$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft File: D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft (raw, json) Hash identifier: SPNwbeEpVjwP/YN8NGVutDdY4XmzrrKOYLqAYUEYaKk= Subject key identifier: B1:4B:4F:7F:1E:25:5E:7F:A4:6B:6E:EB:8B:56:C1:70:5B:31:E1:2D Authority key identifier: D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A Certificate issuer: /CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A Certificate serial: 25BEF547A830CEA4C098B074C0BD6C49E3D1D603 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft Manifest number: 012E Signing time: Tue 04 Nov 2025 13:45:25 +0000 Manifest this update: Tue 04 Nov 2025 13:40:25 +0000 Manifest next update: Mon 10 Nov 2025 05:33:25 +0000 Files and hashes: 1: 3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa (hash: rEFxGTgcG+NCG0BeRgxsdFw+mw5KnSiF2Y5lDVe3F4s=) 2: D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl (hash: GjHLY3e+Aj/gAnym0+t8R1mio2gk+ZrdXpdLdxUZujg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:be:f5:47:a8:30:ce:a4:c0:98:b0:74:c0:bd:6c:49:e3:d1:d6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A Validity Not Before: Nov 4 13:40:25 2025 GMT Not After : Nov 10 05:33:25 2025 GMT Subject: CN=B14B4F7F1E255E7FA46B6EEB8B56C1705B31E12D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:55:4d:4c:bd:75:53:df:e4:67:b5:b7:9f: 28:47:c3:7a:aa:79:2c:c1:1c:16:87:bc:a5:1c:65: 44:c3:6e:09:11:6a:20:91:a8:fa:b6:b2:24:5d:53: 98:a8:b4:ae:5e:f5:d1:68:5a:ab:f0:4a:62:15:ec: 37:2f:9c:7f:ab:af:82:c1:c9:d7:9b:b3:66:0b:53: 49:72:76:d1:fe:ec:a2:5a:df:94:0d:22:55:7b:20: 78:3c:00:1b:2f:44:40:a5:6e:21:85:d3:4a:e2:ac: ef:7d:8e:70:d3:cd:20:a3:fb:63:93:d7:b4:52:a3: 6c:c0:05:b0:cd:c3:d7:d4:e4:2e:4b:72:92:9c:8b: af:ad:07:d9:a0:3f:27:99:c9:83:2b:7a:9a:ff:13: 0b:db:cd:75:b5:4c:fb:fa:e0:6e:93:4e:f4:b9:26: 48:b0:1d:33:7b:6f:43:ab:c7:2f:15:76:b7:f3:bd: c7:17:b7:e3:af:73:4b:5c:23:1c:95:75:e8:44:f6: 0a:f3:7d:44:0a:1d:77:51:54:7f:14:e5:4a:29:fe: f3:2d:3e:84:1d:09:7b:33:73:78:bd:4b:41:bd:7b: 34:36:00:4c:09:c8:51:14:ce:49:34:e7:5a:00:73: e2:ba:e0:d9:a8:9f:1c:3c:05:29:b5:a9:be:b4:ef: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4B:4F:7F:1E:25:5E:7F:A4:6B:6E:EB:8B:56:C1:70:5B:31:E1:2D X509v3 Authority Key Identifier: keyid:D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:24:ba:4d:e6:7f:d8:78:38:01:58:2b:06:15:ff:e6:55:2a: d5:d8:c5:cd:8a:d0:db:5e:2c:0f:81:de:4e:0e:bd:31:43:5c: 60:ac:66:e5:d9:f2:c0:6d:bb:61:1f:e6:d0:36:a0:f7:89:1e: 76:6c:3f:fc:4c:e2:94:6b:fa:bd:91:e0:5c:38:c3:3e:66:84: 84:da:ee:b3:4a:fd:3a:86:f5:8f:8a:b6:ef:14:be:ff:4b:09: c7:58:db:27:67:0d:92:19:de:09:b4:fa:36:8a:2b:08:9c:ce: cf:fb:73:1d:98:7b:ae:88:70:10:92:f9:1f:1c:90:cb:ed:a2: 6b:1a:d5:53:2b:25:6a:76:69:74:86:f0:56:63:19:bd:fa:95: e7:21:f5:be:c4:86:5c:74:3e:85:25:37:c0:a7:8f:a1:db:88: d2:50:8d:b8:6e:65:6c:cb:8b:b9:78:16:ae:c8:10:d3:d7:c0: b2:27:e7:1c:a4:32:2d:1c:b4:28:93:83:30:a8:20:f2:b1:9b: 31:01:95:35:b6:6c:15:64:f6:6d:1e:cc:0b:4d:f3:42:f9:3a: 8a:ca:fa:0c:6e:62:e5:2d:f4:49:58:d7:56:36:91:e1:88:e9: 28:f2:67:c5:c0:7e:4e:a3:ea:c5:9a:3d:77:ed:e4:59:9c:1a: 38:6c:0c:cc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJb71R6gwzqTAmLB0wL1sSePR1gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVGQUMxNEIzRjJCNjlDMjQ2NDJFMTMzOEFGRTAwNEJC RkMyQjU5QTAeFw0yNTExMDQxMzQwMjVaFw0yNTExMTAwNTMzMjVaMDMxMTAvBgNV BAMTKEIxNEI0RjdGMUUyNTVFN0ZBNDZCNkVFQjhCNTZDMTcwNUIzMUUxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSFVNTL11U9/kZ7W3nyhHw3qq eSzBHBaHvKUcZUTDbgkRaiCRqPq2siRdU5iotK5e9dFoWqvwSmIV7DcvnH+rr4LB ydebs2YLU0lydtH+7KJa35QNIlV7IHg8ABsvREClbiGF00rirO99jnDTzSCj+2OT 17RSo2zABbDNw9fU5C5LcpKci6+tB9mgPyeZyYMrepr/EwvbzXW1TPv64G6TTvS5 JkiwHTN7b0Orxy8VdrfzvccXt+Ovc0tcIxyVdehE9grzfUQKHXdRVH8U5Uop/vMt PoQdCXszc3i9S0G9ezQ2AEwJyFEUzkk051oAc+K64Nmonxw8BSm1qb6075mfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsUtPfx4lXn+ka27ri1bBcFsx4S0wHwYDVR0j BBgwFoAU1frBSz8racJGQuEziv4AS7/CtZowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMjU4NTYzMzdFQTQyRTgwQTVCODk2OTU5QzAxRERGMzlE NDA1OTM2NEQ5MjgwNzA3MTM0N0E4M0ZFMDVBNTQ5LzAvRDVGQUMxNEIzRjJCNjlD MjQ2NDJFMTMzOEFGRTAwNEJCRkMyQjU5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENUZBQzE0QjNGMkI2OUMyNDY0 MkUxMzM4QUZFMDA0QkJGQzJCNTlBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDI1ODU2MzM3RUE0MkU4MEE1Qjg5Njk1OUMwMURERjM5RDQwNTkzNjRE OTI4MDcwNzEzNDdBODNGRTA1QTU0OS8wL0Q1RkFDMTRCM0YyQjY5QzI0NjQyRTEz MzhBRkUwMDRCQkZDMkI1OUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeJLpN5n/YeDgBWCsGFf/mVSrV 2MXNitDbXiwPgd5ODr0xQ1xgrGbl2fLAbbthH+bQNqD3iR52bD/8TOKUa/q9keBc OMM+ZoSE2u6zSv06hvWPirbvFL7/SwnHWNsnZw2SGd4JtPo2iisInM7P+3MdmHuu iHAQkvkfHJDL7aJrGtVTKyVqdml0hvBWYxm9+pXnIfW+xIZcdD6FJTfAp4+h24jS UI24bmVsy4u5eBauyBDT18CyJ+ccpDItHLQok4MwqCDysZsxAZU1tmwVZPZtHswL TfNC+TqKyvoMbmLlLfRJWNdWNpHhiOko8mfFwH5Oo+rFmj137eRZnBo4bAzM -----END CERTIFICATE-----Generated at Wed Nov 5 15:52:43 2025 by rpki-client