$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft File: 8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft (raw, json) Hash identifier: r5yosIRGGDzWaytLO3ZkGFVAK4uoFnrDRQGADWL662s= Subject key identifier: 3F:B7:F4:42:F0:65:CB:CE:E8:A4:E6:56:05:00:52:D5:46:9F:59:10 Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3 Certificate issuer: /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3 Certificate serial: 5C2512F6785FC77C5933AA158EFE5F7CF05F1CCA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft Manifest number: 0134 Signing time: Tue 04 Nov 2025 05:10:35 +0000 Manifest this update: Tue 04 Nov 2025 05:05:35 +0000 Manifest next update: Sun 09 Nov 2025 08:35:35 +0000 Files and hashes: 1: 3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa (hash: +aObhKVPTqWP0o94g5AK/x32NQ7eBpCODlAMRkmm4sY=) 2: 323830333a643763303a3a2f33322d3438203d3e20323635373731.roa (hash: d8jvf0HvkW6EbwGrmGuERJqPkSX40KDlJ10GVKmPMi0=) 3: 3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa (hash: koYyhtRf+y1BqnVn5dMqU/eH6hsz6Ya0lj38asS3wAw=) 4: 3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa (hash: lPCXyM+TeDa3g9ULYYerVR5N4v3N7xkEzf3vXDWSZy4=) 5: 3132382e3230312e3131302e302f32342d3234203d3e20323635373731.roa (hash: 2LRNpo/LRjzn5V+jMW7/ibl4IomOtHDBBOzLrTJXJFs=) 6: 3132382e3230312e3131312e302f32342d3234203d3e20323635373731.roa (hash: GFunjvjZbkL780fMBbKEKNkxLICXAjhzJsSwWV/BKz8=) 7: 8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl (hash: hU2cJ8AOSJRgkgpGVii1eIIU2+pPzKxebiDCJfQtU+M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:25:12:f6:78:5f:c7:7c:59:33:aa:15:8e:fe:5f:7c:f0:5f:1c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3 Validity Not Before: Nov 4 05:05:35 2025 GMT Not After : Nov 9 08:35:35 2025 GMT Subject: CN=3FB7F442F065CBCEE8A4E656050052D5469F5910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:1c:bd:56:69:b0:c4:19:a2:6e:c4:e5:dd: ba:18:38:5c:5e:9c:fb:20:48:07:fa:93:4a:fd:45: ea:1e:10:c0:b3:e9:96:9a:34:ce:f9:11:e1:0f:ec: ea:8e:91:72:a2:af:92:f6:74:7d:52:32:b1:5a:44: cf:2c:1e:ff:3a:70:14:ac:b9:36:a4:ed:54:95:dc: 4f:75:aa:5a:7c:c5:a0:ac:48:8e:f7:e4:90:82:2e: f5:d5:08:ad:b7:87:47:63:f9:9f:38:5d:74:d3:13: 28:49:c4:88:91:e0:4b:69:32:0a:9c:d1:9f:bd:65: 01:dc:90:7b:49:ca:d7:2a:b5:fd:45:9d:69:59:02: a9:6c:38:d2:f3:38:00:63:1b:8f:33:7d:ff:c9:f5: 87:0a:86:91:5e:be:aa:97:02:ca:4b:92:51:0d:13: 2a:3c:bd:05:4c:08:20:56:88:ad:00:6a:14:8a:9b: 87:48:5c:4d:de:37:ed:23:85:dd:5d:61:84:a9:e0: 98:c4:1d:a1:55:cd:ef:81:4d:ac:cf:f0:a2:3b:db: 83:10:28:75:7f:54:ba:3f:3a:59:e9:57:fb:27:b3: fe:3b:6e:7a:b1:2f:5b:c7:da:5f:97:14:59:13:9b: 7a:d2:67:b0:7c:fc:04:95:ad:16:05:10:bf:66:09: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B7:F4:42:F0:65:CB:CE:E8:A4:E6:56:05:00:52:D5:46:9F:59:10 X509v3 Authority Key Identifier: keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:b4:de:0e:17:4d:92:ca:90:b3:bc:a8:27:fd:d3:32:85:2b: f3:b2:8f:ca:0d:d7:14:44:d9:ed:69:8f:3b:b3:ed:d3:66:42: 02:50:ec:1d:a5:05:43:b8:6e:96:02:6b:9c:9a:72:70:c8:9c: e3:21:75:21:59:05:e7:c5:a3:d0:5e:ac:24:f7:de:b9:f8:aa: 9a:ef:05:d0:76:af:b8:9c:1e:68:d1:82:b4:86:81:8d:57:2e: 18:97:ed:f2:1f:2a:e5:c0:90:3e:12:04:7b:27:54:0f:10:8e: cd:81:52:ad:f4:76:fe:fd:28:85:d4:55:89:b9:77:83:ef:4a: 0f:66:3b:87:f3:7c:70:77:46:d1:54:65:55:ac:cc:f4:45:53: f5:01:dc:67:f0:ae:c8:b7:3a:bd:20:22:48:43:f1:aa:46:64: 87:47:23:49:3c:24:5d:82:e4:d0:81:f2:e0:8b:33:d4:d7:1c: ba:0c:ae:e0:24:65:3d:0e:65:9a:9d:73:5d:01:ec:95:92:e8: 83:3e:59:d3:bb:b8:d2:6e:f4:fe:63:14:f3:9d:28:bd:17:c0: d3:35:d9:a7:d2:cd:0d:77:2d:28:56:ca:c0:9c:13:a9:90:d3: c7:a8:a3:6c:fd:36:51:24:86:0f:c1:8c:c6:f5:14:30:e8:d0: 42:86:81:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXCUS9nhfx3xZM6oVjv5ffPBfHMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOUM0NTY1NTFBOUZBNDMxODU2NUU0RUY1QkY0QzZC NUY5QUFDMzAeFw0yNTExMDQwNTA1MzVaFw0yNTExMDkwODM1MzVaMDMxMTAvBgNV BAMTKDNGQjdGNDQyRjA2NUNCQ0VFOEE0RTY1NjA1MDA1MkQ1NDY5RjU5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLhy9VmmwxBmibsTl3boYOFxe nPsgSAf6k0r9ReoeEMCz6ZaaNM75EeEP7OqOkXKir5L2dH1SMrFaRM8sHv86cBSs uTak7VSV3E91qlp8xaCsSI735JCCLvXVCK23h0dj+Z84XXTTEyhJxIiR4EtpMgqc 0Z+9ZQHckHtJytcqtf1FnWlZAqlsONLzOABjG48zff/J9YcKhpFevqqXAspLklEN Eyo8vQVMCCBWiK0AahSKm4dIXE3eN+0jhd1dYYSp4JjEHaFVze+BTazP8KI724MQ KHV/VLo/OlnpV/sns/47bnqxL1vH2l+XFFkTm3rSZ7B8/ASVrRYFEL9mCQkRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUP7f0QvBly87opOZWBQBS1UafWRAwHwYDVR0j BBgwFoAUjanEVlUan6QxhWXk71v0xrX5qsMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNkUwQzAwQjkyMUNDQ0M1M0QyNzNBQ0Q2RjNCMjVGQTY0 Mzk4M0IxOTIwNzc4RTEwOTk2QUQxMDAwODc3OUYxLzAvOERBOUM0NTY1NTFBOUZB NDMxODU2NUU0RUY1QkY0QzZCNUY5QUFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REE5QzQ1NjU1MUE5RkE0MzE4 NTY1RTRFRjVCRjRDNkI1RjlBQUMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTZFMEMwMEI5MjFDQ0NDNTNEMjczQUNENkYzQjI1RkE2NDM5ODNCMTky MDc3OEUxMDk5NkFEMTAwMDg3NzlGMS8wLzhEQTlDNDU2NTUxQTlGQTQzMTg1NjVF NEVGNUJGNEM2QjVGOUFBQzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+tN4OF02SypCzvKgn/dMyhSvz so/KDdcURNntaY87s+3TZkICUOwdpQVDuG6WAmucmnJwyJzjIXUhWQXnxaPQXqwk 9965+Kqa7wXQdq+4nB5o0YK0hoGNVy4Yl+3yHyrlwJA+EgR7J1QPEI7NgVKt9Hb+ /SiF1FWJuXeD70oPZjuH83xwd0bRVGVVrMz0RVP1Adxn8K7Itzq9ICJIQ/GqRmSH RyNJPCRdguTQgfLgizPU1xy6DK7gJGU9DmWanXNdAeyVkuiDPlnTu7jSbvT+YxTz nSi9F8DTNdmn0s0Ndy0oVsrAnBOpkNPHqKNs/TZRJIYPwYzG9RQw6NBChoGK -----END CERTIFICATE-----Generated at Wed Nov 5 18:51:45 2025 by rpki-client