$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft File: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft (raw, json) Hash identifier: TDPIlQbO3epyX00NV8COXEm9hLKpMH+yCLkA6q0AQa4= Subject key identifier: 10:A3:B7:8B:BF:CC:6F:4B:10:D4:C4:26:41:91:3B:1E:22:A8:97:5D Authority key identifier: 5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1 Certificate issuer: /CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1 Certificate serial: 48F3FF8E6BCCFCD381A11919841BD57AAD53FD97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft Manifest number: 0136 Signing time: Mon 03 Nov 2025 20:15:39 +0000 Manifest this update: Mon 03 Nov 2025 20:10:39 +0000 Manifest next update: Sun 09 Nov 2025 14:40:39 +0000 Files and hashes: 1: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl (hash: 2m6opH1mPWv6wbbwtlcWlaE9c/QKAU/7FM/IG8IS9xM=) 2: 3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa (hash: BaIX0qhp18j+XpTnYKfSF67GStiAmWNI+M78CfluqlY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f3:ff:8e:6b:cc:fc:d3:81:a1:19:19:84:1b:d5:7a:ad:53:fd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1 Validity Not Before: Nov 3 20:10:39 2025 GMT Not After : Nov 9 14:40:39 2025 GMT Subject: CN=10A3B78BBFCC6F4B10D4C42641913B1E22A8975D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:4b:9b:aa:d5:11:6c:3e:5f:9c:21:68:9f: 87:95:10:a5:8a:90:68:25:26:6f:23:19:8e:b6:1d: ab:5c:b1:2c:8d:c0:b6:a7:ca:be:3e:00:c9:22:2b: 53:6c:3b:d4:bc:42:82:01:c6:39:50:ea:0a:86:df: 74:4e:9c:69:22:38:3e:99:ce:08:a8:97:6c:de:92: c5:95:dd:37:a4:37:c1:f7:13:a0:65:e0:3d:ca:5f: 39:15:64:85:6e:60:1b:c3:04:cc:16:fd:69:26:a8: 96:84:9c:2c:f9:c6:3f:14:3e:84:56:65:f6:30:b2: 5d:70:f0:1c:ac:16:fb:57:a3:a6:3d:cc:da:12:bc: a7:00:0e:cb:ba:3f:fb:b2:20:05:08:ee:92:b7:c5: 6a:79:5b:d8:da:26:3e:6c:8e:0a:fb:7a:f5:ae:67: 93:ec:f6:59:53:ce:6f:c7:3f:bd:32:1d:88:a7:e2: e0:2d:6a:81:90:fa:75:1e:b0:f5:d9:4f:54:6b:58: 3f:d3:59:cc:0a:16:f4:3f:19:79:9b:f6:59:ae:81: 75:f8:0b:b1:d4:cb:9a:90:5a:43:3f:d8:8c:7b:51: 13:05:17:c9:04:56:23:80:db:86:fc:4c:5a:8f:bc: 09:e6:79:86:5d:b3:d6:27:09:7e:13:57:38:c6:4b: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:B7:8B:BF:CC:6F:4B:10:D4:C4:26:41:91:3B:1E:22:A8:97:5D X509v3 Authority Key Identifier: keyid:5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:20:23:bc:f9:cc:4e:e3:08:c7:37:d9:01:3a:0b:51:55:36: 73:c5:7f:df:2e:a4:11:82:9b:e6:0b:38:d2:6d:60:54:d3:9e: 27:15:e4:e4:69:d0:49:04:e0:90:f7:c2:cb:72:b4:04:f3:51: 66:4e:fd:d0:24:33:f9:63:1d:b5:e8:e3:75:40:66:99:e3:4f: 13:5e:00:6d:ad:6b:63:60:d4:cd:8f:ab:9c:7c:38:ad:85:7b: 12:86:44:65:f1:4c:a0:c9:20:eb:68:a0:e5:27:cb:dd:6c:a2: c5:02:e2:8a:13:8c:7b:d3:02:cb:aa:f8:0a:f8:99:67:6f:46: f5:95:0b:a5:b3:35:2a:0a:ac:b1:d7:46:7e:9d:30:7d:ff:a5: cc:b2:d9:d3:3d:ae:90:fb:1c:cd:2a:c3:96:81:86:fe:18:90: 77:6f:7d:5d:74:ec:f9:b8:0d:99:20:ae:4b:31:93:82:04:e1: b5:05:cc:9e:e0:82:cd:91:3a:9f:cb:87:ba:70:17:7c:b3:f3: 2e:a9:9f:4f:57:7d:23:e6:d6:58:d0:91:61:2d:b9:b1:b8:25: 8c:e3:be:8d:3f:48:9a:00:9f:a8:04:60:3f:ab:4f:1a:59:e5: c4:a6:c6:ee:62:29:2a:69:64:91:20:1f:0c:76:2b:ad:33:83: 76:2e:1f:54 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSPP/jmvM/NOBoRkZhBvVeq1T/ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMEMyRDA0QkI1QkE0RjkwRTdENTkxQzBFNzU5NjI0 Rjc5RjdEMTAeFw0yNTExMDMyMDEwMzlaFw0yNTExMDkxNDQwMzlaMDMxMTAvBgNV BAMTKDEwQTNCNzhCQkZDQzZGNEIxMEQ0QzQyNjQxOTEzQjFFMjJBODk3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MEubqtURbD5fnCFon4eVEKWK kGglJm8jGY62HatcsSyNwLanyr4+AMkiK1NsO9S8QoIBxjlQ6gqG33ROnGkiOD6Z zgiol2zeksWV3TekN8H3E6Bl4D3KXzkVZIVuYBvDBMwW/WkmqJaEnCz5xj8UPoRW ZfYwsl1w8BysFvtXo6Y9zNoSvKcADsu6P/uyIAUI7pK3xWp5W9jaJj5sjgr7evWu Z5Ps9llTzm/HP70yHYin4uAtaoGQ+nUesPXZT1RrWD/TWcwKFvQ/GXmb9lmugXX4 C7HUy5qQWkM/2Ix7URMFF8kEViOA24b8TFqPvAnmeYZds9YnCX4TVzjGSyRhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUEKO3i7/Mb0sQ1MQmQZE7HiKol10wHwYDVR0j BBgwFoAUWuDC0Eu1uk+Q59WRwOdZYk9599EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QUU4MUIxNDVGRDA2MEMxOTA4QTI4RjEwOTAxMTJGRTlE NjE2NzMwNzEwMUM3NDYyMTI3QjE2Mjk5OTdBQUI5LzAvNUFFMEMyRDA0QkI1QkE0 RjkwRTdENTkxQzBFNzU5NjI0Rjc5RjdEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QUUwQzJEMDRCQjVCQTRGOTBF N0Q1OTFDMEU3NTk2MjRGNzlGN0QxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEFFODFCMTQ1RkQwNjBDMTkwOEEyOEYxMDkwMTEyRkU5RDYxNjczMDcx MDFDNzQ2MjEyN0IxNjI5OTk3QUFCOS8wLzVBRTBDMkQwNEJCNUJBNEY5MEU3RDU5 MUMwRTc1OTYyNEY3OUY3RDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXICO8+cxO4wjHN9kBOgtRVTZz xX/fLqQRgpvmCzjSbWBU054nFeTkadBJBOCQ98LLcrQE81FmTv3QJDP5Yx216ON1 QGaZ408TXgBtrWtjYNTNj6ucfDithXsShkRl8UygySDraKDlJ8vdbKLFAuKKE4x7 0wLLqvgK+Jlnb0b1lQulszUqCqyx10Z+nTB9/6XMstnTPa6Q+xzNKsOWgYb+GJB3 b31ddOz5uA2ZIK5LMZOCBOG1Bcye4ILNkTqfy4e6cBd8s/MuqZ9PV30j5tZY0JFh LbmxuCWM476NP0iaAJ+oBGA/q08aWeXEpsbuYikqaWSRIB8MdiutM4N2Lh9U -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:39 2025 by rpki-client