$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft File: 8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft (raw, json) Hash identifier: eah2RpyBvLWFNTjsjwSVWgwvYhB+6rYp9H61ls/JK9g= Subject key identifier: 3A:EE:D0:36:F5:5E:BB:1F:E6:1B:02:99:DF:CD:C9:EA:B2:2E:93:C0 Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72 Certificate issuer: /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72 Certificate serial: 12F475C19D9E50ED1B1534BE3EC2F4036BBEAA26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 22:55:18 +0000 Manifest this update: Tue 04 Nov 2025 22:50:18 +0000 Manifest next update: Sun 09 Nov 2025 11:43:18 +0000 Files and hashes: 1: 8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl (hash: hLjs6wj72T/7K/TXs3Kmyi8h+zQDTfXrSmgchrAJsjA=) 2: 323830333a663665303a3a2f33322d3438203d3e20323639393736.roa (hash: takJjmGC1G1/7xGuybEIuyQDwN9y4okf/jc5QDfFvR4=) 3: 32342e3135322e34302e302f32322d3234203d3e20323639393736.roa (hash: nugiQ0IcwQKTZxJTccpQeNrv7gIfXVcuO1fqP7AbTCw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f4:75:c1:9d:9e:50:ed:1b:15:34:be:3e:c2:f4:03:6b:be:aa:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72 Validity Not Before: Nov 4 22:50:18 2025 GMT Not After : Nov 9 11:43:18 2025 GMT Subject: CN=3AEED036F55EBB1FE61B0299DFCDC9EAB22E93C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:ec:1b:52:36:c0:e0:9f:7f:c5:a0:ef:bb: 0f:cb:a1:55:f0:89:a5:57:75:02:e7:d3:db:07:d1: c7:26:9d:38:12:0c:28:83:0e:a3:1a:69:06:e2:cf: 5e:0f:0a:44:cb:2d:83:40:1e:ef:cb:6f:0d:8f:da: 48:f3:67:73:5e:62:58:45:0d:9f:e0:d0:a5:40:cd: e0:d9:a1:e4:96:0e:7c:89:e3:82:ef:11:76:6e:37: d9:63:92:8b:52:2f:41:b1:26:06:47:52:d5:da:95: f9:b2:ab:71:04:e8:f5:67:05:ff:75:70:d1:7e:5a: a0:e5:2c:a0:b0:f3:a0:0e:b5:00:12:ba:e9:20:ca: 0f:7a:f3:06:3c:9a:bf:3a:ee:1d:ae:cd:89:95:5a: 54:8a:e1:5e:e6:3c:c5:37:42:09:bd:fe:02:d6:c7: ca:aa:ce:39:4f:27:d7:7a:a7:52:1e:33:a3:c9:c1: 93:19:e7:f5:18:22:c6:83:ff:23:a8:f3:13:7d:26: 0b:0d:b9:9a:eb:7e:bf:35:3e:d6:a1:87:b4:a4:52: 3b:80:5b:1e:72:b3:83:ae:f0:7e:3e:aa:eb:28:ba: 79:ea:d8:66:fe:fe:41:3a:ca:13:7f:6b:6a:93:38: 90:60:4b:28:67:f4:ef:2f:8d:12:3b:e0:a3:04:91: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:D0:36:F5:5E:BB:1F:E6:1B:02:99:DF:CD:C9:EA:B2:2E:93:C0 X509v3 Authority Key Identifier: keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0f:a3:69:b2:0a:ab:f8:c9:36:94:34:cf:c5:14:e4:97:77: 2f:ce:23:57:55:2a:6a:88:94:62:99:d9:54:b1:68:67:19:ce: 86:1a:a6:ad:f0:f0:5a:14:15:b3:e9:1c:76:b7:af:d6:cd:a9: 59:d1:58:8f:6b:bd:e1:b7:3a:28:b5:d6:e0:84:81:43:a5:42: 54:9c:1f:6a:ea:75:25:67:22:a4:86:dd:4c:4b:0e:6e:a4:70: 5d:32:7d:10:0e:1b:39:5e:22:21:f5:0a:9f:36:23:e2:fc:0b: 27:9a:f3:96:64:d5:6b:bc:da:78:6c:cd:6b:88:7d:7b:71:45: 6c:78:c1:96:de:9f:28:93:1c:09:94:26:85:ad:42:a2:14:4f: e7:e2:a4:1a:b2:55:03:a1:1f:33:09:b9:44:33:64:7c:4e:9b: e0:cf:99:79:b9:37:61:11:77:be:f3:ce:62:83:53:2b:a8:a9: 2d:8f:f4:0a:c4:f1:29:a5:7c:67:44:b0:c3:c1:07:b5:aa:56: 00:45:11:51:4a:90:de:ce:4d:02:94:58:a8:6b:0a:dd:e4:bc: 9f:cd:6f:88:32:4b:a2:3f:e6:ec:37:69:9b:fd:c1:1b:26:9a: c2:2d:4b:7b:ad:f7:f5:fe:80:7a:65:d2:ae:f2:bc:fe:14:37: 59:0a:00:26 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEvR1wZ2eUO0bFTS+PsL0A2u+qiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM3MERDQ0YyNzVCMTQ3MTdGNkExMjQxNEYxRUUxM0RB RkNFNEU3MjAeFw0yNTExMDQyMjUwMThaFw0yNTExMDkxMTQzMThaMDMxMTAvBgNV BAMTKDNBRUVEMDM2RjU1RUJCMUZFNjFCMDI5OURGQ0RDOUVBQjIyRTkzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07+wbUjbA4J9/xaDvuw/LoVXw iaVXdQLn09sH0ccmnTgSDCiDDqMaaQbiz14PCkTLLYNAHu/Lbw2P2kjzZ3NeYlhF DZ/g0KVAzeDZoeSWDnyJ44LvEXZuN9ljkotSL0GxJgZHUtXalfmyq3EE6PVnBf91 cNF+WqDlLKCw86AOtQASuukgyg968wY8mr867h2uzYmVWlSK4V7mPMU3Qgm9/gLW x8qqzjlPJ9d6p1IeM6PJwZMZ5/UYIsaD/yOo8xN9JgsNuZrrfr81Ptahh7SkUjuA Wx5ys4Ou8H4+qusounnq2Gb+/kE6yhN/a2qTOJBgSyhn9O8vjRI74KMEka5TAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOu7QNvVeux/mGwKZ383J6rIuk8AwHwYDVR0j BBgwFoAUjHDczydbFHF/ahJBTx7hPa/OTnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQzBEMjQwQkFGMUQ5QkJBQTZFMjQxMzI2NDdFNTM4RTAx MDdGOEYxNDM2MEFEMTEyNzM4RkU3OUMwOTAwMTEwLzAvOEM3MERDQ0YyNzVCMTQ3 MTdGNkExMjQxNEYxRUUxM0RBRkNFNEU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzcwRENDRjI3NUIxNDcxN0Y2 QTEyNDE0RjFFRTEzREFGQ0U0RTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREMwRDI0MEJBRjFEOUJCQUE2RTI0MTMyNjQ3RTUzOEUwMTA3RjhGMTQz NjBBRDExMjczOEZFNzlDMDkwMDExMC8wLzhDNzBEQ0NGMjc1QjE0NzE3RjZBMTI0 MTRGMUVFMTNEQUZDRTRFNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZD6Npsgqr+Mk2lDTPxRTkl3cv ziNXVSpqiJRimdlUsWhnGc6GGqat8PBaFBWz6Rx2t6/WzalZ0ViPa73htzootdbg hIFDpUJUnB9q6nUlZyKkht1MSw5upHBdMn0QDhs5XiIh9QqfNiPi/AsnmvOWZNVr vNp4bM1riH17cUVseMGW3p8okxwJlCaFrUKiFE/n4qQaslUDoR8zCblEM2R8Tpvg z5l5uTdhEXe+885ig1MrqKktj/QKxPEppXxnRLDDwQe1qlYARRFRSpDezk0ClFio awrd5LyfzW+IMkuiP+bsN2mb/cEbJprCLUt7rff1/oB6ZdKu8rz+FDdZCgAm -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:35 2025 by rpki-client