$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.mft File: DB145FAFC708C3BD136195C3A2A4059024EE404A.mft (raw, json) Hash identifier: qPZHy2CHOaLdVBHX8T0wjXinFIwFYatyO9Ew3inXwWU= Subject key identifier: 53:26:EE:53:0A:72:E4:6A:A0:A7:B1:4E:F0:BA:EA:C0:9C:DA:D4:49 Authority key identifier: DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A Certificate issuer: /CN=DB145FAFC708C3BD136195C3A2A4059024EE404A Certificate serial: 6325C630638B2AC02A8FD61FE0001316E31EF6D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.mft Manifest number: 012C Signing time: Mon 20 Oct 2025 12:14:36 +0000 Manifest this update: Mon 20 Oct 2025 12:09:36 +0000 Manifest next update: Sun 26 Oct 2025 05:54:36 +0000 Files and hashes: 1: DB145FAFC708C3BD136195C3A2A4059024EE404A.crl (hash: Mn8kJg+3pNAtrBDSkhymt6760MeRSfU9Qh00h5BsN7E=) 2: 34352e3137372e3132352e302f32342d3234203d3e20323637383831.roa (hash: RbI44PdbiJ2yzAqUtdkFBygQTXyQiPyNJjoEo9Choy0=) 3: 34352e3137372e3132342e302f32342d3234203d3e20323637383831.roa (hash: 94PUQRMNbp+cK711Cq10cWhBg4ynPUs/YBTue2FKmyk=) 4: 34352e3137372e3132372e302f32342d3234203d3e20323637383831.roa (hash: CzO56vxTQLLU1BhCgtsma+eMj5D0bD0rpsAYkcEjCfw=) 5: 323830333a326136303a3a2f33322d3332203d3e20323637383831.roa (hash: kLZ4vjYH0Z912EYfK5nzN/upKJHuQEbMzwtFzuVnKns=) 6: 34352e3137372e3132342e302f32322d3232203d3e20323637383831.roa (hash: czDqRj2U7XrIMRVDe9gVCe9L1U2ovnbEXuvvb7HIYtI=) 7: 34352e3137372e3132362e302f32342d3234203d3e20323637383831.roa (hash: 0Y+5ndQKmcoHehKLjlY8tTnEuVSPcpDWmaD4a0xk45c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:25:c6:30:63:8b:2a:c0:2a:8f:d6:1f:e0:00:13:16:e3:1e:f6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB145FAFC708C3BD136195C3A2A4059024EE404A Validity Not Before: Oct 20 12:09:36 2025 GMT Not After : Oct 26 05:54:36 2025 GMT Subject: CN=5326EE530A72E46AA0A7B14EF0BAEAC09CDAD449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:6a:7b:ee:ec:a8:11:e2:4a:b5:b7:cb:c5: c9:f9:4b:fc:d5:77:c2:4b:70:01:3c:d7:db:6e:61: 38:c2:c7:75:97:be:78:be:d8:25:6c:95:64:6d:15: b1:71:5c:8e:8a:8e:b3:d3:b8:6d:47:e7:70:6c:90: ce:92:6c:f9:ca:53:d3:c0:3f:d8:f5:db:67:00:28: 6d:a2:3f:d5:81:b3:23:f4:a9:d1:e0:1e:2b:50:e3: 46:30:b4:c4:d1:77:ff:2d:c4:e0:4b:b4:f1:c4:4a: 65:e1:13:0f:72:93:d7:34:15:39:0b:8d:bf:24:9d: 2f:34:37:5f:67:fe:ec:8a:29:80:38:74:d5:45:7e: 98:fe:5a:76:f7:2a:8e:54:ab:7c:db:65:65:19:95: cf:44:7b:99:1d:9a:28:d0:5c:d7:7b:4a:00:0d:c4: 4c:30:e6:b8:11:6b:ab:af:73:17:0c:89:fe:64:cc: 94:2d:fb:40:c3:6f:9b:17:80:85:53:d5:85:5a:aa: 1c:75:f6:34:51:0a:e6:7b:c0:c3:09:8f:ce:36:de: 14:16:90:22:9d:66:7f:ac:1f:b1:de:ce:56:bd:79: 30:42:ca:45:1a:5e:db:1b:73:fe:a8:b1:33:47:1e: e5:a4:b7:29:99:c4:72:8f:2e:01:13:c1:52:2e:41: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:26:EE:53:0A:72:E4:6A:A0:A7:B1:4E:F0:BA:EA:C0:9C:DA:D4:49 X509v3 Authority Key Identifier: keyid:DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:82:03:a3:2a:f0:f4:f5:e6:c0:4c:be:ff:44:02:7c:42: 34:05:b0:f2:d6:5b:72:eb:8b:48:a0:28:ec:17:b0:12:2f:ee: 56:44:64:aa:7c:73:86:b9:fc:54:83:bf:a8:d5:7b:2d:b0:77: db:be:1b:e7:dc:05:2d:fb:67:77:b3:33:e9:b5:a0:30:3f:ef: 68:cf:43:dd:a9:de:e5:19:ca:4e:3c:13:00:cf:e3:06:1f:1a: f0:c0:e6:48:e3:15:a0:47:23:a1:e8:b5:5f:be:e8:a3:84:d1: e3:a2:54:59:8f:12:3b:66:71:50:49:d9:80:61:f1:3f:68:48: d7:7b:94:2d:63:f2:fe:37:47:4c:aa:03:52:74:ce:60:e8:17: d8:11:ef:6f:47:01:8a:a4:bd:85:ed:bb:2a:32:09:4b:1f:98: d0:07:5a:05:29:ed:c3:b2:0f:c5:fa:88:d3:34:74:02:09:68: ee:67:b9:69:cc:bd:c2:a6:88:1b:9e:2a:2b:94:92:05:81:d2: 72:df:f3:df:dd:60:89:4c:c4:95:48:73:f6:4d:ad:44:d5:52: 80:40:c3:de:16:88:59:86:45:5a:cb:fe:27:a5:66:14:80:13: 01:cc:d1:fc:22:3f:54:67:1b:b5:07:3d:27:71:a5:89:52:c7: 18:1b:35:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYyXGMGOLKsAqj9Yf4AATFuMe9tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxNDVGQUZDNzA4QzNCRDEzNjE5NUMzQTJBNDA1OTAy NEVFNDA0QTAeFw0yNTEwMjAxMjA5MzZaFw0yNTEwMjYwNTU0MzZaMDMxMTAvBgNV BAMTKDUzMjZFRTUzMEE3MkU0NkFBMEE3QjE0RUYwQkFFQUMwOUNEQUQ0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA42p77uyoEeJKtbfLxcn5S/zV d8JLcAE819tuYTjCx3WXvni+2CVslWRtFbFxXI6KjrPTuG1H53BskM6SbPnKU9PA P9j122cAKG2iP9WBsyP0qdHgHitQ40YwtMTRd/8txOBLtPHESmXhEw9yk9c0FTkL jb8knS80N19n/uyKKYA4dNVFfpj+Wnb3Ko5Uq3zbZWUZlc9Ee5kdmijQXNd7SgAN xEww5rgRa6uvcxcMif5kzJQt+0DDb5sXgIVT1YVaqhx19jRRCuZ7wMMJj8423hQW kCKdZn+sH7Hezla9eTBCykUaXtsbc/6osTNHHuWktymZxHKPLgETwVIuQfcnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUybuUwpy5Gqgp7FO8LrqwJza1EkwHwYDVR0j BBgwFoAU2xRfr8cIw70TYZXDoqQFkCTuQEowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MURBQkYzNTgwRTZBQTVFQzlCRUQ5QTk5ODZFQjcwMEFD MjgwMEREODNCQkFDODcxMzA4QzZBMTg2MkREODhDLzAvREIxNDVGQUZDNzA4QzNC RDEzNjE5NUMzQTJBNDA1OTAyNEVFNDA0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjE0NUZBRkM3MDhDM0JEMTM2 MTk1QzNBMkE0MDU5MDI0RUU0MDRBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzFEQUJGMzU4MEU2QUE1RUM5QkVEOUE5OTg2RUI3MDBBQzI4MDBERDgz QkJBQzg3MTMwOEM2QTE4NjJERDg4Qy8wL0RCMTQ1RkFGQzcwOEMzQkQxMzYxOTVD M0EyQTQwNTkwMjRFRTQwNEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAArIIDoyrw9PXmwEy+/0QCfEI0 BbDy1lty64tIoCjsF7ASL+5WRGSqfHOGufxUg7+o1XstsHfbvhvn3AUt+2d3szPp taAwP+9oz0Pdqd7lGcpOPBMAz+MGHxrwwOZI4xWgRyOh6LVfvuijhNHjolRZjxI7 ZnFQSdmAYfE/aEjXe5QtY/L+N0dMqgNSdM5g6BfYEe9vRwGKpL2F7bsqMglLH5jQ B1oFKe3Dsg/F+ojTNHQCCWjuZ7lpzL3CpogbniorlJIFgdJy3/Pf3WCJTMSVSHP2 Ta1E1VKAQMPeFohZhkVay/4npWYUgBMBzNH8Ij9UZxu1Bz0ncaWJUscYGzWg -----END CERTIFICATE-----Generated at Mon Oct 20 14:13:13 2025 by rpki-client