$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft File: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft (raw, json) Hash identifier: DrYAE0CfSZZc/Dx07lS4oZFjnyQUsIRWzrjrTCPh/YM= Subject key identifier: 6F:04:E2:FA:A4:18:06:3B:3A:C9:98:7B:5B:EB:39:66:66:55:96:17 Authority key identifier: E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 Certificate issuer: /CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Certificate serial: 0FE1F8D3609616A9A1D4B94F9FB87C368D3EC115 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft Manifest number: 66 Signing time: Mon 03 Nov 2025 20:20:43 +0000 Manifest this update: Mon 03 Nov 2025 20:15:43 +0000 Manifest next update: Sun 09 Nov 2025 10:50:43 +0000 Files and hashes: 1: 323830333a646635303a3a2f33322d3438203d3e20323634383237.roa (hash: N8nRydDsI2tiV6DHAMhvtvi2V5MfGNZnPYiz+i/wyDM=) 2: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl (hash: rDRwdPMFKnOH4VoFlGWpLhJskmMhy6yE82/n7RL7RB8=) 3: 323830333a646635303a3a2f33322d3438203d3e20323733393533.roa (hash: rXJHooALxtqUoqtc5ejw7QdDd9EkWLD+ss3DQG66d3o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e1:f8:d3:60:96:16:a9:a1:d4:b9:4f:9f:b8:7c:36:8d:3e:c1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Validity Not Before: Nov 3 20:15:43 2025 GMT Not After : Nov 9 10:50:43 2025 GMT Subject: CN=6F04E2FAA418063B3AC9987B5BEB396666559617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:9a:8c:46:8d:53:62:89:8f:1e:ee:9a:b2: e7:ce:ba:f2:ba:17:80:c4:f2:8f:44:e4:26:82:c3: ca:2d:2f:a3:d2:00:32:8f:79:23:22:a9:a0:65:19: 12:15:74:0a:31:ad:13:df:d3:92:ee:6c:c5:d0:11: 12:4b:bb:18:f1:84:a2:36:14:5e:ee:da:67:a0:f1: 91:f7:89:b2:41:43:77:80:f5:70:dd:45:96:63:f0: 7e:d2:ef:c2:88:c7:a6:4d:74:ed:d4:30:d9:e6:fa: dd:51:d8:47:62:46:95:79:16:23:65:9b:3e:f2:2d: 6f:2a:f2:37:d8:02:85:6d:fc:5e:37:47:93:66:cd: 48:d8:58:80:1f:95:62:67:ca:0a:2b:d8:6c:f6:39: 6f:da:64:24:92:d0:81:34:6d:fb:e8:02:39:27:65: d3:6c:71:37:3d:e4:b9:94:b0:47:98:12:34:4f:d7: 7d:df:17:40:f1:33:93:77:cb:bf:de:8f:83:76:0b: 13:00:1e:85:36:71:ca:5d:ae:a7:e1:9d:77:c7:32: bb:b1:47:c2:e5:b9:d1:f0:16:3e:c0:9d:fa:59:44: 2a:2a:84:60:74:37:f1:86:b8:b0:62:7b:51:ca:db: 5e:38:07:e1:71:3f:f9:01:07:56:2f:26:44:e7:f3: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:04:E2:FA:A4:18:06:3B:3A:C9:98:7B:5B:EB:39:66:66:55:96:17 X509v3 Authority Key Identifier: keyid:E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f8:57:67:8c:ce:bc:1a:0b:8b:dc:db:3f:6e:79:92:19:6e: 51:f7:9b:8d:26:13:79:64:ce:c1:27:e8:2f:0c:b3:7f:d2:6d: e0:ad:db:76:2d:73:d6:78:58:a6:ee:5f:b5:63:b9:15:bf:a7: 4e:4e:f9:ba:7f:67:ab:92:da:ea:5d:b0:59:77:f3:2a:33:85: d7:8d:ed:26:4d:d0:b8:01:dc:1b:01:4f:0a:82:d7:0c:27:7d: d1:e5:40:d5:52:c5:a4:e6:81:a3:43:24:c3:4e:75:ed:1f:11: b9:d2:e1:64:5e:c8:20:5c:6e:93:34:cb:da:81:ed:d2:7a:66: 0b:8c:e0:b8:c1:06:fe:7a:84:8d:29:39:4a:2a:df:7d:8d:af: 6f:34:47:1f:b1:7d:10:f1:33:81:f3:9b:ba:f0:bb:2e:4d:4f: fa:d4:2e:ed:3c:02:ea:15:89:3f:08:76:00:c5:7d:8b:14:cb: f5:65:d9:11:4f:85:a1:b4:8d:78:ea:61:6f:f8:35:be:4f:37: ac:c1:de:b5:a3:c8:6c:e0:62:ab:14:9b:71:a0:7b:df:1e:93: 79:e5:0a:03:99:02:a7:fc:f8:b5:bd:1f:a4:2f:41:32:41:e1: cf:14:bf:ee:da:4f:e4:57:a4:7d:85:3d:bd:3e:d7:c4:46:7e: 6f:14:a2:41 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD+H402CWFqmh1LlPn7h8No0+wRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThBOEVDMzY1QkE0NzBDOUZEOTMxMzYzM0ZEODlBQTFD N0REMTZFMjAeFw0yNTExMDMyMDE1NDNaFw0yNTExMDkxMDUwNDNaMDMxMTAvBgNV BAMTKDZGMDRFMkZBQTQxODA2M0IzQUM5OTg3QjVCRUIzOTY2NjY1NTk2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSpqMRo1TYomPHu6asufOuvK6 F4DE8o9E5CaCw8otL6PSADKPeSMiqaBlGRIVdAoxrRPf05LubMXQERJLuxjxhKI2 FF7u2meg8ZH3ibJBQ3eA9XDdRZZj8H7S78KIx6ZNdO3UMNnm+t1R2EdiRpV5FiNl mz7yLW8q8jfYAoVt/F43R5NmzUjYWIAflWJnygor2Gz2OW/aZCSS0IE0bfvoAjkn ZdNscTc95LmUsEeYEjRP133fF0DxM5N3y7/ej4N2CxMAHoU2ccpdrqfhnXfHMrux R8LludHwFj7AnfpZRCoqhGB0N/GGuLBie1HK2144B+FxP/kBB1YvJkTn82MXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbwTi+qQYBjs6yZh7W+s5ZmZVlhcwHwYDVR0j BBgwFoAU6KjsNlukcMn9kxNjP9iaocfdFuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkE3REI5MTU2QTQ3MTlCNDZGOUYzMjM1MEM2RTNDNTlC MDA4M0YzRkMyMDUzRDU4REU5OUVDRjM0MDA2NDE3LzAvRThBOEVDMzY1QkE0NzBD OUZEOTMxMzYzM0ZEODlBQTFDN0REMTZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOEE4RUMzNjVCQTQ3MEM5RkQ5 MzEzNjMzRkQ4OUFBMUM3REQxNkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZBN0RCOTE1NkE0NzE5QjQ2RjlGMzIzNTBDNkUzQzU5QjAwODNGM0ZD MjA1M0Q1OERFOTlFQ0YzNDAwNjQxNy8wL0U4QThFQzM2NUJBNDcwQzlGRDkzMTM2 MzNGRDg5QUExQzdERDE2RTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2+FdnjM68GguL3Ns/bnmSGW5R 95uNJhN5ZM7BJ+gvDLN/0m3grdt2LXPWeFim7l+1Y7kVv6dOTvm6f2erktrqXbBZ d/MqM4XXje0mTdC4AdwbAU8KgtcMJ33R5UDVUsWk5oGjQyTDTnXtHxG50uFkXsgg XG6TNMvage3SemYLjOC4wQb+eoSNKTlKKt99ja9vNEcfsX0Q8TOB85u68LsuTU/6 1C7tPALqFYk/CHYAxX2LFMv1ZdkRT4WhtI146mFv+DW+Tzeswd61o8hs4GKrFJtx oHvfHpN55QoDmQKn/Pi1vR+kL0EyQeHPFL/u2k/kV6R9hT29PtfERn5vFKJB -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:03 2025 by rpki-client