$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft File: 525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft (raw, json) Hash identifier: T9NxNdukoBwrK7KpoD0mWEln2NSp7I87tXe+QPj0XdE= Subject key identifier: DA:3A:79:9F:F8:19:13:75:84:27:B9:16:66:83:F4:80:FB:6B:9D:72 Authority key identifier: 52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB Certificate issuer: /CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB Certificate serial: 02214AC2BB4681DDEED1128C9D219AADED3DE587 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 15:36:22 +0000 Manifest this update: Tue 04 Nov 2025 15:31:22 +0000 Manifest next update: Mon 10 Nov 2025 01:31:22 +0000 Files and hashes: 1: 34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa (hash: ku7Pegns5rb3/J+L9k67+lDukcl7gRSw3iomKYF8FW4=) 2: 525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl (hash: WInGn0vhR1VMdD4RaWAIjvYNZf8794qnQ/8EQLtB+qI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:21:4a:c2:bb:46:81:dd:ee:d1:12:8c:9d:21:9a:ad:ed:3d:e5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB Validity Not Before: Nov 4 15:31:22 2025 GMT Not After : Nov 10 01:31:22 2025 GMT Subject: CN=DA3A799FF81913758427B9166683F480FB6B9D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:a3:d3:de:6c:79:d6:1c:c6:40:c1:2c:b9: 28:74:38:25:09:b2:a1:ba:33:03:dd:4d:bb:0a:ad: 92:12:54:1b:aa:90:61:8d:d0:15:fc:e2:cc:4f:61: 44:19:0e:42:07:e7:02:35:3c:4d:89:a6:e9:54:a5: ae:09:26:46:6f:d7:75:11:ff:cd:d5:12:6b:87:1d: 2e:02:b3:78:48:00:32:7c:05:62:d7:6d:7b:0b:e7: 75:0b:d8:6a:e4:83:ed:08:ce:5e:b8:fc:6f:10:bd: e7:1a:70:19:2b:50:0a:e1:22:4b:40:97:d9:c4:f9: fb:41:7b:07:a3:e4:18:8c:57:6f:22:bf:34:ad:43: 3e:b3:fb:35:d8:e5:72:07:03:24:5c:ad:24:57:75: 13:0a:0d:3c:73:61:92:0c:ff:89:67:11:41:8b:58: 64:1a:63:f7:35:54:9f:c4:6e:49:1a:d7:5c:6d:d6: c6:a4:f7:9c:0a:ae:ec:18:9e:2f:0c:33:de:23:ae: 18:85:22:4a:0e:ff:51:02:16:ba:d9:14:16:24:b4: d8:46:86:a1:9a:6f:4a:12:c7:38:4b:3b:7c:c0:44: 21:88:f7:38:c0:f5:f2:26:44:b3:00:58:ac:44:98: ee:8e:29:d2:7a:bd:03:4f:fc:10:40:cc:f4:4e:7e: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3A:79:9F:F8:19:13:75:84:27:B9:16:66:83:F4:80:FB:6B:9D:72 X509v3 Authority Key Identifier: keyid:52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9d:97:b3:81:ec:13:42:7d:c1:86:54:23:d6:29:4d:73:43: d8:1a:3b:85:cd:e3:ea:46:01:82:1d:a6:95:e8:8b:a3:55:c8: f3:59:f4:19:0e:8b:c6:81:a7:f9:98:cd:41:36:ae:f1:8f:9a: d7:5c:d2:0c:f3:bd:a3:d8:e6:c8:e6:e0:3e:bc:dd:47:5a:fe: f3:ef:e1:75:45:da:29:31:a4:2e:16:09:d1:6b:30:0f:19:84: f5:02:cd:2e:a2:a0:ef:3d:1c:9c:e6:ed:4a:6e:2d:4b:06:c4: 6f:b0:c0:1e:11:fb:be:49:a1:e5:26:91:83:0e:d8:98:1b:cf: 9e:3f:f5:23:81:f1:96:6c:7f:fb:19:dd:2e:23:93:89:a0:70: ff:bd:f2:86:8f:d5:9e:f2:25:2c:d5:2d:b6:af:68:85:73:96: 36:7b:da:3f:f1:c7:a2:eb:1d:eb:47:f3:29:38:e3:19:d2:e3: ea:e6:42:68:65:4e:1d:01:f3:41:b1:9b:e8:4f:16:e1:09:6a: 76:6f:6d:51:18:3b:10:c6:55:6a:6e:30:98:04:0b:e7:ed:5a: ef:19:a3:90:fd:de:f5:c6:2a:40:7f:1f:46:8f:d3:af:98:c6: e0:ec:c8:36:98:e0:e4:79:07:a0:2d:ba:70:d2:27:d3:7d:38: 6b:60:c8:7a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAiFKwrtGgd3u0RKMnSGare095YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1RTdGRUZBNzJCMkQyOEYzOTA3OEYxRUFENTE2NUZB NDM0QTNBQjAeFw0yNTExMDQxNTMxMjJaFw0yNTExMTAwMTMxMjJaMDMxMTAvBgNV BAMTKERBM0E3OTlGRjgxOTEzNzU4NDI3QjkxNjY2ODNGNDgwRkI2QjlENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWqPT3mx51hzGQMEsuSh0OCUJ sqG6MwPdTbsKrZISVBuqkGGN0BX84sxPYUQZDkIH5wI1PE2JpulUpa4JJkZv13UR /83VEmuHHS4Cs3hIADJ8BWLXbXsL53UL2Grkg+0Izl64/G8QvecacBkrUArhIktA l9nE+ftBewej5BiMV28ivzStQz6z+zXY5XIHAyRcrSRXdRMKDTxzYZIM/4lnEUGL WGQaY/c1VJ/Ebkka11xt1sak95wKruwYni8MM94jrhiFIkoO/1ECFrrZFBYktNhG hqGab0oSxzhLO3zARCGI9zjA9fImRLMAWKxEmO6OKdJ6vQNP/BBAzPROfoFFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2jp5n/gZE3WEJ7kWZoP0gPtrnXIwHwYDVR0j BBgwFoAUUl5/76crLSjzkHjx6tUWX6Q0o6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MzA3N0FFOUJEQTU2RkFGQ0Q5QjNEODVCQUY2MDdCRjM0 MEFCNDY0RTFFMUYyODQyQjA0MDBGRDU2MjU4MkRELzAvNTI1RTdGRUZBNzJCMkQy OEYzOTA3OEYxRUFENTE2NUZBNDM0QTNBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjVFN0ZFRkE3MkIyRDI4RjM5 MDc4RjFFQUQ1MTY1RkE0MzRBM0FCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzMwNzdBRTlCREE1NkZBRkNEOUIzRDg1QkFGNjA3QkYzNDBBQjQ2NEUx RTFGMjg0MkIwNDAwRkQ1NjI1ODJERC8wLzUyNUU3RkVGQTcyQjJEMjhGMzkwNzhG MUVBRDUxNjVGQTQzNEEzQUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJnZezgewTQn3BhlQj1ilNc0PY GjuFzePqRgGCHaaV6IujVcjzWfQZDovGgaf5mM1BNq7xj5rXXNIM872j2ObI5uA+ vN1HWv7z7+F1RdopMaQuFgnRazAPGYT1As0uoqDvPRyc5u1Kbi1LBsRvsMAeEfu+ SaHlJpGDDtiYG8+eP/UjgfGWbH/7Gd0uI5OJoHD/vfKGj9We8iUs1S22r2iFc5Y2 e9o/8cei6x3rR/MpOOMZ0uPq5kJoZU4dAfNBsZvoTxbhCWp2b21RGDsQxlVqbjCY BAvn7VrvGaOQ/d71xipAfx9Gj9OvmMbg7Mg2mODkeQegLbpw0ifTfThrYMh6 -----END CERTIFICATE-----Generated at Wed Nov 5 05:31:10 2025 by rpki-client