$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft File: DC553BD05B33548C342568566291E719B4FA73B9.mft (raw, json) Hash identifier: lP2mDO8ngARvFXck1dWfQ8QrYQmwCC91BiOGdbECLu8= Subject key identifier: 2E:9D:6F:C9:D7:6D:80:3B:B0:DC:EF:8F:67:A1:8E:7C:86:9B:6A:CB Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9 Certificate issuer: /CN=DC553BD05B33548C342568566291E719B4FA73B9 Certificate serial: 0FD1354C3D7783401DCD542CC1DDF8CE09C6AA52 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 13:53:21 +0000 Manifest this update: Wed 05 Nov 2025 13:48:21 +0000 Manifest next update: Mon 10 Nov 2025 00:36:21 +0000 Files and hashes: 1: 3133382e33362e3134372e302f32342d3234203d3e20323635353135.roa (hash: fmvwhJoSPRZs5HuL4TboIcJZhdlGg4dygScNi/e1Wyo=) 2: DC553BD05B33548C342568566291E719B4FA73B9.crl (hash: XPK0LPmAdLTC3Smey48RkHKMwCje963mxF/3wiC0Dtc=) 3: 3138312e3139392e3132382e302f32302d3230203d3e203332303334.roa (hash: Xkp7YgxMcsZAoAu98b4G9vcHnpb9tFZOHt9nlsZIR68=) 4: 3133382e33362e3134352e302f32342d3234203d3e203332303334.roa (hash: UjfE20EWSyFwNRQQZsKShdJFZd1urg4qiV9LtA9Qybk=) 5: 3133382e33362e3134342e302f32342d3234203d3e203332303334.roa (hash: DLmoj2atxvn9Mfqu7VBjdYEexeeGv6TFfnaaNE9wIsk=) 6: 3138312e3139392e3134312e302f32342d3234203d3e203332303334.roa (hash: by/zYzH9sTJ9Ag2PeXhNM7w0fMQkrQB/+R+yWMQwzeg=) 7: 3230312e3135382e35322e302f32322d3232203d3e203332303334.roa (hash: vPXHeyaYYZgqh5jQX5UJQHfvZIJWfuopjgFQi4qsXE8=) 8: 3138362e36342e3132342e302f32322d3232203d3e203332303334.roa (hash: oYEzWeF5YGsRiKoMxJOuiv8L53x4uOIwi8f4J7g8zWc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d1:35:4c:3d:77:83:40:1d:cd:54:2c:c1:dd:f8:ce:09:c6:aa:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9 Validity Not Before: Nov 5 13:48:21 2025 GMT Not After : Nov 10 00:36:21 2025 GMT Subject: CN=2E9D6FC9D76D803BB0DCEF8F67A18E7C869B6ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:92:42:1e:07:1a:d3:e8:a4:96:c2:5f:56: 49:9f:1b:84:bd:9d:41:08:64:86:d2:89:c2:28:20: c7:db:ac:87:07:05:87:47:3b:78:60:28:ec:5e:1d: 92:29:6c:3c:1a:f7:44:28:9d:34:b1:26:2b:e8:65: e1:f8:af:ca:3b:42:af:46:c2:41:49:55:ce:0a:5c: c7:79:0f:d6:3c:bd:7a:07:77:34:59:d0:01:c6:b4: fe:41:e8:95:24:d3:33:41:47:54:d9:95:1d:86:8e: ec:1c:cf:b4:0e:1e:54:b4:01:d7:35:01:fb:86:49: 0c:88:44:e5:64:5c:47:05:1b:57:dd:35:0d:e7:4b: 93:36:06:b2:cf:eb:30:66:ea:15:dc:c9:a2:dd:ea: 40:3c:58:bf:94:09:7f:29:4b:2b:82:49:91:9b:5b: 59:d9:ca:74:73:72:81:a9:17:fb:0f:ed:9b:39:9f: 84:22:8e:3b:7c:7f:dd:4f:b5:78:1f:da:8f:19:d5: 34:bf:c4:4b:ae:06:ed:36:79:49:96:54:67:1e:0b: 7e:6f:bc:c1:4b:43:45:a0:53:b0:1e:1e:6a:5c:d6: c6:02:92:3a:c9:43:93:38:a2:8c:b2:bf:2a:3e:60: 2a:77:e9:08:7e:6a:47:b8:ab:d3:a2:7c:c9:a8:fd: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9D:6F:C9:D7:6D:80:3B:B0:DC:EF:8F:67:A1:8E:7C:86:9B:6A:CB X509v3 Authority Key Identifier: keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4b:ea:54:c3:93:ee:a0:69:c9:69:4f:3a:d0:34:13:58:47: 9e:8d:12:f6:22:a1:5d:7b:58:1d:21:1b:68:67:7e:f9:a5:f7: 2e:d2:7f:65:32:7a:81:cc:48:7b:bb:8a:f3:9b:6c:96:e3:01: 2a:ea:c5:dd:36:f7:17:4a:54:5f:0c:64:93:d0:ff:ad:8d:d4: be:a7:bc:bb:c3:d5:36:4b:c4:ff:06:3b:ec:ed:d1:50:fc:e3: bc:81:74:ca:9b:ae:c1:66:c0:7b:24:80:f0:75:cc:90:cd:9b: 65:85:c7:07:ad:07:fd:3f:6c:85:85:e8:c6:34:ee:37:b3:c5: 13:59:ad:39:e9:90:94:53:7b:94:00:05:ae:6e:72:bc:33:90: e6:9a:7b:86:60:e3:fc:87:c7:96:ca:40:ec:92:9d:56:ff:01: ef:4e:a3:15:22:c7:07:92:90:a7:df:cc:5c:f8:1f:73:6f:06: 2b:40:11:10:93:02:3b:e6:d5:4e:9c:00:d2:71:14:f8:2e:a6: 2c:b3:0f:84:af:7c:d0:e7:77:f6:13:d3:9f:fa:ab:a3:ad:b3: 69:b4:66:a4:d9:72:a8:a4:cc:7e:e8:81:8b:42:7a:0a:7a:f5: 3d:a8:04:b6:27:40:df:c2:f8:5e:83:95:60:79:58:39:6e:8a: 11:e5:3a:08 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD9E1TD13g0AdzVQswd34zgnGqlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1NTNCRDA1QjMzNTQ4QzM0MjU2ODU2NjI5MUU3MTlC NEZBNzNCOTAeFw0yNTExMDUxMzQ4MjFaFw0yNTExMTAwMDM2MjFaMDMxMTAvBgNV BAMTKDJFOUQ2RkM5RDc2RDgwM0JCMERDRUY4RjY3QTE4RTdDODY5QjZBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLt5JCHgca0+iklsJfVkmfG4S9 nUEIZIbSicIoIMfbrIcHBYdHO3hgKOxeHZIpbDwa90QonTSxJivoZeH4r8o7Qq9G wkFJVc4KXMd5D9Y8vXoHdzRZ0AHGtP5B6JUk0zNBR1TZlR2Gjuwcz7QOHlS0Adc1 AfuGSQyIROVkXEcFG1fdNQ3nS5M2BrLP6zBm6hXcyaLd6kA8WL+UCX8pSyuCSZGb W1nZynRzcoGpF/sP7Zs5n4Qijjt8f91PtXgf2o8Z1TS/xEuuBu02eUmWVGceC35v vMFLQ0WgU7AeHmpc1sYCkjrJQ5M4ooyyvyo+YCp36Qh+ake4q9OifMmo/f4RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULp1vyddtgDuw3O+PZ6GOfIabasswHwYDVR0j BBgwFoAU3FU70FszVIw0JWhWYpHnGbT6c7kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUMyQkM3NTRCRkRENDUzNUQ0OUY5OUQwNjcxNzQzQzND MDgyNUE2QjZENTdCNDhFNzM1MDQ1MUJBODdFOUVGLzAvREM1NTNCRDA1QjMzNTQ4 QzM0MjU2ODU2NjI5MUU3MTlCNEZBNzNCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzU1M0JEMDVCMzM1NDhDMzQy NTY4NTY2MjkxRTcxOUI0RkE3M0I5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFDMkJDNzU0QkZERDQ1MzVENDlGOTlEMDY3MTc0M0MzQzA4MjVBNkI2 RDU3QjQ4RTczNTA0NTFCQTg3RTlFRi8wL0RDNTUzQkQwNUIzMzU0OEMzNDI1Njg1 NjYyOTFFNzE5QjRGQTczQjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhS+pUw5PuoGnJaU860DQTWEee jRL2IqFde1gdIRtoZ375pfcu0n9lMnqBzEh7u4rzm2yW4wEq6sXdNvcXSlRfDGST 0P+tjdS+p7y7w9U2S8T/Bjvs7dFQ/OO8gXTKm67BZsB7JIDwdcyQzZtlhccHrQf9 P2yFhejGNO43s8UTWa056ZCUU3uUAAWubnK8M5DmmnuGYOP8h8eWykDskp1W/wHv TqMVIscHkpCn38xc+B9zbwYrQBEQkwI75tVOnADScRT4LqYssw+Er3zQ53f2E9Of +qujrbNptGak2XKopMx+6IGLQnoKevU9qAS2J0Dfwvheg5VgeVg5booR5ToI -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:29 2025 by rpki-client