$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft File: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft (raw, json) Hash identifier: s6VlwlLhpgpvfxhoixUi7odKXSHs9TO7EBonE3Wv8oc= Subject key identifier: E9:29:29:F5:FF:5D:53:39:CA:2D:FC:95:AF:4D:4A:8B:3B:19:31:2A Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA Certificate issuer: /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA Certificate serial: 6199CF74EB899BCD8F895859EBBBE9F7D8370D5B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft Manifest number: BC Signing time: Sun 19 Oct 2025 14:10:19 +0000 Manifest this update: Sun 19 Oct 2025 14:05:19 +0000 Manifest next update: Thu 23 Oct 2025 23:20:19 +0000 Files and hashes: 1: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl (hash: +P+7hKdyPL7ap5B9pgERUyPtOJelA3CWS+bRznoa4qU=) 2: 323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (hash: Z9kwP0FwpAseO/dcyQPuo+zaM5tKIh6jbqLWg2y6Gmo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 23:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:99:cf:74:eb:89:9b:cd:8f:89:58:59:eb:bb:e9:f7:d8:37:0d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA Validity Not Before: Oct 19 14:05:19 2025 GMT Not After : Oct 23 23:20:19 2025 GMT Subject: CN=E92929F5FF5D5339CA2DFC95AF4D4A8B3B19312A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e6:ce:5a:01:77:76:a3:68:2a:36:1b:e5:b4: b9:a0:a0:5f:46:00:a8:e8:75:9e:74:81:d1:a8:b5: 03:b6:c2:cb:13:6a:fe:2d:8f:cf:9c:78:72:ab:b7: 37:80:03:c6:bd:01:b7:23:d4:76:52:83:4f:fd:16: d1:9b:25:b2:85:0e:c8:ea:bc:bb:17:76:1a:ca:ad: 95:a1:f9:fb:b7:6f:2b:36:3f:b2:a4:e3:7e:aa:ce: a6:54:80:9a:1b:bb:ff:ac:6b:36:78:88:94:ea:59: f0:ef:47:a2:13:cb:76:1c:6b:4d:74:31:9f:cb:5a: 1a:d8:d4:1f:61:63:db:e0:97:2b:e1:85:9a:56:3d: 5f:39:98:4e:09:41:6a:8f:f3:73:c1:b5:f2:cf:0e: 94:a4:6e:7a:27:c3:be:c6:ef:05:13:42:8a:64:e4: e6:a4:32:5b:d9:73:9e:c1:25:a3:20:fe:d7:5f:f1: e9:81:ca:93:76:2d:f3:58:81:df:77:56:5e:31:25: 7b:17:07:8c:18:25:db:f2:ad:b5:1e:25:be:e8:72: d8:8e:a0:a0:bb:81:93:c5:05:18:1d:7d:9c:d6:1c: 9c:c4:4d:2a:ff:80:db:3d:22:f4:1d:f3:58:13:86: 88:86:63:54:28:5b:03:2b:9c:aa:f7:66:63:e9:86: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:29:29:F5:FF:5D:53:39:CA:2D:FC:95:AF:4D:4A:8B:3B:19:31:2A X509v3 Authority Key Identifier: keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6d:2a:36:5f:29:75:5d:aa:8c:69:a8:15:12:7a:6a:e0:16: cb:03:69:bc:de:dd:c2:c7:3b:9d:b1:1b:28:b1:cc:2a:09:c6: 4c:f0:10:09:83:e8:5a:8c:bf:0b:8a:86:48:ac:3e:f2:37:34: 05:c0:36:3a:73:b6:21:42:05:00:38:d3:cf:d4:62:09:08:e2: e3:cf:02:34:a0:45:e6:ae:65:34:a3:af:44:b6:5b:66:26:a6: 90:d2:09:b7:30:26:dd:04:88:9e:9d:18:6d:97:7f:14:a6:78: 1a:36:2e:2d:78:04:5f:80:f2:14:34:3b:31:eb:fc:73:2a:e7: f4:da:57:e4:fa:3c:1d:e7:7d:29:ef:8c:3a:2c:73:2b:16:f0: 2f:ff:d3:ba:b7:67:5f:c9:70:58:e9:4d:6f:c5:68:bb:7f:8d: 3f:b0:d5:54:58:35:07:0f:60:b3:5c:65:10:0f:45:88:2a:8e: df:75:49:61:58:a5:c5:c0:40:58:f0:9a:bf:d0:ae:66:1d:22: 86:99:89:a1:c8:7a:2a:40:f7:0c:41:fd:5d:96:47:1d:3f:ca: 0a:df:aa:49:a0:5e:9d:8f:f1:d1:b4:6a:4f:9f:0a:72:e8:27: 17:43:9c:77:99:65:58:a0:8c:f1:f0:3b:73:8c:19:4d:40:4a: 41:6d:d1:86 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYZnPdOuJm82PiVhZ67vp99g3DVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEwODlGQTI0MkRGRjVBNUQ5MTJEOEU1QTE4MkZEQzMy MkJCQjVGQTAeFw0yNTEwMTkxNDA1MTlaFw0yNTEwMjMyMzIwMTlaMDMxMTAvBgNV BAMTKEU5MjkyOUY1RkY1RDUzMzlDQTJERkM5NUFGNEQ0QThCM0IxOTMxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP5s5aAXd2o2gqNhvltLmgoF9G AKjodZ50gdGotQO2wssTav4tj8+ceHKrtzeAA8a9Abcj1HZSg0/9FtGbJbKFDsjq vLsXdhrKrZWh+fu3bys2P7Kk436qzqZUgJobu/+sazZ4iJTqWfDvR6ITy3Yca010 MZ/LWhrY1B9hY9vglyvhhZpWPV85mE4JQWqP83PBtfLPDpSkbnonw77G7wUTQopk 5OakMlvZc57BJaMg/tdf8emBypN2LfNYgd93Vl4xJXsXB4wYJdvyrbUeJb7octiO oKC7gZPFBRgdfZzWHJzETSr/gNs9IvQd81gThoiGY1QoWwMrnKr3ZmPphul5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6Skp9f9dUznKLfyVr01KizsZMSowHwYDVR0j BBgwFoAU2gifokLf9aXZEtjloYL9wyK7tfowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOUY1MjdERTRCQ0U5ODAyNzgwQUFGNDBFNUVBODUyQjlG MUI5NDIxODFGNzA4QjUxMENBOTIxM0FBMDhEMjQwLzAvREEwODlGQTI0MkRGRjVB NUQ5MTJEOEU1QTE4MkZEQzMyMkJCQjVGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTA4OUZBMjQyREZGNUE1RDkx MkQ4RTVBMTgyRkRDMzIyQkJCNUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjlGNTI3REU0QkNFOTgwMjc4MEFBRjQwRTVFQTg1MkI5RjFCOTQyMTgx RjcwOEI1MTBDQTkyMTNBQTA4RDI0MC8wL0RBMDg5RkEyNDJERkY1QTVEOTEyRDhF NUExODJGREMzMjJCQkI1RkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSbSo2Xyl1XaqMaagVEnpq4BbL A2m83t3CxzudsRsoscwqCcZM8BAJg+hajL8LioZIrD7yNzQFwDY6c7YhQgUAONPP 1GIJCOLjzwI0oEXmrmU0o69EtltmJqaQ0gm3MCbdBIienRhtl38UpngaNi4teARf gPIUNDsx6/xzKuf02lfk+jwd530p74w6LHMrFvAv/9O6t2dfyXBY6U1vxWi7f40/ sNVUWDUHD2CzXGUQD0WIKo7fdUlhWKXFwEBY8Jq/0K5mHSKGmYmhyHoqQPcMQf1d lkcdP8oK36pJoF6dj/HRtGpPnwpy6CcXQ5x3mWVYoIzx8DtzjBlNQEpBbdGG -----END CERTIFICATE-----Generated at Mon Oct 20 00:36:08 2025 by rpki-client