$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft File: D2C96715842E19445AE9268C979CE3C8F576D88D.mft (raw, json) Hash identifier: KB6ThBZw5zDgZsaMp+uWTlwmjwm0eR7M+aCVVHQTW4c= Subject key identifier: C2:F7:8B:2C:15:BF:AA:5E:37:58:DE:AB:E6:F2:DA:A2:DC:88:77:29 Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D Certificate issuer: /CN=D2C96715842E19445AE9268C979CE3C8F576D88D Certificate serial: 7864F4609A3173C85C9EFAAF02B559060D244DBC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft Manifest number: 012C Signing time: Mon 20 Oct 2025 13:55:44 +0000 Manifest this update: Mon 20 Oct 2025 13:50:44 +0000 Manifest next update: Sat 25 Oct 2025 23:36:44 +0000 Files and hashes: 1: D2C96715842E19445AE9268C979CE3C8F576D88D.crl (hash: ipgmzb5N5cG7GLJGnFpI+D9StDMj4Dbqc4pRiZv0/PI=) 2: 34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa (hash: FLKVu51CqiMKIC4dg/HlHre6SL632epjxpR+j5YZCBg=) 3: 323830333a6136303a3a2f33322d3332203d3e20323637383738.roa (hash: etr1vxzggL8ebp6gb0P76/ItGyWW6MBzBD13t/gLlvA=) 4: 34352e3137352e3134392e302f32342d3234203d3e20323637383738.roa (hash: pGaWzqZk9Ab6xuvGWePdqEp0CPWzT4knEiqK0/4Dh48=) 5: 34352e3137352e3135312e302f32342d3234203d3e20323637383738.roa (hash: XwIIrJjE0LxVy4lRZyKlP6xy4wvAdkIRwAH9QZTNONw=) 6: 34352e3137352e3134382e302f32342d3234203d3e20323637383738.roa (hash: RkvtaiGcZDO2ojWgCEIuQ8LTZvjfxX4efhqG29kfXw0=) 7: 34352e3137352e3135302e302f32342d3234203d3e20323637383738.roa (hash: 1bYKDDuBdhjof2i6LXJ9XhXolvJXmzIT9tvxCFFxZDE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:64:f4:60:9a:31:73:c8:5c:9e:fa:af:02:b5:59:06:0d:24:4d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D Validity Not Before: Oct 20 13:50:44 2025 GMT Not After : Oct 25 23:36:44 2025 GMT Subject: CN=C2F78B2C15BFAA5E3758DEABE6F2DAA2DC887729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:1b:27:47:42:71:95:32:02:18:a4:b6:5d:53: 76:8d:d3:eb:cd:2d:c9:94:98:57:52:09:a1:05:f3: b0:bf:25:f9:98:22:00:36:d9:c8:67:00:e3:72:91: 96:87:9e:63:68:fe:49:6e:a2:54:c5:e1:64:35:be: 57:54:4f:18:05:7e:2e:b6:8c:20:af:27:c1:83:94: 81:74:77:b0:5b:19:60:c8:84:8b:da:d0:f5:44:ee: 8f:88:1a:70:77:61:72:e7:91:1e:fc:45:11:c0:d0: 7b:e7:9c:ed:6f:23:bc:61:b3:d4:ad:4d:db:ba:19: 65:d6:ae:d9:43:a1:4d:14:48:9c:98:ea:06:9b:f0: a6:68:7c:8b:82:bf:5c:d6:1e:23:0e:5f:56:16:5e: 8a:6c:26:9b:ea:99:6d:d2:22:13:1b:28:d1:57:c2: 69:a5:ef:26:26:12:48:54:a9:28:2f:68:e0:12:f0: eb:9e:be:bc:d3:97:99:ab:cc:23:ab:03:42:31:59: 2c:94:2e:3d:dd:dd:3c:60:d9:c1:c9:f4:80:3f:77: 48:b4:ca:d0:22:6c:6d:59:fc:2e:55:e5:fb:e2:32: 01:62:75:24:cd:b6:b9:b3:bb:e3:a9:3b:0a:31:bf: e2:d7:87:32:0b:07:46:68:3c:97:29:cd:38:2c:2a: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F7:8B:2C:15:BF:AA:5E:37:58:DE:AB:E6:F2:DA:A2:DC:88:77:29 X509v3 Authority Key Identifier: keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c7:0b:17:67:42:3b:54:e9:05:3e:fa:15:ff:8b:7c:40:66: 8d:6b:38:1a:00:29:49:a3:73:72:55:36:ca:88:d8:ae:26:ba: c1:f8:0b:9d:e0:ac:b2:0c:ee:a5:d6:51:e5:49:3a:3c:37:3e: c6:a9:19:2e:5a:32:32:ed:1c:05:48:e1:35:e4:3a:57:44:2e: 66:4b:9d:19:fc:db:5e:2b:ef:61:69:5e:f2:ec:af:19:c4:d8: 3c:a1:f6:2e:c1:c5:3b:63:3d:68:bd:dc:d1:a8:47:ee:3e:f7: 45:27:54:37:44:a6:36:db:a3:82:78:89:dd:6f:aa:1d:e5:d8: c5:10:01:d8:cf:94:0a:14:8a:93:cc:77:26:5e:21:fb:7e:b1: 77:e2:45:25:79:1d:a1:4e:2d:f3:b8:31:e6:88:7d:ca:55:7b: 0b:cb:14:45:50:31:ed:ae:f9:5c:1b:72:1a:3c:b8:2a:1c:26: 52:8d:29:67:3e:c2:b7:07:ae:47:97:22:a6:23:62:a7:55:52: 24:cf:94:a0:ff:db:69:5f:d5:43:76:0c:c9:d2:78:c7:7c:0a: ed:04:43:c7:6e:1b:0d:0c:28:12:26:53:32:48:b2:56:ef:6f: 91:a9:2f:b8:3a:9f:dd:e9:02:40:52:89:c1:0f:d8:ab:b8:aa: 16:df:67:98 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeGT0YJoxc8hcnvqvArVZBg0kTbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJDOTY3MTU4NDJFMTk0NDVBRTkyNjhDOTc5Q0UzQzhG NTc2RDg4RDAeFw0yNTEwMjAxMzUwNDRaFw0yNTEwMjUyMzM2NDRaMDMxMTAvBgNV BAMTKEMyRjc4QjJDMTVCRkFBNUUzNzU4REVBQkU2RjJEQUEyREM4ODc3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4GydHQnGVMgIYpLZdU3aN0+vN LcmUmFdSCaEF87C/JfmYIgA22chnAONykZaHnmNo/kluolTF4WQ1vldUTxgFfi62 jCCvJ8GDlIF0d7BbGWDIhIva0PVE7o+IGnB3YXLnkR78RRHA0HvnnO1vI7xhs9St Tdu6GWXWrtlDoU0USJyY6gab8KZofIuCv1zWHiMOX1YWXopsJpvqmW3SIhMbKNFX wmml7yYmEkhUqSgvaOAS8OuevrzTl5mrzCOrA0IxWSyULj3d3Txg2cHJ9IA/d0i0 ytAibG1Z/C5V5fviMgFidSTNtrmzu+OpOwoxv+LXhzILB0ZoPJcpzTgsKmP/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwveLLBW/ql43WN6r5vLaotyIdykwHwYDVR0j BBgwFoAU0slnFYQuGURa6SaMl5zjyPV22I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNzdCQTgzQ0ZFRDlCNjdCOTFDMjEwRDI2Qjc4NUUxMEY0 QUMwMzRDMURBMzkxOUI1Q0E1RDFGRDFDNDA3ODc5LzAvRDJDOTY3MTU4NDJFMTk0 NDVBRTkyNjhDOTc5Q0UzQzhGNTc2RDg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkM5NjcxNTg0MkUxOTQ0NUFF OTI2OEM5NzlDRTNDOEY1NzZEODhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjc3QkE4M0NGRUQ5QjY3QjkxQzIxMEQyNkI3ODVFMTBGNEFDMDM0QzFE QTM5MTlCNUNBNUQxRkQxQzQwNzg3OS8wL0QyQzk2NzE1ODQyRTE5NDQ1QUU5MjY4 Qzk3OUNFM0M4RjU3NkQ4OEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUxwsXZ0I7VOkFPvoV/4t8QGaN azgaAClJo3NyVTbKiNiuJrrB+Aud4KyyDO6l1lHlSTo8Nz7GqRkuWjIy7RwFSOE1 5DpXRC5mS50Z/NteK+9haV7y7K8ZxNg8ofYuwcU7Yz1ovdzRqEfuPvdFJ1Q3RKY2 26OCeIndb6od5djFEAHYz5QKFIqTzHcmXiH7frF34kUleR2hTi3zuDHmiH3KVXsL yxRFUDHtrvlcG3IaPLgqHCZSjSlnPsK3B65HlyKmI2KnVVIkz5Sg/9tpX9VDdgzJ 0njHfArtBEPHbhsNDCgSJlMySLJW72+RqS+4Op/d6QJAUonBD9iruKoW32eY -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:43 2025 by rpki-client