$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.mft File: 5844C567E7B04876831F61CC7D4A348645F6A0F2.mft (raw, json) Hash identifier: s85WYYOepGeCpzBTWYlOw1uG4nFzpqCeFkMRDi5O5Ts= Subject key identifier: 17:64:74:36:A8:3D:C4:54:3C:B3:B4:F2:1E:5E:F2:E6:41:F5:26:29 Authority key identifier: 58:44:C5:67:E7:B0:48:76:83:1F:61:CC:7D:4A:34:86:45:F6:A0:F2 Certificate issuer: /CN=5844C567E7B04876831F61CC7D4A348645F6A0F2 Certificate serial: 4434E183B8E99460A4D81C26ACCAB21532FEC2DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.mft Manifest number: 012F Signing time: Tue 04 Nov 2025 08:22:24 +0000 Manifest this update: Tue 04 Nov 2025 08:17:24 +0000 Manifest next update: Sun 09 Nov 2025 08:39:24 +0000 Files and hashes: 1: 3230302e392e3235352e302f32342d3234203d3e203237393333.roa (hash: KsGi4FlQ+sU7luMACclHUplbIfSCxNSOsFkvSAv1QQA=) 2: 323830303a3161303a3a2f33322d3332203d3e203237393333.roa (hash: Y+fmDh1p+ighYe5OXae4BzGxhz5JEHQatA6I7q5dD6M=) 3: 5844C567E7B04876831F61CC7D4A348645F6A0F2.crl (hash: PJr2udTRoDmWR1GMXz0PTH18uYkaQosTVgnCcAYUTfc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.crl rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:34:e1:83:b8:e9:94:60:a4:d8:1c:26:ac:ca:b2:15:32:fe:c2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5844C567E7B04876831F61CC7D4A348645F6A0F2 Validity Not Before: Nov 4 08:17:24 2025 GMT Not After : Nov 9 08:39:24 2025 GMT Subject: CN=17647436A83DC4543CB3B4F21E5EF2E641F52629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:7c:38:45:4b:28:1d:1e:d1:91:ba:f5:cc: 0b:71:7e:81:e4:7f:e3:4c:d2:32:35:95:c2:16:14: 33:e7:22:b9:f8:b2:01:5f:65:20:e6:12:6d:c2:5c: 23:89:dc:a1:00:83:ed:49:92:63:71:fa:de:c3:84: ca:84:24:a2:7d:c2:95:cb:d3:9c:07:b9:80:71:31: 8f:cc:f3:a5:6c:8f:df:30:09:bf:9e:c7:04:73:98: 4c:48:d2:e4:c2:06:5a:ae:32:30:4f:58:3f:4e:7b: ed:fd:85:d5:2d:41:a8:5e:52:e2:f4:ac:1c:5e:1b: 10:61:49:69:48:24:d8:15:0d:ec:95:d4:36:e5:ec: 17:7a:52:0a:51:c0:5d:2e:38:63:b1:29:bf:31:e3: d5:36:e4:1e:41:00:24:f8:4d:44:86:c4:4b:a9:ba: e1:b3:bd:07:e7:91:72:54:60:4f:94:6c:80:31:73: a6:90:94:9e:66:d0:94:ea:24:a3:b5:16:6b:10:40: b6:2f:b3:8f:f4:f0:62:f7:ac:5b:e2:85:01:49:78: 97:8d:35:64:42:a2:81:e6:32:58:ba:60:40:09:95: 71:12:a8:39:02:b7:b6:3d:8f:d8:f1:31:9f:8a:01: 1f:a9:98:e5:d2:e9:77:90:14:8b:d1:48:ac:66:d8: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:74:36:A8:3D:C4:54:3C:B3:B4:F2:1E:5E:F2:E6:41:F5:26:29 X509v3 Authority Key Identifier: keyid:58:44:C5:67:E7:B0:48:76:83:1F:61:CC:7D:4A:34:86:45:F6:A0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7a:60:2d:60:5e:8e:60:d1:b6:71:d9:1c:24:db:d5:f8:9b: c7:c4:f5:99:14:98:10:e0:70:62:01:ff:08:82:b6:9f:7c:e6: 81:62:a1:3b:a6:aa:2f:9c:00:99:6c:dc:c0:2b:43:c3:5e:d5: 2c:26:a9:c0:e2:e6:1b:b5:28:bd:69:dc:05:2a:30:15:a3:48: 59:78:83:0b:6c:00:59:c6:bb:33:a5:7e:57:67:07:72:5a:6a: f5:78:c6:07:c3:2c:8b:ea:8a:86:0d:3a:b5:76:af:bf:69:43: 22:58:cb:db:5f:4f:04:93:67:47:ff:6f:bf:4d:9b:c4:d1:18: df:eb:48:6d:94:72:f9:3c:10:a0:4a:f3:29:9e:d9:68:45:49: ff:93:30:f1:91:9b:7b:11:df:fd:a8:d3:8f:54:07:31:9e:63: 5a:f5:71:ce:fc:cd:f1:94:f0:38:01:59:bf:a2:4b:9f:32:40: 2d:ab:20:e4:29:a8:e8:53:9b:6d:05:45:55:58:20:59:e1:fc: 2b:43:37:2c:60:36:0e:bb:6c:85:42:88:dc:a8:04:bc:26:45: 45:aa:49:bc:d6:d0:b5:e7:31:a5:05:15:41:34:03:44:b9:84: 2b:3d:eb:3f:de:2c:50:4a:db:76:95:b8:2b:4e:e2:3a:c2:44: b5:33:d8:92 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURDThg7jplGCk2BwmrMqyFTL+wtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0NEM1NjdFN0IwNDg3NjgzMUY2MUNDN0Q0QTM0ODY0 NUY2QTBGMjAeFw0yNTExMDQwODE3MjRaFw0yNTExMDkwODM5MjRaMDMxMTAvBgNV BAMTKDE3NjQ3NDM2QTgzREM0NTQzQ0IzQjRGMjFFNUVGMkU2NDFGNTI2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lnw4RUsoHR7Rkbr1zAtxfoHk f+NM0jI1lcIWFDPnIrn4sgFfZSDmEm3CXCOJ3KEAg+1JkmNx+t7DhMqEJKJ9wpXL 05wHuYBxMY/M86Vsj98wCb+exwRzmExI0uTCBlquMjBPWD9Oe+39hdUtQaheUuL0 rBxeGxBhSWlIJNgVDeyV1Dbl7Bd6UgpRwF0uOGOxKb8x49U25B5BACT4TUSGxEup uuGzvQfnkXJUYE+UbIAxc6aQlJ5m0JTqJKO1FmsQQLYvs4/08GL3rFvihQFJeJeN NWRCooHmMli6YEAJlXESqDkCt7Y9j9jxMZ+KAR+pmOXS6XeQFIvRSKxm2GWBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUF2R0Nqg9xFQ8s7TyHl7y5kH1JikwHwYDVR0j BBgwFoAUWETFZ+ewSHaDH2HMfUo0hkX2oPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERjc1MjMwQ0FDNjcwN0I1NThFNzNDODg0OUQ2OTJDQkZC QkJFRUQyRDE2QzZDNEYyMUExMUU2MDBDOTFFNEFBLzAvNTg0NEM1NjdFN0IwNDg3 NjgzMUY2MUNDN0Q0QTM0ODY0NUY2QTBGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81ODQ0QzU2N0U3QjA0ODc2ODMx RjYxQ0M3RDRBMzQ4NjQ1RjZBMEYyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREY3NTIzMENBQzY3MDdCNTU4RTczQzg4NDlENjkyQ0JGQkJCRUVEMkQx NkM2QzRGMjFBMTFFNjAwQzkxRTRBQS8wLzU4NDRDNTY3RTdCMDQ4NzY4MzFGNjFD QzdENEEzNDg2NDVGNkEwRjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQemAtYF6OYNG2cdkcJNvV+JvH xPWZFJgQ4HBiAf8IgraffOaBYqE7pqovnACZbNzAK0PDXtUsJqnA4uYbtSi9adwF KjAVo0hZeIMLbABZxrszpX5XZwdyWmr1eMYHwyyL6oqGDTq1dq+/aUMiWMvbX08E k2dH/2+/TZvE0Rjf60htlHL5PBCgSvMpntloRUn/kzDxkZt7Ed/9qNOPVAcxnmNa 9XHO/M3xlPA4AVm/okufMkAtqyDkKajoU5ttBUVVWCBZ4fwrQzcsYDYOu2yFQojc qAS8JkVFqkm81tC15zGlBRVBNANEuYQrPes/3ixQStt2lbgrTuI6wkS1M9iS -----END CERTIFICATE-----Generated at Wed Nov 5 20:08:38 2025 by rpki-client