$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft File: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft (raw, json) Hash identifier: b34ixDr8yGP5jDufx0N0Pz3sALWie1KitiIFvVh22Bc= Subject key identifier: EE:F5:7B:77:7B:A2:B6:E4:21:7F:6B:A4:A5:30:EB:5A:ED:F4:45:88 Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 Certificate issuer: /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Certificate serial: 2D156F7494BEE225AC3AA9B7896919D47BB9D77D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft Manifest number: 0130 Signing time: Tue 04 Nov 2025 08:07:16 +0000 Manifest this update: Tue 04 Nov 2025 08:02:16 +0000 Manifest next update: Sat 08 Nov 2025 09:46:16 +0000 Files and hashes: 1: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl (hash: H7KdSrin8iFA0dBY9zMTamlT4ABlyPzVC00426vPG08=) 2: 323830333a336232303a3a2f33322d3438203d3e203532333431.roa (hash: fThQs6XPP9GBXIx/GQcX6pB6oahUwiln/3+wrqw737c=) 3: 34352e3233322e39322e302f32322d3234203d3e203532333431.roa (hash: NC3RwdVt5UqW2/N1ehB2fy1qKcsjAb3wdsWcCgiOjWg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 09:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:6f:74:94:be:e2:25:ac:3a:a9:b7:89:69:19:d4:7b:b9:d7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Validity Not Before: Nov 4 08:02:16 2025 GMT Not After : Nov 8 09:46:16 2025 GMT Subject: CN=EEF57B777BA2B6E4217F6BA4A530EB5AEDF44588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:95:77:d9:74:7f:d8:63:d3:7e:d7:c6:1b: 4d:d6:20:c6:f3:5f:5c:8d:90:48:4f:76:ca:44:d4: 64:b1:bf:c8:b2:03:d9:1e:6e:9f:e7:5e:76:a0:61: 3b:38:10:32:94:f4:97:a3:de:93:31:6f:a6:60:6d: 30:e8:8f:44:e3:96:53:2f:a5:a6:56:b2:2e:23:aa: 97:1a:93:fd:fc:a9:9c:61:84:c1:36:76:14:29:9b: c1:b3:0f:2e:04:d9:1a:e6:34:d8:91:f4:ca:f1:bf: c3:f6:8d:cb:30:db:e4:79:2b:91:9e:73:0b:3f:07: d6:c9:cb:c0:f1:e0:56:8c:51:c3:bb:df:55:ab:c3: d2:a6:0b:8e:30:ad:cf:2a:d0:00:66:af:88:d6:49: 5e:73:80:10:4e:8b:4f:8d:a3:e1:7b:a6:4b:d3:af: d6:10:49:49:cd:dd:2f:6e:6d:8a:40:7a:76:2b:b4: f4:e7:b5:b3:e9:a2:7c:d6:9f:5e:a6:a7:45:a5:e9: 4d:18:50:4d:99:a6:dd:ed:c9:ec:7b:97:21:b0:5b: ce:6d:42:11:2b:05:01:e4:a4:2e:d7:65:08:37:e4: 02:1f:76:7a:91:ca:f2:c8:9e:cd:f7:9b:04:97:dc: 51:f2:0e:35:c0:ef:3e:0c:97:fa:d9:b7:4c:87:91: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:7B:77:7B:A2:B6:E4:21:7F:6B:A4:A5:30:EB:5A:ED:F4:45:88 X509v3 Authority Key Identifier: keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:aa:fd:13:9c:f6:6b:ac:d8:99:08:30:b0:b0:2b:85:70:67: 97:eb:df:8b:12:1f:cf:c8:65:65:15:8a:f5:a9:65:a7:0b:0c: 40:f2:4c:62:3c:b9:85:ab:92:96:a6:2a:c1:0d:5b:12:4f:57: c8:1a:6c:a5:17:4d:1e:ec:4f:0f:0d:a0:73:50:45:80:52:b4: 9b:2c:a2:9e:61:58:83:e1:06:6e:48:52:73:58:c2:f4:79:d9: 16:19:ea:cd:c8:33:75:fc:ff:9e:49:94:f2:05:3f:6c:7b:73: 30:6c:94:9b:2a:c7:0c:d5:8f:27:9f:e1:d7:6a:7c:9c:5c:fd: 5b:9d:ad:6f:8d:62:74:4c:80:5c:fa:a6:5b:da:32:7f:97:9d: d5:3e:e3:a0:13:8b:b9:a1:57:4b:a1:ce:24:7e:a1:30:a8:f5: 6a:47:79:f6:f1:91:ae:97:2b:35:e8:d0:44:bd:5a:f7:dd:41: df:be:d6:b4:99:38:88:55:26:d5:cf:58:43:8f:11:fd:14:cf: b7:89:85:19:15:ed:9e:8f:c2:60:93:75:65:0f:e3:21:0e:f3: 3b:4b:f1:83:22:b5:69:3e:5d:77:64:0e:ab:51:c0:03:7a:1c: 89:92:bf:c2:78:2c:85:6a:ad:fa:46:72:60:0d:88:65:c4:0d: e6:7d:9f:45 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULRVvdJS+4iWsOqm3iWkZ1Hu5130wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4M0EzOEMxQjkyNkNENUYyRjk3NDFGOEFGRUU3QzMx NzlENjYwMzAeFw0yNTExMDQwODAyMTZaFw0yNTExMDgwOTQ2MTZaMDMxMTAvBgNV BAMTKEVFRjU3Qjc3N0JBMkI2RTQyMTdGNkJBNEE1MzBFQjVBRURGNDQ1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRZV32XR/2GPTftfGG03WIMbz X1yNkEhPdspE1GSxv8iyA9kebp/nXnagYTs4EDKU9Jej3pMxb6ZgbTDoj0TjllMv paZWsi4jqpcak/38qZxhhME2dhQpm8GzDy4E2RrmNNiR9Mrxv8P2jcsw2+R5K5Ge cws/B9bJy8Dx4FaMUcO731Wrw9KmC44wrc8q0ABmr4jWSV5zgBBOi0+No+F7pkvT r9YQSUnN3S9ubYpAenYrtPTntbPponzWn16mp0Wl6U0YUE2Zpt3tyex7lyGwW85t QhErBQHkpC7XZQg35AIfdnqRyvLIns33mwSX3FHyDjXA7z4Ml/rZt0yHkXuZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7vV7d3uituQhf2ukpTDrWu30RYgwHwYDVR0j BBgwFoAU3YOjjBuSbNXy+XQfiv7nwxedZgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjk1MTFFQkE5RTZCQ0NBMzlBMEM0MDdEQkVCRTNFRUYx RjEwMjZGRTQzNjZBNjgzMUUxQjkwNDM3MDY4ODZELzAvREQ4M0EzOEMxQjkyNkNE NUYyRjk3NDFGOEFGRUU3QzMxNzlENjYwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDgzQTM4QzFCOTI2Q0Q1RjJG OTc0MUY4QUZFRTdDMzE3OUQ2NjAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkI5NTExRUJBOUU2QkNDQTM5QTBDNDA3REJFQkUzRUVGMUYxMDI2RkU0 MzY2QTY4MzFFMUI5MDQzNzA2ODg2RC8wL0REODNBMzhDMUI5MjZDRDVGMkY5NzQx RjhBRkVFN0MzMTc5RDY2MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARqv0TnPZrrNiZCDCwsCuFcGeX 69+LEh/PyGVlFYr1qWWnCwxA8kxiPLmFq5KWpirBDVsST1fIGmylF00e7E8PDaBz UEWAUrSbLKKeYViD4QZuSFJzWML0edkWGerNyDN1/P+eSZTyBT9se3MwbJSbKscM 1Y8nn+HXanycXP1bna1vjWJ0TIBc+qZb2jJ/l53VPuOgE4u5oVdLoc4kfqEwqPVq R3n28ZGulys16NBEvVr33UHfvta0mTiIVSbVz1hDjxH9FM+3iYUZFe2ej8Jgk3Vl D+MhDvM7S/GDIrVpPl13ZA6rUcADehyJkr/CeCyFaq36RnJgDYhlxA3mfZ9F -----END CERTIFICATE-----Generated at Wed Nov 5 05:28:59 2025 by rpki-client