$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: +o374a67ye1replaxjp3a2YD9DD13Fw4XZzuc9osLA4= Subject key identifier: 88:FB:DF:31:86:51:89:35:84:27:46:FF:89:E2:FB:51:11:C6:84:D6 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 503EDF7189CF89F7BF43C9A134CA3C089220A3F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 013F Signing time: Wed 05 Nov 2025 11:32:10 +0000 Manifest this update: Wed 05 Nov 2025 11:27:10 +0000 Manifest next update: Sun 09 Nov 2025 16:24:10 +0000 Files and hashes: 1: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 2: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 3: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) 4: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: d8S7voB7dPGZiYMAf0swmPqURTYuE3gNfIaYzt2r4XQ=) 5: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3e:df:71:89:cf:89:f7:bf:43:c9:a1:34:ca:3c:08:92:20:a3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Nov 5 11:27:10 2025 GMT Not After : Nov 9 16:24:10 2025 GMT Subject: CN=88FBDF3186518935842746FF89E2FB5111C684D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:31:b8:80:ee:35:fe:94:01:bb:d0:20:c2: 72:0f:5a:53:95:3a:53:6d:2d:5d:ca:bf:ac:89:82: 5e:ee:03:79:01:e0:75:a3:47:1d:5c:87:6e:27:38: ab:da:07:73:e3:80:47:fe:5c:b0:fa:40:e7:cb:fb: a7:79:01:c5:ab:2b:49:67:b4:32:7c:f7:49:60:30: 6b:c7:cc:07:92:54:c1:41:10:40:69:07:36:1c:5a: 46:0f:45:ee:5a:d1:f5:20:7e:05:b3:c1:4a:fc:c3: 94:35:a9:14:15:f0:b2:82:41:60:14:7f:19:b0:ba: 23:b7:97:00:42:76:b0:ff:77:ad:be:57:93:4e:c0: d7:be:8a:da:4e:18:51:85:80:99:76:00:40:4a:9d: 5e:35:3f:9d:3e:3a:d9:87:31:67:03:dc:20:c5:3d: 29:32:27:d8:59:5e:7d:d6:c0:93:e8:d4:19:de:60: 4f:a7:3b:99:fc:b0:96:4e:8d:c3:3e:49:ba:8a:b6: 22:dc:96:fc:8b:93:0c:b1:ae:70:5c:f4:a0:9d:b0: 0a:c4:93:58:0d:a5:b0:16:c3:79:e9:a6:42:61:0a: 23:b5:2e:a1:9c:0b:be:d7:b5:95:cb:66:c3:dd:69: e1:4e:1f:d1:f8:84:c3:3a:29:00:cc:73:a2:4b:a4: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FB:DF:31:86:51:89:35:84:27:46:FF:89:E2:FB:51:11:C6:84:D6 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0a:f9:be:8f:84:b4:ca:6b:be:b9:78:be:6b:c6:95:5e:4e: e2:24:92:5b:c7:18:42:c7:45:32:e4:19:0b:cd:87:a6:03:c9: 7e:55:ce:da:78:a6:60:3b:55:08:29:50:4f:81:05:8d:bf:ea: dd:0c:8e:72:63:97:dc:0f:d7:80:be:52:80:26:4a:59:17:35: 9d:05:a2:9b:62:35:a4:06:22:bc:91:d4:a2:db:32:01:62:eb: cd:86:6b:56:24:50:d4:b4:49:9f:49:37:bc:b4:23:63:e5:f6: 72:38:77:28:e3:24:6d:24:f6:e1:e4:7d:e6:d3:70:e0:f9:3f: 3d:4a:fb:89:f3:3b:50:c6:33:33:57:68:48:25:df:24:74:c9: 4a:81:74:b9:db:e7:c8:f1:a8:dc:5f:62:d3:94:56:ee:7b:04: f6:00:5b:f1:71:f6:18:e9:86:9a:1a:f5:16:8d:d6:bf:7a:bc: 63:dd:e1:0b:2c:a3:96:95:d3:81:75:64:74:a3:03:2a:bf:66: bc:e2:30:92:61:53:11:10:43:a1:eb:46:58:fc:20:bf:32:52: 14:c2:54:19:08:1f:29:ed:5b:92:07:bd:5e:29:1a:a6:b9:d1: 86:cb:84:1f:ff:d6:69:f4:91:01:82:6b:7d:04:f2:fd:76:18: 3f:b7:ad:ba -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUD7fcYnPife/Q8mhNMo8CJIgo/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTExMDUxMTI3MTBaFw0yNTExMDkxNjI0MTBaMDMxMTAvBgNV BAMTKDg4RkJERjMxODY1MTg5MzU4NDI3NDZGRjg5RTJGQjUxMTFDNjg0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAijG4gO41/pQBu9AgwnIPWlOV OlNtLV3Kv6yJgl7uA3kB4HWjRx1ch24nOKvaB3PjgEf+XLD6QOfL+6d5AcWrK0ln tDJ890lgMGvHzAeSVMFBEEBpBzYcWkYPRe5a0fUgfgWzwUr8w5Q1qRQV8LKCQWAU fxmwuiO3lwBCdrD/d62+V5NOwNe+itpOGFGFgJl2AEBKnV41P50+OtmHMWcD3CDF PSkyJ9hZXn3WwJPo1BneYE+nO5n8sJZOjcM+SbqKtiLclvyLkwyxrnBc9KCdsArE k1gNpbAWw3nppkJhCiO1LqGcC77XtZXLZsPdaeFOH9H4hMM6KQDMc6JLpM4PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiPvfMYZRiTWEJ0b/ieL7URHGhNYwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpCvm+j4S0ymu+uXi+a8aVXk7i JJJbxxhCx0Uy5BkLzYemA8l+Vc7aeKZgO1UIKVBPgQWNv+rdDI5yY5fcD9eAvlKA JkpZFzWdBaKbYjWkBiK8kdSi2zIBYuvNhmtWJFDUtEmfSTe8tCNj5fZyOHco4yRt JPbh5H3m03Dg+T89SvuJ8ztQxjMzV2hIJd8kdMlKgXS52+fI8ajcX2LTlFbuewT2 AFvxcfYY6YaaGvUWjda/erxj3eELLKOWldOBdWR0owMqv2a84jCSYVMREEOh60ZY /CC/MlIUwlQZCB8p7VuSB71eKRqmudGGy4Qf/9Zp9JEBgmt9BPL9dhg/t626 -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:28 2025 by rpki-client