$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.mft File: E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.mft (raw, json) Hash identifier: b5hfgIch9o0FBPh50cQoTf1q2sl3aAU3XvOXfWeDyeg= Subject key identifier: 46:3D:79:36:0F:EE:C1:AB:9B:A6:73:C7:7D:64:B7:1E:28:98:07:53 Authority key identifier: E0:FB:92:04:93:5C:5E:1B:70:E9:05:DC:EF:2B:FE:AD:39:C8:D8:41 Certificate issuer: /CN=E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841 Certificate serial: 5E36B397DBC2723CE5C319D9B0D78D192559E9F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.mft Manifest number: A4 Signing time: Tue 04 Nov 2025 21:29:33 +0000 Manifest this update: Tue 04 Nov 2025 21:24:33 +0000 Manifest next update: Sun 09 Nov 2025 19:10:33 +0000 Files and hashes: 1: E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.crl (hash: nwBiR2F/HX5S9ApxsteiZc5Jvy1EE6c+5qfaPzgFc2M=) 2: 323830333a336135303a3a2f33322d3438203d3e20323733313837.roa (hash: OASz1ddw3nQFccF50y4iRccUyLsrw+brRJ0g+1DSG1I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.crl rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:36:b3:97:db:c2:72:3c:e5:c3:19:d9:b0:d7:8d:19:25:59:e9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841 Validity Not Before: Nov 4 21:24:33 2025 GMT Not After : Nov 9 19:10:33 2025 GMT Subject: CN=463D79360FEEC1AB9BA673C77D64B71E28980753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:36:fa:e2:39:43:e5:59:ef:10:8b:2b:05: df:3f:74:d0:aa:bd:b0:88:98:00:31:e7:97:d8:11: 2c:2d:b1:fc:e2:7a:63:d5:11:54:16:05:38:a2:da: 92:06:4c:ef:3f:25:e0:75:13:50:4d:f2:b5:c9:bd: ae:62:e2:6a:fe:0f:52:d9:c5:00:9f:bd:88:ec:4d: 06:90:49:e6:4c:33:9e:1b:d7:0a:52:2a:fa:33:87: ad:8e:e3:ef:2a:c8:6f:48:3c:17:36:67:dd:0a:f5: fe:9e:9e:51:5e:72:79:5f:45:5e:2e:8a:4e:1d:b8: 70:27:c2:d9:4e:34:25:a4:7f:2b:db:d9:92:9e:cb: 8c:79:eb:de:73:27:4c:08:21:00:85:83:0a:cd:ad: 48:db:2d:37:10:59:a6:2c:e5:0b:41:2a:ed:08:2e: 35:af:00:d4:c4:ea:a1:2f:79:0d:08:6c:ce:1b:fd: bc:10:05:78:27:30:b7:b0:eb:6e:11:98:2f:c5:a8: e9:bc:b9:b3:c4:ac:ec:71:4e:a4:8f:e4:81:c3:97: 71:6b:2b:f7:33:a7:b8:1e:e5:68:54:33:a7:42:44: e5:3a:0e:ae:9f:12:f3:e9:8d:a8:df:52:bf:dc:07: cc:87:83:1c:0c:0b:40:28:35:34:0a:3d:df:c6:02: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3D:79:36:0F:EE:C1:AB:9B:A6:73:C7:7D:64:B7:1E:28:98:07:53 X509v3 Authority Key Identifier: keyid:E0:FB:92:04:93:5C:5E:1B:70:E9:05:DC:EF:2B:FE:AD:39:C8:D8:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA008029A0D7F31E7CA5B57BC542879582C700385C0FAC393FED4A057431AA87/0/E0FB9204935C5E1B70E905DCEF2BFEAD39C8D841.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:70:56:1f:81:ef:d1:89:5a:3e:3f:9c:3c:bf:ae:0f:00:b4: 05:e6:5a:2e:c5:58:97:cd:b0:42:98:f9:e9:4b:08:14:26:76: d7:6c:6e:42:89:18:56:1d:58:34:3a:17:75:4b:7c:b0:4a:43: cd:8e:52:0e:a8:3d:41:22:7d:7a:0d:7f:5d:0a:3c:12:da:d2: f4:20:75:b4:f0:5c:2f:1e:76:33:44:97:e2:50:f4:01:eb:5b: 3b:dd:4d:bb:4a:05:d8:70:49:4e:f4:11:a4:5b:85:46:c2:4e: 42:f5:db:73:51:3a:cc:ba:03:0d:36:90:3d:87:04:1c:de:59: e6:bd:29:ad:a5:41:ef:86:d5:3e:31:5c:de:ab:58:e6:60:2f: 59:91:ba:73:cf:a1:91:bb:ef:1f:1b:c0:02:0b:d5:8f:7d:b4: c7:31:1f:2a:fc:37:7f:58:63:d9:21:17:48:9a:d3:37:b6:33: 5b:4e:52:9b:23:a4:f9:4b:b9:28:7e:7b:94:1b:6b:a5:ba:3b: f7:e8:88:05:0b:86:9e:95:fb:4a:41:f1:6d:b9:1c:d5:35:42: 81:53:27:a4:4c:bb:e0:7a:61:10:f3:16:3f:4b:1b:c7:7d:90: 62:30:ca:d9:ef:05:a7:f0:94:29:b2:da:68:d4:85:b3:9d:a3: fb:ae:f2:34 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXjazl9vCcjzlwxnZsNeNGSVZ6fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQjkyMDQ5MzVDNUUxQjcwRTkwNURDRUYyQkZFQUQz OUM4RDg0MTAeFw0yNTExMDQyMTI0MzNaFw0yNTExMDkxOTEwMzNaMDMxMTAvBgNV BAMTKDQ2M0Q3OTM2MEZFRUMxQUI5QkE2NzNDNzdENjRCNzFFMjg5ODA3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRDb64jlD5VnvEIsrBd8/dNCq vbCImAAx55fYESwtsfziemPVEVQWBTii2pIGTO8/JeB1E1BN8rXJva5i4mr+D1LZ xQCfvYjsTQaQSeZMM54b1wpSKvozh62O4+8qyG9IPBc2Z90K9f6enlFecnlfRV4u ik4duHAnwtlONCWkfyvb2ZKey4x5695zJ0wIIQCFgwrNrUjbLTcQWaYs5QtBKu0I LjWvANTE6qEveQ0IbM4b/bwQBXgnMLew624RmC/FqOm8ubPErOxxTqSP5IHDl3Fr K/czp7ge5WhUM6dCROU6Dq6fEvPpjajfUr/cB8yHgxwMC0AoNTQKPd/GAmSrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURj15Ng/uwaubpnPHfWS3HiiYB1MwHwYDVR0j BBgwFoAU4PuSBJNcXhtw6QXc7yv+rTnI2EEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQTAwODAyOUEwRDdGMzFFN0NBNUI1N0JDNTQyODc5NTgy QzcwMDM4NUMwRkFDMzkzRkVENEEwNTc0MzFBQTg3LzAvRTBGQjkyMDQ5MzVDNUUx QjcwRTkwNURDRUYyQkZFQUQzOUM4RDg0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMEZCOTIwNDkzNUM1RTFCNzBF OTA1RENFRjJCRkVBRDM5QzhEODQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREEwMDgwMjlBMEQ3RjMxRTdDQTVCNTdCQzU0Mjg3OTU4MkM3MDAzODVD MEZBQzM5M0ZFRDRBMDU3NDMxQUE4Ny8wL0UwRkI5MjA0OTM1QzVFMUI3MEU5MDVE Q0VGMkJGRUFEMzlDOEQ4NDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIcFYfge/RiVo+P5w8v64PALQF 5louxViXzbBCmPnpSwgUJnbXbG5CiRhWHVg0Ohd1S3ywSkPNjlIOqD1BIn16DX9d CjwS2tL0IHW08FwvHnYzRJfiUPQB61s73U27SgXYcElO9BGkW4VGwk5C9dtzUTrM ugMNNpA9hwQc3lnmvSmtpUHvhtU+MVzeq1jmYC9Zkbpzz6GRu+8fG8ACC9WPfbTH MR8q/Dd/WGPZIRdImtM3tjNbTlKbI6T5S7kofnuUG2ulujv36IgFC4aelftKQfFt uRzVNUKBUyekTLvgemEQ8xY/SxvHfZBiMMrZ7wWn8JQpstpo1IWznaP7rvI0 -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:15 2025 by rpki-client