$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft File: 2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft (raw, json) Hash identifier: cBqqgJzQwp9wHFBTSJoWePoh+FjA1N0Cwlu2M/dUZ9o= Subject key identifier: 40:85:4C:D4:9C:58:F2:D8:7E:3F:3E:A2:BA:E0:93:84:9C:07:F3:63 Authority key identifier: 2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85 Certificate issuer: /CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85 Certificate serial: 1FB820AC34E4F5B0374C79954327DE7DCC2AAABF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft Manifest number: 0131 Signing time: Mon 20 Oct 2025 03:38:40 +0000 Manifest this update: Mon 20 Oct 2025 03:33:40 +0000 Manifest next update: Sun 26 Oct 2025 02:23:40 +0000 Files and hashes: 1: 34352e3138372e34382e302f32322d3234203d3e20323639383535.roa (hash: GFkeIZvOBfE0613STIqrCMRTvuuA/NMRb4mLnONtqL4=) 2: 2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl (hash: /O8Tc27+1fkpNDDCrXlgwgQE4VIbuy/loHwiQt9/UDk=) 3: 323830333a613736303a3a2f33322d3332203d3e20323639383535.roa (hash: sSPEca3bFCIuP5DnsSKFBhKEPKMPxEkwfes4I0faeLU=) 4: 323830333a613736303a3a2f33322d3438203d3e20323639383535.roa (hash: 25QobNTjf5OSL8FxaDrPnzp81PkqtLU6RM4hQ1HTLP4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b8:20:ac:34:e4:f5:b0:37:4c:79:95:43:27:de:7d:cc:2a:aa:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85 Validity Not Before: Oct 20 03:33:40 2025 GMT Not After : Oct 26 02:23:40 2025 GMT Subject: CN=40854CD49C58F2D87E3F3EA2BAE093849C07F363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:91:97:ad:79:c0:9d:ea:56:1a:5b:6b:bf: fd:af:ea:3e:71:cf:70:4a:43:b1:2a:36:2d:25:84: 94:5c:96:f8:13:8f:2d:ac:d1:47:81:d6:58:75:c8: ad:e8:13:d6:dd:bf:62:9f:7f:90:ba:46:8b:5d:c9: cd:a3:41:70:2d:fa:26:5f:72:9e:64:5a:aa:03:39: ac:cf:3a:6d:54:50:09:d7:b3:c0:9e:09:1f:06:c4: ff:4b:20:0d:58:22:4b:5c:8f:b4:57:51:a2:58:a8: 8b:cb:f2:e5:3c:6e:d0:76:28:61:b7:97:a4:23:88: 72:a9:47:34:55:a6:6f:5c:29:4c:c7:1f:ce:c4:8f: 20:01:16:c9:e5:cf:39:11:9a:6a:10:60:ce:b8:1c: 6f:61:32:67:71:2f:e5:1d:d1:eb:ca:c8:f6:08:68: af:03:b9:d6:10:63:cc:a5:d4:82:1a:f8:12:75:f0: 2c:a6:c5:ca:41:60:a1:12:a5:27:ac:73:d1:ad:55: 85:9b:9b:9c:09:5d:90:01:e3:69:d9:4b:4a:40:81: 9c:41:13:f1:c6:0d:9b:52:65:d1:0e:27:d6:4b:45: e5:62:7d:71:9f:19:78:ee:ac:8d:b0:1a:da:33:77: 69:f4:d6:c3:fa:2a:8b:26:fc:f8:bc:4d:ca:63:03: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:4C:D4:9C:58:F2:D8:7E:3F:3E:A2:BA:E0:93:84:9C:07:F3:63 X509v3 Authority Key Identifier: keyid:2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:30:03:2e:b4:d1:63:3a:84:45:d5:e6:ae:0d:b8:f1:c1:97: c2:f4:e1:55:df:5b:98:37:8f:c1:e3:cf:e1:d7:af:a2:f7:c1: 17:67:67:02:70:6a:2f:56:3e:6a:0c:d8:c9:e2:91:6f:e8:fe: f8:e4:cc:93:fb:f0:d4:f2:c3:38:22:d8:b8:1f:2c:18:a1:ca: b9:4d:33:9f:8e:a0:58:75:d5:bc:2c:21:15:04:52:d5:07:75: 6c:f7:a7:67:e1:5a:62:c1:a0:d1:78:87:a3:c0:be:46:00:b1: 52:4e:75:58:d6:3b:f3:96:a5:7b:87:89:c1:de:f4:62:ed:36: 81:94:82:6a:d0:fc:22:fc:54:c3:1a:23:dc:a5:1b:65:a1:99: 15:f2:4a:d8:6e:d8:29:cd:d7:19:9b:18:a5:88:b2:a6:c8:83: 9b:ff:fd:79:1c:e4:cb:99:d3:47:6f:f6:57:da:a8:ae:c5:23: f8:fd:60:6c:43:a3:70:9c:1b:d9:50:65:fc:b6:38:43:e3:15: f9:4d:94:aa:03:97:0a:80:96:b1:d0:fb:5b:ac:55:34:01:79: d7:5e:5b:8c:71:7d:dd:80:78:08:24:35:61:d4:e4:3c:32:34: 94:36:79:b6:40:eb:21:5c:fe:ee:e7:b8:f3:4e:58:a1:40:c7: 7a:a1:89:22 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUH7ggrDTk9bA3THmVQyfefcwqqr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRCRDVFNjQ0NUIxOEE0OUMwNzAzNzM3NjRFMjIxRkUy RkYwQkU4NTAeFw0yNTEwMjAwMzMzNDBaFw0yNTEwMjYwMjIzNDBaMDMxMTAvBgNV BAMTKDQwODU0Q0Q0OUM1OEYyRDg3RTNGM0VBMkJBRTA5Mzg0OUMwN0YzNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmpGXrXnAnepWGltrv/2v6j5x z3BKQ7EqNi0lhJRclvgTjy2s0UeB1lh1yK3oE9bdv2Kff5C6Rotdyc2jQXAt+iZf cp5kWqoDOazPOm1UUAnXs8CeCR8GxP9LIA1YIktcj7RXUaJYqIvL8uU8btB2KGG3 l6QjiHKpRzRVpm9cKUzHH87EjyABFsnlzzkRmmoQYM64HG9hMmdxL+Ud0evKyPYI aK8DudYQY8yl1IIa+BJ18CymxcpBYKESpSesc9GtVYWbm5wJXZAB42nZS0pAgZxB E/HGDZtSZdEOJ9ZLReVifXGfGXjurI2wGtozd2n01sP6Kosm/Pi8TcpjA1NfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQIVM1JxY8th+Pz6iuuCThJwH82MwHwYDVR0j BBgwFoAULb1eZEWxiknAcDc3ZOIh/i/wvoUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMTEyRjM0M0YxNDUyRTM2QThBMTU2MzczQTZERjRBMUYw ODg1M0M2Mjk3NkRGQUI3NEMwMjA2ODE2MUU4RUE5LzAvMkRCRDVFNjQ0NUIxOEE0 OUMwNzAzNzM3NjRFMjIxRkUyRkYwQkU4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREJENUU2NDQ1QjE4QTQ5QzA3 MDM3Mzc2NEUyMjFGRTJGRjBCRTg1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDExMkYzNDNGMTQ1MkUzNkE4QTE1NjM3M0E2REY0QTFGMDg4NTNDNjI5 NzZERkFCNzRDMDIwNjgxNjFFOEVBOS8wLzJEQkQ1RTY0NDVCMThBNDlDMDcwMzcz NzY0RTIyMUZFMkZGMEJFODUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyMAMutNFjOoRF1eauDbjxwZfC 9OFV31uYN4/B48/h16+i98EXZ2cCcGovVj5qDNjJ4pFv6P745MyT+/DU8sM4Iti4 HywYocq5TTOfjqBYddW8LCEVBFLVB3Vs96dn4VpiwaDReIejwL5GALFSTnVY1jvz lqV7h4nB3vRi7TaBlIJq0Pwi/FTDGiPcpRtloZkV8krYbtgpzdcZmxiliLKmyIOb //15HOTLmdNHb/ZX2qiuxSP4/WBsQ6NwnBvZUGX8tjhD4xX5TZSqA5cKgJax0Ptb rFU0AXnXXluMcX3dgHgIJDVh1OQ8MjSUNnm2QOshXP7u57jzTlihQMd6oYki -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:08 2025 by rpki-client