$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft File: DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft (raw, json) Hash identifier: fs1NQZsQ4I8ATHv7+e2K1qvBk/ud9eU14dJGavcuUnQ= Subject key identifier: BD:5B:4A:E3:E2:9E:87:98:70:A0:51:03:EB:8C:99:2F:C8:AD:30:35 Authority key identifier: DA:C2:CF:C9:35:EC:2F:A7:67:F1:EC:1D:7F:A8:FE:23:5D:EA:35:51 Certificate issuer: /CN=DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551 Certificate serial: 2A8A9BFDF7FE173D1FDEF11405BAF6A9E7ADC094 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft Manifest number: 2B Signing time: Sun 02 Nov 2025 20:21:35 +0000 Manifest this update: Sun 02 Nov 2025 20:16:35 +0000 Manifest next update: Sat 08 Nov 2025 13:57:35 +0000 Files and hashes: 1: 323830333a663339303a3a2f33322d3438203d3e20323733303238.roa (hash: GbxfBZdsYzBpzFY2/23FU6K35pcdUO+ZJXm6P0hKK0A=) 2: DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl (hash: bchZ7FmBisIpxKSu8N+HNrQehs44SQe6vbRQKP/Ff5E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 13:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8a:9b:fd:f7:fe:17:3d:1f:de:f1:14:05:ba:f6:a9:e7:ad:c0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551 Validity Not Before: Nov 2 20:16:35 2025 GMT Not After : Nov 8 13:57:35 2025 GMT Subject: CN=BD5B4AE3E29E879870A05103EB8C992FC8AD3035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:74:a3:ee:80:7e:3b:7b:ab:12:b7:c9:d4: 71:73:90:c7:81:33:d9:ad:da:a1:34:f1:ca:62:16: 89:f7:53:e9:79:a8:47:d6:20:ef:2e:14:c2:a4:92: ad:2b:d5:75:bd:08:f9:bc:af:83:2a:6d:ac:42:c9: b0:97:66:97:94:27:e5:98:a4:5e:b5:2b:cd:7c:a5: cd:23:57:67:28:45:10:a1:42:b2:0d:e0:69:1c:31: fb:ac:ce:2b:14:4c:bb:ef:f7:41:4b:c6:d0:98:47: 36:1a:c4:0a:3b:c9:b0:d7:94:20:fc:43:07:18:2d: b3:6c:ad:26:e8:fb:dd:43:77:2a:e7:93:f7:af:9f: 33:89:f1:06:18:63:7e:ba:3a:3b:e5:f1:c6:51:e2: 9f:4e:14:ec:26:55:fc:0c:e5:c8:6b:1a:20:9d:a4: 0b:44:54:72:87:b6:ac:50:e4:18:41:1e:ae:38:10: 0d:4b:ca:e6:d6:5b:87:dc:a2:a6:ab:8f:9f:7a:03: 03:ba:8e:a7:f3:2e:aa:c8:02:a0:e6:d5:39:69:15: 29:ba:68:34:71:ca:38:56:bf:cc:83:58:13:1b:0b: f5:a3:4d:9c:fd:f7:1c:8a:6f:b5:88:fb:d3:08:8a: 23:4d:d6:83:25:30:20:88:13:1d:a0:32:9b:4b:3a: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5B:4A:E3:E2:9E:87:98:70:A0:51:03:EB:8C:99:2F:C8:AD:30:35 X509v3 Authority Key Identifier: keyid:DA:C2:CF:C9:35:EC:2F:A7:67:F1:EC:1D:7F:A8:FE:23:5D:EA:35:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:21:4e:59:45:06:04:19:dc:35:27:7d:ec:d3:9b:5c:a5:4f: 12:8e:5e:b1:4e:37:10:6f:28:ff:d6:94:ec:c0:37:e9:a1:78: 30:73:20:9b:57:28:64:24:0b:ed:f6:03:87:ee:cd:3b:2d:5e: c5:15:34:7a:db:60:24:e5:5b:52:a4:3a:f7:a0:66:51:6d:5a: f9:bf:62:16:5e:22:9e:7e:75:16:31:8c:48:94:bc:a4:dd:89: 88:5e:3c:c0:f4:2f:33:79:b2:c6:ae:d1:e7:ca:6e:ab:bd:4a: f1:70:70:cc:98:34:22:3a:93:a8:66:c9:3e:4e:6e:1f:85:c1: d2:aa:98:0a:f3:53:67:ea:2f:4a:ef:06:f4:d3:3b:1c:c5:9f: 7e:63:65:a3:05:de:84:1d:ef:94:e5:69:6a:8a:64:86:08:0a: 06:d5:0a:15:80:48:20:26:a8:b5:d1:b6:49:64:38:de:6a:b4: 64:06:6d:e9:c0:a1:f9:5a:4d:fc:cf:c6:c7:04:cc:5e:fd:3d: 39:52:aa:08:69:cf:96:20:36:ec:c9:59:7c:f1:59:bf:23:02: 60:bc:01:49:bf:9c:62:51:da:87:dc:68:7c:4d:ef:a0:77:b4: 9e:1e:24:80:9f:48:3f:31:6d:b8:1d:88:6c:34:07:4e:91:20: 25:2d:15:80 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKoqb/ff+Fz0f3vEUBbr2qeetwJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFDMkNGQzkzNUVDMkZBNzY3RjFFQzFEN0ZBOEZFMjM1 REVBMzU1MTAeFw0yNTExMDIyMDE2MzVaFw0yNTExMDgxMzU3MzVaMDMxMTAvBgNV BAMTKEJENUI0QUUzRTI5RTg3OTg3MEEwNTEwM0VCOEM5OTJGQzhBRDMwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45HSj7oB+O3urErfJ1HFzkMeB M9mt2qE08cpiFon3U+l5qEfWIO8uFMKkkq0r1XW9CPm8r4MqbaxCybCXZpeUJ+WY pF61K818pc0jV2coRRChQrIN4GkcMfuszisUTLvv90FLxtCYRzYaxAo7ybDXlCD8 QwcYLbNsrSbo+91Ddyrnk/evnzOJ8QYYY366Ojvl8cZR4p9OFOwmVfwM5chrGiCd pAtEVHKHtqxQ5BhBHq44EA1LyubWW4fcoqarj596AwO6jqfzLqrIAqDm1TlpFSm6 aDRxyjhWv8yDWBMbC/WjTZz99xyKb7WI+9MIiiNN1oMlMCCIEx2gMptLOoNvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvVtK4+Keh5hwoFED64yZL8itMDUwHwYDVR0j BBgwFoAU2sLPyTXsL6dn8ewdf6j+I13qNVEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRDE0OEFENENGOTE3QUY4QjkxNzg2ODRFMUMxQUYwNEU2 QUJCQzk3MDhCOEJEODdEM0ZBRkU0QUVBRTI2MTE3LzAvREFDMkNGQzkzNUVDMkZB NzY3RjFFQzFEN0ZBOEZFMjM1REVBMzU1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQUMyQ0ZDOTM1RUMyRkE3NjdG MUVDMUQ3RkE4RkUyMzVERUEzNTUxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkQxNDhBRDRDRjkxN0FGOEI5MTc4Njg0RTFDMUFGMDRFNkFCQkM5NzA4 QjhCRDg3RDNGQUZFNEFFQUUyNjExNy8wL0RBQzJDRkM5MzVFQzJGQTc2N0YxRUMx RDdGQThGRTIzNURFQTM1NTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZIU5ZRQYEGdw1J33s05tcpU8S jl6xTjcQbyj/1pTswDfpoXgwcyCbVyhkJAvt9gOH7s07LV7FFTR622Ak5VtSpDr3 oGZRbVr5v2IWXiKefnUWMYxIlLyk3YmIXjzA9C8zebLGrtHnym6rvUrxcHDMmDQi OpOoZsk+Tm4fhcHSqpgK81Nn6i9K7wb00zscxZ9+Y2WjBd6EHe+U5WlqimSGCAoG 1QoVgEggJqi10bZJZDjearRkBm3pwKH5Wk38z8bHBMxe/T05UqoIac+WIDbsyVl8 8Vm/IwJgvAFJv5xiUdqH3Gh8Te+gd7SeHiSAn0g/MW24HYhsNAdOkSAlLRWA -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:36 2025 by rpki-client