$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft File: AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft (raw, json) Hash identifier: HEOpkWCYieTjTS4NoR78pY589WUCxWnuAwj3FUhNwSo= Subject key identifier: 2D:A9:BF:94:8E:7A:B9:13:72:7C:4A:63:15:B7:21:D0:17:E7:59:84 Authority key identifier: AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9 Certificate issuer: /CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9 Certificate serial: 2BB9BEF793FFD76BB4C4792B8611D2C76F87D317 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft Manifest number: A4 Signing time: Tue 04 Nov 2025 12:19:35 +0000 Manifest this update: Tue 04 Nov 2025 12:14:35 +0000 Manifest next update: Sat 08 Nov 2025 15:44:35 +0000 Files and hashes: 1: 3137392e35302e302e302f31372d3234203d3e203236363139.roa (hash: VFF48LYvj4WITQSqi537ydMQ1OMyWi0IpxAevpGq8VY=) 2: 323830333a636230303a3a2f33322d3438203d3e203236363139.roa (hash: kIcGkUpfytyxDQycf/dNT5XFTd/Rduql027AsbrfBhk=) 3: AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl (hash: 2AbmqyzjlL2bf6WYn+RCN0fUpJD1CGBA52X2NqVFCnk=) 4: 3137392e35302e32352e302f32342d3234203d3e20323635363832.roa (hash: nLRdwPnRz1kyumi0DBqmOepdgoil7IdHxxorpS/8L1k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b9:be:f7:93:ff:d7:6b:b4:c4:79:2b:86:11:d2:c7:6f:87:d3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9 Validity Not Before: Nov 4 12:14:35 2025 GMT Not After : Nov 8 15:44:35 2025 GMT Subject: CN=2DA9BF948E7AB913727C4A6315B721D017E75984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:1e:20:3e:7b:16:8f:c5:80:80:76:da:3f: 6b:ad:18:d0:ca:09:f1:aa:0a:22:88:1f:95:41:d2: 8c:7c:3e:d0:87:8f:b1:26:c4:7a:a6:b9:db:c6:23: 0a:0f:be:ca:5f:7c:5d:ae:0d:9b:43:26:f4:e6:96: 38:cb:af:8b:67:18:69:98:6c:ab:79:0b:dd:65:1d: 42:57:32:72:01:80:ce:56:88:81:49:e8:b1:88:1d: b4:44:87:b8:22:f8:d3:72:b7:f7:c3:75:57:1f:27: b0:6f:a2:43:42:80:3f:09:66:4d:02:aa:e4:7b:3d: 17:52:7b:6d:5d:9b:5e:0e:8a:1f:fd:81:d5:af:22: 2c:ee:fe:ad:97:ee:fe:48:9d:b1:b4:81:ac:98:55: c2:91:9c:80:ae:03:7d:24:e2:c4:4d:03:8e:90:79: 0e:6f:cb:02:0f:3f:3f:a9:62:7f:b2:e9:ca:83:a3: 21:c3:73:bf:7b:d6:18:55:12:bb:71:2c:e4:1c:09: 19:28:74:1d:56:36:d2:bc:a5:0d:7b:6f:4e:df:94: 31:da:67:47:1e:0d:f1:bf:a3:33:0b:af:91:b3:dd: 78:66:3c:58:75:77:eb:2f:53:88:f0:90:48:50:95: 88:d7:7a:ad:f0:66:de:96:14:56:3a:60:7a:1c:2e: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:BF:94:8E:7A:B9:13:72:7C:4A:63:15:B7:21:D0:17:E7:59:84 X509v3 Authority Key Identifier: keyid:AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d6:a8:23:11:d7:05:44:47:f9:49:c7:bc:c6:2f:ed:95:e7: 52:13:06:db:f0:4f:81:e9:6b:6e:63:c5:c5:ed:0d:5d:f2:c5: ef:be:4c:9c:a0:58:fc:c6:00:f4:e3:ee:e5:d8:de:13:a2:4a: 9f:e0:b9:0e:06:1e:a7:cf:1b:a8:86:5d:75:9b:e9:7a:44:90: 37:f3:07:d9:88:18:73:45:7c:db:f8:8a:0a:c0:e0:4b:f2:5d: 04:eb:8f:a4:8a:10:b1:9e:02:de:4b:7f:5e:5b:04:69:6d:c5: 37:85:1a:e5:6d:18:20:cd:37:32:c9:b0:53:43:fb:ef:f7:84: 6f:1b:7f:d3:c1:b0:63:c0:e5:85:f7:c3:aa:50:c1:c6:57:3a: 39:b3:8d:85:62:5f:42:fc:eb:7c:08:da:89:db:e3:18:ce:d9: d0:d8:6e:7f:26:c5:8a:2f:ba:02:ea:62:9d:0b:2d:b0:22:b4: 8d:f8:fe:15:4e:7f:8c:b7:a8:67:5e:d4:49:76:f3:df:8a:e7: d2:e2:98:56:73:29:ac:68:24:33:8a:02:61:49:a2:51:18:b6: 97:36:91:0e:08:69:ea:2f:6e:ac:75:71:ab:4f:ba:f5:b4:0c: 2d:2a:de:ac:75:e5:52:3e:6b:17:8b:ff:b8:d0:97:76:f7:6f: 7c:e5:70:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK7m+95P/12u0xHkrhhHSx2+H0xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2NkU5RjVDM0MxMUE1RjcxQUMxMDBCQzA1QTk5NThF RjIxNDhDOTAeFw0yNTExMDQxMjE0MzVaFw0yNTExMDgxNTQ0MzVaMDMxMTAvBgNV BAMTKDJEQTlCRjk0OEU3QUI5MTM3MjdDNEE2MzE1QjcyMUQwMTdFNzU5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+h4gPnsWj8WAgHbaP2utGNDK CfGqCiKIH5VB0ox8PtCHj7EmxHqmudvGIwoPvspffF2uDZtDJvTmljjLr4tnGGmY bKt5C91lHUJXMnIBgM5WiIFJ6LGIHbREh7gi+NNyt/fDdVcfJ7BvokNCgD8JZk0C quR7PRdSe21dm14Oih/9gdWvIizu/q2X7v5InbG0gayYVcKRnICuA30k4sRNA46Q eQ5vywIPPz+pYn+y6cqDoyHDc7971hhVErtxLOQcCRkodB1WNtK8pQ17b07flDHa Z0ceDfG/ozMLr5Gz3XhmPFh1d+svU4jwkEhQlYjXeq3wZt6WFFY6YHocLlw9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULam/lI56uRNyfEpjFbch0BfnWYQwHwYDVR0j BBgwFoAUrWbp9cPBGl9xrBALwFqZWO8hSMkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMEE3NkEzN0NDRERBNjBGQUEzODA2RjU1MEY1NDcyM0Iy MDUxRjdGNDBBNkJBRUJGMUQ4NjVFQzM1OTFCODBELzAvQUQ2NkU5RjVDM0MxMUE1 RjcxQUMxMDBCQzA1QTk5NThFRjIxNDhDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDY2RTlGNUMzQzExQTVGNzFB QzEwMEJDMDVBOTk1OEVGMjE0OEM5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDBBNzZBMzdDQ0REQTYwRkFBMzgwNkY1NTBGNTQ3MjNCMjA1MUY3RjQw QTZCQUVCRjFEODY1RUMzNTkxQjgwRC8wL0FENjZFOUY1QzNDMTFBNUY3MUFDMTAw QkMwNUE5OTU4RUYyMTQ4QzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBk1qgjEdcFREf5Sce8xi/tledS Ewbb8E+B6WtuY8XF7Q1d8sXvvkycoFj8xgD04+7l2N4Tokqf4LkOBh6nzxuohl11 m+l6RJA38wfZiBhzRXzb+IoKwOBL8l0E64+kihCxngLeS39eWwRpbcU3hRrlbRgg zTcyybBTQ/vv94RvG3/TwbBjwOWF98OqUMHGVzo5s42FYl9C/Ot8CNqJ2+MYztnQ 2G5/JsWKL7oC6mKdCy2wIrSN+P4VTn+Mt6hnXtRJdvPfiufS4phWcymsaCQzigJh SaJRGLaXNpEOCGnqL26sdXGrT7r1tAwtKt6sdeVSPmsXi/+40Jd292985XCR -----END CERTIFICATE-----Generated at Wed Nov 5 15:25:58 2025 by rpki-client