$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft File: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft (raw, json) Hash identifier: nAwBeEuzhgwLa35BdoNPf+27Zs3IBJNj4C/uJh/S2vo= Subject key identifier: 00:F9:72:08:7D:3E:14:7E:FF:59:66:0F:4B:68:78:05:3A:F7:6F:9E Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03 Certificate issuer: /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703 Certificate serial: 604DDDADD9329DD694343083CBC1483EAF207031 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft Manifest number: 0135 Signing time: Sun 02 Nov 2025 12:27:26 +0000 Manifest this update: Sun 02 Nov 2025 12:22:26 +0000 Manifest next update: Sat 08 Nov 2025 09:49:26 +0000 Files and hashes: 1: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl (hash: CFNc6ENOvea8rwPJ2K09zRF2VNRU2VT4yUBkPHDlvwc=) 2: 3135392e31362e342e302f32342d3234203d3e20323730313439.roa (hash: 7mm3mCGIoZexDzhAGuH/bf5GqhNwXZ3jwwtWfeQz3c8=) 3: 3135392e31362e342e302f32342d3234203d3e20323732333233.roa (hash: MDeJlQE/QYUt0IOXHP5qWTWuvb4cThq/54ZgjGe5N3Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 09:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4d:dd:ad:d9:32:9d:d6:94:34:30:83:cb:c1:48:3e:af:20:70:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703 Validity Not Before: Nov 2 12:22:26 2025 GMT Not After : Nov 8 09:49:26 2025 GMT Subject: CN=00F972087D3E147EFF59660F4B6878053AF76F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:48:47:93:cb:70:a2:b0:aa:1c:b2:66:ec: 5a:60:12:2c:a2:6b:c4:4f:21:79:94:a2:85:e7:db: 99:6a:38:7c:db:c0:de:0e:64:07:60:be:b8:cf:0b: bf:9d:4c:e5:1c:90:77:58:4a:2d:5c:7e:0f:41:d5: 52:1d:8b:18:9c:96:8c:d4:98:16:5b:9a:ab:8f:8a: 8d:9b:a1:4e:81:4a:63:ba:2b:8a:06:4b:85:c4:26: 78:f6:8c:d6:f8:3e:f6:d1:9a:1e:d9:2c:d8:a4:57: 63:8a:cb:eb:5a:16:7b:3e:56:22:ba:88:59:42:c4: 99:9b:e4:be:fb:ef:b4:6b:f7:df:a2:49:a9:8e:6f: 08:ca:f4:58:d0:99:1f:46:ec:4a:51:e3:7a:5c:74: bd:e7:40:d0:bc:6e:18:bf:44:57:6d:2c:a1:d3:ad: 2a:10:98:dc:7b:e5:cc:2e:36:96:94:c1:7c:39:e6: 65:e6:2f:66:88:d7:3b:a4:6b:8a:10:da:61:1a:1d: 78:fc:0d:4d:05:02:f0:0b:6a:3b:91:23:c2:dd:64: 2c:70:74:85:5d:bb:55:d8:3b:9d:be:e3:31:63:da: fb:c0:5f:10:91:13:2f:8f:82:54:77:3f:e5:17:0f: 31:1e:81:a8:19:50:d7:a0:b6:12:e9:fe:2b:18:d9: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F9:72:08:7D:3E:14:7E:FF:59:66:0F:4B:68:78:05:3A:F7:6F:9E X509v3 Authority Key Identifier: keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:73:6c:7b:10:4d:c9:9b:67:b3:b2:12:81:32:01:d0:6a:0c: fe:77:29:d4:3c:24:b5:cc:35:62:32:8e:02:6f:b8:cd:f1:f3: 1b:6f:0f:63:86:30:55:1f:64:6f:c6:2d:a3:47:95:89:47:75: 85:02:14:8a:fa:8e:59:5b:af:03:f6:3b:d1:13:90:e0:7f:cd: de:74:cd:31:cd:30:f3:32:08:4d:ba:85:16:41:f2:15:e9:41: 37:1e:e9:c4:0c:c8:dd:18:24:98:b4:e1:1a:e6:19:1c:af:87: e7:a7:96:6a:f2:ef:2d:83:46:ba:69:bf:f8:2d:0c:b5:95:92: 90:79:7b:f5:6c:b9:ca:7f:bd:13:86:e0:a0:2c:08:47:3f:e0: d7:d3:ac:5d:9f:c6:97:67:ec:87:e3:f8:28:a1:e1:db:41:b7: c6:ab:dd:52:67:32:5b:ca:ae:ff:c9:7f:25:f7:bc:ad:fa:71: 05:b0:fc:7f:c5:8f:1f:f0:36:15:62:a3:e9:be:18:cb:eb:49: 8d:c5:4f:60:e5:37:09:88:90:ef:02:ef:ea:39:c1:2d:d1:1d: 6b:40:87:d0:cf:2a:c7:ee:1f:8f:34:4a:e2:e7:0c:3d:54:2c: 5d:42:87:f0:0d:f8:02:04:81:57:47:f8:1d:27:a8:13:ef:90: c3:f5:f9:b7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYE3drdkyndaUNDCDy8FIPq8gcDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQ0E5RTMyOEJBRDY3OEEzQUQyOEM5QzUzNTE4RUY5 RUQwNjcwMzAeFw0yNTExMDIxMjIyMjZaFw0yNTExMDgwOTQ5MjZaMDMxMTAvBgNV BAMTKDAwRjk3MjA4N0QzRTE0N0VGRjU5NjYwRjRCNjg3ODA1M0FGNzZGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbikhHk8tworCqHLJm7FpgEiyi a8RPIXmUooXn25lqOHzbwN4OZAdgvrjPC7+dTOUckHdYSi1cfg9B1VIdixiclozU mBZbmquPio2boU6BSmO6K4oGS4XEJnj2jNb4PvbRmh7ZLNikV2OKy+taFns+ViK6 iFlCxJmb5L7777Rr99+iSamObwjK9FjQmR9G7EpR43pcdL3nQNC8bhi/RFdtLKHT rSoQmNx75cwuNpaUwXw55mXmL2aI1zuka4oQ2mEaHXj8DU0FAvALajuRI8LdZCxw dIVdu1XYO52+4zFj2vvAXxCREy+PglR3P+UXDzEegagZUNegthLp/isY2R2fAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAPlyCH0+FH7/WWYPS2h4BTr3b54wHwYDVR0j BBgwFoAU0+yp4yi61nijrSjJxTUY757QZwMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNEI5QUE3NzQwQUVBQUMxOTQyQzZENDlCRDBDNzU5RUVD QkMwQTZGMzFCRTM4Mjg5NThBOUE5QTc2M0FCQjExLzAvRDNFQ0E5RTMyOEJBRDY3 OEEzQUQyOEM5QzUzNTE4RUY5RUQwNjcwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0VDQTlFMzI4QkFENjc4QTNB RDI4QzlDNTM1MThFRjlFRDA2NzAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjRCOUFBNzc0MEFFQUFDMTk0MkM2RDQ5QkQwQzc1OUVFQ0JDMEE2RjMx QkUzODI4OTU4QTlBOUE3NjNBQkIxMS8wL0QzRUNBOUUzMjhCQUQ2NzhBM0FEMjhD OUM1MzUxOEVGOUVEMDY3MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUc2x7EE3Jm2ezshKBMgHQagz+ dynUPCS1zDViMo4Cb7jN8fMbbw9jhjBVH2Rvxi2jR5WJR3WFAhSK+o5ZW68D9jvR E5Dgf83edM0xzTDzMghNuoUWQfIV6UE3HunEDMjdGCSYtOEa5hkcr4fnp5Zq8u8t g0a6ab/4LQy1lZKQeXv1bLnKf70ThuCgLAhHP+DX06xdn8aXZ+yH4/gooeHbQbfG q91SZzJbyq7/yX8l97yt+nEFsPx/xY8f8DYVYqPpvhjL60mNxU9g5TcJiJDvAu/q OcEt0R1rQIfQzyrH7h+PNEri5ww9VCxdQofwDfgCBIFXR/gdJ6gT75DD9fm3 -----END CERTIFICATE-----Generated at Wed Nov 5 05:33:17 2025 by rpki-client