$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: +zkFZJOoqIxctWnaPbuovypiEQLwTBR3mH7mn4lT2i8= Subject key identifier: E6:72:2D:DA:E8:10:6E:F0:50:C7:EF:64:62:F7:CB:39:99:75:D1:21 Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 3D423B032A64722DB5D4988868EE595F68A4EEDB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 06:04:33 +0000 Manifest this update: Sun 19 Oct 2025 05:59:33 +0000 Manifest next update: Sat 25 Oct 2025 03:13:33 +0000 Files and hashes: 1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=) 2: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: OHa1ZiruxZEd/sNKkPWnVGjSExD16Ebctkcg9kyqBVk=) 3: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:42:3b:03:2a:64:72:2d:b5:d4:98:88:68:ee:59:5f:68:a4:ee:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Oct 19 05:59:33 2025 GMT Not After : Oct 25 03:13:33 2025 GMT Subject: CN=E6722DDAE8106EF050C7EF6462F7CB399975D121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:74:b9:f5:ac:c8:6c:94:41:ea:29:ae:92: f8:66:52:37:f1:ce:8d:5d:86:2f:a4:e4:c5:5f:8a: 0b:ec:d6:73:22:ae:1d:6f:32:11:c8:22:0b:6d:ab: 0a:38:36:ed:31:cb:4f:7c:54:5e:b3:79:31:79:6f: 67:90:4e:53:10:87:cc:12:83:9a:10:b2:8f:3b:af: 6e:1c:87:1f:9f:94:20:e4:15:0e:11:52:ee:6c:a3: 85:00:f6:c7:82:54:c1:83:f8:5a:cc:fb:05:28:56: b7:19:a1:b5:94:41:6d:e7:2e:55:0d:77:05:98:88: 2c:1b:25:33:f7:3c:78:20:e8:73:65:69:88:2b:b9: 46:02:fe:69:1a:1f:a8:b6:87:0e:df:49:d3:b2:39: 04:e3:2c:65:7e:a5:68:88:f9:f5:a1:7c:e1:f1:7b: 7c:5e:dd:25:ba:17:a2:23:a7:75:86:1c:f2:ec:7f: 28:90:c0:69:42:52:00:c1:de:bd:a3:42:84:25:af: 18:30:ae:77:7e:18:e9:9c:de:ea:89:db:c2:a4:de: 16:44:95:48:ab:de:56:d3:53:a0:c5:33:59:4d:2a: 3c:45:e4:b0:53:a4:57:3a:cd:f3:8b:79:0e:01:d8: 28:e8:a2:13:7f:80:74:72:cb:b4:20:fd:76:5c:7c: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:72:2D:DA:E8:10:6E:F0:50:C7:EF:64:62:F7:CB:39:99:75:D1:21 X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2a:15:c7:df:df:cf:20:14:5e:b8:0a:93:8a:e4:a1:b4:71: d1:83:57:90:c0:90:bc:bc:60:d9:cb:58:0b:6f:98:8a:eb:db: 6e:2b:14:b5:cb:9e:c9:07:61:b4:cf:d4:f4:92:01:7f:ae:f8: c9:6e:2c:40:ea:96:7c:7d:2b:10:c7:9c:c2:af:ef:01:29:ac: bd:e9:80:2a:bc:b9:e5:74:52:3e:ce:bb:5a:67:14:d9:aa:ab: 09:b8:3e:18:d8:25:63:cc:f8:d3:5a:34:d6:8e:de:9a:a7:f6: fe:1e:7c:19:0b:cf:3f:59:dd:23:e4:05:22:c6:74:08:62:80: c1:64:a7:eb:7c:d9:d3:e7:5b:46:60:77:e8:b6:70:4c:fb:27: e5:e6:e2:c7:29:18:ce:d0:c9:1d:33:a3:8e:58:e2:d4:be:2b: d0:49:6d:64:97:a7:4d:28:80:fc:01:8b:9d:db:89:e7:7c:ff: 0d:9c:59:b6:3a:a3:0c:34:87:4c:05:55:f4:b2:4b:48:07:68: 46:04:5e:dd:cb:be:3b:8b:fd:10:02:e6:a6:90:89:69:34:c3: ce:99:3b:f0:ba:7b:f1:0e:03:3f:61:c3:2b:bc:e0:84:85:cc: 54:58:77:c6:3b:4e:6f:a5:97:54:87:ec:16:3a:cc:df:d9:50: 46:c2:da:46 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPUI7Aypkci211JiIaO5ZX2ik7tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNTEwMTkwNTU5MzNaFw0yNTEwMjUwMzEzMzNaMDMxMTAvBgNV BAMTKEU2NzIyRERBRTgxMDZFRjA1MEM3RUY2NDYyRjdDQjM5OTk3NUQxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPXS59azIbJRB6imukvhmUjfx zo1dhi+k5MVfigvs1nMirh1vMhHIIgttqwo4Nu0xy098VF6zeTF5b2eQTlMQh8wS g5oQso87r24chx+flCDkFQ4RUu5so4UA9seCVMGD+FrM+wUoVrcZobWUQW3nLlUN dwWYiCwbJTP3PHgg6HNlaYgruUYC/mkaH6i2hw7fSdOyOQTjLGV+pWiI+fWhfOHx e3xe3SW6F6Ijp3WGHPLsfyiQwGlCUgDB3r2jQoQlrxgwrnd+GOmc3uqJ28Kk3hZE lUir3lbTU6DFM1lNKjxF5LBTpFc6zfOLeQ4B2CjoohN/gHRyy7Qg/XZcfI4TAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5nIt2ugQbvBQx+9kYvfLOZl10SEwHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsKhXH39/PIBReuAqTiuShtHHR g1eQwJC8vGDZy1gLb5iK69tuKxS1y57JB2G0z9T0kgF/rvjJbixA6pZ8fSsQx5zC r+8BKay96YAqvLnldFI+zrtaZxTZqqsJuD4Y2CVjzPjTWjTWjt6ap/b+HnwZC88/ Wd0j5AUixnQIYoDBZKfrfNnT51tGYHfotnBM+yfl5uLHKRjO0MkdM6OOWOLUvivQ SW1kl6dNKID8AYud24nnfP8NnFm2OqMMNIdMBVX0sktIB2hGBF7dy747i/0QAuam kIlpNMPOmTvwunvxDgM/YcMrvOCEhcxUWHfGO05vpZdUh+wWOszf2VBGwtpG -----END CERTIFICATE-----Generated at Mon Oct 20 05:48:55 2025 by rpki-client