$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft File: 9DDF7010D9766829525CC44FC34F3B14225EB013.mft (raw, json) Hash identifier: oOxg1f4InrHVPaljWdOyfmTU3r3omG2bqDHfTxVDFVE= Subject key identifier: FA:FF:C0:66:A6:EA:D0:92:B8:05:75:ED:00:7F:53:6F:FD:2B:B0:E3 Authority key identifier: 9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13 Certificate issuer: /CN=9DDF7010D9766829525CC44FC34F3B14225EB013 Certificate serial: 3A7A33868793B6B124E6CF3E7C1EC0EBB8B34BD2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft Manifest number: 0134 Signing time: Wed 05 Nov 2025 00:51:16 +0000 Manifest this update: Wed 05 Nov 2025 00:46:16 +0000 Manifest next update: Mon 10 Nov 2025 18:58:16 +0000 Files and hashes: 1: 9DDF7010D9766829525CC44FC34F3B14225EB013.crl (hash: ipEswYwLpTRjmGwJGWjlHamkBHD9xeyawYfeAaT0MJI=) 2: 323830333a613861303a3a2f33322d3438203d3e20323636383032.roa (hash: 3lvlph+YZ28IZom+7iQr/HrAfM8DgWQjORor+/KSRCA=) 3: 34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa (hash: 8Ao9UxZv0IHO6AEHx45GDpY/sz9d4vMlHDsGMw1HvqU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7a:33:86:87:93:b6:b1:24:e6:cf:3e:7c:1e:c0:eb:b8:b3:4b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDF7010D9766829525CC44FC34F3B14225EB013 Validity Not Before: Nov 5 00:46:16 2025 GMT Not After : Nov 10 18:58:16 2025 GMT Subject: CN=FAFFC066A6EAD092B80575ED007F536FFD2BB0E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:46:1f:1d:af:65:b5:9d:e6:68:85:2b:a8: 9a:dd:2f:f9:2e:a9:5b:83:6e:7b:43:fe:05:12:b2: f1:f6:de:a6:a8:a6:c3:f7:80:b3:a0:b6:65:90:b7: 2d:71:93:09:7d:2e:79:13:fe:48:6a:17:42:d4:12: 62:8b:b0:58:59:95:f7:12:b7:0c:5b:18:42:dd:81: 7f:00:d5:1d:f9:a9:4e:3d:81:5c:1f:95:78:f0:5c: 1d:f8:d3:4f:8f:c5:27:5d:17:b7:b3:f7:c0:29:bb: 8e:fe:da:89:ff:4b:e2:cc:4b:ea:82:16:9b:74:76: a1:3f:88:70:77:1a:17:d4:fc:cb:77:92:37:13:92: 6b:ba:fa:0a:1c:5f:89:6d:33:f1:06:4f:85:2e:a4: 32:6e:11:f4:43:f5:36:16:64:ed:25:46:95:69:23: d6:20:05:79:f9:78:af:d5:d9:7d:3d:98:3a:7d:fc: ab:a3:97:5b:43:b0:c3:38:ef:30:b2:e2:3b:49:02: e6:bf:38:b9:91:43:de:d1:00:d9:1c:c1:90:dc:fa: 4a:45:b8:f7:84:42:6a:a6:a4:e9:18:65:2f:bf:b7: d1:67:18:a2:75:26:9e:a7:b2:ee:5d:f9:d2:59:0d: 0a:be:d0:c3:e6:ac:d0:6b:e5:38:38:d7:8f:79:d7: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:C0:66:A6:EA:D0:92:B8:05:75:ED:00:7F:53:6F:FD:2B:B0:E3 X509v3 Authority Key Identifier: keyid:9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:62:dc:84:a0:8d:20:e3:c8:6f:e1:75:0a:e2:08:42:2d:a4: 65:a4:4e:34:9f:da:58:3b:09:6c:50:11:47:04:66:4f:1c:bb: 4c:ba:c6:55:cf:ba:35:01:04:30:b0:4f:75:fc:e6:8c:26:5a: 9c:90:c3:c8:43:5f:04:ee:0f:5b:07:46:74:20:a8:f0:22:11: bf:ea:66:f0:16:83:1f:45:4c:fa:b5:37:ee:c1:61:cb:d4:9e: 51:db:5c:74:c1:0a:98:8b:a9:1f:94:67:e4:df:81:9f:3a:56: 84:40:f5:f0:44:23:e1:81:4e:0b:55:b8:75:b1:48:b8:4d:f0: d6:85:c7:b5:bc:17:3c:bf:fa:6e:f8:cb:5b:a0:b0:ce:b9:79: 25:06:fa:1e:e0:33:f8:24:cc:bf:ea:f8:7b:d6:f5:e8:a8:3f: 85:41:f5:d3:dd:e4:ad:39:16:3c:45:61:67:f6:a1:68:2b:32: 98:ca:af:71:8f:32:16:bd:f8:b0:52:53:a0:86:84:39:e0:1d: 0e:71:40:cc:36:49:88:e7:44:b1:ce:ca:83:23:76:44:80:f9: 2c:f9:ef:0c:71:2b:88:2f:9f:64:db:93:54:0f:d2:7a:33:3a: 91:90:1a:a5:db:bd:6d:43:3a:75:f7:d7:ae:8b:7d:84:20:9f: 9b:4e:57:1c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOnozhoeTtrEk5s8+fB7A67izS9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURERjcwMTBEOTc2NjgyOTUyNUNDNDRGQzM0RjNCMTQy MjVFQjAxMzAeFw0yNTExMDUwMDQ2MTZaFw0yNTExMTAxODU4MTZaMDMxMTAvBgNV BAMTKEZBRkZDMDY2QTZFQUQwOTJCODA1NzVFRDAwN0Y1MzZGRkQyQkIwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYUYfHa9ltZ3maIUrqJrdL/ku qVuDbntD/gUSsvH23qaopsP3gLOgtmWQty1xkwl9LnkT/khqF0LUEmKLsFhZlfcS twxbGELdgX8A1R35qU49gVwflXjwXB3400+PxSddF7ez98Apu47+2on/S+LMS+qC Fpt0dqE/iHB3GhfU/Mt3kjcTkmu6+gocX4ltM/EGT4UupDJuEfRD9TYWZO0lRpVp I9YgBXn5eK/V2X09mDp9/Kujl1tDsMM47zCy4jtJAua/OLmRQ97RANkcwZDc+kpF uPeEQmqmpOkYZS+/t9FnGKJ1Jp6nsu5d+dJZDQq+0MPmrNBr5Tg4149510FbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+v/AZqbq0JK4BXXtAH9Tb/0rsOMwHwYDVR0j BBgwFoAUnd9wENl2aClSXMRPw087FCJesBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNTQ3NTBBMEQ4MEEzMjU5QzZEN0M5NDkxMkNCQjRGNzcz NkNDQTk3OTZGNzVDM0VGOTdBRERBODFBRTcyRUNFLzAvOURERjcwMTBEOTc2Njgy OTUyNUNDNDRGQzM0RjNCMTQyMjVFQjAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RERGNzAxMEQ5NzY2ODI5NTI1 Q0M0NEZDMzRGM0IxNDIyNUVCMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjU0NzUwQTBEODBBMzI1OUM2RDdDOTQ5MTJDQkI0Rjc3MzZDQ0E5Nzk2 Rjc1QzNFRjk3QUREQTgxQUU3MkVDRS8wLzlEREY3MDEwRDk3NjY4Mjk1MjVDQzQ0 RkMzNEYzQjE0MjI1RUIwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvYtyEoI0g48hv4XUK4ghCLaRl pE40n9pYOwlsUBFHBGZPHLtMusZVz7o1AQQwsE91/OaMJlqckMPIQ18E7g9bB0Z0 IKjwIhG/6mbwFoMfRUz6tTfuwWHL1J5R21x0wQqYi6kflGfk34GfOlaEQPXwRCPh gU4LVbh1sUi4TfDWhce1vBc8v/pu+MtboLDOuXklBvoe4DP4JMy/6vh71vXoqD+F QfXT3eStORY8RWFn9qFoKzKYyq9xjzIWvfiwUlOghoQ54B0OcUDMNkmI50SxzsqD I3ZEgPks+e8McSuIL59k25NUD9J6MzqRkBql271tQzp199eui32EIJ+bTlcc -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:05 2025 by rpki-client