$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft File: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft (raw, json) Hash identifier: 1gC6rzbL+x/VGNr/tv/GK04KGQbAeQum1yP6d81Pd7s= Subject key identifier: DD:31:B4:DE:EA:79:A1:F7:CB:7C:98:4F:BE:0C:B8:1E:42:14:0F:A5 Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C Certificate issuer: /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C Certificate serial: 5458DF9BEA5F0744802FFB348E4220137FA6011D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft Manifest number: 012E Signing time: Mon 20 Oct 2025 09:42:58 +0000 Manifest this update: Mon 20 Oct 2025 09:37:58 +0000 Manifest next update: Fri 24 Oct 2025 10:00:58 +0000 Files and hashes: 1: 34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa (hash: 0A7i94jTbUoP2cfm7TdMPv+bVBJxVqMSEHN1Kg3Ojx4=) 2: 34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (hash: BQdwxtgo5L1T0UilqKluFvqRRHzFjkB9p9gPX/wbUVY=) 3: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl (hash: yHPT0SR13WQSJ/uYKFPynO3kyDtbR2Xd91uWffo24GM=) 4: 323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (hash: JzvgMJvQy8H80UwSvphA3clT68+3AsxpsiwjJ+J10lo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:58:df:9b:ea:5f:07:44:80:2f:fb:34:8e:42:20:13:7f:a6:01:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C Validity Not Before: Oct 20 09:37:58 2025 GMT Not After : Oct 24 10:00:58 2025 GMT Subject: CN=DD31B4DEEA79A1F7CB7C984FBE0CB81E42140FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:fd:81:55:cf:f8:72:e6:1a:5d:ea:1f:47: 0b:4c:87:13:2c:41:63:ea:76:14:cf:d4:ff:87:a3: 93:d8:19:27:02:4f:c7:b9:27:35:a9:cd:5f:2d:22: e6:a7:dc:a6:a2:0e:08:0b:76:5b:93:30:dd:2a:7a: 9b:7f:80:1e:7e:2c:1b:79:80:82:3c:08:43:65:14: 06:04:52:60:3b:79:dc:41:d1:29:f0:05:c3:62:c7: be:b7:0b:81:3b:5a:cf:2c:91:d1:7c:59:9b:95:b8: 6b:bb:93:01:b7:9e:1d:a7:fe:47:17:8f:03:17:3b: 0f:71:f9:05:65:5a:eb:26:b2:6c:22:1d:af:c9:67: b5:9a:d5:87:5c:05:85:77:50:23:ff:09:0d:98:64: 08:6c:28:3b:bf:e2:5d:c5:ac:d5:cb:59:0a:92:7a: 70:7a:aa:e9:56:a6:82:04:a2:30:7c:77:83:80:50: 25:29:56:81:4a:3f:70:22:3b:22:90:3f:5b:0c:79: 56:22:38:50:77:e5:ef:d3:0b:51:38:81:96:1e:3c: 49:de:d2:49:16:bd:a9:c4:08:cd:e8:be:48:ea:f0: 3f:5f:ad:f3:3a:da:24:7e:57:53:78:45:de:f5:87: 34:77:e6:e2:72:ee:47:83:87:d9:1d:92:10:af:07: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:31:B4:DE:EA:79:A1:F7:CB:7C:98:4F:BE:0C:B8:1E:42:14:0F:A5 X509v3 Authority Key Identifier: keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:32:69:40:bd:d9:14:21:fe:01:4e:57:48:4e:a8:f7:51:8e: 33:ba:38:39:cf:5d:98:9d:9d:b0:32:24:7c:87:11:7d:b1:d2: 89:63:0d:27:64:ea:3e:72:d5:3c:79:49:06:a5:98:60:56:f6: b3:23:12:d3:10:13:c3:83:49:c3:4d:1e:ec:23:71:be:d0:be: d1:7f:d2:60:e1:55:2b:18:16:d8:5c:ca:3a:49:c7:19:d4:d5: 3d:40:de:9a:f4:56:a5:6e:42:c6:9a:54:d9:8c:ea:1d:0a:7f: 34:cb:45:e6:55:f3:aa:36:c7:c1:bf:2f:c2:d6:4e:b9:9b:e3: 42:11:a6:80:fe:cb:a1:12:d3:04:a3:de:56:ce:38:2a:8b:66: 90:83:85:bb:0f:a3:9d:ce:07:b2:79:22:35:8d:87:60:86:6d: c1:ac:7c:56:16:7e:4b:2c:16:98:d0:e5:83:2c:44:26:01:d8: f4:28:85:e2:99:b7:39:b3:9a:e9:a2:26:54:19:6c:e8:2a:78: e2:29:27:af:54:cd:6a:77:11:a3:34:72:6b:5e:b0:1c:ef:6a: ec:85:c7:84:ec:e0:2f:12:2e:b0:3f:5b:d4:8f:ae:d3:45:e4: 30:4a:01:f7:ef:82:7a:38:86:c0:70:16:c9:26:03:42:6a:7e: 6f:91:3a:89 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVFjfm+pfB0SAL/s0jkIgE3+mAR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlEM0UwREJDNEMzRUIwRUU3Q0E1NjRGMEY5MUEwMzhB MUQ1ODc3QzAeFw0yNTEwMjAwOTM3NThaFw0yNTEwMjQxMDAwNThaMDMxMTAvBgNV BAMTKEREMzFCNERFRUE3OUExRjdDQjdDOTg0RkJFMENCODFFNDIxNDBGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8f2BVc/4cuYaXeofRwtMhxMs QWPqdhTP1P+Ho5PYGScCT8e5JzWpzV8tIuan3KaiDggLdluTMN0qept/gB5+LBt5 gII8CENlFAYEUmA7edxB0SnwBcNix763C4E7Ws8skdF8WZuVuGu7kwG3nh2n/kcX jwMXOw9x+QVlWusmsmwiHa/JZ7Wa1YdcBYV3UCP/CQ2YZAhsKDu/4l3FrNXLWQqS enB6qulWpoIEojB8d4OAUCUpVoFKP3AiOyKQP1sMeVYiOFB35e/TC1E4gZYePEne 0kkWvanECM3ovkjq8D9frfM62iR+V1N4Rd71hzR35uJy7keDh9kdkhCvB2gfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3TG03up5offLfJhPvgy4HkIUD6UwHwYDVR0j BBgwFoAU2dPg28TD6w7nylZPD5GgOKHVh3wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RjYwQUFGMTMyODVCNzQwM0Q0M0JFMTQ0NjM3OEI2MDIz OUEyNDdGQzEzNTBBMjdFMzc0NjQzNkI0NTMwNzU2LzAvRDlEM0UwREJDNEMzRUIw RUU3Q0E1NjRGMEY5MUEwMzhBMUQ1ODc3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOUQzRTBEQkM0QzNFQjBFRTdD QTU2NEYwRjkxQTAzOEExRDU4NzdDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUY2MEFBRjEzMjg1Qjc0MDNENDNCRTE0NDYzNzhCNjAyMzlBMjQ3RkMx MzUwQTI3RTM3NDY0MzZCNDUzMDc1Ni8wL0Q5RDNFMERCQzRDM0VCMEVFN0NBNTY0 RjBGOTFBMDM4QTFENTg3N0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5MmlAvdkUIf4BTldITqj3UY4z ujg5z12YnZ2wMiR8hxF9sdKJYw0nZOo+ctU8eUkGpZhgVvazIxLTEBPDg0nDTR7s I3G+0L7Rf9Jg4VUrGBbYXMo6SccZ1NU9QN6a9FalbkLGmlTZjOodCn80y0XmVfOq NsfBvy/C1k65m+NCEaaA/suhEtMEo95Wzjgqi2aQg4W7D6OdzgeyeSI1jYdghm3B rHxWFn5LLBaY0OWDLEQmAdj0KIXimbc5s5rpoiZUGWzoKnjiKSevVM1qdxGjNHJr XrAc72rshceE7OAvEi6wP1vUj67TReQwSgH374J6OIbAcBbJJgNCan5vkTqJ -----END CERTIFICATE-----Generated at Mon Oct 20 14:13:27 2025 by rpki-client