$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft File: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft (raw, json) Hash identifier: kaiTVZ8CtqyY9fAPVOdLJ+DnZif0zImF+x4lQgqRr2k= Subject key identifier: AD:21:98:C0:97:D4:E9:A7:B1:44:B4:1D:21:2A:8E:D5:5C:2B:63:57 Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0 Certificate issuer: /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0 Certificate serial: 6A03F45461CE9A8A1202F02AE1EE262880F73C6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft Manifest number: 0132 Signing time: Wed 05 Nov 2025 01:36:35 +0000 Manifest this update: Wed 05 Nov 2025 01:31:35 +0000 Manifest next update: Sun 09 Nov 2025 18:26:35 +0000 Files and hashes: 1: 3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa (hash: HCiEmN4N8WHXla6wIDAk771mUsAzi+3rCmAniYtte+c=) 2: 3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa (hash: R2JSj/c5FCaqtBYdAS6U7R+yqIbLAzmGdEMfhjvfmk0=) 3: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl (hash: ctMTYQsDyLarH0BRK2TJWnC3gSEomZ6uW2DW0FKTLX0=) 4: 3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa (hash: stdoBnPxigW2/tJ+vz7rsMc1H55/cgGPWcQS15sspK4=) 5: 323830333a646230303a3a2f33322d3438203d3e20323632323334.roa (hash: IJALdVmNN1AgDpzEzbtEykGeHrj3Tgwn0yNVf0UL/aQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:03:f4:54:61:ce:9a:8a:12:02:f0:2a:e1:ee:26:28:80:f7:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0 Validity Not Before: Nov 5 01:31:35 2025 GMT Not After : Nov 9 18:26:35 2025 GMT Subject: CN=AD2198C097D4E9A7B144B41D212A8ED55C2B6357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:f1:87:6a:34:ce:25:b1:19:7a:80:7b:8d: b8:2d:0d:b0:a2:24:c7:ba:25:44:7c:6e:66:ee:5c: 5d:c3:9f:5d:14:2a:cf:2f:58:86:b2:00:9b:81:ce: 70:eb:0f:da:7a:fc:db:d2:9e:28:bf:82:ff:9c:61: 1e:af:0f:d0:e3:4d:88:d7:11:31:f6:99:fa:d4:13: b5:91:0d:72:e3:b4:81:d3:8c:d7:bc:57:f8:bd:6d: c7:76:2b:41:40:8a:79:20:b5:5a:2a:c0:43:12:80: 3a:f5:11:6d:76:52:c4:2a:52:cd:71:00:12:90:73: bc:b7:6a:f2:2b:2d:6e:f1:06:95:bc:4a:40:19:eb: 65:c6:14:cb:2d:65:85:bd:95:f6:dc:f0:b3:1d:f9: 25:4e:be:0a:85:d8:b6:2f:d8:50:0d:11:bb:d0:c5: a7:52:85:0f:6e:7e:c7:9f:63:b9:c6:72:0b:43:83: 79:1f:e8:86:d0:f4:2d:a0:c9:17:e3:90:87:5f:6c: 3a:ac:56:9a:50:ed:e9:0f:d5:40:f6:eb:f0:53:e7: ad:05:4b:12:1e:97:57:24:27:e5:88:d5:48:a5:4b: 99:24:a3:b5:0a:6b:b0:8f:07:2d:e3:e1:20:c2:ca: 9c:dd:7a:aa:9e:45:9c:95:ea:c5:65:b3:cc:86:9c: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:21:98:C0:97:D4:E9:A7:B1:44:B4:1D:21:2A:8E:D5:5C:2B:63:57 X509v3 Authority Key Identifier: keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ec:ce:d1:70:87:bd:5c:76:94:5e:63:68:51:18:17:60:84: cb:5a:01:7b:09:e8:db:e6:7c:b2:c9:e5:be:70:92:f2:8b:ca: b6:0b:b6:28:94:96:72:08:12:05:11:a0:5b:6d:70:32:86:b0: 31:32:6f:7c:d0:e0:93:26:c1:c8:72:17:f1:7e:5d:50:4b:3c: 2b:9a:1d:60:03:ea:84:30:78:89:7c:74:4f:5d:5b:af:30:82: 17:32:72:ef:11:89:e4:45:ce:48:f7:11:28:b3:f1:38:c3:02: d6:29:c3:1d:37:29:ff:1a:9d:d2:ee:92:3e:df:c6:cd:34:4e: ce:e7:be:90:41:2c:e8:26:b9:0b:d6:79:c5:87:5c:61:e3:a0: df:14:7c:e2:90:0f:2d:33:42:07:f2:cc:3a:88:54:9d:c3:6f: ef:2f:6b:38:4d:4f:f0:b6:0e:c5:f8:a1:ad:7a:2f:6c:b6:93: e9:7b:97:43:18:04:f8:d1:14:ce:c5:5e:88:9f:8e:20:35:11: ec:22:93:56:79:2b:0d:b1:d4:8a:21:72:87:41:dc:45:33:23: 30:3b:89:14:b1:c1:66:21:a9:eb:1d:bd:a0:4e:22:ff:43:98: b5:53:61:fe:03:29:07:34:84:6a:e4:f6:0c:e1:8a:a6:13:c4: b9:e5:3c:d3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUagP0VGHOmooSAvAq4e4mKID3PG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIwQUU0MjYzRUM0NTEwQkRFRURBOTBCMkU1NkY1MEM2 MzkxOURGMDAeFw0yNTExMDUwMTMxMzVaFw0yNTExMDkxODI2MzVaMDMxMTAvBgNV BAMTKEFEMjE5OEMwOTdENEU5QTdCMTQ0QjQxRDIxMkE4RUQ1NUMyQjYzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8fGHajTOJbEZeoB7jbgtDbCi JMe6JUR8bmbuXF3Dn10UKs8vWIayAJuBznDrD9p6/NvSnii/gv+cYR6vD9DjTYjX ETH2mfrUE7WRDXLjtIHTjNe8V/i9bcd2K0FAinkgtVoqwEMSgDr1EW12UsQqUs1x ABKQc7y3avIrLW7xBpW8SkAZ62XGFMstZYW9lfbc8LMd+SVOvgqF2LYv2FANEbvQ xadShQ9ufsefY7nGcgtDg3kf6IbQ9C2gyRfjkIdfbDqsVppQ7ekP1UD26/BT560F SxIel1ckJ+WI1UilS5kko7UKa7CPBy3j4SDCypzdeqqeRZyV6sVls8yGnBOPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrSGYwJfU6aexRLQdISqO1VwrY1cwHwYDVR0j BBgwFoAUIgrkJj7EUQve7akLLlb1DGORnfAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMjdCNzMzOUE1N0YyQTREMTk4QkJENkM1RDVGNjRDRTFB RjgxNEI0MDkzNTQ3NzFBMjMwQTJGMDIxOTg1MzlGLzAvMjIwQUU0MjYzRUM0NTEw QkRFRURBOTBCMkU1NkY1MEM2MzkxOURGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMjBBRTQyNjNFQzQ1MTBCREVF REE5MEIyRTU2RjUwQzYzOTE5REYwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTI3QjczMzlBNTdGMkE0RDE5OEJCRDZDNUQ1RjY0Q0UxQUY4MTRCNDA5 MzU0NzcxQTIzMEEyRjAyMTk4NTM5Ri8wLzIyMEFFNDI2M0VDNDUxMEJERUVEQTkw QjJFNTZGNTBDNjM5MTlERjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAc7M7RcIe9XHaUXmNoURgXYITL WgF7Cejb5nyyyeW+cJLyi8q2C7YolJZyCBIFEaBbbXAyhrAxMm980OCTJsHIchfx fl1QSzwrmh1gA+qEMHiJfHRPXVuvMIIXMnLvEYnkRc5I9xEos/E4wwLWKcMdNyn/ Gp3S7pI+38bNNE7O576QQSzoJrkL1nnFh1xh46DfFHzikA8tM0IH8sw6iFSdw2/v L2s4TU/wtg7F+KGtei9stpPpe5dDGAT40RTOxV6In44gNRHsIpNWeSsNsdSKIXKH QdxFMyMwO4kUscFmIanrHb2gTiL/Q5i1U2H+AykHNIRq5PYM4YqmE8S55TzT -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:44 2025 by rpki-client