$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: sjwD6lo/psyTiAz28OJ1cw9yFPmbaA/pXKpdJx3aR30= Subject key identifier: 15:3A:BB:6F:2E:8B:4E:E2:2A:5B:44:E7:F3:AA:77:94:9A:A4:A5:E5 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 0D0CDB1C223182C7B6A6D4EE05FC92825B8D089D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 0135 Signing time: Sun 19 Oct 2025 07:55:50 +0000 Manifest this update: Sun 19 Oct 2025 07:50:50 +0000 Manifest next update: Fri 24 Oct 2025 13:45:50 +0000 Files and hashes: 1: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) 2: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 3: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 4: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: Y/nWe3K7MFY7m4WEMS2gjPLytW6ZU/tX5ZgtJw1PwCw=) 5: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0c:db:1c:22:31:82:c7:b6:a6:d4:ee:05:fc:92:82:5b:8d:08:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Oct 19 07:50:50 2025 GMT Not After : Oct 24 13:45:50 2025 GMT Subject: CN=153ABB6F2E8B4EE22A5B44E7F3AA77949AA4A5E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:89:d4:16:ef:f1:b7:d5:55:bb:31:0f:fc: 92:7e:9f:0b:9d:ec:b4:ce:d3:20:47:ae:50:d5:f2: a7:6d:87:38:b0:0d:43:13:b8:9d:0b:32:72:d5:e5: 4c:8d:9f:1a:a4:b0:67:84:49:b9:49:a0:ae:b2:f8: 66:31:2a:a8:dc:74:c7:fc:73:60:36:b0:42:54:f1: 37:bf:86:ba:00:50:cc:9f:37:18:8d:5e:3f:c6:30: ad:40:b6:b6:49:41:3a:5f:b8:7a:f1:46:d5:2c:58: 42:df:ff:4f:ce:73:e9:d9:1c:cf:d1:56:c2:21:bd: 63:f2:26:28:c8:05:e1:e3:77:c0:e7:38:aa:3a:6c: a4:58:83:0f:c8:ec:07:90:c3:0a:3b:d4:8b:93:55: 8c:1a:6a:5b:9e:f0:49:42:a9:a7:7d:89:fe:cc:c1: 83:a4:4c:e2:1b:45:d6:b9:8a:a5:d0:fe:d5:35:97: 73:3b:72:9c:67:a4:c4:07:74:62:3c:0e:4f:e2:67: 95:03:a1:8f:29:82:cf:d1:59:7d:ee:68:36:10:85: eb:7f:5d:de:70:dd:f0:da:eb:d3:03:29:65:d0:3c: 13:03:63:19:44:a7:5a:77:70:ef:40:0f:94:c4:ec: 2b:74:b5:da:20:25:6f:27:79:78:74:53:eb:f3:42: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3A:BB:6F:2E:8B:4E:E2:2A:5B:44:E7:F3:AA:77:94:9A:A4:A5:E5 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:18:f0:f4:13:c5:47:84:63:f7:e6:af:ff:ed:9c:a9:9a:df: 74:ff:7c:bd:48:fc:a0:ae:72:3a:20:97:38:2e:0c:0f:84:7b: 8e:4f:7f:8c:22:a5:5e:51:a8:65:f4:c7:39:d8:7b:de:0e:f0: 60:1a:e2:e0:78:69:29:68:1b:67:88:66:06:31:88:13:44:4d: ae:f9:b4:4c:09:6b:04:5f:4e:8d:16:84:6b:7f:22:fb:85:80: d4:19:8b:ed:59:35:4d:8b:18:60:71:4c:42:bd:e6:df:b5:6a: cd:17:3c:8c:5b:35:40:13:e9:ee:35:b0:01:37:d5:7a:69:36: 2a:90:8c:f9:a6:7b:ce:55:b3:5d:e2:8f:27:1f:eb:b4:ab:57: 57:6b:80:34:74:4b:03:dd:5f:e6:26:c6:75:41:ca:b1:8d:ca: 2d:ab:c8:d2:14:db:47:21:da:47:18:88:83:70:b9:47:4d:e9: 10:e5:b9:29:0b:78:64:0a:2b:d5:8e:8f:f9:f7:b5:43:37:36: d5:e2:62:20:d5:5e:9d:f3:e0:1c:5d:0a:5f:69:d6:f8:08:03: d5:25:4b:6a:47:97:00:5c:35:d7:ed:b9:37:23:c3:8c:17:84: b1:0c:51:ff:e2:96:55:68:4e:08:79:e5:82:f7:8c:52:9f:a1: 34:d2:d8:ac -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDQzbHCIxgse2ptTuBfySgluNCJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTEwMTkwNzUwNTBaFw0yNTEwMjQxMzQ1NTBaMDMxMTAvBgNV BAMTKDE1M0FCQjZGMkU4QjRFRTIyQTVCNDRFN0YzQUE3Nzk0OUFBNEE1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzInUFu/xt9VVuzEP/JJ+nwud 7LTO0yBHrlDV8qdthziwDUMTuJ0LMnLV5UyNnxqksGeESblJoK6y+GYxKqjcdMf8 c2A2sEJU8Te/hroAUMyfNxiNXj/GMK1AtrZJQTpfuHrxRtUsWELf/0/Oc+nZHM/R VsIhvWPyJijIBeHjd8DnOKo6bKRYgw/I7AeQwwo71IuTVYwaalue8ElCqad9if7M wYOkTOIbRda5iqXQ/tU1l3M7cpxnpMQHdGI8Dk/iZ5UDoY8pgs/RWX3uaDYQhet/ Xd5w3fDa69MDKWXQPBMDYxlEp1p3cO9AD5TE7Ct0tdogJW8neXh0U+vzQokHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFTq7by6LTuIqW0Tn86p3lJqkpeUwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcGPD0E8VHhGP35q//7Zypmt90 /3y9SPygrnI6IJc4LgwPhHuOT3+MIqVeUahl9Mc52HveDvBgGuLgeGkpaBtniGYG MYgTRE2u+bRMCWsEX06NFoRrfyL7hYDUGYvtWTVNixhgcUxCvebftWrNFzyMWzVA E+nuNbABN9V6aTYqkIz5pnvOVbNd4o8nH+u0q1dXa4A0dEsD3V/mJsZ1Qcqxjcot q8jSFNtHIdpHGIiDcLlHTekQ5bkpC3hkCivVjo/597VDNzbV4mIg1V6d8+AcXQpf adb4CAPVJUtqR5cAXDXX7bk3I8OMF4SxDFH/4pZVaE4IeeWC94xSn6E00tis -----END CERTIFICATE-----Generated at Mon Oct 20 00:33:35 2025 by rpki-client