$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft File: 8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft (raw, json) Hash identifier: 84u4ik9A9ufiwRnEUptak1IU4d33qtB33SuiL6L1+CM= Subject key identifier: D8:51:15:2D:48:DB:69:8A:D1:6F:3A:3D:A5:91:64:53:1F:2F:F3:7A Authority key identifier: 8E:C8:5B:4C:27:B0:4A:29:1C:CC:BF:33:85:A3:39:E0:1B:6F:38:34 Certificate issuer: /CN=8EC85B4C27B04A291CCCBF3385A339E01B6F3834 Certificate serial: 0C073BE65F1753F2CC3EDF72794B346091C5591A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft Manifest number: 32 Signing time: Tue 04 Nov 2025 16:47:03 +0000 Manifest this update: Tue 04 Nov 2025 16:42:03 +0000 Manifest next update: Mon 10 Nov 2025 13:44:03 +0000 Files and hashes: 1: 8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl (hash: ANFNkob9pktsDeQaOmjNpFq4WTN5bUqpynjxJZ/6OKY=) 2: 323830333a3964303a3a2f33322d3634203d3e20323734313435.roa (hash: 3jO+BLhUpwYWeds8xYGDEz3hSrW7Pp9RUMGq4ZvZG6I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:07:3b:e6:5f:17:53:f2:cc:3e:df:72:79:4b:34:60:91:c5:59:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC85B4C27B04A291CCCBF3385A339E01B6F3834 Validity Not Before: Nov 4 16:42:03 2025 GMT Not After : Nov 10 13:44:03 2025 GMT Subject: CN=D851152D48DB698AD16F3A3DA59164531F2FF37A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:77:b3:a9:67:28:5c:6b:3e:79:67:fa:c2: ec:1a:6c:a1:75:52:5a:9a:67:bb:88:0b:97:d9:5e: cb:1c:33:29:30:bc:86:54:f4:69:d2:86:6f:2d:c2: 58:a2:e5:29:bc:e8:fd:5b:85:ad:10:6c:e6:f0:7e: cb:5a:90:7a:0f:f9:3c:3a:8f:ab:ed:0d:33:a0:8e: ff:dc:97:97:53:26:13:ce:94:f6:19:62:55:68:29: c8:4b:c9:9e:27:09:64:fc:aa:92:e0:d6:33:87:5e: e9:6d:86:25:44:9c:5d:83:7c:89:02:0f:ab:55:a2: 55:1c:ee:cc:79:4a:65:04:88:01:52:6a:73:bf:a0: fe:5c:b9:67:ed:54:0d:90:1d:be:ed:b3:e7:2a:0e: 42:9c:38:8e:ea:93:dc:c7:26:bf:3d:8a:01:c5:72: eb:51:5e:e0:fa:c9:9a:cb:47:f6:fa:68:9d:8c:78: b2:b5:0a:1c:a1:57:67:08:5e:3d:e9:ee:50:44:ef: 13:c5:d7:da:1e:23:47:a6:5b:95:78:83:ee:75:b0: 5a:b4:bb:c9:97:51:40:da:b2:04:8b:53:0c:0b:9f: 03:01:be:d0:98:5a:68:f9:bf:5d:01:76:6c:04:c3: 17:d8:af:a6:88:00:cc:ec:40:5d:16:96:57:53:22: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:15:2D:48:DB:69:8A:D1:6F:3A:3D:A5:91:64:53:1F:2F:F3:7A X509v3 Authority Key Identifier: keyid:8E:C8:5B:4C:27:B0:4A:29:1C:CC:BF:33:85:A3:39:E0:1B:6F:38:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:84:da:ee:dc:e1:04:3b:03:51:0f:bf:40:9b:19:eb:64:2f: 75:3a:b8:18:30:f9:cc:5c:51:cb:d3:b4:18:96:37:b2:8c:e5: f9:7a:04:53:3e:d6:3a:fd:1e:ad:1a:39:44:b6:ed:6c:14:89: aa:e9:78:02:4c:66:6f:1b:eb:1e:2d:ab:e0:dc:10:31:d3:05: a6:80:c2:91:ad:21:3e:7a:7d:89:54:29:d7:08:02:19:96:b6: 70:cd:f9:1f:1e:7f:6a:6d:ee:f4:ea:6f:60:13:a3:65:36:01: 1a:be:76:04:1b:ce:d9:d1:61:25:79:8d:e1:af:fd:4c:8f:da: 8c:55:da:db:27:74:3f:d4:21:19:ec:15:1a:4f:5e:86:2c:1e: 0f:99:9e:ba:82:06:d3:7d:e2:00:63:fe:09:3c:91:0b:dc:93: c1:62:c4:d8:b6:e5:0a:53:75:e4:32:fd:53:be:ac:b9:1e:25: 20:0a:c7:fd:86:58:50:c7:a4:37:a9:57:32:2e:0c:a8:73:72: 71:68:50:d8:09:52:8a:aa:70:6e:6a:60:16:e9:04:a0:6a:ab: d6:fc:f7:34:bb:bb:b9:1a:b9:7c:29:93:e0:71:68:7c:cc:3a: 45:02:ba:37:87:48:50:a2:62:94:60:2a:c3:f9:9d:70:f9:1e: c8:8b:be:8e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDAc75l8XU/LMPt9yeUs0YJHFWRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDODVCNEMyN0IwNEEyOTFDQ0NCRjMzODVBMzM5RTAx QjZGMzgzNDAeFw0yNTExMDQxNjQyMDNaFw0yNTExMTAxMzQ0MDNaMDMxMTAvBgNV BAMTKEQ4NTExNTJENDhEQjY5OEFEMTZGM0EzREE1OTE2NDUzMUYyRkYzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlHezqWcoXGs+eWf6wuwabKF1 UlqaZ7uIC5fZXsscMykwvIZU9GnShm8twlii5Sm86P1bha0QbObwfstakHoP+Tw6 j6vtDTOgjv/cl5dTJhPOlPYZYlVoKchLyZ4nCWT8qpLg1jOHXulthiVEnF2DfIkC D6tVolUc7sx5SmUEiAFSanO/oP5cuWftVA2QHb7ts+cqDkKcOI7qk9zHJr89igHF cutRXuD6yZrLR/b6aJ2MeLK1ChyhV2cIXj3p7lBE7xPF19oeI0emW5V4g+51sFq0 u8mXUUDasgSLUwwLnwMBvtCYWmj5v10BdmwEwxfYr6aIAMzsQF0WlldTIgRpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2FEVLUjbaYrRbzo9pZFkUx8v83owHwYDVR0j BBgwFoAUjshbTCewSikczL8zhaM54BtvODQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNDg0OEYzOEQ2QkI1MTgxREE2NkUwNUQ4RTBBMkI4M0Q0 NDYxQTI5MTQwQ0NFQjFBNjc2NDkzNzZBNUI0OURDLzAvOEVDODVCNEMyN0IwNEEy OTFDQ0NCRjMzODVBMzM5RTAxQjZGMzgzNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUM4NUI0QzI3QjA0QTI5MUND Q0JGMzM4NUEzMzlFMDFCNkYzODM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjQ4NDhGMzhENkJCNTE4MURBNjZFMDVEOEUwQTJCODNENDQ2MUEyOTE0 MENDRUIxQTY3NjQ5Mzc2QTVCNDlEQy8wLzhFQzg1QjRDMjdCMDRBMjkxQ0NDQkYz Mzg1QTMzOUUwMUI2RjM4MzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXhNru3OEEOwNRD79AmxnrZC91 OrgYMPnMXFHL07QYljeyjOX5egRTPtY6/R6tGjlEtu1sFImq6XgCTGZvG+seLavg 3BAx0wWmgMKRrSE+en2JVCnXCAIZlrZwzfkfHn9qbe706m9gE6NlNgEavnYEG87Z 0WEleY3hr/1Mj9qMVdrbJ3Q/1CEZ7BUaT16GLB4PmZ66ggbTfeIAY/4JPJEL3JPB YsTYtuUKU3XkMv1Tvqy5HiUgCsf9hlhQx6Q3qVcyLgyoc3JxaFDYCVKKqnBuamAW 6QSgaqvW/Pc0u7u5Grl8KZPgcWh8zDpFAro3h0hQomKUYCrD+Z1w+R7Ii76O -----END CERTIFICATE-----Generated at Wed Nov 5 15:53:02 2025 by rpki-client