$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft File: A8BD34F2B469A2D97364857900B9F36A1297D50E.mft (raw, json) Hash identifier: 4MLPjiV/ZYtm8zvk6gtJZQrmi91IIBIEIKAYeZQZ0uU= Subject key identifier: EB:C4:FA:AA:88:13:80:EF:FF:B2:6C:6F:F8:13:F8:E7:20:2D:F0:FB Authority key identifier: A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E Certificate issuer: /CN=A8BD34F2B469A2D97364857900B9F36A1297D50E Certificate serial: 31906DA746FCEF3960A9253DD7184D41D66645A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft Manifest number: 0130 Signing time: Tue 04 Nov 2025 09:58:17 +0000 Manifest this update: Tue 04 Nov 2025 09:53:17 +0000 Manifest next update: Sun 09 Nov 2025 11:30:17 +0000 Files and hashes: 1: A8BD34F2B469A2D97364857900B9F36A1297D50E.crl (hash: 3HEiWJnRJ3OZlVgvyx3LWrQGWSVFGpaYpUoo9gBATfI=) 2: 323830333a313765303a3a2f33322d3438203d3e203532343638.roa (hash: PoUOOIRYg+JbJkg42cRuj004KIHQ54oscI25MvJqEP8=) 3: 3139302e3137312e38302e302f32322d3234203d3e203532343638.roa (hash: qGkgiqEIbTM4VF0NRhrpZGzQWcm4Yl6BAIYZKLLklTU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:90:6d:a7:46:fc:ef:39:60:a9:25:3d:d7:18:4d:41:d6:66:45:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8BD34F2B469A2D97364857900B9F36A1297D50E Validity Not Before: Nov 4 09:53:17 2025 GMT Not After : Nov 9 11:30:17 2025 GMT Subject: CN=EBC4FAAA881380EFFFB26C6FF813F8E7202DF0FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:b4:3c:cf:c2:94:28:ab:b4:7c:06:41:99: e3:0e:ad:d9:35:26:2d:71:52:99:f4:55:35:ba:15: a7:dd:dc:8c:9d:08:68:fb:87:39:f6:ba:8e:32:28: 05:e5:ce:16:a2:af:28:d6:20:01:35:c9:d3:15:e9: 98:5d:09:48:46:51:b6:89:f8:db:83:a9:0c:38:21: df:03:ed:9a:5c:0f:ca:80:e9:bd:16:d7:98:00:c5: 26:79:22:d8:e4:5f:a0:91:0d:70:d3:9f:86:9b:95: 62:d4:ba:a3:9e:b4:34:1b:1c:08:95:d3:aa:98:59: af:13:fe:9b:ad:49:d9:c6:e3:c2:5b:7a:e0:e0:d9: cf:fc:eb:2d:7e:99:54:47:02:1c:11:1f:9e:82:1a: e8:00:23:3e:2d:d7:b1:67:18:f3:15:19:a6:10:10: 2b:df:bf:67:95:ad:6a:f4:44:74:3f:cb:d5:06:c0: 43:09:eb:6b:09:66:ba:ef:0b:fa:57:81:50:cc:4b: 47:ac:0d:b3:13:aa:41:6e:de:4a:39:08:b2:4a:84: 08:86:bc:14:3e:90:24:e8:89:d0:6d:2e:9e:e9:d0: 16:df:77:3b:30:a5:5a:d1:35:12:49:a1:b4:81:d0: 88:16:8b:05:0d:47:d4:8c:f0:7a:f7:68:e7:b4:c4: f5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C4:FA:AA:88:13:80:EF:FF:B2:6C:6F:F8:13:F8:E7:20:2D:F0:FB X509v3 Authority Key Identifier: keyid:A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:33:05:05:66:21:59:d7:e3:2b:f0:dc:b9:4e:f1:cf:e9:b5: 1b:66:ce:0c:6c:bd:34:bf:f5:d2:ee:7a:13:91:98:f1:1b:7e: b4:fe:b8:4d:25:26:75:e1:c5:b5:53:53:a3:b8:57:8a:23:31: 67:5f:13:bd:4f:6a:3c:92:a4:ce:e2:6f:a2:04:98:8e:f9:c7: 79:25:19:e5:3a:52:68:04:19:2e:38:19:f1:cd:a3:25:ee:54: e7:e9:57:48:b8:d1:fa:69:f3:84:69:31:bb:69:4f:a3:24:46: 36:01:22:c3:a8:e5:97:5b:c0:ac:73:ff:fe:e8:f1:f1:cd:76: c3:03:11:1c:9a:d0:20:76:b0:08:96:11:b5:c5:5e:e6:de:2c: b3:20:a7:56:78:45:52:73:70:d7:5e:5a:93:d9:78:02:bf:82: 19:8d:ad:24:3c:21:67:32:09:81:f0:b4:83:99:b6:ca:35:1d: e9:69:1c:0a:9f:89:f5:eb:60:6a:4e:44:bc:74:60:61:fb:39: a8:64:0d:af:02:3f:d5:fa:a3:e5:61:14:80:7d:09:79:e8:2f: 9a:dc:16:28:6a:b0:fc:11:70:23:d7:25:54:cb:14:47:a0:66: d3:3b:32:ee:fc:57:48:38:fe:46:38:0f:04:7e:20:19:e9:aa: 3f:8d:c1:ca -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMZBtp0b87zlgqSU91xhNQdZmRaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCRDM0RjJCNDY5QTJEOTczNjQ4NTc5MDBCOUYzNkEx Mjk3RDUwRTAeFw0yNTExMDQwOTUzMTdaFw0yNTExMDkxMTMwMTdaMDMxMTAvBgNV BAMTKEVCQzRGQUFBODgxMzgwRUZGRkIyNkM2RkY4MTNGOEU3MjAyREYwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/bQ8z8KUKKu0fAZBmeMOrdk1 Ji1xUpn0VTW6Fafd3IydCGj7hzn2uo4yKAXlzhairyjWIAE1ydMV6ZhdCUhGUbaJ +NuDqQw4Id8D7ZpcD8qA6b0W15gAxSZ5ItjkX6CRDXDTn4ablWLUuqOetDQbHAiV 06qYWa8T/putSdnG48JbeuDg2c/86y1+mVRHAhwRH56CGugAIz4t17FnGPMVGaYQ ECvfv2eVrWr0RHQ/y9UGwEMJ62sJZrrvC/pXgVDMS0esDbMTqkFu3ko5CLJKhAiG vBQ+kCToidBtLp7p0BbfdzswpVrRNRJJobSB0IgWiwUNR9SM8Hr3aOe0xPUlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU68T6qogTgO//smxv+BP45yAt8PswHwYDVR0j BBgwFoAUqL008rRpotlzZIV5ALnzahKX1Q4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NUE1MkY1MjgwQzZGQUEyN0EyRjExQTlGOEE2ODQ4NzZB MjI0NTg3OTdGMTYyREJFOUE3M0U0MjBDNDAzMzlCLzAvQThCRDM0RjJCNDY5QTJE OTczNjQ4NTc5MDBCOUYzNkExMjk3RDUwRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOEJEMzRGMkI0NjlBMkQ5NzM2 NDg1NzkwMEI5RjM2QTEyOTdENTBFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjVBNTJGNTI4MEM2RkFBMjdBMkYxMUE5RjhBNjg0ODc2QTIyNDU4Nzk3 RjE2MkRCRTlBNzNFNDIwQzQwMzM5Qi8wL0E4QkQzNEYyQjQ2OUEyRDk3MzY0ODU3 OTAwQjlGMzZBMTI5N0Q1MEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBMwUFZiFZ1+Mr8Ny5TvHP6bUb Zs4MbL00v/XS7noTkZjxG360/rhNJSZ14cW1U1OjuFeKIzFnXxO9T2o8kqTO4m+i BJiO+cd5JRnlOlJoBBkuOBnxzaMl7lTn6VdIuNH6afOEaTG7aU+jJEY2ASLDqOWX W8Csc//+6PHxzXbDAxEcmtAgdrAIlhG1xV7m3iyzIKdWeEVSc3DXXlqT2XgCv4IZ ja0kPCFnMgmB8LSDmbbKNR3paRwKn4n162BqTkS8dGBh+zmoZA2vAj/V+qPlYRSA fQl56C+a3BYoarD8EXAj1yVUyxRHoGbTOzLu/FdIOP5GOA8EfiAZ6ao/jcHK -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:48 2025 by rpki-client