$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json) Hash identifier: gi39bpdILZqFQMJJcnrD40IevD5AuNTUsWfjYeuDBA8= Subject key identifier: BA:CF:98:F2:B9:C5:02:53:4E:A0:40:57:B2:BA:06:0C:CA:70:BB:6E Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 0A1E8846B640C7865C8FA3F29E47A2C7E0210236 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft Manifest number: 013A Signing time: Tue 04 Nov 2025 19:33:31 +0000 Manifest this update: Tue 04 Nov 2025 19:28:31 +0000 Manifest next update: Sun 09 Nov 2025 23:45:31 +0000 Files and hashes: 1: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: /D7cnLnJXa5ipFVdP+IaE3sgufXRlHkmM6F8ATrITQk=) 2: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: gfviGrTFnzyeLB88khtlrnlCTNwPw5ULi+OBoE5f+t4=) 3: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: /Q9CRJm+J8TqgJr+pb92PysUXD8+rkJf7U3SJEA9cg0=) 4: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: 0u08Cid5xh0s+ifK8ZpB7h+HuLO4xH8CFKw8rUTG+LU=) 5: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: vZjAfk2z5Z6b+6GTrUBJdEEDa8DBAoi/pI9ehH+AnYk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1e:88:46:b6:40:c7:86:5c:8f:a3:f2:9e:47:a2:c7:e0:21:02:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: Nov 4 19:28:31 2025 GMT Not After : Nov 9 23:45:31 2025 GMT Subject: CN=BACF98F2B9C502534EA04057B2BA060CCA70BB6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:1a:bb:df:67:4d:7e:a0:9c:e6:a8:a0:19: 09:1b:7c:04:48:cb:9a:8a:43:de:c4:9b:ff:d2:0e: 5e:b7:65:62:61:b5:cf:46:a2:de:13:fd:28:ef:d8: 95:b9:18:52:a6:94:86:b1:0f:b6:e4:54:86:0d:78: f9:7b:6b:39:4c:3c:a3:e1:a2:96:ef:18:29:de:ba: 79:7b:f5:7a:34:14:c4:b8:e2:e4:2f:d0:83:98:1c: 9f:7a:78:83:47:c0:31:12:3a:55:31:ac:16:48:dd: 0e:ba:ce:c8:76:69:d9:e9:72:66:13:6e:e5:54:5a: 40:0e:92:e7:31:d7:23:21:fe:22:7f:85:f9:f9:e5: 4c:9a:f6:00:e9:1f:78:b4:1a:1c:a3:68:21:7d:2d: 10:6c:d6:00:34:8a:0f:e6:4d:38:2c:35:c1:1a:82: 42:93:97:9c:3e:8d:c3:52:6e:48:e9:da:af:00:20: db:79:40:19:cf:87:48:e4:f9:74:59:f3:67:a6:73: 9a:c0:4a:a7:bd:4c:8e:62:2e:ac:21:93:c6:61:99: 63:c6:b6:48:6e:92:2d:2b:0c:73:df:5d:f7:e2:5d: 14:cd:1c:44:2e:ee:ed:da:95:b5:6d:3f:62:47:f0: a3:b5:90:bd:6a:34:1e:6a:2a:d2:e0:c2:c9:90:fb: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:98:F2:B9:C5:02:53:4E:A0:40:57:B2:BA:06:0C:CA:70:BB:6E X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:73:f2:3c:d3:e0:49:0e:de:36:28:a0:7b:2c:e6:67:41:5c: 1f:33:86:82:3f:76:a2:72:39:5a:3a:78:c0:98:9f:dd:67:9d: f5:89:15:64:f0:83:3a:bc:98:a8:7d:02:55:cf:ae:1b:cc:f3: 9b:cc:67:ff:28:30:dc:24:dd:f0:6a:d4:25:f8:47:19:72:50: 71:d4:df:21:f4:12:86:b1:d6:21:a6:f6:da:8b:b5:d5:1e:8e: 74:9d:e7:c9:49:40:e6:e5:e4:cd:90:6c:0b:58:0e:50:4c:b9: b6:96:fa:9a:9c:0c:53:0f:f5:71:3b:3e:91:76:80:ef:12:c4: 07:17:e1:1b:f1:6a:6a:0c:7b:a0:69:4b:63:63:95:7f:8b:9b: e6:bd:8f:ef:af:05:04:67:b7:05:bd:22:d5:36:50:b2:f0:aa: 1c:3a:e5:fb:10:3c:53:ea:69:92:05:f2:f3:22:ef:0b:90:ea: 6d:4b:7b:49:15:22:94:af:bf:4c:8d:e9:67:e8:04:f6:5b:3d: 2a:2f:06:9b:da:dd:49:f3:53:f7:d2:70:2c:0c:31:29:7a:6f: 82:70:89:c3:35:0c:aa:3d:00:64:38:62:78:3a:c1:9b:b8:04: 88:45:a4:e9:e3:77:cb:92:9b:00:49:a1:81:17:9a:8f:96:d8: 54:96:92:8f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCh6IRrZAx4Zcj6Pynkeix+AhAjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNTExMDQxOTI4MzFaFw0yNTExMDkyMzQ1MzFaMDMxMTAvBgNV BAMTKEJBQ0Y5OEYyQjlDNTAyNTM0RUEwNDA1N0IyQkEwNjBDQ0E3MEJCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXnRq732dNfqCc5qigGQkbfARI y5qKQ97Em//SDl63ZWJhtc9Got4T/Sjv2JW5GFKmlIaxD7bkVIYNePl7azlMPKPh opbvGCneunl79Xo0FMS44uQv0IOYHJ96eINHwDESOlUxrBZI3Q66zsh2adnpcmYT buVUWkAOkucx1yMh/iJ/hfn55Uya9gDpH3i0GhyjaCF9LRBs1gA0ig/mTTgsNcEa gkKTl5w+jcNSbkjp2q8AINt5QBnPh0jk+XRZ82emc5rASqe9TI5iLqwhk8ZhmWPG tkhuki0rDHPfXffiXRTNHEQu7u3albVtP2JH8KO1kL1qNB5qKtLgwsmQ+zDHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUus+Y8rnFAlNOoEBXsroGDMpwu24wHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVc/I80+BJDt42KKB7LOZnQVwf M4aCP3aicjlaOnjAmJ/dZ531iRVk8IM6vJiofQJVz64bzPObzGf/KDDcJN3watQl +EcZclBx1N8h9BKGsdYhpvbai7XVHo50nefJSUDm5eTNkGwLWA5QTLm2lvqanAxT D/VxOz6RdoDvEsQHF+Eb8WpqDHugaUtjY5V/i5vmvY/vrwUEZ7cFvSLVNlCy8Koc OuX7EDxT6mmSBfLzIu8LkOptS3tJFSKUr79Mjeln6AT2Wz0qLwab2t1J81P30nAs DDEpem+CcInDNQyqPQBkOGJ4OsGbuASIRaTp43fLkpsASaGBF5qPlthUlpKP -----END CERTIFICATE-----Generated at Wed Nov 5 23:08:19 2025 by rpki-client