$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.mft File: A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.mft (raw, json) Hash identifier: M01ApYezjpGqz8aep5fDDrbWbTKVjoeEK7q6WgP8gJw= Subject key identifier: A1:37:1A:91:A2:3D:04:87:03:15:B8:55:A3:0B:53:9B:A3:D0:B0:37 Authority key identifier: A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1 Certificate issuer: /CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1 Certificate serial: 794622F630FC44181F069882FFC163526C8AD348 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 20:13:52 +0000 Manifest this update: Tue 04 Nov 2025 20:08:52 +0000 Manifest next update: Sun 09 Nov 2025 15:52:52 +0000 Files and hashes: 1: A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl (hash: LGOgvLYDaernVnFyzT5rlmwtnHaIUMHjkEztF6LOAHY=) 2: 3134382e3233302e302e302f32322d3234203d3e20383030.roa (hash: cpkm+FXPRBeGRrLFli2t0mdFOrBLm67vPnhty4XYrPg=) 3: 323830333a6239303a3a2f33322d3332203d3e20383030.roa (hash: UFAVpvA/Mojb0WHNwZrLsw2lKkN7f+fkg9ZCkTgKEmo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:46:22:f6:30:fc:44:18:1f:06:98:82:ff:c1:63:52:6c:8a:d3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1 Validity Not Before: Nov 4 20:08:52 2025 GMT Not After : Nov 9 15:52:52 2025 GMT Subject: CN=A1371A91A23D04870315B855A30B539BA3D0B037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:be:c9:13:4e:79:3e:43:71:1e:44:3d:b4: 1b:59:58:df:ee:4e:19:b3:9e:c3:eb:98:3d:6b:bd: 73:63:7d:5f:9e:53:ba:3b:13:98:9c:1d:6f:71:cb: 71:f9:08:2b:51:02:f6:62:ad:7f:b5:f2:72:4f:72: a9:c9:7d:df:76:83:c4:7f:bf:f1:99:b0:21:85:16: d0:96:3e:db:c7:f9:d1:11:5a:38:c9:c6:28:e5:76: 2f:83:e0:48:e0:04:36:5d:cb:00:f8:d1:7b:16:64: 57:61:ef:06:cd:2a:95:ec:15:1d:a5:4e:ae:28:f7: 3e:a3:ae:a9:e7:3b:08:57:24:3d:b0:85:49:ec:4d: 26:a4:cd:f1:da:b8:05:76:52:7e:66:ea:56:5c:eb: ff:5c:44:64:c8:47:08:17:bb:8c:93:96:9a:72:42: 4b:0a:65:71:33:3a:cd:72:aa:5f:cf:b2:38:65:52: dc:05:ab:8c:31:ce:ea:02:0c:97:5d:a6:86:38:0d: ce:8a:d5:8e:25:3d:be:95:68:b6:7a:42:c6:83:87: c1:ef:a2:66:92:d5:50:76:ea:5b:5a:4e:85:5e:4a: 04:1d:30:28:71:ee:a5:d0:ad:01:0d:9c:3f:10:75: d9:f3:23:20:a4:77:cd:c5:86:7d:52:6f:74:34:5f: 7e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:37:1A:91:A2:3D:04:87:03:15:B8:55:A3:0B:53:9B:A3:D0:B0:37 X509v3 Authority Key Identifier: keyid:A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3f:1c:a8:34:c0:24:54:8f:35:64:e3:ff:40:65:90:24:36: d4:bb:ce:38:62:a6:07:dc:70:54:f8:d0:2d:87:ba:f2:15:b4: 97:a5:a0:13:c2:38:2a:a6:bb:ce:a1:60:00:34:4e:8e:bc:5b: 48:af:86:0f:9d:68:cc:56:ad:e2:79:06:a0:c4:2a:f1:c2:c7: 08:04:79:07:28:fb:06:4f:6c:fa:7e:49:63:e5:89:bd:9e:9a: ca:65:4a:52:6b:6e:57:8c:e0:c4:b3:b3:c4:c7:f7:12:9b:f0: e1:62:36:71:2c:48:78:09:d5:e6:70:0d:0b:cb:92:8b:36:ae: c0:bd:1c:54:92:1c:31:cd:73:91:c4:f0:6c:fa:00:26:82:28: bb:ac:f7:2c:d8:8b:66:1e:1a:21:00:86:4f:b2:72:00:c4:f1: e1:f0:2f:b0:f6:8a:29:57:ab:83:9b:8f:48:d5:b9:c3:f6:38: 2c:b9:fa:3c:15:1a:2f:8e:39:9d:b3:52:1e:d8:54:f6:19:ea: 5e:fc:b5:39:60:bd:a6:f0:fa:9c:08:0d:02:e1:c7:f9:4d:ad: 33:26:47:e8:81:54:30:f6:0e:44:b0:aa:75:19:d3:c0:b9:d6: 19:a2:b5:15:fc:0e:e2:fd:b8:11:ce:f3:27:92:e4:14:0a:b6: 44:9e:ba:9f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeUYi9jD8RBgfBpiC/8FjUmyK00gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4RERENzZFOTQ3QjlDOUY3MjFCNzgwMjJEOUE0RUFB REFFNDZCMTAeFw0yNTExMDQyMDA4NTJaFw0yNTExMDkxNTUyNTJaMDMxMTAvBgNV BAMTKEExMzcxQTkxQTIzRDA0ODcwMzE1Qjg1NUEzMEI1MzlCQTNEMEIwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3r7JE055PkNxHkQ9tBtZWN/u ThmznsPrmD1rvXNjfV+eU7o7E5icHW9xy3H5CCtRAvZirX+18nJPcqnJfd92g8R/ v/GZsCGFFtCWPtvH+dERWjjJxijldi+D4EjgBDZdywD40XsWZFdh7wbNKpXsFR2l Tq4o9z6jrqnnOwhXJD2whUnsTSakzfHauAV2Un5m6lZc6/9cRGTIRwgXu4yTlppy QksKZXEzOs1yql/PsjhlUtwFq4wxzuoCDJddpoY4Dc6K1Y4lPb6VaLZ6QsaDh8Hv omaS1VB26ltaToVeSgQdMChx7qXQrQENnD8QddnzIyCkd83Fhn1Sb3Q0X37/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoTcakaI9BIcDFbhVowtTm6PQsDcwHwYDVR0j BBgwFoAUoI3ddulHucn3IbeAItmk6q2uRrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkU2Nzc0MjU5QkI4QzJFNDg0NTlFRjBEMDU4QjQ4OEZF OTAwRkIzODJFNzJGMTI1RDdENTE1NzlGMkZFMkM0LzAvQTA4RERENzZFOTQ3QjlD OUY3MjFCNzgwMjJEOUE0RUFBREFFNDZCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDhEREQ3NkU5NDdCOUM5Rjcy MUI3ODAyMkQ5QTRFQUFEQUU0NkIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZFNjc3NDI1OUJCOEMyRTQ4NDU5RUYwRDA1OEI0ODhGRTkwMEZCMzgy RTcyRjEyNUQ3RDUxNTc5RjJGRTJDNC8wL0EwOERERDc2RTk0N0I5QzlGNzIxQjc4 MDIyRDlBNEVBQURBRTQ2QjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoPxyoNMAkVI81ZOP/QGWQJDbU u844YqYH3HBU+NAth7ryFbSXpaATwjgqprvOoWAANE6OvFtIr4YPnWjMVq3ieQag xCrxwscIBHkHKPsGT2z6fklj5Ym9nprKZUpSa25XjODEs7PEx/cSm/DhYjZxLEh4 CdXmcA0Ly5KLNq7AvRxUkhwxzXORxPBs+gAmgii7rPcs2ItmHhohAIZPsnIAxPHh 8C+w9oopV6uDm49I1bnD9jgsufo8FRovjjmds1Ie2FT2Gepe/LU5YL2m8PqcCA0C 4cf5Ta0zJkfogVQw9g5EsKp1GdPAudYZorUV/A7i/bgRzvMnkuQUCrZEnrqf -----END CERTIFICATE-----Generated at Wed Nov 5 17:20:58 2025 by rpki-client