$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json) Hash identifier: aElgMazHyZhOcQWG9KOJHxE4EkG4Osd0d8Zun5120pk= Subject key identifier: 5F:A3:82:E0:A0:DF:FD:4A:86:EB:F6:01:E4:BE:B4:FC:90:B3:8E:8D Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 449FC9E6F1DA06792FAE330F42E39A5E10A651A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft Manifest number: 012D Signing time: Tue 04 Nov 2025 11:14:06 +0000 Manifest this update: Tue 04 Nov 2025 11:09:06 +0000 Manifest next update: Sun 09 Nov 2025 16:15:06 +0000 Files and hashes: 1: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: gWPC1cVrpnINvMk8XGCjMA11TSLlb3HlzbVxrRxdXCc=) 2: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9f:c9:e6:f1:da:06:79:2f:ae:33:0f:42:e3:9a:5e:10:a6:51:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: Nov 4 11:09:06 2025 GMT Not After : Nov 9 16:15:06 2025 GMT Subject: CN=5FA382E0A0DFFD4A86EBF601E4BEB4FC90B38E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:41:7a:c9:6d:92:cf:de:ca:d5:60:38:b8:e9: e2:23:02:46:12:a9:12:37:fc:39:1f:d6:82:5f:8b: ee:7e:67:ea:ae:d8:73:4b:a4:eb:74:8a:bf:9c:04: 7a:3e:ec:34:8f:16:ea:05:11:b0:d7:dc:95:0d:e4: e5:87:c5:1c:fb:dc:27:0e:20:19:1a:b4:7d:e1:7b: 4d:26:04:82:af:4e:46:91:ff:c3:97:ab:a0:ce:3f: 55:dd:db:5f:47:6e:bf:52:80:07:b3:e4:74:80:65: c1:86:4e:5b:ed:b7:01:c5:46:04:1e:81:eb:bb:17: 7f:2b:ea:35:26:68:94:5f:e7:dd:22:84:2b:da:ee: c1:34:06:9c:a9:55:63:be:e3:dd:e2:af:4c:31:69: da:ce:0d:f6:7c:7a:28:1a:15:aa:75:74:f0:a3:13: 66:47:e8:cc:38:80:db:2c:60:a1:4b:36:83:10:e1: 58:a2:4b:54:5a:d8:f5:d0:7a:3e:cd:1b:3c:9f:0a: b7:0a:cd:0a:cb:30:16:a6:0d:07:ef:5d:74:8e:a6: c1:a6:be:eb:60:b8:29:3e:71:c9:d0:c6:9f:49:c7: 17:47:31:aa:20:a7:a3:5f:f9:d1:81:16:b2:af:ff: f6:a8:de:ef:68:7a:ef:ba:f2:8c:58:4f:a0:5e:ff: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A3:82:E0:A0:DF:FD:4A:86:EB:F6:01:E4:BE:B4:FC:90:B3:8E:8D X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:80:27:3e:18:e1:cd:8e:e7:22:45:1d:28:a4:73:b8:d0:5b: dc:92:3d:09:3c:ea:70:89:c5:d4:3f:c7:ec:59:e7:19:c5:4a: d9:53:41:cc:25:7c:f5:5d:f1:af:20:08:36:d5:67:5b:30:70: 03:3b:c4:51:b9:ed:5b:12:f0:a2:72:5a:3c:24:d4:a4:72:d0: 6d:24:b5:37:3a:0a:ce:80:8d:16:b5:c0:c0:a9:6f:93:0b:b5: 37:8a:65:e3:a4:f7:8f:87:97:c3:ee:34:dd:10:7f:ec:19:64: b8:bb:c2:9d:e1:8a:37:78:3d:1c:81:d7:15:0f:67:f7:9a:22: c4:d2:46:93:c5:a1:82:15:27:24:5a:a7:0d:a1:84:35:1e:9d: 47:0d:ae:d4:68:9f:3d:f4:d4:77:86:1c:2b:ab:0e:35:01:4b: 1e:43:5a:b3:cd:a3:94:59:57:54:bc:24:4a:81:41:fd:db:c7: 38:f2:89:af:42:36:54:55:ce:1a:64:b0:a0:8c:e9:e1:0c:6e: 86:f6:a5:6d:fd:89:7d:4d:02:ef:f1:ae:9b:68:5a:e7:85:92: 29:76:49:c2:fe:d7:e4:3c:bb:ad:72:5a:ee:8a:75:3d:43:0f: c7:08:bf:22:a5:38:be:ee:fb:c3:72:f2:ed:f3:4d:c1:e5:72: 20:d3:e1:ff -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURJ/J5vHaBnkvrjMPQuOaXhCmUakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNTExMDQxMTA5MDZaFw0yNTExMDkxNjE1MDZaMDMxMTAvBgNV BAMTKDVGQTM4MkUwQTBERkZENEE4NkVCRjYwMUU0QkVCNEZDOTBCMzhFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQXrJbZLP3srVYDi46eIjAkYS qRI3/Dkf1oJfi+5+Z+qu2HNLpOt0ir+cBHo+7DSPFuoFEbDX3JUN5OWHxRz73CcO IBkatH3he00mBIKvTkaR/8OXq6DOP1Xd219Hbr9SgAez5HSAZcGGTlvttwHFRgQe geu7F38r6jUmaJRf590ihCva7sE0BpypVWO+493ir0wxadrODfZ8eigaFap1dPCj E2ZH6Mw4gNssYKFLNoMQ4ViiS1Ra2PXQej7NGzyfCrcKzQrLMBamDQfvXXSOpsGm vutguCk+ccnQxp9JxxdHMaogp6Nf+dGBFrKv//ao3u9oeu+68oxYT6Be/+HZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUX6OC4KDf/UqG6/YB5L60/JCzjo0wHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wL0ZGQjRCRjNENjBCNEZGMkZBQThBMzY0 NDY1MkMyRTJBQkY4MzZBQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXgCc+GOHNjuciRR0opHO40Fvc kj0JPOpwicXUP8fsWecZxUrZU0HMJXz1XfGvIAg21WdbMHADO8RRue1bEvCiclo8 JNSkctBtJLU3OgrOgI0WtcDAqW+TC7U3imXjpPePh5fD7jTdEH/sGWS4u8Kd4Yo3 eD0cgdcVD2f3miLE0kaTxaGCFSckWqcNoYQ1Hp1HDa7UaJ899NR3hhwrqw41AUse Q1qzzaOUWVdUvCRKgUH928c48omvQjZUVc4aZLCgjOnhDG6G9qVt/Yl9TQLv8a6b aFrnhZIpdknC/tfkPLutclruinU9Qw/HCL8ipTi+7vvDcvLt803B5XIg0+H/ -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:42 2025 by rpki-client