$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft File: 85E8329CBFB72C73936DE19616620415214EDD8A.mft (raw, json) Hash identifier: sD+/vAMGZoSJJ4beFbTT6twnXRFC2srr18cX7DcUk3s= Subject key identifier: 21:87:A3:53:31:9B:DA:74:42:7D:88:24:D2:3E:45:08:E5:69:3E:12 Authority key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A Certificate issuer: /CN=85E8329CBFB72C73936DE19616620415214EDD8A Certificate serial: 4BD0C298884D6352D45C06591AF929D7C0EBA5EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft Manifest number: 91 Signing time: Tue 04 Nov 2025 10:28:38 +0000 Manifest this update: Tue 04 Nov 2025 10:23:38 +0000 Manifest next update: Sun 09 Nov 2025 09:24:38 +0000 Files and hashes: 1: 323830333a3261303a3a2f33322d3332203d3e203135383330.roa (hash: FinVDUnkz/2J0I+Wwphci+vFr8uTAAULrMYfWm5GuWU=) 2: 85E8329CBFB72C73936DE19616620415214EDD8A.crl (hash: DZBbO9oBlbDLCPJDQ0M2FqJj0ypn/4WkvH91I8/hu6I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d0:c2:98:88:4d:63:52:d4:5c:06:59:1a:f9:29:d7:c0:eb:a5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8329CBFB72C73936DE19616620415214EDD8A Validity Not Before: Nov 4 10:23:38 2025 GMT Not After : Nov 9 09:24:38 2025 GMT Subject: CN=2187A353319BDA74427D8824D23E4508E5693E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:d4:8a:56:38:7b:64:de:5b:95:7b:a9:0c: 55:d2:df:2d:66:a6:c4:79:5a:87:e0:d8:a8:99:89: 85:cb:67:4a:a1:ae:f8:cb:b9:4d:f0:93:ff:69:3f: 44:27:2e:1a:fb:fd:d5:4e:95:f6:4c:9a:e5:e6:87: de:4f:7a:77:bb:51:9e:19:64:ed:f6:56:a7:a2:c7: 92:8d:76:95:17:ca:b8:f2:de:d2:4b:fc:90:55:e9: fa:b5:a7:b8:45:4b:e1:64:c5:14:55:08:2e:d1:9d: 95:4d:0e:e0:f1:bc:0b:3e:aa:3e:6a:a5:0f:96:65: ee:ea:ea:bb:d4:8c:f3:c6:a6:3f:37:fe:12:08:c4: a8:7d:df:b6:c5:af:22:f6:e0:28:b5:25:f4:be:75: d7:50:2a:3c:8d:99:78:f7:49:9b:03:3a:5c:cb:65: 95:46:b1:e7:07:52:7d:f3:0e:d8:c4:bd:0c:57:bb: 69:ee:b2:f6:04:6c:99:7a:fd:db:28:72:1d:11:dd: 5a:cb:c4:55:66:43:6a:ef:c1:dc:72:2e:1b:46:b0: af:f5:2d:8f:3b:31:77:c2:39:93:26:2d:ab:4f:05: f6:cc:57:4f:a6:a6:60:c8:5f:9b:c0:b1:a1:ab:ac: 47:1e:bf:e1:30:ee:5e:0d:9f:8c:85:98:33:3d:38: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:A3:53:31:9B:DA:74:42:7D:88:24:D2:3E:45:08:E5:69:3E:12 X509v3 Authority Key Identifier: keyid:85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:b7:36:29:bd:c4:0c:0f:20:fe:40:b5:4b:b3:57:4e:a1: 54:56:6e:4b:cb:a6:d9:97:20:36:a6:f2:69:51:86:01:20:60: ab:28:df:50:d6:59:c7:56:9a:3b:55:54:1d:08:20:5c:6f:1c: e1:2b:de:16:0e:33:92:5e:0d:61:3d:93:d7:44:6e:5b:33:cb: 51:62:16:6d:b6:00:eb:08:16:7d:e3:6c:d2:6b:69:0a:5c:2a: ce:24:ce:6a:a1:25:91:0b:fe:8e:72:14:33:44:a6:fa:c4:4d: 29:46:67:17:06:4a:2b:f0:15:80:22:0d:10:d8:47:91:23:5b: 25:a0:b5:46:27:d1:43:39:db:29:ac:04:25:f5:7a:37:cb:11: 74:fc:f1:6a:68:28:df:d5:33:8b:6d:9a:33:15:cb:dc:9e:0a: 77:df:cb:06:bb:3a:ea:e9:2e:b2:da:c4:fe:f1:26:c7:57:cc: df:ea:cf:85:31:f0:0f:8e:79:81:34:5e:4f:0e:e6:43:34:89: 31:e5:a8:f3:cb:5e:65:7e:ef:31:c5:69:30:03:dd:6e:08:03: 74:c0:21:61:4d:0f:89:6a:42:1a:88:fc:f1:46:54:3c:56:04: 32:3a:ad:2f:4e:1e:ea:04:4f:72:dd:f5:3b:20:c6:2f:64:06: e4:3b:ec:61 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUS9DCmIhNY1LUXAZZGvkp18Drpe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFODMyOUNCRkI3MkM3MzkzNkRFMTk2MTY2MjA0MTUy MTRFREQ4QTAeFw0yNTExMDQxMDIzMzhaFw0yNTExMDkwOTI0MzhaMDMxMTAvBgNV BAMTKDIxODdBMzUzMzE5QkRBNzQ0MjdEODgyNEQyM0U0NTA4RTU2OTNFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAL9SKVjh7ZN5blXupDFXS3y1m psR5Wofg2KiZiYXLZ0qhrvjLuU3wk/9pP0QnLhr7/dVOlfZMmuXmh95Pene7UZ4Z ZO32Vqeix5KNdpUXyrjy3tJL/JBV6fq1p7hFS+FkxRRVCC7RnZVNDuDxvAs+qj5q pQ+WZe7q6rvUjPPGpj83/hIIxKh937bFryL24Ci1JfS+dddQKjyNmXj3SZsDOlzL ZZVGsecHUn3zDtjEvQxXu2nusvYEbJl6/dsoch0R3VrLxFVmQ2rvwdxyLhtGsK/1 LY87MXfCOZMmLatPBfbMV0+mpmDIX5vAsaGrrEcev+Ew7l4Nn4yFmDM9OMPZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIYejUzGb2nRCfYgk0j5FCOVpPhIwHwYDVR0j BBgwFoAUhegynL+3LHOTbeGWFmIEFSFO3YowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81OEZGRTQwRjMxNjdGRkY2QTMxQ0U2RTlFNEZDREU4RjJE NTFCOEJGRjg5NUNFMkQ2MjE1QzI5QjczRkMxREM4LzAvODVFODMyOUNCRkI3MkM3 MzkzNkRFMTk2MTY2MjA0MTUyMTRFREQ4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUU4MzI5Q0JGQjcyQzczOTM2 REUxOTYxNjYyMDQxNTIxNEVERDhBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNThGRkU0MEYzMTY3RkZGNkEzMUNFNkU5RTRGQ0RFOEYyRDUxQjhCRkY4 OTVDRTJENjIxNUMyOUI3M0ZDMURDOC8wLzg1RTgzMjlDQkZCNzJDNzM5MzZERTE5 NjE2NjIwNDE1MjE0RUREOEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAls7c2Kb3EDA8g/kC1S7NXTqFU Vm5Ly6bZlyA2pvJpUYYBIGCrKN9Q1lnHVpo7VVQdCCBcbxzhK94WDjOSXg1hPZPX RG5bM8tRYhZttgDrCBZ942zSa2kKXCrOJM5qoSWRC/6OchQzRKb6xE0pRmcXBkor 8BWAIg0Q2EeRI1sloLVGJ9FDOdsprAQl9Xo3yxF0/PFqaCjf1TOLbZozFcvcngp3 38sGuzrq6S6y2sT+8SbHV8zf6s+FMfAPjnmBNF5PDuZDNIkx5ajzy15lfu8xxWkw A91uCAN0wCFhTQ+JakIaiPzxRlQ8VgQyOq0vTh7qBE9y3fU7IMYvZAbkO+xh -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:39 2025 by rpki-client