$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1561E8A9CEEB0C2586DAC6630316C304B0342CF9214B94161E226CD4EB3A1A0A/0/159DD1092A93801F88E8771F8887B0137D14F96A.mft File: 159DD1092A93801F88E8771F8887B0137D14F96A.mft (raw, json) Hash identifier: 03G1LjgU7D0E7IRVB0yZbrbH24hRqrXg6FH0hX3Rjrw= Subject key identifier: 87:E3:28:24:2A:F4:2E:21:F9:D3:94:17:B6:BF:FC:4A:D7:4B:EE:9F Authority key identifier: 15:9D:D1:09:2A:93:80:1F:88:E8:77:1F:88:87:B0:13:7D:14:F9:6A Certificate issuer: /CN=159DD1092A93801F88E8771F8887B0137D14F96A Certificate serial: 04A8C069DA7201954FF74D7AD3E7D18D90B6052E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159DD1092A93801F88E8771F8887B0137D14F96A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1561E8A9CEEB0C2586DAC6630316C304B0342CF9214B94161E226CD4EB3A1A0A/0/159DD1092A93801F88E8771F8887B0137D14F96A.mft Manifest number: 0129 Signing time: Sat 18 Oct 2025 16:15:27 +0000 Manifest this update: Sat 18 Oct 2025 16:10:27 +0000 Manifest next update: Fri 24 Oct 2025 11:13:27 +0000 Files and hashes: 1: 159DD1092A93801F88E8771F8887B0137D14F96A.crl (hash: 7mzjY+jg37ftvcg452HZPzjHzVUJR37pTg7s2tcFJ5s=) 2: 323830333a636335303a3a2f33322d3438203d3e20323732393330.roa (hash: qOx7r8mdwLtLchld1WU14S32jLEN/HEkEEJeqmoHqFQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1561E8A9CEEB0C2586DAC6630316C304B0342CF9214B94161E226CD4EB3A1A0A/0/159DD1092A93801F88E8771F8887B0137D14F96A.crl rsync://repository.lacnic.net/rpki/lacnic/1561E8A9CEEB0C2586DAC6630316C304B0342CF9214B94161E226CD4EB3A1A0A/0/159DD1092A93801F88E8771F8887B0137D14F96A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159DD1092A93801F88E8771F8887B0137D14F96A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a8:c0:69:da:72:01:95:4f:f7:4d:7a:d3:e7:d1:8d:90:b6:05:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159DD1092A93801F88E8771F8887B0137D14F96A Validity Not Before: Oct 18 16:10:27 2025 GMT Not After : Oct 24 11:13:27 2025 GMT Subject: CN=87E328242AF42E21F9D39417B6BFFC4AD74BEE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9d:45:6a:7a:9b:cc:a6:05:c3:3c:3d:52:e7: 18:4f:25:b0:c1:08:45:c0:98:d4:b9:87:57:d0:2a: 4d:23:b1:83:00:ff:2c:c7:85:fb:3e:be:b6:e0:05: 8f:be:91:39:c4:1f:e7:31:da:59:26:52:46:64:4b: df:7a:7b:40:9a:c3:e6:ff:09:cb:7e:38:44:3a:5c: e5:df:b7:9e:a9:e1:cd:38:cf:bf:3c:8a:c9:92:a9: 4e:64:38:18:e6:3c:f1:d7:22:24:82:3d:ed:1f:8c: 1b:0d:cb:61:56:0f:9f:b5:eb:72:f2:70:a4:db:1e: 73:a4:8d:e6:58:c0:c3:c7:ac:4e:c9:73:1f:df:d5: b6:67:48:de:94:b5:51:8c:bb:b2:6f:39:4c:22:05: 19:e3:7e:6e:a7:9e:9d:d7:a9:a5:68:d9:21:1d:c0: 58:7c:69:72:4c:ce:d9:4a:51:d7:50:6f:01:7a:6f: 79:0b:a3:c9:3e:be:3e:0a:cb:55:6d:b0:e1:91:2f: 82:9f:3a:63:47:95:33:ae:70:cf:5a:71:2b:2c:0a: b3:c8:cb:aa:3e:a8:66:ca:d6:32:a3:b8:b7:6c:3b: 18:ac:ec:6f:ef:12:de:0d:34:82:04:cd:14:d3:3c: da:93:7d:ae:ba:aa:46:37:02:45:1e:e2:f8:f3:a4: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E3:28:24:2A:F4:2E:21:F9:D3:94:17:B6:BF:FC:4A:D7:4B:EE:9F X509v3 Authority Key Identifier: keyid:15:9D:D1:09:2A:93:80:1F:88:E8:77:1F:88:87:B0:13:7D:14:F9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1561E8A9CEEB0C2586DAC6630316C304B0342CF9214B94161E226CD4EB3A1A0A/0/159DD1092A93801F88E8771F8887B0137D14F96A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159DD1092A93801F88E8771F8887B0137D14F96A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1561E8A9CEEB0C2586DAC6630316C304B0342CF9214B94161E226CD4EB3A1A0A/0/159DD1092A93801F88E8771F8887B0137D14F96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fa:67:51:75:1f:cd:65:90:32:d3:3b:29:00:a8:ac:b1:b0: f5:34:a2:5f:1d:04:39:86:f0:4c:06:30:2f:c4:e0:77:99:9f: 2f:3b:82:4f:ea:62:93:a5:27:78:93:4a:b9:cb:28:de:79:64: bc:bc:20:18:df:9c:ac:34:d8:da:ef:38:fd:3e:fa:f2:72:73: 6c:63:9b:e1:93:1b:2d:d6:7f:a3:f5:fd:8b:e1:d3:5a:cc:b2: a4:32:08:92:b3:a6:0a:56:ee:45:ff:d8:15:7e:67:56:a3:fa: 34:a9:a2:31:5c:75:b0:24:5c:aa:6d:c7:ab:c6:7f:72:c5:ed: c4:42:1b:61:6c:db:3e:fe:74:6e:03:67:8e:6b:a0:4f:ce:94: 09:6d:c6:50:9f:ec:3d:eb:fb:45:4d:24:11:02:c3:21:09:cf: ef:26:8d:c6:86:d5:7c:98:4d:78:ec:ee:ea:87:15:b0:9f:dc: b7:fb:a0:07:ce:fe:d9:45:76:34:14:a2:05:36:2e:b0:af:17: 6e:1f:62:00:a3:e9:dd:8a:17:0a:18:cb:e0:bd:62:12:b0:3e: 1f:a4:ba:54:f9:04:25:ec:01:e8:19:e1:4f:2c:52:e7:e3:58: fc:0d:4a:6f:d3:28:a4:41:9c:5d:59:7e:a3:9c:6d:39:c1:06: d9:a0:e9:d5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBKjAadpyAZVP90160+fRjZC2BS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU5REQxMDkyQTkzODAxRjg4RTg3NzFGODg4N0IwMTM3 RDE0Rjk2QTAeFw0yNTEwMTgxNjEwMjdaFw0yNTEwMjQxMTEzMjdaMDMxMTAvBgNV BAMTKDg3RTMyODI0MkFGNDJFMjFGOUQzOTQxN0I2QkZGQzRBRDc0QkVFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrnUVqepvMpgXDPD1S5xhPJbDB CEXAmNS5h1fQKk0jsYMA/yzHhfs+vrbgBY++kTnEH+cx2lkmUkZkS996e0Caw+b/ Cct+OEQ6XOXft56p4c04z788ismSqU5kOBjmPPHXIiSCPe0fjBsNy2FWD5+163Ly cKTbHnOkjeZYwMPHrE7Jcx/f1bZnSN6UtVGMu7JvOUwiBRnjfm6nnp3XqaVo2SEd wFh8aXJMztlKUddQbwF6b3kLo8k+vj4Ky1VtsOGRL4KfOmNHlTOucM9acSssCrPI y6o+qGbK1jKjuLdsOxis7G/vEt4NNIIEzRTTPNqTfa66qkY3AkUe4vjzpMALAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUh+MoJCr0LiH505QXtr/8StdL7p8wHwYDVR0j BBgwFoAUFZ3RCSqTgB+I6HcfiIewE30U+WowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNTYxRThBOUNFRUIwQzI1ODZEQUM2NjMwMzE2QzMwNEIw MzQyQ0Y5MjE0Qjk0MTYxRTIyNkNENEVCM0ExQTBBLzAvMTU5REQxMDkyQTkzODAx Rjg4RTg3NzFGODg4N0IwMTM3RDE0Rjk2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNTlERDEwOTJBOTM4MDFGODhF ODc3MUY4ODg3QjAxMzdEMTRGOTZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTU2MUU4QTlDRUVCMEMyNTg2REFDNjYzMDMxNkMzMDRCMDM0MkNGOTIx NEI5NDE2MUUyMjZDRDRFQjNBMUEwQS8wLzE1OUREMTA5MkE5MzgwMUY4OEU4Nzcx Rjg4ODdCMDEzN0QxNEY5NkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCC+mdRdR/NZZAy0zspAKissbD1 NKJfHQQ5hvBMBjAvxOB3mZ8vO4JP6mKTpSd4k0q5yyjeeWS8vCAY35ysNNja7zj9 PvrycnNsY5vhkxst1n+j9f2L4dNazLKkMgiSs6YKVu5F/9gVfmdWo/o0qaIxXHWw JFyqbcerxn9yxe3EQhthbNs+/nRuA2eOa6BPzpQJbcZQn+w96/tFTSQRAsMhCc/v Jo3GhtV8mE147O7qhxWwn9y3+6AHzv7ZRXY0FKIFNi6wrxduH2IAo+ndihcKGMvg vWISsD4fpLpU+QQl7AHoGeFPLFLn41j8DUpv0yikQZxdWX6jnG05wQbZoOnV -----END CERTIFICATE-----Generated at Mon Oct 20 17:40:06 2025 by rpki-client