$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft File: D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft (raw, json) Hash identifier: p7P3eoRZhvhV/AbwelgTZE7B9109BFWHp/GK3yF/PbE= Subject key identifier: A9:DD:11:CA:DA:69:57:DF:72:5F:7F:B4:19:6B:B1:FB:AA:76:3F:9D Authority key identifier: D1:B1:A6:D5:34:F8:C4:9C:32:B7:6E:3C:60:C8:17:42:12:B1:50:E0 Certificate issuer: /CN=D1B1A6D534F8C49C32B76E3C60C8174212B150E0 Certificate serial: 5ED202CC49CA090582F55F94BAC1EF42E5E60D4B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft Manifest number: 012D Signing time: Mon 20 Oct 2025 08:06:59 +0000 Manifest this update: Mon 20 Oct 2025 08:01:59 +0000 Manifest next update: Sat 25 Oct 2025 13:17:59 +0000 Files and hashes: 1: D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl (hash: Vt/K+otu4CJfZsNloJH2SEYhAsAIDxrDXCEDeSw7Nac=) 2: 34352e3138322e32382e302f32322d3234203d3e20323635383136.roa (hash: w7gAEINAXEWRri5vQ5qFmAHvFqv4WVVMhCOVltD7ttk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d2:02:cc:49:ca:09:05:82:f5:5f:94:ba:c1:ef:42:e5:e6:0d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1B1A6D534F8C49C32B76E3C60C8174212B150E0 Validity Not Before: Oct 20 08:01:59 2025 GMT Not After : Oct 25 13:17:59 2025 GMT Subject: CN=A9DD11CADA6957DF725F7FB4196BB1FBAA763F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:a7:01:f6:4a:cd:16:e6:0d:d3:dc:91:eb: 45:73:e0:65:a4:40:52:b8:06:aa:4d:7e:d1:52:cd: 25:ec:33:d7:29:71:1a:3b:43:eb:3c:e1:b3:df:ab: ce:3c:28:34:bc:90:54:c8:89:43:b8:9b:d7:78:dc: df:01:cb:ce:6d:fc:88:68:2e:0f:7e:e5:d9:14:95: 53:87:60:4c:0e:b2:3d:64:f7:7f:a3:a1:35:42:39: fc:4d:b7:51:b8:c6:11:59:83:61:76:23:bb:71:85: 08:2f:b5:75:a8:80:80:98:46:32:5f:69:87:c4:99: 3a:93:2f:62:0b:cc:dc:27:6e:88:97:aa:45:78:b4: fb:24:8c:c4:86:63:49:02:86:2b:39:ca:f8:3e:39: a3:3a:0a:31:37:b7:53:7a:b0:4a:f7:9b:fe:6c:a0: e6:1c:e4:d1:bc:b8:a7:ba:ac:a6:5a:c4:c2:b4:10: e0:68:4b:ed:27:1a:79:c7:d2:1a:63:92:ef:fd:0c: 98:ce:fe:c9:9c:b1:39:fe:18:41:d3:76:16:cb:65: 6b:9a:ec:ff:4a:a6:a6:9d:1e:8a:86:62:7d:f8:da: ca:fe:ba:59:83:8e:66:a7:49:cd:37:ba:03:43:58: 94:a4:4f:c6:6b:f4:19:87:8f:46:96:bb:b9:49:07: 0b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DD:11:CA:DA:69:57:DF:72:5F:7F:B4:19:6B:B1:FB:AA:76:3F:9D X509v3 Authority Key Identifier: keyid:D1:B1:A6:D5:34:F8:C4:9C:32:B7:6E:3C:60:C8:17:42:12:B1:50:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8b:84:d4:f4:6c:e8:35:cb:6a:d5:35:00:53:44:07:6f:6b: e6:60:73:53:62:19:8e:36:7e:c3:9f:be:f1:59:5e:f4:17:aa: d2:15:58:bc:97:98:54:cd:6c:ea:c5:b7:26:e1:da:a2:5f:79: 35:5d:e5:b8:95:e1:c8:31:e9:cd:cb:54:66:16:ec:a4:32:03: 6f:7d:f7:c0:08:1f:2c:f8:79:9a:05:1b:6c:59:d0:92:d5:44: 27:db:53:93:ec:fe:e9:33:15:54:68:56:09:8f:77:12:95:4f: eb:cb:95:02:69:f1:d5:ef:ac:e6:e0:ad:69:95:08:3a:8f:08: e4:49:2c:fe:d9:3c:57:ab:07:4f:2a:79:2d:9d:2c:a9:04:47: f5:d1:be:c3:49:0a:3d:1a:20:e0:ce:4c:47:2a:59:ff:6a:82: 9d:fb:d8:09:a1:e8:3c:a6:d5:49:68:e6:e8:87:f1:2b:19:b8: 1a:6f:44:6c:8e:98:d9:6c:b7:a6:82:db:c8:ce:3c:fa:df:c0: 69:a1:03:71:ca:b5:52:84:4b:06:75:1b:e0:13:33:b9:a0:ea: 3c:16:57:27:33:1b:08:a1:f5:24:7b:b6:c9:24:63:12:43:a8: a2:f4:3f:6d:2f:d1:a1:bd:d8:6e:63:88:9e:32:c7:1d:65:97: 35:52:79:83 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXtICzEnKCQWC9V+UusHvQuXmDUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFCMUE2RDUzNEY4QzQ5QzMyQjc2RTNDNjBDODE3NDIx MkIxNTBFMDAeFw0yNTEwMjAwODAxNTlaFw0yNTEwMjUxMzE3NTlaMDMxMTAvBgNV BAMTKEE5REQxMUNBREE2OTU3REY3MjVGN0ZCNDE5NkJCMUZCQUE3NjNGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOuKcB9krNFuYN09yR60Vz4GWk QFK4BqpNftFSzSXsM9cpcRo7Q+s84bPfq848KDS8kFTIiUO4m9d43N8By85t/Iho Lg9+5dkUlVOHYEwOsj1k93+joTVCOfxNt1G4xhFZg2F2I7txhQgvtXWogICYRjJf aYfEmTqTL2ILzNwnboiXqkV4tPskjMSGY0kChis5yvg+OaM6CjE3t1N6sEr3m/5s oOYc5NG8uKe6rKZaxMK0EOBoS+0nGnnH0hpjku/9DJjO/smcsTn+GEHTdhbLZWua 7P9KpqadHoqGYn342sr+ulmDjmanSc03ugNDWJSkT8Zr9BmHj0aWu7lJBwtvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqd0RytppV99yX3+0GWux+6p2P50wHwYDVR0j BBgwFoAU0bGm1TT4xJwyt248YMgXQhKxUOAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82OTJBMTAxMzgwRTlCMzNGRUE5MjM1MjUwMzQyMDM4RDk0 NEFBMDQ2MUM3Q0UyQThDNTcwRDBBQ0IwOTUwNTJFLzAvRDFCMUE2RDUzNEY4QzQ5 QzMyQjc2RTNDNjBDODE3NDIxMkIxNTBFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMUIxQTZENTM0RjhDNDlDMzJC NzZFM0M2MEM4MTc0MjEyQjE1MEUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjkyQTEwMTM4MEU5QjMzRkVBOTIzNTI1MDM0MjAzOEQ5NDRBQTA0NjFD N0NFMkE4QzU3MEQwQUNCMDk1MDUyRS8wL0QxQjFBNkQ1MzRGOEM0OUMzMkI3NkUz QzYwQzgxNzQyMTJCMTUwRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGi4TU9GzoNctq1TUAU0QHb2vm YHNTYhmONn7Dn77xWV70F6rSFVi8l5hUzWzqxbcm4dqiX3k1XeW4leHIMenNy1Rm FuykMgNvfffACB8s+HmaBRtsWdCS1UQn21OT7P7pMxVUaFYJj3cSlU/ry5UCafHV 76zm4K1plQg6jwjkSSz+2TxXqwdPKnktnSypBEf10b7DSQo9GiDgzkxHKln/aoKd +9gJoeg8ptVJaOboh/ErGbgab0RsjpjZbLemgtvIzjz638BpoQNxyrVShEsGdRvg EzO5oOo8FlcnMxsIofUke7bJJGMSQ6ii9D9tL9GhvdhuY4ieMscdZZc1UnmD -----END CERTIFICATE-----Generated at Mon Oct 20 19:24:58 2025 by rpki-client