$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: aD4du9G/qQ45ybtcdTDjP/G6exkCzES2XYnl+mcalU8= Subject key identifier: C5:C2:67:C6:01:7C:61:7A:E6:1B:08:7E:A2:8B:86:4D:A0:3A:D2:46 Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 15D328ED1C57BA9D8628AAB5CD8F32D87BAD2C1C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 012C Signing time: Sun 02 Nov 2025 22:17:36 +0000 Manifest this update: Sun 02 Nov 2025 22:12:36 +0000 Manifest next update: Sat 08 Nov 2025 14:58:36 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: ItjXaKOwb+QHZwLhWYBWCIH0VcsHfuLK9e+dIUcT39E=) 2: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk=) 3: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: GpsitPwmoRaANBZUqM0x660cfTc0zx86S3V+E9a8mFg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 14:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d3:28:ed:1c:57:ba:9d:86:28:aa:b5:cd:8f:32:d8:7b:ad:2c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Nov 2 22:12:36 2025 GMT Not After : Nov 8 14:58:36 2025 GMT Subject: CN=C5C267C6017C617AE61B087EA28B864DA03AD246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:79:f1:d1:03:83:f4:17:52:27:57:11:7f: 87:16:fb:25:57:de:2b:80:73:e4:0d:38:42:24:37: 00:fb:6e:59:05:7c:56:c5:60:22:a1:63:23:4b:cf: 82:2b:2e:09:d7:bb:d1:3d:d1:e8:69:e8:85:2a:2a: 62:02:3f:85:a7:d3:e6:02:81:03:c9:09:b1:91:99: 86:b7:61:f4:c1:6b:3b:5a:65:7f:67:1e:12:78:2a: 13:23:6b:ef:62:f7:e0:4e:b8:32:18:f9:ae:81:72: 75:bb:b8:0f:7f:83:e8:1c:89:4a:95:3d:10:86:c3: d4:12:53:f9:b6:03:b1:c2:ae:f6:aa:c5:bf:f4:bb: 43:cf:cd:e7:b1:20:84:00:79:6e:75:d0:88:c7:49: 1d:96:79:98:1b:65:ad:91:38:74:f8:0f:95:95:45: a1:8c:91:35:e2:09:fd:06:02:9d:b7:cc:6f:4c:a9: 00:76:a9:ad:0c:b1:7b:fa:d1:0d:56:cf:5d:2f:eb: b0:56:f7:7b:ff:81:16:bc:bf:4b:9f:2e:c7:fc:e5: 24:70:43:4d:14:ea:79:67:c4:3d:c0:43:da:c2:7e: e3:61:e3:c1:83:06:04:33:df:e3:d3:44:1c:5d:92: 86:cd:47:f3:94:b4:17:53:c7:24:d4:b5:43:8f:ac: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C2:67:C6:01:7C:61:7A:E6:1B:08:7E:A2:8B:86:4D:A0:3A:D2:46 X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:64:59:ff:80:ea:f8:b6:b4:10:a1:ba:41:c1:42:c8:0f:6d: e0:84:cc:ae:cb:35:7f:bf:cc:c3:b0:ce:40:dd:bf:a1:75:e6: 1f:2b:1c:37:17:76:a4:bf:d1:d5:2f:7e:bf:d3:f0:3c:4e:4b: fe:dd:09:ab:64:7f:5b:f2:48:00:2d:ef:a1:80:65:b6:26:d2: 4c:cb:cd:02:8a:34:fc:2a:81:d1:10:50:aa:11:52:df:7d:fd: 0b:b2:66:e6:3c:a8:66:33:18:63:b9:09:ff:53:90:15:0f:15: 72:cb:f6:d5:0e:c3:8d:c6:e1:1f:2f:50:96:5c:84:e5:07:4b: 7f:9b:6a:eb:9d:fc:33:35:00:57:c0:4c:c8:9e:86:83:32:46: 06:37:20:39:cd:bf:ed:ad:1b:34:58:58:44:cb:3e:76:e0:07: c4:97:18:de:0d:6f:20:7b:94:0f:f3:0d:bf:a2:6d:48:3a:97: d4:4d:4f:2a:34:03:99:a1:b1:bd:2f:a6:24:6c:e1:b5:3b:6a: 74:2b:24:7d:1d:d8:8f:0a:13:b2:eb:8b:f4:fc:bd:ec:57:b0: 99:67:d8:9d:72:ca:22:95:6f:41:a1:5b:f4:82:76:d4:03:1b: f4:9f:7b:c1:ff:1c:cd:3f:cc:47:30:f0:55:78:43:12:40:61: 1b:22:aa:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFdMo7RxXup2GKKq1zY8y2HutLBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNTExMDIyMjEyMzZaFw0yNTExMDgxNDU4MzZaMDMxMTAvBgNV BAMTKEM1QzI2N0M2MDE3QzYxN0FFNjFCMDg3RUEyOEI4NjREQTAzQUQyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1Hnx0QOD9BdSJ1cRf4cW+yVX 3iuAc+QNOEIkNwD7blkFfFbFYCKhYyNLz4IrLgnXu9E90ehp6IUqKmICP4Wn0+YC gQPJCbGRmYa3YfTBaztaZX9nHhJ4KhMja+9i9+BOuDIY+a6BcnW7uA9/g+gciUqV PRCGw9QSU/m2A7HCrvaqxb/0u0PPzeexIIQAeW510IjHSR2WeZgbZa2ROHT4D5WV RaGMkTXiCf0GAp23zG9MqQB2qa0MsXv60Q1Wz10v67BW93v/gRa8v0ufLsf85SRw Q00U6nlnxD3AQ9rCfuNh48GDBgQz3+PTRBxdkobNR/OUtBdTxyTUtUOPrD1ZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxcJnxgF8YXrmGwh+oouGTaA60kYwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEZFn/gOr4trQQobpBwULID23g hMyuyzV/v8zDsM5A3b+hdeYfKxw3F3akv9HVL36/0/A8Tkv+3QmrZH9b8kgALe+h gGW2JtJMy80CijT8KoHREFCqEVLfff0LsmbmPKhmMxhjuQn/U5AVDxVyy/bVDsON xuEfL1CWXITlB0t/m2rrnfwzNQBXwEzInoaDMkYGNyA5zb/trRs0WFhEyz524AfE lxjeDW8ge5QP8w2/om1IOpfUTU8qNAOZobG9L6YkbOG1O2p0KyR9HdiPChOy64v0 /L3sV7CZZ9idcsoilW9BoVv0gnbUAxv0n3vB/xzNP8xHMPBVeEMSQGEbIqqp -----END CERTIFICATE-----Generated at Wed Nov 5 15:50:30 2025 by rpki-client