$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.mft File: 5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.mft (raw, json) Hash identifier: dwPKBG4HQi2f3bN6UgpCzBllCwL4vZtD+q8utMYcu9w= Subject key identifier: 27:BC:6C:EA:45:75:C1:80:18:94:3B:7E:73:41:05:2E:80:2A:F7:3F Authority key identifier: 5D:F5:63:A0:C9:5D:89:DB:EC:34:5C:65:29:CB:C9:A6:ED:43:CF:D4 Certificate issuer: /CN=5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4 Certificate serial: 0EB4CFB912B9002FEAE2B0012BEA54507331DC86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.mft Manifest number: 0129 Signing time: Tue 04 Nov 2025 09:22:56 +0000 Manifest this update: Tue 04 Nov 2025 09:17:56 +0000 Manifest next update: Sat 08 Nov 2025 18:22:56 +0000 Files and hashes: 1: 34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa (hash: D7sgZpbY5KEs52J/z6hr0N+rfnyiTsI5fXQr35DKG68=) 2: 5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.crl (hash: sqtaGhDoeEzpDPOJ3cx4eiOhHjs28Gx9BCf+x6hmVGU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.crl rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b4:cf:b9:12:b9:00:2f:ea:e2:b0:01:2b:ea:54:50:73:31:dc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4 Validity Not Before: Nov 4 09:17:56 2025 GMT Not After : Nov 8 18:22:56 2025 GMT Subject: CN=27BC6CEA4575C18018943B7E7341052E802AF73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:f0:5e:c2:ee:78:6e:7d:5d:b7:75:0b:ba: 3d:5c:ae:c3:5c:93:3f:42:19:07:96:8b:70:1c:53: c2:ed:49:96:be:e1:cb:50:a0:6e:0e:65:1d:91:3f: f1:46:03:d3:1b:a9:09:66:ce:7b:8d:24:cb:69:9d: 6d:68:96:85:79:ee:76:a6:41:a7:d0:b3:02:56:6e: 5b:17:83:98:c8:6d:84:ea:32:2a:65:3c:34:bc:a6: bd:3d:b9:83:ac:c2:75:9f:6a:5b:98:30:6d:cf:ad: 70:2f:47:13:aa:84:51:cf:bc:94:0b:6b:01:ab:70: be:84:ec:2f:f9:b0:cf:56:fa:80:5d:61:0e:51:a5: 09:c0:32:83:39:c7:02:cc:5e:2d:b1:36:0e:ee:c9: 18:e9:a9:b1:3a:26:63:c8:9c:4e:b8:1b:bd:2f:33: 0b:cb:af:ae:26:47:ec:b7:f3:21:3c:df:fc:93:fa: b8:3a:3e:a6:80:4c:f9:a1:98:fb:b7:be:3e:98:01: ec:9f:0c:30:8b:67:95:fe:5c:63:56:b9:e6:20:17: 86:24:7d:dd:0e:34:a4:65:44:5e:7e:7e:c2:20:f8: 50:ea:ba:44:be:dc:2b:e1:f8:3b:fd:c1:69:5f:4a: 65:9e:5e:41:21:66:45:11:8e:64:f1:17:54:7a:b6: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BC:6C:EA:45:75:C1:80:18:94:3B:7E:73:41:05:2E:80:2A:F7:3F X509v3 Authority Key Identifier: keyid:5D:F5:63:A0:C9:5D:89:DB:EC:34:5C:65:29:CB:C9:A6:ED:43:CF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b9:7a:be:de:fa:f9:08:fc:cc:bf:f9:19:5c:8f:71:3a:c1: 20:fe:e2:99:02:6a:52:4a:6a:af:a8:07:03:c8:0c:ed:84:7e: 13:9e:6f:54:2c:97:e8:fd:7b:86:69:df:68:ba:fc:e7:4b:40: a0:81:61:80:0e:cd:c3:d4:a8:e1:3d:18:24:a4:64:4b:eb:1a: e4:fe:64:d2:b0:af:0f:89:2f:4b:1f:28:69:3c:97:f0:31:40: a5:c5:28:de:18:9f:3f:fa:5e:ff:87:ce:f1:cf:dd:47:58:b3: 9b:39:5d:cf:69:06:47:14:03:77:cc:dc:97:52:a8:0b:1b:2e: e6:8c:09:fb:e4:81:22:75:a1:e9:e8:d8:37:88:34:ef:48:db: 09:80:7b:2a:1b:e5:d6:7c:41:ed:a6:fc:28:f3:c8:31:96:6b: a5:0a:a6:e6:0c:cf:5b:0e:ab:50:9a:cc:05:27:ed:b9:d8:a1: 0e:fd:06:8c:e5:3e:27:60:b4:e9:8a:93:48:62:3e:21:85:a0: 65:b8:9d:15:f9:0a:b1:90:0d:e9:09:b7:96:87:e3:fc:16:60: 33:f5:ca:32:41:1b:a4:89:f5:bf:6a:e5:a2:34:a8:1f:a4:63: af:ff:0d:6d:e3:35:1d:a6:94:d1:4a:cc:ff:d7:1c:e2:e7:fd: 70:18:70:30 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDrTPuRK5AC/q4rABK+pUUHMx3IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNTYzQTBDOTVEODlEQkVDMzQ1QzY1MjlDQkM5QTZF RDQzQ0ZENDAeFw0yNTExMDQwOTE3NTZaFw0yNTExMDgxODIyNTZaMDMxMTAvBgNV BAMTKDI3QkM2Q0VBNDU3NUMxODAxODk0M0I3RTczNDEwNTJFODAyQUY3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEU/Bewu54bn1dt3ULuj1crsNc kz9CGQeWi3AcU8LtSZa+4ctQoG4OZR2RP/FGA9MbqQlmznuNJMtpnW1oloV57nam QafQswJWblsXg5jIbYTqMiplPDS8pr09uYOswnWfaluYMG3PrXAvRxOqhFHPvJQL awGrcL6E7C/5sM9W+oBdYQ5RpQnAMoM5xwLMXi2xNg7uyRjpqbE6JmPInE64G70v MwvLr64mR+y38yE83/yT+rg6PqaATPmhmPu3vj6YAeyfDDCLZ5X+XGNWueYgF4Yk fd0ONKRlRF5+fsIg+FDqukS+3Cvh+Dv9wWlfSmWeXkEhZkURjmTxF1R6ttbBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJ7xs6kV1wYAYlDt+c0EFLoAq9z8wHwYDVR0j BBgwFoAUXfVjoMldidvsNFxlKcvJpu1Dz9QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNTcwNjIwMEJDRDZGNjRGOENDNUM0RTlGQzBCNDRENDcz MDhFQUIxRDM2OTgxREU4NUI5RDgzOEIzOEJCODg2LzAvNURGNTYzQTBDOTVEODlE QkVDMzQ1QzY1MjlDQkM5QTZFRDQzQ0ZENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81REY1NjNBMEM5NUQ4OURCRUMz NDVDNjUyOUNCQzlBNkVENDNDRkQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTU3MDYyMDBCQ0Q2RjY0RjhDQzVDNEU5RkMwQjQ0RDQ3MzA4RUFCMUQz Njk4MURFODVCOUQ4MzhCMzhCQjg4Ni8wLzVERjU2M0EwQzk1RDg5REJFQzM0NUM2 NTI5Q0JDOUE2RUQ0M0NGRDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKuXq+3vr5CPzMv/kZXI9xOsEg /uKZAmpSSmqvqAcDyAzthH4Tnm9ULJfo/XuGad9ouvznS0CggWGADs3D1KjhPRgk pGRL6xrk/mTSsK8PiS9LHyhpPJfwMUClxSjeGJ8/+l7/h87xz91HWLObOV3PaQZH FAN3zNyXUqgLGy7mjAn75IEidaHp6Ng3iDTvSNsJgHsqG+XWfEHtpvwo88gxlmul CqbmDM9bDqtQmswFJ+252KEO/QaM5T4nYLTpipNIYj4hhaBluJ0V+QqxkA3pCbeW h+P8FmAz9coyQRukifW/auWiNKgfpGOv/w1t4zUdppTRSsz/1xzi5/1wGHAw -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:58 2025 by rpki-client