$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft File: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft (raw, json) Hash identifier: /rTOulJ39UEUEPPgTmMfkxRkNjnFgIUaFVqmQ7usoiA= Subject key identifier: 24:BB:0F:E8:42:2C:E8:09:0E:B0:64:C7:22:F8:65:CB:59:E7:6D:B9 Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD Certificate issuer: /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Certificate serial: 6D40961A450DA5F6C54498392AED61B0AEE45BD4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft Manifest number: 85 Signing time: Mon 03 Nov 2025 11:40:57 +0000 Manifest this update: Mon 03 Nov 2025 11:35:57 +0000 Manifest next update: Sun 09 Nov 2025 10:50:57 +0000 Files and hashes: 1: 323830333a643235303a3a2f33322d3438203d3e20323732383237.roa (hash: e58Gafs3SHJ2RbKcTBdQ4etki7t0Yu0X9IXpmL+ZrFM=) 2: 323830333a643235303a3a2f33322d3438203d3e20323733313430.roa (hash: geoujJRGCj9IdFnQTVkXi07vvN0KssDDUghEY7PjuWI=) 3: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl (hash: pr9WKfe0K9+L9P0qJnhQWQJlnOcOyE7mJCcIgkchvuA=) 4: 323830333a643235303a3a2f33322d3438203d3e20323733313637.roa (hash: zqMMKCkFdouQccillLfonx6zoQUGUVMhftJE8TOMWWc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:40:96:1a:45:0d:a5:f6:c5:44:98:39:2a:ed:61:b0:ae:e4:5b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Validity Not Before: Nov 3 11:35:57 2025 GMT Not After : Nov 9 10:50:57 2025 GMT Subject: CN=24BB0FE8422CE8090EB064C722F865CB59E76DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:ed:4e:74:37:05:80:66:6d:24:b3:21:a7: 22:51:ab:f2:d8:28:f7:3c:6c:b8:1f:b0:ee:c6:21: 03:24:33:59:2e:3f:b2:18:4a:6b:b1:41:7c:86:b2: 47:0b:11:3c:28:c4:21:6c:9a:bd:c2:70:a5:b2:0a: 3c:b1:4f:3d:10:7c:1b:0c:31:f3:57:d3:2f:c8:b6: 87:6e:cf:fe:70:22:b6:f3:63:e6:30:dc:a7:a4:c7: 99:e2:8f:44:e9:54:85:20:ed:b1:4b:ed:c6:df:be: 82:10:61:6e:da:8a:2a:01:eb:8a:37:3c:62:b0:76: 52:8f:ae:57:4e:81:59:53:2d:a6:4b:d4:22:69:ed: 66:2a:b8:c4:52:19:ca:40:c5:4a:4f:ff:c4:89:e4: 13:f2:c0:c0:06:19:be:40:bc:3e:87:bb:0d:00:2f: e3:74:ec:42:73:6b:48:8d:6f:35:5c:bf:57:29:fa: 1f:4c:98:eb:f8:9d:17:11:80:46:53:1c:ab:76:d2: 43:de:a9:3c:82:82:ca:69:1d:14:b4:79:fe:a7:fe: 00:4d:5a:98:8d:eb:6f:f2:c5:f6:ea:cd:fb:cd:70: 0b:b5:fb:c1:ba:f0:fc:d3:8c:06:e6:10:6c:66:89: fb:a1:48:8a:b3:c4:a4:bf:1d:5a:bc:3f:2b:42:91: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BB:0F:E8:42:2C:E8:09:0E:B0:64:C7:22:F8:65:CB:59:E7:6D:B9 X509v3 Authority Key Identifier: keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d4:00:93:b5:51:7e:a3:7b:95:49:db:7d:34:de:57:3d:14: 0d:57:3d:ed:8f:00:20:b8:4e:6a:c7:d6:e4:26:1e:4a:b8:1f: ca:9d:d5:36:cd:bf:df:fa:60:4b:20:19:df:7d:bc:58:2a:75: 12:00:8a:81:c8:05:10:7d:79:7a:63:6d:26:c3:71:63:7b:fa: cf:f7:43:54:3c:fa:12:aa:06:3f:a7:1e:03:cd:5f:73:b1:b9: ff:d5:82:63:28:59:cc:10:40:08:88:ab:2b:78:9c:0b:03:44: e6:63:12:49:a8:fb:21:87:e1:b9:75:8d:97:18:4e:e4:5f:ea: 72:ec:c5:ac:b8:f2:96:59:21:7d:f5:2d:f8:6c:8a:66:0b:7a: e6:93:a4:2d:0f:86:f3:f9:e7:ba:17:25:91:c7:bf:b5:16:f5: 6e:89:1e:fe:11:06:65:b4:a7:0e:04:f4:c6:86:07:3d:0a:b9: f2:4d:36:8a:1e:9a:96:b4:30:8a:65:87:07:ce:8d:15:8f:93: 5d:25:32:2b:f0:81:5e:33:3e:e0:ba:4b:00:a0:ab:27:e5:bf: 53:07:23:1f:eb:d0:27:ea:c6:a7:78:70:e2:00:48:7a:fc:37: 1d:1b:c5:bf:0e:3e:d2:f9:eb:01:ac:ed:e7:72:49:6a:75:6f: 0c:47:a7:bd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbUCWGkUNpfbFRJg5Ku1hsK7kW9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD NzUwRENCRDAeFw0yNTExMDMxMTM1NTdaFw0yNTExMDkxMDUwNTdaMDMxMTAvBgNV BAMTKDI0QkIwRkU4NDIyQ0U4MDkwRUIwNjRDNzIyRjg2NUNCNTlFNzZEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsru1OdDcFgGZtJLMhpyJRq/LY KPc8bLgfsO7GIQMkM1kuP7IYSmuxQXyGskcLETwoxCFsmr3CcKWyCjyxTz0QfBsM MfNX0y/Itoduz/5wIrbzY+Yw3Kekx5nij0TpVIUg7bFL7cbfvoIQYW7aiioB64o3 PGKwdlKPrldOgVlTLaZL1CJp7WYquMRSGcpAxUpP/8SJ5BPywMAGGb5AvD6Huw0A L+N07EJza0iNbzVcv1cp+h9MmOv4nRcRgEZTHKt20kPeqTyCgsppHRS0ef6n/gBN WpiN62/yxfbqzfvNcAu1+8G68PzTjAbmEGxmifuhSIqzxKS/HVq8PytCkcppAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJLsP6EIs6AkOsGTHIvhly1nnbbkwHwYDVR0j BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wL0Q0M0VBREU1QjhDRDZEQ0Q4MEY3MEZE NDZBNkQxQkY0Qzc1MERDQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc1ACTtVF+o3uVSdt9NN5XPRQN Vz3tjwAguE5qx9bkJh5KuB/KndU2zb/f+mBLIBnffbxYKnUSAIqByAUQfXl6Y20m w3Fje/rP90NUPPoSqgY/px4DzV9zsbn/1YJjKFnMEEAIiKsreJwLA0TmYxJJqPsh h+G5dY2XGE7kX+py7MWsuPKWWSF99S34bIpmC3rmk6QtD4bz+ee6FyWRx7+1FvVu iR7+EQZltKcOBPTGhgc9CrnyTTaKHpqWtDCKZYcHzo0Vj5NdJTIr8IFeMz7guksA oKsn5b9TByMf69An6saneHDiAEh6/DcdG8W/Dj7S+esBrO3ncklqdW8MR6e9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:54 2025 by rpki-client