$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft File: 09452D3964845A96D0C2242C6550EF5DDE90180A.mft (raw, json) Hash identifier: qOl3bGdJwtVP9FocUNWFaPrDye/HHY6zY5gS9psof4M= Subject key identifier: E6:5D:86:98:F7:F3:CC:5B:F0:01:1C:F6:9A:A9:5C:44:F6:C7:FD:7B Authority key identifier: 09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A Certificate issuer: /CN=09452D3964845A96D0C2242C6550EF5DDE90180A Certificate serial: 1734A90BFC629DD5C6EE5462DBBFF22C785A6C02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft Manifest number: 07 Signing time: Mon 03 Nov 2025 06:43:07 +0000 Manifest this update: Mon 03 Nov 2025 06:38:07 +0000 Manifest next update: Sat 08 Nov 2025 18:30:07 +0000 Files and hashes: 1: 09452D3964845A96D0C2242C6550EF5DDE90180A.crl (hash: A1DeqRHGqBo/wBAS/KdxKHw4McGO4a7L/AwmC+X8Aqg=) 2: 34352e3232392e38342e302f32332d3234203d3e20323636373035.roa (hash: u+fIFJ6Wri7Y64qpJXKnD2P5KQvmAcX2xv6Tu5za4b8=) 3: 34352e3232392e38362e302f32342d3234203d3e20323636373035.roa (hash: Pfr6859cFfG0sBLTdjPs00WhawlAyb1KWQveG3bDB0I=) 4: 323830333a646432303a3a2f33322d3332203d3e20323636373035.roa (hash: UfR+ItPhQD6E1Xv4dLcqFTXeVWBfmMJvdIrkR0Y6kyM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 18:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:34:a9:0b:fc:62:9d:d5:c6:ee:54:62:db:bf:f2:2c:78:5a:6c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09452D3964845A96D0C2242C6550EF5DDE90180A Validity Not Before: Nov 3 06:38:07 2025 GMT Not After : Nov 8 18:30:07 2025 GMT Subject: CN=E65D8698F7F3CC5BF0011CF69AA95C44F6C7FD7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:b7:fb:07:19:d7:5a:cb:f7:f3:2f:92:3b: fe:90:75:fa:fc:09:59:df:18:79:3b:b8:e7:6a:63: 67:2b:ec:59:d1:1e:48:a1:98:57:f7:3c:78:cc:85: ff:10:cc:9e:02:e6:2b:bc:43:29:07:ea:eb:fd:15: f1:e9:ae:4e:91:b9:c1:23:31:61:c9:6f:63:78:87: 5d:45:d7:29:de:67:cf:da:9a:27:ed:e1:bd:70:d2: 40:48:d7:16:86:cd:ae:a1:5f:d3:d8:07:d6:b1:bc: 58:19:d3:82:5d:76:24:a1:f8:db:29:46:21:5c:f9: ad:00:f8:21:04:6a:d9:d7:37:bb:c4:9a:e8:a8:4d: 63:ff:3b:ec:8c:4f:e1:6d:b8:3d:52:ac:e2:c5:04: 2d:f8:b4:c5:33:da:2e:79:17:93:83:26:b6:5d:bf: b7:71:64:ba:60:6d:43:fe:17:7f:0f:ad:48:dd:e5: 8a:4e:10:54:c0:3c:ba:28:7b:ef:37:53:25:6b:d6: 90:64:d3:b9:bb:a9:09:b6:15:6f:6f:58:57:1f:54: b3:65:3a:30:5a:42:a7:cc:76:62:ff:53:02:4f:01: a3:75:9b:e2:08:f8:20:fb:f5:ea:3c:5d:98:bf:20: 1e:c8:20:97:94:e9:7e:a1:c5:8a:38:45:ec:bc:97: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5D:86:98:F7:F3:CC:5B:F0:01:1C:F6:9A:A9:5C:44:F6:C7:FD:7B X509v3 Authority Key Identifier: keyid:09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:b0:19:f4:b5:cf:f8:f4:74:ec:ed:c7:50:5b:f0:3e:95: 15:c3:a0:36:c4:e4:66:28:5a:57:29:77:3b:2c:ff:ad:50:2a: d2:94:94:8f:a9:a9:b1:bc:78:77:ad:b6:30:d2:ec:31:bf:51: 0f:55:2a:88:58:e8:62:8e:87:66:72:06:76:5d:02:d0:3f:8f: 17:42:bf:3d:4d:83:47:98:54:28:c8:3b:54:a8:89:32:f7:de: b0:e5:84:10:4a:d6:c3:8a:96:38:d0:b3:15:4e:01:d1:c7:e8: a6:9b:3b:fb:41:67:0b:14:5e:0a:77:c0:f4:27:5a:7f:4f:4a: 81:5c:a4:98:56:47:21:45:d1:dd:e8:fa:77:b4:f0:5d:e2:17: f2:ca:84:6c:a8:7d:d5:08:30:cd:77:fb:91:61:ee:9e:47:93: ea:ff:7a:df:e3:1e:e2:66:ec:a0:11:76:c0:bd:5f:08:f3:1f: 0e:34:4e:9e:06:db:c9:60:26:ca:8c:21:53:08:15:4c:ae:64: 64:8f:d8:a6:ac:d1:ad:65:b6:1d:cc:d6:5a:81:82:09:a7:6d: 1c:69:c3:f5:e5:15:bf:f6:22:c5:01:0b:e0:f9:0d:e8:5d:08: 0c:90:93:01:9d:fc:66:59:b2:2a:26:6c:22:9a:cd:6a:cb:e8: 0a:2b:23:4f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFzSpC/xindXG7lRi27/yLHhabAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0NTJEMzk2NDg0NUE5NkQwQzIyNDJDNjU1MEVGNURE RTkwMTgwQTAeFw0yNTExMDMwNjM4MDdaFw0yNTExMDgxODMwMDdaMDMxMTAvBgNV BAMTKEU2NUQ4Njk4RjdGM0NDNUJGMDAxMUNGNjlBQTk1QzQ0RjZDN0ZEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIPrf7BxnXWsv38y+SO/6Qdfr8 CVnfGHk7uOdqY2cr7FnRHkihmFf3PHjMhf8QzJ4C5iu8QykH6uv9FfHprk6RucEj MWHJb2N4h11F1yneZ8/amift4b1w0kBI1xaGza6hX9PYB9axvFgZ04JddiSh+Nsp RiFc+a0A+CEEatnXN7vEmuioTWP/O+yMT+FtuD1SrOLFBC34tMUz2i55F5ODJrZd v7dxZLpgbUP+F38PrUjd5YpOEFTAPLooe+83UyVr1pBk07m7qQm2FW9vWFcfVLNl OjBaQqfMdmL/UwJPAaN1m+II+CD79eo8XZi/IB7IIJeU6X6hxYo4Rey8l/i7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5l2GmPfzzFvwARz2mqlcRPbH/XswHwYDVR0j BBgwFoAUCUUtOWSEWpbQwiQsZVDvXd6QGAowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84REQzQzMwMjcwQzI5NEU1Q0VGQkM2NkU4QzhGNDg2QTFG MjA3RkNBMzk4RjAyRTYyQzM2OTQ1Qjk4ODMyRTRBLzAvMDk0NTJEMzk2NDg0NUE5 NkQwQzIyNDJDNjU1MEVGNURERTkwMTgwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTQ1MkQzOTY0ODQ1QTk2RDBD MjI0MkM2NTUwRUY1RERFOTAxODBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEREM0MzMDI3MEMyOTRFNUNFRkJDNjZFOEM4RjQ4NkExRjIwN0ZDQTM5 OEYwMkU2MkMzNjk0NUI5ODgzMkU0QS8wLzA5NDUyRDM5NjQ4NDVBOTZEMEMyMjQy QzY1NTBFRjVEREU5MDE4MEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASQ7AZ9LXP+PR07O3HUFvwPpUV w6A2xORmKFpXKXc7LP+tUCrSlJSPqamxvHh3rbYw0uwxv1EPVSqIWOhijodmcgZ2 XQLQP48XQr89TYNHmFQoyDtUqIky996w5YQQStbDipY40LMVTgHRx+immzv7QWcL FF4Kd8D0J1p/T0qBXKSYVkchRdHd6Pp3tPBd4hfyyoRsqH3VCDDNd/uRYe6eR5Pq /3rf4x7iZuygEXbAvV8I8x8ONE6eBtvJYCbKjCFTCBVMrmRkj9imrNGtZbYdzNZa gYIJp20cacP15RW/9iLFAQvg+Q3oXQgMkJMBnfxmWbIqJmwims1qy+gKKyNP -----END CERTIFICATE-----Generated at Wed Nov 5 08:16:14 2025 by rpki-client