$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.mft File: D8907C24B083798F60D6D27B4273976C3AF83A69.mft (raw, json) Hash identifier: NQwZ4iY4AnG1nrG4C6KUUgCKv2xmKhti3KNLPgFcX/c= Subject key identifier: 5B:FA:8C:20:12:5B:A8:77:E8:8B:4C:1C:92:49:74:98:1E:46:AA:A8 Authority key identifier: D8:90:7C:24:B0:83:79:8F:60:D6:D2:7B:42:73:97:6C:3A:F8:3A:69 Certificate issuer: /CN=D8907C24B083798F60D6D27B4273976C3AF83A69 Certificate serial: 2F990FE1D938C06F92A78D666A11DF13949A47E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.mft Manifest number: D0 Signing time: Tue 04 Nov 2025 16:52:05 +0000 Manifest this update: Tue 04 Nov 2025 16:47:05 +0000 Manifest next update: Mon 10 Nov 2025 15:43:05 +0000 Files and hashes: 1: 3137302e38322e3131332e302f32342d3239203d3e20323634383336.roa (hash: etNZSn+SZodHqEL3FigxCW0qZqpkZxtlxwa4WTl20nA=) 2: 3137302e38322e3131322e302f32322d3234203d3e20323634383336.roa (hash: zRWeIPrXO4BwJ2m4kw9cVNNFpa83RChNkw/J5LUuWYw=) 3: 323830333a633263303a3a2f33322d3438203d3e20323634383336.roa (hash: nE0cyZggtZ2dkOGNljTmG74nGUMlmS/r+vrcvij7aws=) 4: D8907C24B083798F60D6D27B4273976C3AF83A69.crl (hash: GNKt788ltcKProFnyTVYqziJRCC/WAU9NmilLfyJA8k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.crl rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:99:0f:e1:d9:38:c0:6f:92:a7:8d:66:6a:11:df:13:94:9a:47:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8907C24B083798F60D6D27B4273976C3AF83A69 Validity Not Before: Nov 4 16:47:05 2025 GMT Not After : Nov 10 15:43:05 2025 GMT Subject: CN=5BFA8C20125BA877E88B4C1C924974981E46AAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3f:bc:d6:d9:99:8b:d7:96:de:34:3d:f6:13: a4:fd:8d:71:1c:d0:91:8b:fa:48:d5:f0:ad:26:77: 84:1d:70:7f:b6:62:0d:04:4f:3d:24:89:71:4d:40: 03:8e:f4:66:50:52:da:e8:93:4a:28:95:41:f7:96: a0:f6:c3:c5:4a:b8:11:d9:34:64:f9:cc:7a:9c:8f: 79:db:5f:8a:11:54:ed:36:f0:09:cc:3f:06:69:b7: 83:83:57:be:e0:08:c0:ff:86:c8:74:17:9b:95:cd: 19:05:d0:3e:1c:f1:d1:8c:4e:f0:00:75:5a:3d:11: b3:00:31:6d:ce:16:31:25:23:43:15:da:fa:62:56: 44:8f:82:29:dc:ee:67:90:7d:e8:69:49:46:80:0e: 37:7c:fc:d2:58:8d:f0:10:93:76:90:15:18:6c:c1: f0:4d:74:c7:1a:29:f4:f0:d7:91:6e:06:9d:ab:d1: b0:58:32:9a:7d:43:0d:2f:0a:a3:2c:b9:a7:ba:c9: 35:03:84:4c:cd:ca:3a:7f:41:cb:6f:c1:d0:e5:bd: be:10:41:8a:89:6c:62:a5:eb:b3:99:a6:c3:65:78: 57:7e:6d:0c:72:cd:dc:48:bd:8b:a8:d4:10:a1:2f: 7a:87:25:74:b7:24:66:88:41:be:eb:2b:9e:7a:db: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:8C:20:12:5B:A8:77:E8:8B:4C:1C:92:49:74:98:1E:46:AA:A8 X509v3 Authority Key Identifier: keyid:D8:90:7C:24:B0:83:79:8F:60:D6:D2:7B:42:73:97:6C:3A:F8:3A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:08:86:1c:09:13:cd:b0:52:bd:a1:68:c8:96:f9:35:f7:b5: 14:dd:2e:ee:8d:1a:17:ea:20:23:8b:60:63:25:ae:7c:28:dc: f7:1e:22:18:94:b8:5f:49:ff:09:59:74:73:3b:ca:40:fb:79: e1:a3:9d:6f:fb:3e:e2:a3:07:1b:ac:3d:f6:53:77:0a:99:6a: df:8b:2c:2d:a8:ab:92:b5:17:5a:12:e5:7b:20:ca:51:ce:3c: a4:f1:f7:7c:6f:0f:51:50:fe:98:b1:5c:38:7b:f4:60:f0:0b: 46:3b:ce:7d:17:38:73:47:f9:2d:dd:53:b4:93:17:f5:55:57: e9:97:dc:12:fa:2e:6e:54:8c:df:f2:50:fe:78:97:50:bc:db: f9:a3:a6:dc:76:58:ed:52:f8:cb:0b:48:b4:c8:19:a0:7d:0f: c5:f6:ce:6c:5c:55:1e:b1:b7:b2:0e:db:d0:3a:ba:ff:da:1c: b5:d4:2c:9c:98:fb:da:1c:61:c9:f5:4c:52:b5:22:95:8e:49: 07:65:67:3a:26:26:e5:8e:6f:af:5c:a7:67:fc:1e:53:be:b7: 4b:78:3f:7f:3b:4c:e0:6b:70:69:ae:2d:84:98:96:fa:6e:8a: e3:67:73:64:ee:64:af:2b:2d:54:0e:5d:90:25:cd:5a:f6:a2: 7a:ee:4c:e2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL5kP4dk4wG+Sp41mahHfE5SaR+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg5MDdDMjRCMDgzNzk4RjYwRDZEMjdCNDI3Mzk3NkMz QUY4M0E2OTAeFw0yNTExMDQxNjQ3MDVaFw0yNTExMTAxNTQzMDVaMDMxMTAvBgNV BAMTKDVCRkE4QzIwMTI1QkE4NzdFODhCNEMxQzkyNDk3NDk4MUU0NkFBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzP7zW2ZmL15beND32E6T9jXEc 0JGL+kjV8K0md4QdcH+2Yg0ETz0kiXFNQAOO9GZQUtrok0oolUH3lqD2w8VKuBHZ NGT5zHqcj3nbX4oRVO028AnMPwZpt4ODV77gCMD/hsh0F5uVzRkF0D4c8dGMTvAA dVo9EbMAMW3OFjElI0MV2vpiVkSPginc7meQfehpSUaADjd8/NJYjfAQk3aQFRhs wfBNdMcaKfTw15FuBp2r0bBYMpp9Qw0vCqMsuae6yTUDhEzNyjp/QctvwdDlvb4Q QYqJbGKl67OZpsNleFd+bQxyzdxIvYuo1BChL3qHJXS3JGaIQb7rK5562w2/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUW/qMIBJbqHfoi0wckkl0mB5GqqgwHwYDVR0j BBgwFoAU2JB8JLCDeY9g1tJ7QnOXbDr4OmkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENEMyMTA4MDM2QjZBNjE1NDc4RDI3ODRFMDNBQTQ0MTVG OEMxOTIxRkZEQTMwODIwM0Y4NjU5RTU0NzA5MTE4LzAvRDg5MDdDMjRCMDgzNzk4 RjYwRDZEMjdCNDI3Mzk3NkMzQUY4M0E2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODkwN0MyNEIwODM3OThGNjBE NkQyN0I0MjczOTc2QzNBRjgzQTY5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDRDMjEwODAzNkI2QTYxNTQ3OEQyNzg0RTAzQUE0NDE1RjhDMTkyMUZG REEzMDgyMDNGODY1OUU1NDcwOTExOC8wL0Q4OTA3QzI0QjA4Mzc5OEY2MEQ2RDI3 QjQyNzM5NzZDM0FGODNBNjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADCIYcCRPNsFK9oWjIlvk197UU 3S7ujRoX6iAji2BjJa58KNz3HiIYlLhfSf8JWXRzO8pA+3nho51v+z7iowcbrD32 U3cKmWrfiywtqKuStRdaEuV7IMpRzjyk8fd8bw9RUP6YsVw4e/Rg8AtGO859Fzhz R/kt3VO0kxf1VVfpl9wS+i5uVIzf8lD+eJdQvNv5o6bcdljtUvjLC0i0yBmgfQ/F 9s5sXFUesbeyDtvQOrr/2hy11CycmPvaHGHJ9UxStSKVjkkHZWc6Jibljm+vXKdn /B5TvrdLeD9/O0zga3Bpri2EmJb6borjZ3Nk7mSvKy1UDl2QJc1a9qJ67kzi -----END CERTIFICATE-----Generated at Wed Nov 5 22:35:30 2025 by rpki-client