$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft File: 928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft (raw, json) Hash identifier: p1MgWd76xBZYcM7nWMMJ5xkic9AX5DjXK9xAAFKQ/+Y= Subject key identifier: 3D:53:12:F5:A0:4D:04:4A:E7:CC:ED:1A:91:98:6F:19:F7:9B:44:20 Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37 Certificate issuer: /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237 Certificate serial: 3ED9994068EA5D33BF508140FB5CEDD01EA61549 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 21:09:24 +0000 Manifest this update: Tue 04 Nov 2025 21:04:24 +0000 Manifest next update: Mon 10 Nov 2025 17:50:24 +0000 Files and hashes: 1: 3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa (hash: tV3o20s21TsJjqDb5S1/mKBxK0lh/Jbio9TDdjJqjDI=) 2: 323830333a663765303a3a2f33322d3438203d3e20323731373733.roa (hash: lelhNvLQtvkUQgfNVv7Zopr5U3iYB5erOGuX5IVY+x0=) 3: 3137392e31392e302e302f31362d3234203d3e20323731373733.roa (hash: tZItrZbQmDCBTlWRkGJmVLG0qSliMiAjcs5E7SOE1Fw=) 4: 928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl (hash: bSh/Uk5JBy5z3WySpmNyIwaAhx9wnDZYFp9wLRLl2Ww=) 5: 3137392e31382e302e302f31362d3234203d3e20323731373733.roa (hash: XzG6KJufQ8puoDyUJkDVGMDh6pnFt7+mYe87GBd+mwA=) 6: 323830333a6138303a3a2f33322d3438203d3e20323731373733.roa (hash: QCnrWxcca0bGBVggAGXujGTEoFrCEltcgp1P4GcI3kk=) 7: 3137392e34392e3232382e302f32322d3234203d3e20323731373733.roa (hash: dSO+uVzC1k4Ko/bbdVfvkOYA5rGIyhx+7RWnbH5nFdg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d9:99:40:68:ea:5d:33:bf:50:81:40:fb:5c:ed:d0:1e:a6:15:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237 Validity Not Before: Nov 4 21:04:24 2025 GMT Not After : Nov 10 17:50:24 2025 GMT Subject: CN=3D5312F5A04D044AE7CCED1A91986F19F79B4420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:31:0a:5a:ac:22:62:70:c6:de:f7:99:9b: 51:ad:98:d1:05:d4:18:12:db:19:7b:11:2d:7b:b0: fa:a8:c3:6a:bc:52:37:c4:6d:bb:1f:a0:37:ff:9e: bc:8d:15:9b:1a:d1:1b:fe:74:a3:10:da:67:63:ae: 98:eb:f9:f8:44:eb:4a:11:ae:58:e4:b1:37:ab:9f: 6b:0e:97:b5:e2:1a:8c:20:20:d6:07:f4:18:04:11: 9e:a8:65:73:df:fc:a5:c6:d4:58:6c:73:f7:fa:fe: ed:66:bd:5c:c4:92:f6:67:e3:9b:0f:9d:e9:e3:ac: c7:98:67:10:a0:50:33:e2:44:b6:81:a3:3f:ff:e3: 1b:bd:5f:1d:39:dc:bd:4f:46:10:d0:f6:b4:83:7c: c1:3d:fc:7f:f7:97:08:37:4e:22:de:7e:cd:a4:89: 47:d7:1f:71:97:68:87:fc:02:10:3e:a0:1f:3e:89: 4d:89:af:1e:3b:24:81:87:54:c8:50:29:25:b6:75: a4:a2:84:f7:73:09:cf:c3:85:56:3b:da:06:3a:50: 28:0b:49:34:0b:ee:8f:b5:97:88:9a:18:60:85:9c: e0:1a:2c:ae:9a:0b:0f:77:03:01:b4:28:6c:f9:86: b6:2b:26:12:7e:30:14:5d:c2:80:c1:5b:90:0c:a3: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:53:12:F5:A0:4D:04:4A:E7:CC:ED:1A:91:98:6F:19:F7:9B:44:20 X509v3 Authority Key Identifier: keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ff:b8:38:8d:c6:57:5b:5d:24:69:90:c2:2c:47:18:e1:19: 62:9a:c8:2e:5c:e2:55:18:c9:a6:50:fe:8b:35:9d:94:4a:a4: 8b:97:28:1c:8c:b5:75:44:64:45:d6:c9:c2:53:07:2b:39:8e: f6:f8:e2:8c:45:d2:d3:db:ff:bc:59:85:b3:12:e2:ba:97:94: 02:8f:73:a0:db:e4:15:f8:42:e6:9f:0f:46:c5:45:3c:1f:61: 89:0a:6d:ea:30:24:37:7a:82:50:16:d8:2f:b0:80:38:30:c0: 39:88:6e:3a:40:c9:64:32:bd:20:7d:78:59:91:06:8a:fa:3d: 17:28:00:6e:40:5e:4f:a1:91:6e:23:63:75:32:35:a9:25:9a: 48:c6:74:bf:df:e3:a9:50:75:f2:47:74:2e:78:ec:e5:72:20: e8:c9:90:d4:74:e8:d3:5b:30:0a:dc:80:56:e3:b2:8b:6b:d2: c0:0c:42:59:f0:ae:f0:7e:85:7c:0e:02:d4:38:b4:ac:f3:91: 6b:0e:5e:ba:c0:92:13:aa:8c:6a:73:8e:9c:52:77:5c:9d:62: f6:d3:0f:8f:08:ac:df:1d:7d:d4:dd:c1:e7:78:d0:d5:5f:ea: b1:00:d6:9f:4d:98:24:5d:d7:cd:c3:cb:9b:71:27:47:b7:74: b7:34:d7:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPtmZQGjqXTO/UIFA+1zt0B6mFUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI4MDUyRjBDQjNGMzdBQ0QzQUJDQ0NCQzhBNzQwQjA0 REExMzIzNzAeFw0yNTExMDQyMTA0MjRaFw0yNTExMTAxNzUwMjRaMDMxMTAvBgNV BAMTKDNENTMxMkY1QTA0RDA0NEFFN0NDRUQxQTkxOTg2RjE5Rjc5QjQ0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lTEKWqwiYnDG3veZm1GtmNEF 1BgS2xl7ES17sPqow2q8UjfEbbsfoDf/nryNFZsa0Rv+dKMQ2mdjrpjr+fhE60oR rljksTern2sOl7XiGowgINYH9BgEEZ6oZXPf/KXG1Fhsc/f6/u1mvVzEkvZn45sP nenjrMeYZxCgUDPiRLaBoz//4xu9Xx053L1PRhDQ9rSDfME9/H/3lwg3TiLefs2k iUfXH3GXaIf8AhA+oB8+iU2Jrx47JIGHVMhQKSW2daSihPdzCc/DhVY72gY6UCgL STQL7o+1l4iaGGCFnOAaLK6aCw93AwG0KGz5hrYrJhJ+MBRdwoDBW5AMo0MDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPVMS9aBNBErnzO0akZhvGfebRCAwHwYDVR0j BBgwFoAUkoBS8Ms/N6zTq8zLyKdAsE2hMjcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENEI1NkQ4Q0I3QjA2NjY0NjNBQ0FFMzFDMzQ5Njk3MTEw OUI0RDUxNTFENjJGQkU4Q0Y3RUIzMDY5RkQ2RkM4LzAvOTI4MDUyRjBDQjNGMzdB Q0QzQUJDQ0NCQzhBNzQwQjA0REExMzIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjgwNTJGMENCM0YzN0FDRDNB QkNDQ0JDOEE3NDBCMDREQTEzMjM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDRCNTZEOENCN0IwNjY2NDYzQUNBRTMxQzM0OTY5NzExMDlCNEQ1MTUx RDYyRkJFOENGN0VCMzA2OUZENkZDOC8wLzkyODA1MkYwQ0IzRjM3QUNEM0FCQ0ND QkM4QTc0MEIwNERBMTMyMzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBu/7g4jcZXW10kaZDCLEcY4Rli msguXOJVGMmmUP6LNZ2USqSLlygcjLV1RGRF1snCUwcrOY72+OKMRdLT2/+8WYWz EuK6l5QCj3Og2+QV+ELmnw9GxUU8H2GJCm3qMCQ3eoJQFtgvsIA4MMA5iG46QMlk Mr0gfXhZkQaK+j0XKABuQF5PoZFuI2N1MjWpJZpIxnS/3+OpUHXyR3QueOzlciDo yZDUdOjTWzAK3IBW47KLa9LADEJZ8K7wfoV8DgLUOLSs85FrDl66wJITqoxqc46c UndcnWL20w+PCKzfHX3U3cHneNDVX+qxANafTZgkXdfNw8ubcSdHt3S3NNfy -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:09 2025 by rpki-client