$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft File: FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft (raw, json) Hash identifier: dMBCjFkwrnVDWnHuPAuj4BoZasLF96NB4BNiAS0Sj8E= Subject key identifier: 89:CF:F0:CD:85:CE:2F:BF:61:8B:E6:48:43:A8:AE:8F:C0:31:9D:DE Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 Certificate issuer: /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Certificate serial: 39B9F5E518E05208346C1983D0CA999BFD5756AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft Manifest number: 012F Signing time: Tue 04 Nov 2025 11:09:02 +0000 Manifest this update: Tue 04 Nov 2025 11:04:02 +0000 Manifest next update: Mon 10 Nov 2025 04:26:02 +0000 Files and hashes: 1: FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl (hash: ocjPgek3k8ANopXvFvAZLuN5YdE6MFbdygU9Ku5iYNg=) 2: 3230302e362e31372e302f32342d3234203d3e20323733313233.roa (hash: xGaOy+8VqeB5oNlE4CohBIcrgM3fz/XUKeLlcTUTGpM=) 3: 3230302e362e31372e302f32342d3234203d3e203233303331.roa (hash: dIEVjdb3lQCo9g9fO5GmMpWFti9yLYGOF7cFBhbUkAQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b9:f5:e5:18:e0:52:08:34:6c:19:83:d0:ca:99:9b:fd:57:56:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Validity Not Before: Nov 4 11:04:02 2025 GMT Not After : Nov 10 04:26:02 2025 GMT Subject: CN=89CFF0CD85CE2FBF618BE64843A8AE8FC0319DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:35:ec:8f:74:17:05:ce:6c:47:00:a1:2d: cd:b8:55:25:bf:17:44:0e:33:cd:d4:b9:2e:d1:5f: 68:f8:8f:d8:9d:80:33:f1:c0:de:2c:38:38:1f:77: 5d:f9:94:b4:f1:75:a5:cb:73:42:9e:6f:88:14:c1: be:0d:d8:4f:41:c6:2c:5f:dd:de:04:52:c9:fd:42: bc:5f:c1:e1:01:7e:d8:a1:3f:b9:aa:60:c6:f1:62: 7c:01:a3:12:e8:94:5d:f9:16:03:81:bc:89:ad:1c: 5d:23:8e:38:66:1b:c8:44:b0:ac:3f:23:d3:31:a7: e8:4c:f6:9b:4e:e2:d1:50:f8:58:8d:72:31:b8:de: c3:e9:a7:e8:cf:dd:c3:dd:13:65:11:78:b1:a3:90: 45:5d:4c:af:7b:da:f8:e6:3c:ea:d9:14:8b:93:b1: 02:29:e0:4b:63:7e:f5:6f:5f:13:4b:3c:4c:bd:6b: d0:74:5c:9c:a8:20:9a:45:00:42:e4:e4:b7:73:97: 34:08:fa:65:c9:1a:ae:31:1b:6d:40:f2:6c:a2:4f: 84:55:80:50:3d:aa:89:81:f0:58:2d:a8:9e:9d:68: 39:5b:48:f8:70:d2:c7:6a:c5:3e:a6:a0:de:d2:03: d2:62:28:88:b9:ea:96:5c:93:13:bc:33:68:65:15: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:F0:CD:85:CE:2F:BF:61:8B:E6:48:43:A8:AE:8F:C0:31:9D:DE X509v3 Authority Key Identifier: keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:60:87:6d:08:99:cb:8f:92:56:49:fc:93:5a:40:87:f3:ba: 80:db:9d:8e:1c:1e:17:a0:e3:a9:15:62:05:8a:0c:db:cc:2e: 7e:b6:04:4a:72:a0:2c:39:48:93:53:64:03:c1:d8:77:7b:55: 1a:05:ad:f6:b8:51:61:47:2c:85:ca:ae:5b:07:4f:4a:58:2a: 92:38:f4:62:e0:95:48:48:b4:55:96:19:fe:52:7b:98:9d:5b: 3d:cf:35:b8:f7:9d:f0:dd:93:5f:4b:d0:46:b8:24:1e:c7:e9: b0:cd:70:fe:fc:2f:e4:19:5e:aa:99:9f:f1:02:05:1a:6c:0a: 1c:0c:b5:05:44:cd:84:b6:ed:06:44:b9:f1:08:09:fb:07:99: 18:ee:d8:87:6e:3d:47:b8:e1:07:24:9b:0b:aa:6d:8d:a0:64: 55:cf:0e:3a:30:71:ee:12:1c:13:f1:53:a5:17:79:ed:4d:1f: c9:b8:75:f0:11:f3:76:e8:84:4a:cb:0d:7d:88:d7:d6:25:60: d4:95:e2:c4:5e:29:59:0e:2d:46:af:21:ad:c7:65:73:d9:58: 8b:15:c7:4c:a2:2c:bc:21:9a:17:6c:1c:e3:9a:f5:85:3f:56: d1:cb:57:7f:84:4b:d7:9e:6e:c4:b8:87:fa:93:d3:d1:07:4d: f1:5d:94:45 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUObn15RjgUgg0bBmD0MqZm/1XVq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjlGQzlFMjQ5MEQ1Mjc2NTNFRjdDRTg0NzE3M0Y5 Q0QwODgzMzAeFw0yNTExMDQxMTA0MDJaFw0yNTExMTAwNDI2MDJaMDMxMTAvBgNV BAMTKDg5Q0ZGMENEODVDRTJGQkY2MThCRTY0ODQzQThBRThGQzAzMTlEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSTXsj3QXBc5sRwChLc24VSW/ F0QOM83UuS7RX2j4j9idgDPxwN4sODgfd135lLTxdaXLc0Keb4gUwb4N2E9Bxixf 3d4EUsn9QrxfweEBftihP7mqYMbxYnwBoxLolF35FgOBvImtHF0jjjhmG8hEsKw/ I9Mxp+hM9ptO4tFQ+FiNcjG43sPpp+jP3cPdE2UReLGjkEVdTK972vjmPOrZFIuT sQIp4EtjfvVvXxNLPEy9a9B0XJyoIJpFAELk5LdzlzQI+mXJGq4xG21A8myiT4RV gFA9qomB8FgtqJ6daDlbSPhw0sdqxT6moN7SA9JiKIi56pZckxO8M2hlFSHfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUic/wzYXOL79hi+ZIQ6iuj8Axnd4wHwYDVR0j BBgwFoAU+o+fyeJJDVJ2U+986EcXP5zQiDMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOEIyOUZCNTUwQUFFMkY4OTM2QzA4NTYzNjg2Q0VDRTMz N0U1OEJENUEyMkFFNjcwNUExRjdDQUEzMTM3QURBLzAvRkE4RjlGQzlFMjQ5MEQ1 Mjc2NTNFRjdDRTg0NzE3M0Y5Q0QwODgzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQThGOUZDOUUyNDkwRDUyNzY1 M0VGN0NFODQ3MTczRjlDRDA4ODMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDhCMjlGQjU1MEFBRTJGODkzNkMwODU2MzY4NkNFQ0UzMzdFNThCRDVB MjJBRTY3MDVBMUY3Q0FBMzEzN0FEQS8wL0ZBOEY5RkM5RTI0OTBENTI3NjUzRUY3 Q0U4NDcxNzNGOUNEMDg4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+YIdtCJnLj5JWSfyTWkCH87qA 252OHB4XoOOpFWIFigzbzC5+tgRKcqAsOUiTU2QDwdh3e1UaBa32uFFhRyyFyq5b B09KWCqSOPRi4JVISLRVlhn+UnuYnVs9zzW4953w3ZNfS9BGuCQex+mwzXD+/C/k GV6qmZ/xAgUabAocDLUFRM2Etu0GRLnxCAn7B5kY7tiHbj1HuOEHJJsLqm2NoGRV zw46MHHuEhwT8VOlF3ntTR/JuHXwEfN26IRKyw19iNfWJWDUleLEXilZDi1GryGt x2Vz2ViLFcdMoiy8IZoXbBzjmvWFP1bRy1d/hEvXnm7EuIf6k9PRB03xXZRF -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:43 2025 by rpki-client