$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.mft File: A90C0F970C264F38A28A9E968987ACE91722E09C.mft (raw, json) Hash identifier: QZ/ykgrIvJnuUHfShNBQcaf/iN1aO2lh0mzUudDljf0= Subject key identifier: 1E:4C:EA:74:43:54:2C:C8:78:E4:1D:4E:BC:E1:33:7F:AA:21:76:8F Authority key identifier: A9:0C:0F:97:0C:26:4F:38:A2:8A:9E:96:89:87:AC:E9:17:22:E0:9C Certificate issuer: /CN=A90C0F970C264F38A28A9E968987ACE91722E09C Certificate serial: 49D6AF717A76DE46ABF513AD512472A33231AF5C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A90C0F970C264F38A28A9E968987ACE91722E09C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.mft Manifest number: 0132 Signing time: Fri 17 Oct 2025 21:23:07 +0000 Manifest this update: Fri 17 Oct 2025 21:18:07 +0000 Manifest next update: Thu 23 Oct 2025 21:20:07 +0000 Files and hashes: 1: A90C0F970C264F38A28A9E968987ACE91722E09C.crl (hash: VhCB7Xo3/PzDGVHGUU9JU69EzxLDjJ9NsNsqj6RUdqQ=) 2: 3138362e322e3234302e302f32322d3234203d3e203532343038.roa (hash: BOAXxWb+P5j2TyXDMUCqVCLSwWkpIIRRkstIHIoEHtk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.crl rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A90C0F970C264F38A28A9E968987ACE91722E09C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 21:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d6:af:71:7a:76:de:46:ab:f5:13:ad:51:24:72:a3:32:31:af:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90C0F970C264F38A28A9E968987ACE91722E09C Validity Not Before: Oct 17 21:18:07 2025 GMT Not After : Oct 23 21:20:07 2025 GMT Subject: CN=1E4CEA7443542CC878E41D4EBCE1337FAA21768F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:10:d3:de:33:46:5c:36:f0:c6:95:26:05: f6:a0:44:ce:0d:c7:6a:54:14:22:f3:33:05:7e:f3: 14:69:74:d9:bb:01:17:97:6b:b6:09:4c:16:2f:5d: c2:92:b7:b7:c0:93:22:5b:89:5a:84:31:ba:1b:ca: 54:7d:1f:52:20:af:0e:ab:43:b0:f1:9c:61:b4:83: c8:ea:58:af:ce:83:9f:03:2a:23:74:0a:a3:84:8b: 53:de:e6:b4:8d:0e:8b:f9:59:d0:73:56:7c:65:7d: 56:30:b6:bf:6f:4e:47:f7:8c:67:9f:d1:a6:7b:f2: 02:05:53:44:8c:df:f4:9e:e5:49:d4:df:6e:00:df: 78:e5:22:2a:93:59:e3:1a:42:bd:a3:fe:60:5c:62: aa:63:10:50:b4:22:b8:8c:4e:7e:ce:b3:50:47:6f: e5:bf:37:9d:e8:df:a5:84:39:75:b1:a1:5a:28:57: 80:7d:7f:15:2b:a7:c8:3f:84:5f:e8:27:a8:42:43: da:92:53:b3:35:c8:ce:61:a8:a0:f5:24:39:91:eb: 17:dd:11:ef:e8:7c:94:e9:c6:87:92:84:3b:1a:65: 1c:dc:d2:7c:1b:25:fa:70:58:e5:97:76:8c:da:47: 3d:94:ff:81:33:88:c3:41:6f:d6:8f:c2:1c:16:29: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:EA:74:43:54:2C:C8:78:E4:1D:4E:BC:E1:33:7F:AA:21:76:8F X509v3 Authority Key Identifier: keyid:A9:0C:0F:97:0C:26:4F:38:A2:8A:9E:96:89:87:AC:E9:17:22:E0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A90C0F970C264F38A28A9E968987ACE91722E09C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:8d:b9:c3:21:93:e3:0f:b7:01:ee:c7:09:b9:3b:9f:61: 98:64:6f:a2:6a:cf:60:5b:20:e9:3d:83:53:1d:8f:ed:a7:ea: e7:12:f4:b5:3f:54:c0:72:43:42:7a:35:16:4f:04:1b:f6:08: 89:09:51:96:41:20:ce:57:32:61:4d:d4:11:83:a5:c2:4a:d5: d0:4d:05:9c:32:d9:6d:37:04:7b:1d:d3:71:c7:7c:55:20:6d: 5c:d4:86:79:bc:a9:fa:ba:40:ea:e3:5b:5d:c0:b0:eb:1c:82: 1c:da:da:13:bd:23:94:6b:75:47:a7:81:9f:14:0e:e4:15:a7: ce:e5:86:58:ec:cb:5e:a1:d6:87:f3:56:cf:52:14:5b:23:7f: 68:bb:52:dc:97:32:67:b8:23:03:bf:86:37:de:6f:d7:01:a9: 02:c7:be:73:64:65:00:ed:e4:95:b1:54:84:f7:df:dd:38:f4: 11:d6:b9:ba:ef:d5:8f:7a:af:fc:5b:67:cf:58:e1:57:c1:1d: 6a:b7:16:39:bf:c2:e5:b9:6c:57:f0:9a:a2:b0:3b:b9:8e:0c: 86:4e:24:92:d9:74:61:28:06:1e:4e:ce:e4:cf:4b:e5:fd:2e: 3c:52:6d:e1:a0:1b:a8:9f:3a:50:09:82:2c:9d:ef:7e:60:12: 30:c7:70:fe -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSdavcXp23kar9ROtUSRyozIxr1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkwQzBGOTcwQzI2NEYzOEEyOEE5RTk2ODk4N0FDRTkx NzIyRTA5QzAeFw0yNTEwMTcyMTE4MDdaFw0yNTEwMjMyMTIwMDdaMDMxMTAvBgNV BAMTKDFFNENFQTc0NDM1NDJDQzg3OEU0MUQ0RUJDRTEzMzdGQUEyMTc2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32xDT3jNGXDbwxpUmBfagRM4N x2pUFCLzMwV+8xRpdNm7AReXa7YJTBYvXcKSt7fAkyJbiVqEMbobylR9H1Igrw6r Q7DxnGG0g8jqWK/Og58DKiN0CqOEi1Pe5rSNDov5WdBzVnxlfVYwtr9vTkf3jGef 0aZ78gIFU0SM3/Se5UnU324A33jlIiqTWeMaQr2j/mBcYqpjEFC0IriMTn7Os1BH b+W/N53o36WEOXWxoVooV4B9fxUrp8g/hF/oJ6hCQ9qSU7M1yM5hqKD1JDmR6xfd Ee/ofJTpxoeShDsaZRzc0nwbJfpwWOWXdozaRz2U/4EziMNBb9aPwhwWKXERAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHkzqdENULMh45B1OvOEzf6ohdo8wHwYDVR0j BBgwFoAUqQwPlwwmTziiip6WiYes6Rci4JwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QjM1QTZEQzNBNkFCQ0YyOTBEMjlDMkUzOUI1NkM2RjU5 MTdGODUyNjNERjBFQTI2MDM4Nzk0MUUxRkI2OUM2LzAvQTkwQzBGOTcwQzI2NEYz OEEyOEE5RTk2ODk4N0FDRTkxNzIyRTA5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTBDMEY5NzBDMjY0RjM4QTI4 QTlFOTY4OTg3QUNFOTE3MjJFMDlDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEIzNUE2REMzQTZBQkNGMjkwRDI5QzJFMzlCNTZDNkY1OTE3Rjg1MjYz REYwRUEyNjAzODc5NDFFMUZCNjlDNi8wL0E5MEMwRjk3MEMyNjRGMzhBMjhBOUU5 Njg5ODdBQ0U5MTcyMkUwOUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVLY25wyGT4w+3Ae7HCbk7n2GY ZG+ias9gWyDpPYNTHY/tp+rnEvS1P1TAckNCejUWTwQb9giJCVGWQSDOVzJhTdQR g6XCStXQTQWcMtltNwR7HdNxx3xVIG1c1IZ5vKn6ukDq41tdwLDrHIIc2toTvSOU a3VHp4GfFA7kFafO5YZY7MteodaH81bPUhRbI39ou1LclzJnuCMDv4Y33m/XAakC x75zZGUA7eSVsVSE99/dOPQR1rm679WPeq/8W2fPWOFXwR1qtxY5v8LluWxX8Jqi sDu5jgyGTiSS2XRhKAYeTs7kz0vl/S48Um3hoBuonzpQCYIsne9+YBIwx3D+ -----END CERTIFICATE-----Generated at Mon Oct 20 00:33:44 2025 by rpki-client