$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft File: 9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft (raw, json) Hash identifier: 4Hz8/9mTEOTcIyeVuWU16V7jd2yY8Oex10oVVB+LPNc= Subject key identifier: 17:27:5D:DB:65:94:EC:AC:21:30:48:36:04:DF:4A:B6:F8:0D:2B:2B Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5 Certificate issuer: /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5 Certificate serial: 42DFE4016FE27CAA5FCC97768F8214972C95F648 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft Manifest number: 0129 Signing time: Mon 03 Nov 2025 10:45:25 +0000 Manifest this update: Mon 03 Nov 2025 10:40:25 +0000 Manifest next update: Sat 08 Nov 2025 13:32:25 +0000 Files and hashes: 1: 323830303a3262303a383030303a3a2f33342d3438203d3e203134323332.roa (hash: ac8AnMNW85056S6eR3I58cFKq+m5AAKHvWdmOgpc1Qc=) 2: 9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl (hash: MuATmXB0HR/fBF3+G8YzKBhJPHXfCS5YHdEnaEcS3fs=) 3: 323830303a3262303a3a2f33322d3438203d3e203134323332.roa (hash: 7gRZ/7A9W+rSx83YuE4t2F8aJ3iZlNW1KydCiSUHzYw=) 4: 3137392e35312e38302e302f32302d3232203d3e203134323332.roa (hash: URsxKdPWmPTpbzTstBl3tR+4d7ojPMlrLyAYBA+SA4Q=) 5: 3230312e3231392e39362e302f32302d3234203d3e203134323332.roa (hash: wFnOXidBc+aUPZe/Wp0VMDI/6dLzLoJNJNPluR+JYgA=) 6: 323830303a3262303a343030303a3a2f33342d3438203d3e203134323332.roa (hash: LQ3ZVfY4n9gk5vdeMyBsweX/I72QEKgk3yWYvQ9mDOo=) 7: 3133382e3231392e342e302f32322d3232203d3e203134323332.roa (hash: O9t4mP4N9mAffB40wnhi6tJ5J8RgwAog+f2odd4NbP4=) 8: 3230312e3231392e36342e302f31392d3234203d3e203134323332.roa (hash: yVoRzVEZqCa0H6egP/RnDoZ1IZO1lHlDWtcE8MC8qYA=) 9: 3137302e37382e3230302e302f32322d3232203d3e203134323332.roa (hash: uVENKIpXaebqLxeneE0K7QtMnUn6xshGZQ0U7EKVKwc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 13:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:df:e4:01:6f:e2:7c:aa:5f:cc:97:76:8f:82:14:97:2c:95:f6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5 Validity Not Before: Nov 3 10:40:25 2025 GMT Not After : Nov 8 13:32:25 2025 GMT Subject: CN=17275DDB6594ECAC2130483604DF4AB6F80D2B2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:44:e9:34:03:d4:65:90:c9:96:fa:ba:9a: d6:98:ef:89:9e:71:29:d2:8b:5a:a2:f2:09:8a:58: 60:07:21:d9:d8:41:e4:4a:d8:3a:2e:5d:7b:32:e2: 75:5a:fb:55:9f:39:08:6a:e6:2b:7a:0f:2a:a2:4a: 78:5a:42:0e:ce:34:f2:cc:1c:57:35:3c:e6:c1:58: 6e:a9:48:89:e2:94:a5:b1:d5:9d:46:ac:41:89:75: 03:dd:f8:82:4b:ec:53:fb:28:e0:cd:74:ea:4e:41: 97:c7:99:db:73:92:01:f5:7d:2c:dd:ae:be:db:87: e7:e5:d1:ac:bf:b7:54:3c:17:48:5c:26:17:bf:63: 23:2c:22:0e:f9:be:dd:d9:58:2a:a7:14:22:fd:9b: a8:bf:9b:78:03:a2:48:3d:04:0f:de:60:7f:cc:e2: 57:58:48:70:e9:53:f1:5d:5f:a6:02:0a:14:13:f3: aa:6a:71:a1:9d:2c:42:82:49:8c:e4:d4:7a:8c:77: 32:ea:3b:0e:9a:90:d6:d1:e9:52:4b:1a:34:e2:ba: 86:d5:eb:5c:ab:ff:2a:20:d5:92:09:29:0d:cc:f0: dc:c2:6f:3d:f3:be:54:48:d1:38:f3:36:67:82:62: 1a:8e:33:ab:c5:4f:e8:2c:1b:a3:ff:97:69:07:8d: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:27:5D:DB:65:94:EC:AC:21:30:48:36:04:DF:4A:B6:F8:0D:2B:2B X509v3 Authority Key Identifier: keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9a:e0:5a:77:46:43:f0:bb:41:4e:5d:79:ec:af:6b:be:bd: 3c:f0:4f:34:34:9f:ff:f9:1f:bd:bc:94:34:98:fc:a0:d4:f3: 4a:62:7c:94:87:0a:6a:05:0c:68:86:33:a1:1f:5c:01:f6:51: 8d:ea:62:8e:88:4a:55:c7:4f:90:b9:77:47:d6:5a:18:e9:32: 6a:f3:de:5b:9b:64:08:06:27:96:b6:b5:6e:b7:0a:29:9e:81: be:4a:e1:46:b7:38:7d:fb:d0:95:ca:5c:2a:97:dc:1b:b3:61: 1d:cf:99:06:02:45:f4:82:f4:ad:9c:bc:25:fe:63:f7:8e:be: 33:c3:90:9b:48:26:45:66:92:1f:14:5f:fd:6a:fb:ee:3d:ef: fe:56:9f:ab:6a:a0:c2:d2:2e:6f:eb:98:43:73:31:bc:a8:ce: af:a2:05:79:01:58:64:df:d5:54:f2:5f:77:cc:33:1c:d6:71: 33:10:d7:d6:bc:85:2b:a1:8b:5b:d0:c4:ad:fc:2d:70:cf:b1: 5f:43:87:35:ce:a4:b4:cf:10:7c:ac:ec:75:4b:93:76:b8:68: ae:78:1d:55:ff:0f:a0:fe:90:1c:43:67:95:ce:2d:09:a5:1a: a9:1e:d5:e6:dc:43:3a:e2:af:d1:25:3a:6f:25:0a:32:1b:15: 59:7d:00:79 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQt/kAW/ifKpfzJd2j4IUlyyV9kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG M0E3MjhBNTAeFw0yNTExMDMxMDQwMjVaFw0yNTExMDgxMzMyMjVaMDMxMTAvBgNV BAMTKDE3Mjc1RERCNjU5NEVDQUMyMTMwNDgzNjA0REY0QUI2RjgwRDJCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzETpNAPUZZDJlvq6mtaY74me cSnSi1qi8gmKWGAHIdnYQeRK2DouXXsy4nVa+1WfOQhq5it6DyqiSnhaQg7ONPLM HFc1PObBWG6pSInilKWx1Z1GrEGJdQPd+IJL7FP7KODNdOpOQZfHmdtzkgH1fSzd rr7bh+fl0ay/t1Q8F0hcJhe/YyMsIg75vt3ZWCqnFCL9m6i/m3gDokg9BA/eYH/M 4ldYSHDpU/FdX6YCChQT86pqcaGdLEKCSYzk1HqMdzLqOw6akNbR6VJLGjTiuobV 61yr/yog1ZIJKQ3M8NzCbz3zvlRI0TjzNmeCYhqOM6vFT+gsG6P/l2kHjR+PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFydd22WU7KwhMEg2BN9KtvgNKyswHwYDVR0j BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5 RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1 Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzlBOUYxNjQ4QTNEOEU0OUUxQjUyODRG ODZDRTFDMzQ4RjNBNzI4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjmuBad0ZD8LtBTl157K9rvr08 8E80NJ//+R+9vJQ0mPyg1PNKYnyUhwpqBQxohjOhH1wB9lGN6mKOiEpVx0+QuXdH 1loY6TJq895bm2QIBieWtrVutwopnoG+SuFGtzh9+9CVylwql9wbs2Edz5kGAkX0 gvStnLwl/mP3jr4zw5CbSCZFZpIfFF/9avvuPe/+Vp+raqDC0i5v65hDczG8qM6v ogV5AVhk39VU8l93zDMc1nEzENfWvIUroYtb0MSt/C1wz7FfQ4c1zqS0zxB8rOx1 S5N2uGiueB1V/w+g/pAcQ2eVzi0JpRqpHtXm3EM64q/RJTpvJQoyGxVZfQB5 -----END CERTIFICATE-----Generated at Wed Nov 5 05:31:17 2025 by rpki-client