNkY0QTU5NkUw QkQ5NEQ1NzNCQjA0NjVCQzk2RUE4Ny8wL0QyRkI3OTU4MTcwODJBMzJBOEYzRTVE QUU0MzdERTZEMENBODVFMUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrC1PEGPTqOZuaoABbaqYWwVL1 ST9WKvwVjlefShoPbOMSaUPSv2wt/ag3gWyp11afMcwj5T9P17Ptjx7RGrXrFkML t3iiCD/z0UXP4IuZ8WUecE6zvDr0osGofG4peqmR9qylKMo1KDHIrvVb56za92KW 8NivmtLXBFTyufF91cJkNA58JCBHur5uHMwbGDQ9Lkx8ko/BUzjp6mR5kUZnQyaW ze7QZHeTcoeCsNqqEfKxMYGkcjFCvILiCYmRQY1AQQKKO31Z1oHXpxlN/BcL5ow8 3cKe9nNARZxr44kfLz7cPg+y6KDeSQyO8KFcO0YboWxQRL0Z4EBN0KX9dBCO -----END CERTIFICATE-----Generated at Wed Nov 5 16:50:10 2025 by rpki-client