$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.mft File: 98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.mft (raw, json) Hash identifier: FIjlyFumPHb/nSpOo/YhlM7XG5wL+5JOqYNGPu1AWl0= Subject key identifier: 2D:6E:0C:DA:98:72:24:1D:45:FD:0B:99:22:AC:7E:49:64:40:26:FB Authority key identifier: 98:BF:38:FB:2E:BC:61:6A:0A:18:D0:9F:92:C1:7B:20:67:FD:BC:80 Certificate issuer: /CN=98BF38FB2EBC616A0A18D09F92C17B2067FDBC80 Certificate serial: 100683E77EB3D7A763E0C245C79BC1991EC1FAC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.mft Manifest number: 0136 Signing time: Mon 03 Nov 2025 12:31:22 +0000 Manifest this update: Mon 03 Nov 2025 12:26:22 +0000 Manifest next update: Sun 09 Nov 2025 08:27:22 +0000 Files and hashes: 1: 34352e3232382e3230382e302f32322d3234203d3e20323633373032.roa (hash: NFBpEbDLP7ImrEkEMH7laL74qRDjUo0Cq25529rEsEk=) 2: 323830333a653932303a3a2f33322d3332203d3e20323633373032.roa (hash: bHpqr4ud+8rBokJAgwuM6rt7CWvY2zEqnPJNx9Zsuq4=) 3: 98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.crl (hash: iwhJjSJqRpBR4Zu0skDTYW53UoCazT0cPcOWIDTXO0w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.crl rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:06:83:e7:7e:b3:d7:a7:63:e0:c2:45:c7:9b:c1:99:1e:c1:fa:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF38FB2EBC616A0A18D09F92C17B2067FDBC80 Validity Not Before: Nov 3 12:26:22 2025 GMT Not After : Nov 9 08:27:22 2025 GMT Subject: CN=2D6E0CDA9872241D45FD0B9922AC7E49644026FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:90:fc:4d:29:f8:0a:9d:7d:6b:85:4c:6e: dd:b4:92:c0:89:ff:ea:00:ef:dd:83:95:5d:16:09: 3d:d1:0c:fd:c1:45:bf:b8:da:34:f6:4c:ba:ad:ef: 93:0d:9f:f3:a8:a7:68:61:56:0c:c6:45:ac:77:15: 72:eb:42:d4:a2:a2:73:1b:ff:f2:6e:aa:61:08:be: 68:98:54:52:e2:a1:7d:ac:38:0c:8d:d3:8c:c7:a6: df:fd:96:10:13:d5:78:f6:69:ba:3e:a3:5f:db:49: be:a3:6e:5e:1e:c2:88:8a:be:21:65:34:42:93:d7: e0:5d:38:59:a4:02:14:41:36:44:22:d7:0c:63:a9: 1f:0e:39:c0:16:72:e1:48:1c:52:e2:1a:85:dd:6e: b2:9f:3e:0b:fe:b7:d0:39:f4:5e:fe:96:a0:9d:22: df:5b:2f:03:aa:c8:ff:e1:8c:a3:a7:1d:4d:18:e5: ec:b3:23:0f:4e:2b:f8:e6:b7:e5:e6:8c:02:b0:a5: 66:47:c8:0f:b5:fe:b7:ae:4c:92:c0:b6:ed:04:57: b0:36:ac:d2:d9:e4:c9:51:b0:3e:b1:f8:00:63:55: ab:9d:a2:22:03:65:a7:36:d7:f1:0d:10:38:f9:1c: 92:37:aa:89:12:a4:25:a0:b2:f1:13:41:6f:31:b5: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:0C:DA:98:72:24:1D:45:FD:0B:99:22:AC:7E:49:64:40:26:FB X509v3 Authority Key Identifier: keyid:98:BF:38:FB:2E:BC:61:6A:0A:18:D0:9F:92:C1:7B:20:67:FD:BC:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:38:44:7c:d4:eb:ae:a8:b6:4d:b3:75:25:69:12:c7:11:24: d7:ea:f2:eb:21:92:cc:39:d0:86:9a:96:c2:76:5d:67:51:69: 41:d8:cb:6a:67:e0:2a:dd:79:0d:02:de:5c:c4:af:4c:4a:4e: 7f:f1:cc:34:04:17:85:85:30:83:72:44:c3:36:8c:93:7f:cd: 39:37:b7:66:ad:d0:c7:92:16:20:6b:f0:04:1c:a9:61:e9:68: ad:6e:bc:00:e8:50:e7:fc:97:f6:9c:11:f3:53:59:a2:60:2c: b1:22:ad:e8:45:bb:e2:7a:9d:cf:a1:aa:26:b7:e7:a4:71:0e: 35:36:d5:a4:3d:a5:06:e7:86:ea:cc:06:45:8e:8d:a3:86:56: 1c:f6:b5:44:c2:89:4a:dc:bf:98:a8:20:39:a4:61:63:54:f8: de:7a:5e:ce:d8:64:0c:02:bc:e1:f7:09:7d:f4:9f:60:6c:75: f9:10:36:8c:0a:85:74:7e:5d:ed:5e:96:e6:20:ac:9c:aa:ab: 42:bd:a6:eb:1b:83:d9:d4:1c:5c:6b:1f:99:ef:24:4f:2f:da: 68:5e:3d:84:c8:ec:e2:bd:dd:4b:18:b3:83:bc:a4:a1:b5:8c: bc:31:0d:c1:57:53:1e:db:0f:94:73:30:7c:9f:43:a7:20:3a: 98:92:a5:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEAaD536z16dj4MJFx5vBmR7B+sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjM4RkIyRUJDNjE2QTBBMThEMDlGOTJDMTdCMjA2 N0ZEQkM4MDAeFw0yNTExMDMxMjI2MjJaFw0yNTExMDkwODI3MjJaMDMxMTAvBgNV BAMTKDJENkUwQ0RBOTg3MjI0MUQ0NUZEMEI5OTIyQUM3RTQ5NjQ0MDI2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5JD8TSn4Cp19a4VMbt20ksCJ /+oA792DlV0WCT3RDP3BRb+42jT2TLqt75MNn/Oop2hhVgzGRax3FXLrQtSionMb //JuqmEIvmiYVFLioX2sOAyN04zHpt/9lhAT1Xj2abo+o1/bSb6jbl4ewoiKviFl NEKT1+BdOFmkAhRBNkQi1wxjqR8OOcAWcuFIHFLiGoXdbrKfPgv+t9A59F7+lqCd It9bLwOqyP/hjKOnHU0Y5eyzIw9OK/jmt+XmjAKwpWZHyA+1/reuTJLAtu0EV7A2 rNLZ5MlRsD6x+ABjVaudoiIDZac21/ENEDj5HJI3qokSpCWgsvETQW8xtWEvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULW4M2phyJB1F/QuZIqx+SWRAJvswHwYDVR0j BBgwFoAUmL84+y68YWoKGNCfksF7IGf9vIAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNUE1ODVBQzhGNkY4RTlCQjM5RjJFOTBGMjgzNTE1QzBB NEFCRkQ3MkVCNTZBQjcwMDAwNDBGMUM3NUI3RDg5LzAvOThCRjM4RkIyRUJDNjE2 QTBBMThEMDlGOTJDMTdCMjA2N0ZEQkM4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OEJGMzhGQjJFQkM2MTZBMEEx OEQwOUY5MkMxN0IyMDY3RkRCQzgwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTVBNTg1QUM4RjZGOEU5QkIzOUYyRTkwRjI4MzUxNUMwQTRBQkZENzJF QjU2QUI3MDAwMDQwRjFDNzVCN0Q4OS8wLzk4QkYzOEZCMkVCQzYxNkEwQTE4RDA5 RjkyQzE3QjIwNjdGREJDODAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDEOER81OuuqLZNs3UlaRLHESTX 6vLrIZLMOdCGmpbCdl1nUWlB2MtqZ+Aq3XkNAt5cxK9MSk5/8cw0BBeFhTCDckTD NoyTf805N7dmrdDHkhYga/AEHKlh6WitbrwA6FDn/Jf2nBHzU1miYCyxIq3oRbvi ep3Poaomt+ekcQ41NtWkPaUG54bqzAZFjo2jhlYc9rVEwolK3L+YqCA5pGFjVPje el7O2GQMArzh9wl99J9gbHX5EDaMCoV0fl3tXpbmIKycqqtCvabrG4PZ1Bxcax+Z 7yRPL9poXj2EyOzivd1LGLODvKShtYy8MQ3BV1Me2w+UczB8n0OnIDqYkqUA -----END CERTIFICATE-----Generated at Wed Nov 5 15:50:49 2025 by rpki-client