$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: C+oX/GvhrbBCwuAP80X0KNof08xjZollfYx/E2+HqD4= Subject key identifier: 6E:22:C8:16:5C:CF:68:66:11:4D:65:1C:90:DD:58:4A:24:FC:69:B8 Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 668E215BF914900532107443F9D0D945C7A48892 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: 012E Signing time: Tue 04 Nov 2025 06:01:04 +0000 Manifest this update: Tue 04 Nov 2025 05:56:04 +0000 Manifest next update: Sun 09 Nov 2025 09:40:04 +0000 Files and hashes: 1: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: oMAh7tdfzLgw6EMeTCR3VaTKFGfcyTVPf2VgaXD/vFc=) 2: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: Tpu5mtmY/E6RnTTm3zG1QJJywy3a24/BBCfGwU0oGCo=) 3: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: awSHfYu5olO3Sr1hdIR9ko/TcZ0IMSchh5DLzNlGd+k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8e:21:5b:f9:14:90:05:32:10:74:43:f9:d0:d9:45:c7:a4:88:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Nov 4 05:56:04 2025 GMT Not After : Nov 9 09:40:04 2025 GMT Subject: CN=6E22C8165CCF6866114D651C90DD584A24FC69B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:8b:15:3f:5a:fc:7f:75:50:6a:b8:cf:5a: 0f:91:97:4e:cc:23:57:28:40:36:f6:6a:61:d7:00: 6a:84:b6:f8:90:b6:7b:68:cc:cb:21:77:5e:a1:7a: 1b:f0:6f:67:14:04:3d:4d:d1:15:31:1d:9f:fe:86: 79:48:d9:1d:53:09:da:9e:7e:0a:ef:44:e3:74:33: ac:19:32:3f:24:db:bb:d3:6f:0c:5d:ce:90:6b:15: 30:99:41:1a:bd:56:f5:1f:d1:e1:d0:17:b2:b5:65: d6:fd:7b:a8:05:f9:3e:78:f9:87:4f:39:33:b9:fc: dd:e8:e7:e7:8e:9c:c0:53:4d:fa:2c:1f:65:f8:f8: e2:c1:47:5f:38:26:62:2d:5b:76:f5:b9:e3:dc:7a: 07:1f:4e:9f:f0:83:95:79:81:20:66:3b:19:b2:50: 40:eb:d3:b0:6c:b9:77:af:32:eb:de:fb:66:bf:00: ae:11:06:c8:ab:a6:95:e5:90:27:20:dd:5b:fe:76: 6a:21:01:ae:42:94:b4:af:c2:1f:76:c8:97:36:e6: 6f:81:c4:ac:ae:f4:f6:c3:a4:d6:20:65:31:62:a5: 6c:5b:b5:96:0e:6c:33:9f:f0:94:42:28:6f:71:d9: d9:6f:cc:8d:53:66:bd:4e:df:f5:7d:ce:e0:25:3f: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:C8:16:5C:CF:68:66:11:4D:65:1C:90:DD:58:4A:24:FC:69:B8 X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:4c:1b:f7:9f:a1:85:34:1a:b2:02:07:8e:be:23:33:07:c9: af:6a:81:da:99:f1:90:0c:b4:5f:97:4a:b8:5e:28:a7:e7:ea: 84:5b:41:42:ab:d6:e8:2a:e2:db:00:5f:1d:d9:c2:a9:ef:98: 79:03:9e:58:1f:85:f2:9b:88:4e:7b:b2:57:6a:79:4d:45:bf: fa:62:3a:51:3a:b6:1f:e4:62:d1:05:64:2a:21:0e:e9:85:cc: 9c:67:c4:9f:2d:a9:66:85:f3:94:65:d7:90:1c:23:da:da:d1: 08:18:b4:cf:7f:33:49:90:37:c9:0b:11:6d:4d:41:9a:27:83: 78:87:aa:42:9f:31:fb:25:0d:b3:03:69:5a:27:0b:60:75:9e: 69:3e:d6:46:cf:4a:4d:a1:4e:a8:b0:d7:08:89:66:89:e7:aa: cb:71:0f:d0:c5:ff:f3:d6:96:a2:b6:26:5a:09:fb:39:51:e1: e1:f9:78:99:6c:3b:1a:76:c6:8f:a9:63:da:95:7f:cb:6d:e9: 1e:62:67:64:1a:ce:43:b5:27:9a:aa:19:8b:87:52:61:30:2d: e5:bb:b5:fa:dc:2c:ee:e4:a0:8c:c2:d5:2c:24:56:83:ba:af: 49:41:df:2b:da:ed:61:0e:68:53:34:61:78:73:82:28:58:03: c7:b1:ea:13 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZo4hW/kUkAUyEHRD+dDZRcekiJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNTExMDQwNTU2MDRaFw0yNTExMDkwOTQwMDRaMDMxMTAvBgNV BAMTKDZFMjJDODE2NUNDRjY4NjYxMTRENjUxQzkwREQ1ODRBMjRGQzY5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByIsVP1r8f3VQarjPWg+Rl07M I1coQDb2amHXAGqEtviQtntozMshd16hehvwb2cUBD1N0RUxHZ/+hnlI2R1TCdqe fgrvRON0M6wZMj8k27vTbwxdzpBrFTCZQRq9VvUf0eHQF7K1Zdb9e6gF+T54+YdP OTO5/N3o5+eOnMBTTfosH2X4+OLBR184JmItW3b1uePcegcfTp/wg5V5gSBmOxmy UEDr07BsuXevMuve+2a/AK4RBsirppXlkCcg3Vv+dmohAa5ClLSvwh92yJc25m+B xKyu9PbDpNYgZTFipWxbtZYObDOf8JRCKG9x2dlvzI1TZr1O3/V9zuAlPzL/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbiLIFlzPaGYRTWUckN1YSiT8abgwHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5TBv3n6GFNBqyAgeOviMzB8mv aoHamfGQDLRfl0q4Xiin5+qEW0FCq9boKuLbAF8d2cKp75h5A55YH4Xym4hOe7JX anlNRb/6YjpROrYf5GLRBWQqIQ7phcycZ8SfLalmhfOUZdeQHCPa2tEIGLTPfzNJ kDfJCxFtTUGaJ4N4h6pCnzH7JQ2zA2laJwtgdZ5pPtZGz0pNoU6osNcIiWaJ56rL cQ/Qxf/z1paitiZaCfs5UeHh+XiZbDsadsaPqWPalX/LbekeYmdkGs5DtSeaqhmL h1JhMC3lu7X63Czu5KCMwtUsJFaDuq9JQd8r2u1hDmhTNGF4c4IoWAPHseoT -----END CERTIFICATE-----Generated at Wed Nov 5 15:50:48 2025 by rpki-client