$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft File: 84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft (raw, json) Hash identifier: 7+KDx+U5X9Q9kysrUTU4Ux9MJ3DvqO78zzo1ceKFbHU= Subject key identifier: BB:95:56:7C:A8:D9:09:96:0E:D0:12:2A:5D:B9:D4:C1:9C:F9:29:A0 Authority key identifier: 84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48 Certificate issuer: /CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48 Certificate serial: 57ED930909CA3296E82A36B5D6134B76FD4C0D32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft Manifest number: 012D Signing time: Wed 05 Nov 2025 08:15:26 +0000 Manifest this update: Wed 05 Nov 2025 08:10:26 +0000 Manifest next update: Mon 10 Nov 2025 22:38:26 +0000 Files and hashes: 1: 84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl (hash: Re93B/ueuwN/AQ2EujH7BGF0dGVqnvHI8drmMLGTbxM=) 2: 323830333a343639303a3a2f33322d3438203d3e20323732383930.roa (hash: 3VLpL0Yy4sPmw2IQ3BPtSJN08kD17G4hoXyMXMj0l0w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ed:93:09:09:ca:32:96:e8:2a:36:b5:d6:13:4b:76:fd:4c:0d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48 Validity Not Before: Nov 5 08:10:26 2025 GMT Not After : Nov 10 22:38:26 2025 GMT Subject: CN=BB95567CA8D909960ED0122A5DB9D4C19CF929A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:a7:19:60:2b:3d:26:a3:34:60:07:21:91: 69:f0:3d:df:ed:88:42:37:f8:95:37:33:7a:75:20: c5:43:9f:90:8b:a4:53:29:d1:7b:36:24:80:38:7c: 22:57:ca:ee:5e:0e:87:f8:3f:65:f0:bf:65:08:25: b5:99:37:a8:c4:b6:48:31:c1:cd:04:af:f4:a1:0f: 89:75:a7:3b:fc:b8:49:d8:0f:d9:76:e0:d7:60:43: ce:98:f0:3a:dc:c1:60:e5:3f:8a:c4:14:3b:3d:2e: b2:3b:c3:44:23:83:b5:15:da:7c:9c:ca:9b:ad:88: f7:7b:9d:27:a0:16:43:5e:08:5b:2c:52:1e:ea:c1: 53:13:00:f9:bb:39:35:0d:58:01:14:4f:2e:8b:11: eb:bb:d0:91:dd:04:a2:bf:49:e5:15:f0:f3:35:c6: 08:25:15:a1:b3:fb:49:82:61:94:ce:6a:52:fc:f9: 82:db:6d:2a:52:0f:fe:c4:be:a0:b2:0f:5b:9a:d7: d3:71:1d:d5:4d:a9:8a:12:58:66:fd:71:3f:5a:1c: 4e:5c:eb:43:34:c0:f9:aa:c3:bd:04:6c:2a:7c:04: 7c:67:91:ad:23:7d:ea:78:3b:ef:b1:aa:c3:34:59: c5:e2:2b:be:1c:b3:66:3a:50:52:56:6d:e7:42:ba: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:95:56:7C:A8:D9:09:96:0E:D0:12:2A:5D:B9:D4:C1:9C:F9:29:A0 X509v3 Authority Key Identifier: keyid:84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6b:1c:3f:49:4b:47:c2:ce:f4:75:06:d7:a4:41:52:13:45: 45:26:b3:0c:3f:eb:f3:83:3a:5d:a3:bc:db:78:ba:15:53:33: 27:26:d4:0f:bb:8f:73:ab:e9:8a:5d:c2:ef:42:de:28:59:54: 73:a3:ff:c0:53:60:1b:37:cc:2d:c2:20:0d:ba:48:88:8f:5b: e7:05:4f:9c:2c:e2:c6:b5:8f:fd:53:74:6b:76:39:af:c4:e8: 88:d8:09:6a:48:7d:09:69:a6:43:18:aa:80:31:eb:29:00:d9: 83:45:8d:71:1e:87:59:fb:a3:ab:47:e4:d9:30:a8:5a:d9:34: 90:43:c9:57:ed:b6:88:2d:1e:45:cf:16:2b:3d:ef:29:b6:82: fa:e1:3a:18:72:ee:93:0c:73:59:26:6a:48:77:fe:11:a7:b5: 42:d7:aa:20:da:3d:c8:2c:88:b8:36:59:f2:5f:30:6c:0a:e0: 4a:f4:99:d4:b8:7f:4d:a0:e2:c2:73:a2:f7:b5:49:59:93:6f: 2a:9c:8a:80:c6:e3:e2:cb:11:6c:ee:1d:71:1d:34:e3:df:9c: 7f:42:d5:5b:89:27:3a:b5:dd:a1:ec:79:24:7b:2e:e9:f5:28: 7b:1c:73:e7:fa:4f:6e:68:14:5f:a4:d6:76:d5:c2:7b:06:93: a0:81:ef:55 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUV+2TCQnKMpboKja11hNLdv1MDTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRGRENGNDAxMzBFOUQ2ODZGN0EzNjU3REE4MEVBMEIw OTg2OEE0ODAeFw0yNTExMDUwODEwMjZaFw0yNTExMTAyMjM4MjZaMDMxMTAvBgNV BAMTKEJCOTU1NjdDQThEOTA5OTYwRUQwMTIyQTVEQjlENEMxOUNGOTI5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2qcZYCs9JqM0YAchkWnwPd/t iEI3+JU3M3p1IMVDn5CLpFMp0Xs2JIA4fCJXyu5eDof4P2Xwv2UIJbWZN6jEtkgx wc0Er/ShD4l1pzv8uEnYD9l24NdgQ86Y8DrcwWDlP4rEFDs9LrI7w0Qjg7UV2nyc yputiPd7nSegFkNeCFssUh7qwVMTAPm7OTUNWAEUTy6LEeu70JHdBKK/SeUV8PM1 xgglFaGz+0mCYZTOalL8+YLbbSpSD/7EvqCyD1ua19NxHdVNqYoSWGb9cT9aHE5c 60M0wPmqw70EbCp8BHxnka0jfep4O++xqsM0WcXiK74cs2Y6UFJWbedCuipPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUu5VWfKjZCZYO0BIqXbnUwZz5KaAwHwYDVR0j BBgwFoAUhP3PQBMOnWhvejZX2oDqCwmGikgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84N0FBNjhDMzM1NTA2NzhBODIzQkNGNzkzMkZGMzk5QzRD NDJCQUYwMzM0MzFCOTlDNDRFRTZGMjRFMkE2N0U2LzAvODRGRENGNDAxMzBFOUQ2 ODZGN0EzNjU3REE4MEVBMEIwOTg2OEE0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEZEQ0Y0MDEzMEU5RDY4NkY3 QTM2NTdEQTgwRUEwQjA5ODY4QTQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODdBQTY4QzMzNTUwNjc4QTgyM0JDRjc5MzJGRjM5OUM0QzQyQkFGMDMz NDMxQjk5QzQ0RUU2RjI0RTJBNjdFNi8wLzg0RkRDRjQwMTMwRTlENjg2RjdBMzY1 N0RBODBFQTBCMDk4NjhBNDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJaxw/SUtHws70dQbXpEFSE0VF JrMMP+vzgzpdo7zbeLoVUzMnJtQPu49zq+mKXcLvQt4oWVRzo//AU2AbN8wtwiAN ukiIj1vnBU+cLOLGtY/9U3RrdjmvxOiI2AlqSH0JaaZDGKqAMespANmDRY1xHodZ +6OrR+TZMKha2TSQQ8lX7baILR5FzxYrPe8ptoL64ToYcu6TDHNZJmpId/4Rp7VC 16og2j3ILIi4NlnyXzBsCuBK9JnUuH9NoOLCc6L3tUlZk28qnIqAxuPiyxFs7h1x HTTj35x/QtVbiSc6td2h7Hkkey7p9Sh7HHPn+k9uaBRfpNZ21cJ7BpOgge9V -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:14 2025 by rpki-client