$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft File: 1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft (raw, json) Hash identifier: vLlu2k1i4oxqvD8q/e2WGEj2rOrn7hmcf6oCONvTxuE= Subject key identifier: 02:26:41:11:9C:61:8E:7A:C0:2E:F1:D8:98:D7:EB:DD:E3:2D:13:FF Authority key identifier: 1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3 Certificate issuer: /CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3 Certificate serial: 3DC4BA96C7E73500E45F3009501D88E51432F4A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft Manifest number: 012B Signing time: Tue 04 Nov 2025 10:48:50 +0000 Manifest this update: Tue 04 Nov 2025 10:43:50 +0000 Manifest next update: Sun 09 Nov 2025 21:43:50 +0000 Files and hashes: 1: 3230302e372e38322e302f32342d3234203d3e203237393437.roa (hash: cpJp85gDiAy7w6x5p6f2JVH83PYJ34J68UsPIBLGWPs=) 2: 3230302e372e38322e302f32342d3234203d3e203631343638.roa (hash: FOD8OQk20A/eq2N9y6ackZVwqKJUvTQb1AdF0WNa5lY=) 3: 1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl (hash: 2amWP6RO5R2GREGCVk4BymFKnklQiTK1903zLvi6hr0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c4:ba:96:c7:e7:35:00:e4:5f:30:09:50:1d:88:e5:14:32:f4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3 Validity Not Before: Nov 4 10:43:50 2025 GMT Not After : Nov 9 21:43:50 2025 GMT Subject: CN=022641119C618E7AC02EF1D898D7EBDDE32D13FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:3f:70:45:a8:14:53:63:a1:3c:f9:0d:f0: 08:c7:cb:a9:15:fd:e7:15:86:6a:33:da:6f:d5:0a: 57:f4:0d:8b:52:46:47:57:96:fb:92:14:91:c1:1a: bd:e9:f7:0a:0c:62:2b:a8:8c:e7:bb:11:6c:d6:b8: 77:5f:61:59:f5:5b:fc:5a:2b:66:af:f7:eb:eb:69: 54:64:1f:88:69:c3:b6:5f:41:c7:d7:46:8a:25:e8: c5:aa:17:9c:ae:18:10:a7:8f:0b:e4:ec:93:32:a6: 04:73:74:88:a6:59:2d:a0:dd:b7:e7:6a:97:3b:19: 79:7e:12:fc:f9:c6:b1:6b:06:e6:e0:0b:3b:1c:e7: c7:57:c3:49:e4:ef:66:12:cd:1c:4e:1d:87:8c:8f: cb:c0:43:7c:ba:08:43:8d:e6:3d:dc:7b:a2:70:db: 6a:28:18:a7:3c:5d:2b:d0:df:8d:86:12:2e:97:8e: 47:36:4a:bd:24:89:1a:3b:a0:7c:3d:a5:61:82:41: 61:24:7c:25:d0:00:d5:bd:09:c7:df:7c:e0:2f:11: 57:28:27:72:00:57:dc:be:95:d2:4c:ee:5b:e3:cf: f6:a9:01:60:a5:c6:f4:9f:ea:80:5d:fc:63:18:ee: a6:15:f8:f7:d3:0c:4d:17:3d:42:2b:b9:6c:a2:1f: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:26:41:11:9C:61:8E:7A:C0:2E:F1:D8:98:D7:EB:DD:E3:2D:13:FF X509v3 Authority Key Identifier: keyid:1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:54:ec:b5:79:58:5b:e1:7a:28:74:30:d8:54:de:fd:bf:f5: a9:40:6d:c7:d5:1c:21:6d:35:ad:e4:52:69:2c:9a:b8:93:da: 2f:6b:80:9e:91:65:2d:24:1b:85:ab:92:66:06:9a:1c:da:83: 12:37:86:53:fd:24:ff:c2:c7:6c:fe:86:e4:5a:f7:79:04:e0: 7f:e7:6e:6c:5c:c4:50:15:cc:6c:e7:db:e7:6f:39:92:c9:ee: 38:84:1d:fc:7d:07:99:69:f9:d2:dd:1e:22:5b:90:9d:36:3a: ad:da:71:74:65:4c:d8:bc:76:70:6f:c5:98:39:6f:50:3b:33: 7d:7d:f8:a4:4e:e7:fd:1f:b0:39:85:8e:68:40:b7:3e:43:97: eb:8e:03:f3:1f:8c:e5:e5:9a:93:7a:7b:41:ef:63:2b:8f:ba: 2f:5c:52:24:2c:ec:d5:30:2c:d8:58:94:b0:71:77:bf:d1:a6: f8:8e:be:5a:01:13:73:bb:0c:33:1c:35:cd:32:b5:2e:c3:be: 9b:44:8a:28:de:ce:02:ac:09:35:9f:86:7c:aa:59:c0:6f:df: b5:f8:18:2b:48:d9:e2:99:7b:f9:b7:93:74:98:2e:b7:0b:c3: 04:88:91:e6:3f:19:a4:b5:cf:5a:9d:cc:8e:1b:cf:2b:64:e4: ff:d3:6a:54 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPcS6lsfnNQDkXzAJUB2I5RQy9KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBNjA0MEMwNkEzQTg0RjIxRTkwQTY2MzUyM0FBQzgy NjA5QTlGMzAeFw0yNTExMDQxMDQzNTBaFw0yNTExMDkyMTQzNTBaMDMxMTAvBgNV BAMTKDAyMjY0MTExOUM2MThFN0FDMDJFRjFEODk4RDdFQkRERTMyRDEzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/D9wRagUU2OhPPkN8AjHy6kV /ecVhmoz2m/VClf0DYtSRkdXlvuSFJHBGr3p9woMYiuojOe7EWzWuHdfYVn1W/xa K2av9+vraVRkH4hpw7ZfQcfXRool6MWqF5yuGBCnjwvk7JMypgRzdIimWS2g3bfn apc7GXl+Evz5xrFrBubgCzsc58dXw0nk72YSzRxOHYeMj8vAQ3y6CEON5j3ce6Jw 22ooGKc8XSvQ342GEi6Xjkc2Sr0kiRo7oHw9pWGCQWEkfCXQANW9CcfffOAvEVco J3IAV9y+ldJM7lvjz/apAWClxvSf6oBd/GMY7qYV+PfTDE0XPUIruWyiH2wzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAiZBEZxhjnrALvHYmNfr3eMtE/8wHwYDVR0j BBgwFoAUHaYEDAajqE8h6QpmNSOqyCYJqfMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTgxMjE0RjkxQkI3NjFBNEM0NTJBQzAwM0VGNzE0NEIy QTk5QUIyNkE2NjUxRUVEN0E1OEU4MzdDQ0NFMzZBLzAvMURBNjA0MEMwNkEzQTg0 RjIxRTkwQTY2MzUyM0FBQzgyNjA5QTlGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xREE2MDQwQzA2QTNBODRGMjFF OTBBNjYzNTIzQUFDODI2MDlBOUYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU4MTIxNEY5MUJCNzYxQTRDNDUyQUMwMDNFRjcxNDRCMkE5OUFCMjZB NjY1MUVFRDdBNThFODM3Q0NDRTM2QS8wLzFEQTYwNDBDMDZBM0E4NEYyMUU5MEE2 NjM1MjNBQUM4MjYwOUE5RjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzVOy1eVhb4XoodDDYVN79v/Wp QG3H1RwhbTWt5FJpLJq4k9ova4CekWUtJBuFq5JmBpoc2oMSN4ZT/ST/wsds/obk Wvd5BOB/525sXMRQFcxs59vnbzmSye44hB38fQeZafnS3R4iW5CdNjqt2nF0ZUzY vHZwb8WYOW9QOzN9ffikTuf9H7A5hY5oQLc+Q5frjgPzH4zl5ZqTentB72Mrj7ov XFIkLOzVMCzYWJSwcXe/0ab4jr5aARNzuwwzHDXNMrUuw76bRIoo3s4CrAk1n4Z8 qlnAb9+1+BgrSNnimXv5t5N0mC63C8MEiJHmPxmktc9ancyOG88rZOT/02pU -----END CERTIFICATE-----Generated at Wed Nov 5 15:51:57 2025 by rpki-client