$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft File: 4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft (raw, json) Hash identifier: xF9+QRLXg4wDTjDhHrcng9VpdgplOE+k9KA3EUHKpYg= Subject key identifier: A1:A5:E8:90:80:07:BC:AB:34:E7:0D:A1:71:1F:17:03:BC:B4:34:E5 Authority key identifier: 4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7 Certificate issuer: /CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7 Certificate serial: 4A0A61AB968A7381A82A6F4FB3715065BBCB3AF5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft Manifest number: 0137 Signing time: Wed 05 Nov 2025 05:49:06 +0000 Manifest this update: Wed 05 Nov 2025 05:44:06 +0000 Manifest next update: Sun 09 Nov 2025 23:50:06 +0000 Files and hashes: 1: 323830333a616432303a3a2f33322d3332203d3e20323636373033.roa (hash: bePYOPWOq22DDvvHW5uveWrt38pk0GvmhtB5QKqD5d8=) 2: 34352e3233302e38302e302f32322d3234203d3e20323636373033.roa (hash: /JJXzs1qf0DSR9toXyh9VZrPxaRgcxQCoXWKd20F6TM=) 3: 4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl (hash: kP4MNF9mz3YIdqeutfcrAF81IqP/RVZHfsYi+QBbGw8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0a:61:ab:96:8a:73:81:a8:2a:6f:4f:b3:71:50:65:bb:cb:3a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7 Validity Not Before: Nov 5 05:44:06 2025 GMT Not After : Nov 9 23:50:06 2025 GMT Subject: CN=A1A5E8908007BCAB34E70DA1711F1703BCB434E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:b2:c5:89:f8:54:ab:d3:40:87:3f:63:f5: 63:50:4e:90:a6:4d:21:73:e0:4e:13:78:a1:1a:a4: e1:48:81:c7:0f:96:09:60:f9:33:20:74:f7:e7:15: 05:7b:90:a1:d7:e5:ce:01:eb:e1:38:e7:2e:f8:56: 71:38:01:0f:fb:25:a7:e5:0d:2e:8a:67:f7:63:6d: 7c:77:18:b8:9b:6b:55:0c:b9:ce:ae:b3:16:55:be: 5c:21:35:f4:e1:a3:a5:5f:06:2a:fe:50:db:36:25: 26:3c:95:99:9e:f3:35:6d:12:ca:88:8d:9d:d6:53: b9:3d:86:0a:31:18:1d:0b:1e:f5:16:72:58:19:30: a5:5d:f0:3b:ad:64:49:c4:bd:b2:d4:30:19:62:cd: a8:34:c5:f9:b5:49:2a:48:7f:f2:8f:f8:49:f6:6c: 5b:d3:7e:62:94:09:92:a9:7b:94:84:2c:c6:c3:d1: d1:9c:07:47:55:94:77:3d:c7:d2:55:56:65:c0:d3: 06:54:3a:61:86:fd:78:98:b3:28:59:c0:72:a5:92: 8b:a2:a0:b2:5b:01:d3:26:9b:9d:69:fd:90:ac:8e: c7:dc:30:8e:a7:8b:99:58:76:92:49:e5:b8:1f:08: 2a:3d:4a:3c:a4:4c:6f:04:1d:65:1c:29:c1:18:80: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A5:E8:90:80:07:BC:AB:34:E7:0D:A1:71:1F:17:03:BC:B4:34:E5 X509v3 Authority Key Identifier: keyid:4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ae:bc:fa:7a:69:f1:b8:d4:87:fc:31:2d:f7:88:2a:ee:8b: c6:e1:2d:5b:be:f0:b1:dd:1c:7a:d8:d9:8c:fc:ec:9e:45:66: 0f:8c:dc:8f:c2:6c:c9:15:e6:14:32:01:b2:5c:9d:20:8d:b3: 8f:c6:0c:9c:f0:37:0a:bd:b4:73:49:a1:40:83:02:35:5d:97: 9b:e8:d2:19:91:2b:50:62:91:f8:a9:7a:8a:e4:6f:ad:3c:4f: 78:bf:fa:99:99:e0:b3:8a:22:fe:f1:f2:4e:b1:ea:a5:66:8f: df:45:0f:75:33:6f:88:31:e9:17:9a:b4:53:0f:7c:70:d1:7e: 07:4e:a6:f0:32:ed:54:74:ed:54:80:f9:31:83:6a:7b:25:d7: 01:76:8e:06:54:8b:8f:5e:a8:5d:5f:b5:e5:34:56:3d:2c:f9: c8:58:23:10:84:ce:ce:40:83:74:7d:54:ed:b6:71:d6:f9:c3: 5b:66:7e:37:73:91:13:b1:a7:45:b6:95:34:81:37:b5:36:71: 2d:db:0d:c2:de:ae:40:37:03:31:10:18:94:e7:79:f5:d8:ff: 86:85:b4:2a:73:19:11:05:9b:25:a9:11:25:d1:eb:53:5e:c1: 3f:53:1a:94:6f:cf:81:b2:d5:38:3f:c3:86:1c:b1:67:90:a2: a4:ea:4c:27 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSgphq5aKc4GoKm9Ps3FQZbvLOvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY4OEJFN0JCOURCMzBEOTVFQjU0RTgyRjhEMDA5NTkx NUMyM0ZCNzAeFw0yNTExMDUwNTQ0MDZaFw0yNTExMDkyMzUwMDZaMDMxMTAvBgNV BAMTKEExQTVFODkwODAwN0JDQUIzNEU3MERBMTcxMUYxNzAzQkNCNDM0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9bLFifhUq9NAhz9j9WNQTpCm TSFz4E4TeKEapOFIgccPlglg+TMgdPfnFQV7kKHX5c4B6+E45y74VnE4AQ/7Jafl DS6KZ/djbXx3GLiba1UMuc6usxZVvlwhNfTho6VfBir+UNs2JSY8lZme8zVtEsqI jZ3WU7k9hgoxGB0LHvUWclgZMKVd8DutZEnEvbLUMBlizag0xfm1SSpIf/KP+En2 bFvTfmKUCZKpe5SELMbD0dGcB0dVlHc9x9JVVmXA0wZUOmGG/XiYsyhZwHKlkoui oLJbAdMmm51p/ZCsjsfcMI6ni5lYdpJJ5bgfCCo9SjykTG8EHWUcKcEYgEshAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoaXokIAHvKs05w2hcR8XA7y0NOUwHwYDVR0j BBgwFoAUT4i+e7nbMNletU6C+NAJWRXCP7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RjQ5OEQzREEzODdBRjBDODI1NzEzMjMzRjIyREI1NUI0 MjdDNDFFQkY4RDE2MDZCQjM1M0U4OTc5REYxQTIyLzAvNEY4OEJFN0JCOURCMzBE OTVFQjU0RTgyRjhEMDA5NTkxNUMyM0ZCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Rjg4QkU3QkI5REIzMEQ5NUVC NTRFODJGOEQwMDk1OTE1QzIzRkI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEY0OThEM0RBMzg3QUYwQzgyNTcxMzIzM0YyMkRCNTVCNDI3QzQxRUJG OEQxNjA2QkIzNTNFODk3OURGMUEyMi8wLzRGODhCRTdCQjlEQjMwRDk1RUI1NEU4 MkY4RDAwOTU5MTVDMjNGQjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARrrz6emnxuNSH/DEt94gq7ovG 4S1bvvCx3Rx62NmM/OyeRWYPjNyPwmzJFeYUMgGyXJ0gjbOPxgyc8DcKvbRzSaFA gwI1XZeb6NIZkStQYpH4qXqK5G+tPE94v/qZmeCziiL+8fJOseqlZo/fRQ91M2+I MekXmrRTD3xw0X4HTqbwMu1UdO1UgPkxg2p7JdcBdo4GVIuPXqhdX7XlNFY9LPnI WCMQhM7OQIN0fVTttnHW+cNbZn43c5ETsadFtpU0gTe1NnEt2w3C3q5ANwMxEBiU 53n12P+GhbQqcxkRBZslqREl0etTXsE/UxqUb8+BstU4P8OGHLFnkKKk6kwn -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:21 2025 by rpki-client