$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.mft File: DDC74D2AC502784A739697FD18F617C20B9593D4.mft (raw, json) Hash identifier: AnvOvVthuY/L0quHm/qlWdqXuY+Z7mEFBAXEjTJ3EIU= Subject key identifier: 95:ED:DD:C5:4A:07:CA:85:21:96:60:4B:07:1E:CC:7C:30:A5:9D:25 Authority key identifier: DD:C7:4D:2A:C5:02:78:4A:73:96:97:FD:18:F6:17:C2:0B:95:93:D4 Certificate issuer: /CN=DDC74D2AC502784A739697FD18F617C20B9593D4 Certificate serial: 4CE7D745D41C2B09AAC25846B568F475E6271C95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDC74D2AC502784A739697FD18F617C20B9593D4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 12:24:37 +0000 Manifest this update: Tue 04 Nov 2025 12:19:37 +0000 Manifest next update: Sun 09 Nov 2025 21:32:37 +0000 Files and hashes: 1: 323830363a3331363a3a2f33322d3332203d3e20323635353636.roa (hash: zjBpdxMKgSsmOp8BYmlkiXXYI7QHlQkvZJmCAJTYm38=) 2: DDC74D2AC502784A739697FD18F617C20B9593D4.crl (hash: oue0MGc/2rP7TRfeq6bG5lPUaO8dn4rZAMJ3ibzwTUY=) 3: 34352e3137322e39322e302f32322d3234203d3e20323635353636.roa (hash: ovD/bDRUIDvKiK1AeVUbYQZVRyF48JTjWOgNfmUKUdQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.crl rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDC74D2AC502784A739697FD18F617C20B9593D4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e7:d7:45:d4:1c:2b:09:aa:c2:58:46:b5:68:f4:75:e6:27:1c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC74D2AC502784A739697FD18F617C20B9593D4 Validity Not Before: Nov 4 12:19:37 2025 GMT Not After : Nov 9 21:32:37 2025 GMT Subject: CN=95EDDDC54A07CA852196604B071ECC7C30A59D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:c4:10:c3:8c:2b:44:81:ad:cc:06:53:39: 44:61:df:62:8d:fb:cd:36:d2:83:b0:3b:e4:bf:b4: 2e:f3:c0:08:70:84:70:ed:b1:2a:dc:ee:f5:f7:6e: cd:b5:87:de:4d:06:09:ff:88:7e:be:22:32:d5:9b: 78:4d:c0:e1:72:57:2f:ed:8a:3d:ab:21:50:57:de: 67:3c:f1:3c:03:44:e1:bb:98:de:bb:bd:cd:e4:bd: f2:ea:d6:30:04:d0:94:4d:01:15:7e:d1:b8:3d:f6: 61:a9:b5:4a:f0:80:2c:94:d5:79:8a:90:8a:6e:61: 22:dd:38:60:80:ab:63:e6:6a:4d:9b:d7:e9:d8:d7: 8d:94:c2:f9:0d:80:19:77:3b:af:da:96:49:04:16: 87:80:d8:08:e3:90:5f:c9:8f:d0:f9:44:cd:df:8d: 6f:50:42:d5:a3:7a:29:9a:f5:67:ac:a2:4c:f9:3d: c8:71:88:ac:16:87:47:9e:39:4e:1a:af:e1:1d:09: 31:d5:8c:d6:58:77:e2:35:05:8c:64:96:d9:f4:c9: f5:22:2c:22:e0:b9:af:52:18:90:1e:90:ba:fd:89: 67:8c:05:f5:fe:2c:dc:c8:6d:3a:3f:05:5f:40:78: 1c:4c:82:a8:d4:7f:da:56:e8:16:26:31:19:db:dc: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:ED:DD:C5:4A:07:CA:85:21:96:60:4B:07:1E:CC:7C:30:A5:9D:25 X509v3 Authority Key Identifier: keyid:DD:C7:4D:2A:C5:02:78:4A:73:96:97:FD:18:F6:17:C2:0B:95:93:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDC74D2AC502784A739697FD18F617C20B9593D4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8B5643768AD56C29B134CFAB4C087C448FF6BAEB3758E03F6D864FEA510E9CF/0/DDC74D2AC502784A739697FD18F617C20B9593D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:4a:ef:5c:b1:5b:1c:2e:83:08:cf:9a:51:75:51:27:20:ef: c5:23:27:e0:58:dd:94:b4:4b:82:bd:0d:33:cc:3f:dd:d2:74: 15:dc:3e:63:b5:6d:3d:15:02:70:5a:01:76:07:bb:3a:11:e9: a9:4b:53:44:8b:84:f4:9c:9b:d3:6f:c8:42:fa:da:13:69:13: 6c:13:b5:4a:29:28:26:4e:33:06:49:10:38:5c:3c:78:4a:48: 77:e4:07:80:7f:15:7a:e3:36:fc:ca:1a:da:b0:b2:9b:76:a4: ac:bc:62:fc:63:ed:5d:58:c6:b6:f2:aa:67:96:5e:4a:05:80: 40:03:27:32:7e:72:37:8f:eb:be:88:99:40:2e:36:55:6f:98: 9f:e2:c7:3c:04:86:2f:60:4f:91:44:c2:49:5f:dc:84:00:a0: 4b:69:76:15:b8:4e:a7:b7:a0:83:e9:1e:71:2e:0f:40:91:31: 3d:d9:36:2c:9a:2a:d3:9c:1c:f1:bb:51:ae:0d:c0:a5:b2:09: bd:7f:92:95:1c:f1:58:96:6a:81:d1:52:08:c6:b4:a4:13:2b: 46:bf:e7:76:46:ea:76:b0:e6:cd:60:82:19:d8:ad:dc:3c:f5: 2c:e9:50:66:2e:60:69:bd:cd:ea:64:e1:15:4b:dc:6f:4d:ad: f5:08:ce:50 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTOfXRdQcKwmqwlhGtWj0deYnHJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDNzREMkFDNTAyNzg0QTczOTY5N0ZEMThGNjE3QzIw Qjk1OTNENDAeFw0yNTExMDQxMjE5MzdaFw0yNTExMDkyMTMyMzdaMDMxMTAvBgNV BAMTKDk1RUREREM1NEEwN0NBODUyMTk2NjA0QjA3MUVDQzdDMzBBNTlEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kcQQw4wrRIGtzAZTOURh32KN +8020oOwO+S/tC7zwAhwhHDtsSrc7vX3bs21h95NBgn/iH6+IjLVm3hNwOFyVy/t ij2rIVBX3mc88TwDROG7mN67vc3kvfLq1jAE0JRNARV+0bg99mGptUrwgCyU1XmK kIpuYSLdOGCAq2Pmak2b1+nY142UwvkNgBl3O6/alkkEFoeA2AjjkF/Jj9D5RM3f jW9QQtWjeima9Wesokz5PchxiKwWh0eeOU4ar+EdCTHVjNZYd+I1BYxkltn0yfUi LCLgua9SGJAekLr9iWeMBfX+LNzIbTo/BV9AeBxMgqjUf9pW6BYmMRnb3B9bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUle3dxUoHyoUhlmBLBx7MfDClnSUwHwYDVR0j BBgwFoAU3cdNKsUCeEpzlpf9GPYXwguVk9QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GOEI1NjQzNzY4QUQ1NkMyOUIxMzRDRkFCNEMwODdDNDQ4 RkY2QkFFQjM3NThFMDNGNkQ4NjRGRUE1MTBFOUNGLzAvRERDNzREMkFDNTAyNzg0 QTczOTY5N0ZEMThGNjE3QzIwQjk1OTNENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREM3NEQyQUM1MDI3ODRBNzM5 Njk3RkQxOEY2MTdDMjBCOTU5M0Q0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjhCNTY0Mzc2OEFENTZDMjlCMTM0Q0ZBQjRDMDg3QzQ0OEZGNkJBRUIz NzU4RTAzRjZEODY0RkVBNTEwRTlDRi8wL0REQzc0RDJBQzUwMjc4NEE3Mzk2OTdG RDE4RjYxN0MyMEI5NTkzRDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/Su9csVscLoMIz5pRdVEnIO/F IyfgWN2UtEuCvQ0zzD/d0nQV3D5jtW09FQJwWgF2B7s6EempS1NEi4T0nJvTb8hC +toTaRNsE7VKKSgmTjMGSRA4XDx4Skh35AeAfxV64zb8yhrasLKbdqSsvGL8Y+1d WMa28qpnll5KBYBAAycyfnI3j+u+iJlALjZVb5if4sc8BIYvYE+RRMJJX9yEAKBL aXYVuE6nt6CD6R5xLg9AkTE92TYsmirTnBzxu1GuDcClsgm9f5KVHPFYlmqB0VII xrSkEytGv+d2Rup2sObNYIIZ2K3cPPUs6VBmLmBpvc3qZOEVS9xvTa31CM5Q -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:44 2025 by rpki-client