$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft File: 0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft (raw, json) Hash identifier: 1HgLb143WjghX9NlONp/NqM/P3uYYNWt8yxfW0m4URs= Subject key identifier: 52:F0:E3:55:4A:7F:20:E7:7E:F8:93:23:DF:31:21:16:72:D3:A4:FF Authority key identifier: 07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8 Certificate issuer: /CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8 Certificate serial: 32C5FCACF8A696C9094B7C35B14A3E929BC0DA66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft Manifest number: 012E Signing time: Mon 03 Nov 2025 16:53:41 +0000 Manifest this update: Mon 03 Nov 2025 16:48:41 +0000 Manifest next update: Sun 09 Nov 2025 16:32:41 +0000 Files and hashes: 1: 323830333a353663303a3a2f33322d3332203d3e20323635363536.roa (hash: to1tLtw3k3VRAVckh40FOGejT7b8VLnirunioxeNjGc=) 2: 3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa (hash: 3ymxSBexA/LUtGIrYwOhO5wbt8sIa+H4/HA9ePyU42A=) 3: 0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl (hash: 9XK+e43R5Bn4yBdissDP5KPWG9g6BDJHZjSK78Bh5sg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c5:fc:ac:f8:a6:96:c9:09:4b:7c:35:b1:4a:3e:92:9b:c0:da:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8 Validity Not Before: Nov 3 16:48:41 2025 GMT Not After : Nov 9 16:32:41 2025 GMT Subject: CN=52F0E3554A7F20E77EF89323DF31211672D3A4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:fe:9c:b7:62:51:95:70:3c:d9:0d:41:49: 50:89:6c:79:17:fb:eb:58:7c:47:3b:13:96:2c:f7: 60:70:dd:bd:24:3d:9a:d4:97:3c:09:4c:8b:11:6a: 35:82:14:93:2a:ee:ad:50:63:aa:d8:e5:31:ff:4c: 6a:63:0a:a6:62:c0:d7:6b:a1:7c:0b:b2:9c:56:83: 70:e2:ba:8c:d1:9c:ff:30:f8:b6:fd:fe:70:95:3c: 3e:c8:46:c0:97:95:e2:2a:66:48:48:56:07:9d:94: 24:58:82:81:ff:75:dc:ea:71:9b:44:3f:61:25:ab: 5d:86:32:84:0e:60:e8:c9:41:ed:98:e5:7d:d0:5e: 71:49:b3:b9:a8:66:d4:d8:aa:b7:51:d2:47:18:9e: 13:96:90:99:d9:c2:48:8e:50:90:d1:65:42:83:b2: 41:4c:ed:e5:38:65:5c:b3:b0:c6:30:66:30:7d:3c: 88:d9:94:29:a1:87:c5:a6:1d:12:7b:79:ba:16:5d: 37:92:e2:59:83:dd:eb:5d:a2:e6:f1:a8:08:14:46: ab:71:97:21:df:3d:ff:04:80:74:dd:59:b8:db:12: 9e:ec:32:03:64:1f:73:b4:12:cb:c4:27:67:e6:1b: ff:92:66:6f:51:99:e6:0f:d8:52:78:8a:33:66:65: ad:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F0:E3:55:4A:7F:20:E7:7E:F8:93:23:DF:31:21:16:72:D3:A4:FF X509v3 Authority Key Identifier: keyid:07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ec:73:50:55:10:0b:4b:cb:50:ca:6f:79:78:4b:bb:4f:74: 62:d1:63:db:1a:be:c4:47:de:7e:91:8b:0e:d7:47:4b:ea:0f: 9e:53:f6:ba:16:b7:12:38:fc:56:eb:09:85:56:cf:9f:7f:19: 0b:97:79:cb:4d:d3:06:6b:de:8d:32:93:6b:ea:6e:29:48:9f: a3:80:07:fc:6f:15:65:6a:95:0f:ac:ee:1a:b3:6f:f5:e0:23: b6:1f:fb:47:6b:d3:49:98:f5:d0:5a:1d:71:68:84:1e:80:84: e9:fe:d6:9d:14:ec:27:f3:98:5c:40:66:61:e4:2f:89:84:0f: 2f:cf:87:10:26:16:0f:01:fd:88:50:a8:1c:d4:d9:97:78:fe: fe:7c:82:a6:6a:82:ba:81:44:cc:35:ff:6f:45:f9:d9:9b:88: fa:65:f3:ab:5b:41:d0:bb:5c:5d:bb:59:69:c7:13:ed:ab:56: f3:ee:e3:58:c6:0a:65:b6:a8:b7:c9:aa:ce:70:16:94:cc:2b: 75:31:43:c4:3f:b4:ff:b1:7f:f5:1e:7c:cc:fe:10:fc:4a:58: 2b:ea:0a:84:eb:94:37:ae:54:c1:3a:78:01:a8:2b:0c:67:bf: 6a:0a:18:3d:34:d8:15:f9:91:61:fd:e4:59:63:3c:09:e2:e4: c8:09:08:97 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMsX8rPimlskJS3w1sUo+kpvA2mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc0OUYwQzlGOThCNjgzOTJFMkRCMEYzRUMyNUI5RTIy RTg5QkJCODAeFw0yNTExMDMxNjQ4NDFaFw0yNTExMDkxNjMyNDFaMDMxMTAvBgNV BAMTKDUyRjBFMzU1NEE3RjIwRTc3RUY4OTMyM0RGMzEyMTE2NzJEM0E0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZjP6ct2JRlXA82Q1BSVCJbHkX ++tYfEc7E5Ys92Bw3b0kPZrUlzwJTIsRajWCFJMq7q1QY6rY5TH/TGpjCqZiwNdr oXwLspxWg3DiuozRnP8w+Lb9/nCVPD7IRsCXleIqZkhIVgedlCRYgoH/ddzqcZtE P2Elq12GMoQOYOjJQe2Y5X3QXnFJs7moZtTYqrdR0kcYnhOWkJnZwkiOUJDRZUKD skFM7eU4ZVyzsMYwZjB9PIjZlCmhh8WmHRJ7eboWXTeS4lmD3etdoubxqAgURqtx lyHfPf8EgHTdWbjbEp7sMgNkH3O0EsvEJ2fmG/+SZm9RmeYP2FJ4ijNmZa2tAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUvDjVUp/IOd++JMj3zEhFnLTpP8wHwYDVR0j BBgwFoAUB0nwyfmLaDkuLbDz7CW54i6Ju7gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNzhGRDZCNkE4NTg2NzNDOTlEODcxRTlGQUQ0NjlGQ0FG RUQzNzAzMkZCRjQzQzBGM0NERDRCQTM3Qzg2NjAyLzAvMDc0OUYwQzlGOThCNjgz OTJFMkRCMEYzRUMyNUI5RTIyRTg5QkJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzQ5RjBDOUY5OEI2ODM5MkUy REIwRjNFQzI1QjlFMjJFODlCQkI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTc4RkQ2QjZBODU4NjczQzk5RDg3MUU5RkFENDY5RkNBRkVEMzcwMzJG QkY0M0MwRjNDREQ0QkEzN0M4NjYwMi8wLzA3NDlGMEM5Rjk4QjY4MzkyRTJEQjBG M0VDMjVCOUUyMkU4OUJCQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCD7HNQVRALS8tQym95eEu7T3Ri 0WPbGr7ER95+kYsO10dL6g+eU/a6FrcSOPxW6wmFVs+ffxkLl3nLTdMGa96NMpNr 6m4pSJ+jgAf8bxVlapUPrO4as2/14CO2H/tHa9NJmPXQWh1xaIQegITp/tadFOwn 85hcQGZh5C+JhA8vz4cQJhYPAf2IUKgc1NmXeP7+fIKmaoK6gUTMNf9vRfnZm4j6 ZfOrW0HQu1xdu1lpxxPtq1bz7uNYxgpltqi3yarOcBaUzCt1MUPEP7T/sX/1HnzM /hD8Slgr6gqE65Q3rlTBOngBqCsMZ79qChg9NNgV+ZFh/eRZYzwJ4uTICQiX -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:11 2025 by rpki-client