$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft File: D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft (raw, json) Hash identifier: P0njP9UCZYBLXqB/MwWdqbbCCB2XiEn3+A9+eGqoVhU= Subject key identifier: EA:9A:E2:E1:C4:BF:0B:88:F0:3A:29:BE:F3:3A:74:9D:DE:D3:E2:22 Authority key identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 Certificate issuer: /CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88 Certificate serial: 5C0742733683BB5A8CAAA2C7FB4E696525A0C796 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft Manifest number: 0136 Signing time: Mon 03 Nov 2025 22:16:37 +0000 Manifest this update: Mon 03 Nov 2025 22:11:37 +0000 Manifest next update: Sun 09 Nov 2025 17:17:37 +0000 Files and hashes: 1: 34352e3137392e3139322e302f32322d3234203d3e20323637393230.roa (hash: 3tF18XBjbMWX1E+KL18d3OtxmCwxfbCqRg4RMmnMvlI=) 2: 323830333a326536303a3a2f33322d3430203d3e20323637393230.roa (hash: 18xMO0NNwNyaNdizcbDbOb9L3682/hnZ6qO1xAyu8Is=) 3: D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl (hash: zvn+I/gGK9Icx6V1AG2L8JlLGn0GyyYfJAK/CQSqUJo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:07:42:73:36:83:bb:5a:8c:aa:a2:c7:fb:4e:69:65:25:a0:c7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88 Validity Not Before: Nov 3 22:11:37 2025 GMT Not After : Nov 9 17:17:37 2025 GMT Subject: CN=EA9AE2E1C4BF0B88F03A29BEF33A749DDED3E222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:a5:fd:3f:48:c5:d7:6e:a7:14:4e:03:60: da:1e:a6:a4:8b:60:5f:53:f1:35:f5:3d:77:6b:8d: ea:f8:af:2e:5c:bf:6a:c3:6c:36:fe:71:59:73:59: 16:0d:fa:db:24:3d:04:96:0e:d3:dd:af:db:19:fe: a4:e2:9e:96:d9:11:18:c3:73:ff:e3:04:2b:49:36: b8:e7:ea:96:bf:c5:ee:41:05:e6:c9:9b:d9:8b:53: 61:2d:de:d5:ae:fa:40:5d:cf:4d:fa:63:57:e1:24: f6:c9:03:ab:e5:f7:08:93:19:65:51:2a:1f:29:b1: 98:a3:f8:5b:82:f7:bf:5e:93:de:37:6b:7f:da:b2: 8b:2e:e9:44:10:a4:4a:ef:90:37:f2:13:d5:06:24: 62:db:1c:f9:58:44:17:ae:68:5d:e5:1e:7b:0c:8a: 50:b6:50:be:83:91:ac:66:9f:d2:ff:5e:58:e6:a5: f8:45:91:28:ef:80:9a:ee:80:b1:ac:ee:b1:b4:5c: d7:a2:af:b4:8c:4c:25:e3:86:90:ce:08:83:42:a3: 67:77:a2:e9:bb:a2:82:ba:0c:6d:08:58:53:57:f7: a3:45:c6:b0:c0:c7:f6:01:f3:5c:ea:a9:2e:87:1f: 33:4f:9d:39:1a:28:ba:8c:9f:7f:85:d3:53:4e:21: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:E2:E1:C4:BF:0B:88:F0:3A:29:BE:F3:3A:74:9D:DE:D3:E2:22 X509v3 Authority Key Identifier: keyid:D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d8:c1:00:d2:66:8c:cd:45:b5:7c:9a:0a:dc:5a:40:4e:38: 41:79:f7:f7:c7:06:06:6a:b4:27:04:4a:c5:b0:d7:20:51:6f: 67:8c:dc:57:03:7d:15:d6:ef:5f:a4:47:c0:2b:f2:01:58:7e: 3f:7f:c8:c9:2c:ec:8e:78:2c:9e:e9:f7:65:a4:f9:6c:00:8c: 87:4b:58:8f:55:d7:0c:fd:99:d5:9f:fc:a9:f0:44:1e:89:72: 8f:65:1a:57:fc:fa:07:9e:11:bd:ad:46:36:a3:dd:71:da:26: 6e:1a:66:51:c6:cf:37:bb:8b:61:18:cb:e2:d2:fa:66:79:44: 71:4c:6d:b6:45:bb:29:68:65:18:63:07:99:f1:18:8b:8f:ba: d9:cc:21:c9:bd:2a:86:33:4a:c1:db:ae:1a:10:7b:58:46:61: a9:15:e6:73:44:7a:c7:74:86:b0:98:d8:ee:d9:af:54:ca:1b: 4b:1f:9f:14:4d:73:71:88:eb:c4:d8:89:ab:49:19:90:dc:6f: 40:6c:01:b0:36:af:a0:9d:ce:0d:5f:a7:3a:e5:b1:78:f5:53: a5:7f:a7:b9:88:e9:02:de:cc:26:0a:45:97:92:27:c0:83:f6: fa:a2:52:15:a8:b8:37:da:2f:de:ef:4a:18:5e:35:6c:4d:3f: 0f:cb:c1:47 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXAdCczaDu1qMqqLH+05pZSWgx5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDOTQ3N0NBNUJGMTE1NUFCRjUxNzA3OTcwRUE4MUNG RTQ0RUE4ODAeFw0yNTExMDMyMjExMzdaFw0yNTExMDkxNzE3MzdaMDMxMTAvBgNV BAMTKEVBOUFFMkUxQzRCRjBCODhGMDNBMjlCRUYzM0E3NDlEREVEM0UyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNaX9P0jF126nFE4DYNoepqSL YF9T8TX1PXdrjer4ry5cv2rDbDb+cVlzWRYN+tskPQSWDtPdr9sZ/qTinpbZERjD c//jBCtJNrjn6pa/xe5BBebJm9mLU2Et3tWu+kBdz036Y1fhJPbJA6vl9wiTGWVR Kh8psZij+FuC979ek943a3/asosu6UQQpErvkDfyE9UGJGLbHPlYRBeuaF3lHnsM ilC2UL6Dkaxmn9L/XljmpfhFkSjvgJrugLGs7rG0XNeir7SMTCXjhpDOCINCo2d3 oum7ooK6DG0IWFNX96NFxrDAx/YB81zqqS6HHzNPnTkaKLqMn3+F01NOIcfHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6pri4cS/C4jwOim+8zp0nd7T4iIwHwYDVR0j BBgwFoAU2MlHfKW/EVWr9RcHlw6oHP5E6ogwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQkY4NjY5NzdCRDk1RjFGMUE1ODM5REFDOUIyQkFEOEJF QTgxRTJGOEM0MEM3NDY0QkMzQ0UzQ0FCOTU2OEVDLzAvRDhDOTQ3N0NBNUJGMTE1 NUFCRjUxNzA3OTcwRUE4MUNGRTQ0RUE4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEM5NDc3Q0E1QkYxMTU1QUJG NTE3MDc5NzBFQTgxQ0ZFNDRFQTg4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0JGODY2OTc3QkQ5NUYxRjFBNTgzOURBQzlCMkJBRDhCRUE4MUUyRjhD NDBDNzQ2NEJDM0NFM0NBQjk1NjhFQy8wL0Q4Qzk0NzdDQTVCRjExNTVBQkY1MTcw Nzk3MEVBODFDRkU0NEVBODgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBT2MEA0maMzUW1fJoK3FpATjhB eff3xwYGarQnBErFsNcgUW9njNxXA30V1u9fpEfAK/IBWH4/f8jJLOyOeCye6fdl pPlsAIyHS1iPVdcM/ZnVn/yp8EQeiXKPZRpX/PoHnhG9rUY2o91x2iZuGmZRxs83 u4thGMvi0vpmeURxTG22RbspaGUYYweZ8RiLj7rZzCHJvSqGM0rB264aEHtYRmGp FeZzRHrHdIawmNju2a9UyhtLH58UTXNxiOvE2ImrSRmQ3G9AbAGwNq+gnc4NX6c6 5bF49VOlf6e5iOkC3swmCkWXkifAg/b6olIVqLg32i/e70oYXjVsTT8Py8FH -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:13 2025 by rpki-client