$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft File: 209A4B66D92052DAA8A5358DB465449F02D52BAB.mft (raw, json) Hash identifier: iXen7m148HZa0BD0a4VTkMUeNrBB5CEcRXjCG7FddD8= Subject key identifier: DD:F6:85:17:D3:47:14:7E:46:77:E8:D7:81:48:8B:04:1A:A6:4D:52 Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB Certificate issuer: /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB Certificate serial: 1FF60D20981A4F3BB7718751B86A46510AC5C7C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft Manifest number: 013B Signing time: Wed 05 Nov 2025 15:04:00 +0000 Manifest this update: Wed 05 Nov 2025 14:59:00 +0000 Manifest next update: Tue 11 Nov 2025 04:15:00 +0000 Files and hashes: 1: 3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa (hash: dv2gwDXuAYLH5yjpY40LpucgqLAz9M8RQBrZW0KPQfo=) 2: 3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa (hash: XZCPYZansHH8pQplKmG06znAEblG1rjfxBWlD//B4BA=) 3: 3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa (hash: 5dsf4hX0TZDPvBoN40dwgZfcow7Us3qJgeuLLriY/0U=) 4: 209A4B66D92052DAA8A5358DB465449F02D52BAB.crl (hash: eHIE3j3ZQEo9hQO5YxBeXVlgMTVSAZCkmdLYTiQDp/Y=) 5: 3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa (hash: 8+boctzqfyfnVa1UI5DKkkyWZd7W2yDzp24h4BvgrKM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f6:0d:20:98:1a:4f:3b:b7:71:87:51:b8:6a:46:51:0a:c5:c7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB Validity Not Before: Nov 5 14:59:00 2025 GMT Not After : Nov 11 04:15:00 2025 GMT Subject: CN=DDF68517D347147E4677E8D781488B041AA64D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:1c:d1:e2:b2:41:91:a4:dd:2a:dc:f5:b6: 1a:59:95:26:b8:51:c0:2b:aa:00:77:3d:80:c4:ee: ed:43:eb:89:ac:b1:ee:0f:78:dc:ae:96:2f:69:d4: 3d:34:49:29:19:56:a9:e2:3b:11:c6:b3:78:c3:65: dc:a2:da:13:81:1a:e2:58:9a:50:3c:88:b0:4b:da: 0d:4f:04:96:fb:cd:ba:bf:b5:45:1f:eb:ae:68:c7: 9c:8b:1c:60:bc:aa:47:b1:1f:1a:4b:ad:9b:62:56: ce:dc:aa:f7:d0:d5:41:61:0e:b0:bc:fb:9d:2f:0d: 95:ef:a2:f6:80:2d:58:f4:7d:1c:c7:f6:67:be:67: 3e:63:78:f8:fb:df:4e:f8:41:1d:4d:bc:76:15:0f: e9:7f:34:51:89:01:bb:21:bb:1a:9c:44:88:ca:2b: 14:7f:cd:94:97:76:c9:56:81:7f:81:7a:c9:2d:d2: e2:74:11:fd:46:7b:ae:7c:27:b3:be:39:b0:85:3b: b9:d4:92:3b:13:aa:3a:64:68:b9:d1:dc:37:cb:22: fa:7b:ad:16:5c:69:8f:e1:c5:70:f4:dd:fa:e5:55: 09:d3:b3:69:64:31:f3:9a:b7:fb:d3:d5:bc:01:e6: 1e:74:ce:7c:90:13:a0:6d:4f:6f:24:d1:7c:6a:30: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F6:85:17:D3:47:14:7E:46:77:E8:D7:81:48:8B:04:1A:A6:4D:52 X509v3 Authority Key Identifier: keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:19:7a:9f:f5:6c:de:46:21:5d:05:94:ce:9d:b7:a5:46:39: dc:06:6a:84:ae:d5:53:fe:e5:42:95:f7:74:b6:99:3a:f8:22: 86:b0:18:17:0e:a0:f0:e1:d1:7a:35:05:7a:a5:3a:21:20:57: c1:a6:1a:a9:1a:08:df:b0:92:3a:f5:31:66:fc:01:e9:56:25: dc:bb:77:cb:fe:c3:5a:5c:fd:49:ad:c4:b1:cd:39:a5:cf:f2: 73:84:ae:ad:1b:36:d6:d5:4e:64:1f:45:65:69:d2:f8:2b:39: 04:e8:0e:7d:53:a0:bd:90:8b:27:59:fa:55:bc:32:84:1f:ca: a9:3d:b0:69:f8:fa:10:2c:25:2e:7c:7c:19:ad:67:7b:8e:e0: 44:ae:92:7c:5d:c4:5f:48:51:6f:2c:5c:b0:61:bb:80:bf:3f: 7e:98:51:53:62:0a:05:d8:d5:92:70:f6:66:0e:f2:7f:24:7c: b7:bb:f0:7f:fb:a8:8a:12:5b:b5:0f:1a:92:05:20:d3:0c:d6: 51:93:b1:c6:a5:40:32:e1:75:47:7f:32:b2:9d:ef:d9:ea:08: 1d:90:48:98:83:c8:9e:37:c1:99:ed:de:1b:eb:88:89:bb:fa: e2:e3:48:97:40:44:da:47:15:7e:56:47:9d:9d:59:a9:5e:cc: c1:08:51:94 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUH/YNIJgaTzu3cYdRuGpGUQrFx8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5QTRCNjZEOTIwNTJEQUE4QTUzNThEQjQ2NTQ0OUYw MkQ1MkJBQjAeFw0yNTExMDUxNDU5MDBaFw0yNTExMTEwNDE1MDBaMDMxMTAvBgNV BAMTKERERjY4NTE3RDM0NzE0N0U0Njc3RThENzgxNDg4QjA0MUFBNjRENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CRzR4rJBkaTdKtz1thpZlSa4 UcArqgB3PYDE7u1D64msse4PeNyuli9p1D00SSkZVqniOxHGs3jDZdyi2hOBGuJY mlA8iLBL2g1PBJb7zbq/tUUf665ox5yLHGC8qkexHxpLrZtiVs7cqvfQ1UFhDrC8 +50vDZXvovaALVj0fRzH9me+Zz5jePj73074QR1NvHYVD+l/NFGJAbshuxqcRIjK KxR/zZSXdslWgX+Beskt0uJ0Ef1Ge658J7O+ObCFO7nUkjsTqjpkaLnR3DfLIvp7 rRZcaY/hxXD03frlVQnTs2lkMfOat/vT1bwB5h50znyQE6BtT28k0XxqMCtPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3faFF9NHFH5Gd+jXgUiLBBqmTVIwHwYDVR0j BBgwFoAUIJpLZtkgUtqopTWNtGVEnwLVK6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RjZCMzA4QzM2NjQ3RUJFOUU5NkQxRjRBNDEwMEJDODcy RDM3ODc3QjlGQzU1M0E3RjU5M0ZDNEY5QzJCRDY3LzAvMjA5QTRCNjZEOTIwNTJE QUE4QTUzNThEQjQ2NTQ0OUYwMkQ1MkJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMDlBNEI2NkQ5MjA1MkRBQThB NTM1OERCNDY1NDQ5RjAyRDUyQkFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUY2QjMwOEMzNjY0N0VCRTlFOTZEMUY0QTQxMDBCQzg3MkQzNzg3N0I5 RkM1NTNBN0Y1OTNGQzRGOUMyQkQ2Ny8wLzIwOUE0QjY2RDkyMDUyREFBOEE1MzU4 REI0NjU0NDlGMDJENTJCQUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlGXqf9WzeRiFdBZTOnbelRjnc BmqErtVT/uVClfd0tpk6+CKGsBgXDqDw4dF6NQV6pTohIFfBphqpGgjfsJI69TFm /AHpViXcu3fL/sNaXP1JrcSxzTmlz/JzhK6tGzbW1U5kH0VladL4KzkE6A59U6C9 kIsnWfpVvDKEH8qpPbBp+PoQLCUufHwZrWd7juBErpJ8XcRfSFFvLFywYbuAvz9+ mFFTYgoF2NWScPZmDvJ/JHy3u/B/+6iKElu1DxqSBSDTDNZRk7HGpUAy4XVHfzKy ne/Z6ggdkEiYg8ieN8GZ7d4b64iJu/ri40iXQETaRxV+VkednVmpXszBCFGU -----END CERTIFICATE-----Generated at Wed Nov 5 16:50:09 2025 by rpki-client