$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft File: 866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft (raw, json) Hash identifier: DkoqoctU+Vy6l1tDBJD+TTro/kD6rgfiF8JSAHDjQBI= Subject key identifier: ED:03:20:11:B2:FB:B5:7D:2B:A2:90:77:06:D9:E2:33:67:AA:7B:AB Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F Certificate issuer: /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F Certificate serial: 4036FAAE86C829848AA6A7560A4C36482F70324A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft Manifest number: 012F Signing time: Mon 20 Oct 2025 16:42:30 +0000 Manifest this update: Mon 20 Oct 2025 16:37:30 +0000 Manifest next update: Fri 24 Oct 2025 23:50:30 +0000 Files and hashes: 1: 3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa (hash: BE1KVmubb/bReeoI+nfbQXG78miJMdzKDpUPzKYw1Ww=) 2: 3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa (hash: SW2TQjbEF0kUJhHESaaFLZTgmFhhYA4TqzVS2kv01Dk=) 3: 3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa (hash: f660PTLDT2nhjTTrtpq5KZyVrpDQDuQ7Rpbsyr0rhws=) 4: 3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa (hash: utKfbItlMxe6olWWK8DsXGD6XCKOJbHF+JuyR7131w0=) 5: 323830333a616131303a3a2f33322d3438203d3e20323731393236.roa (hash: C2SltXQZnvvY3PNwNnCpDsytDi4bf1yd876HHt1Z18Y=) 6: 866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl (hash: JHwxC/IaOjpUptAlOELT7st60UN2UUQEy01TNNglPcM=) 7: 3139302e3131332e35312e302f32342d3234203d3e20323731393236.roa (hash: sR9coDYh2RgMySmZCppoKng/QyAqpAtqs+YGGc7PG3Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:36:fa:ae:86:c8:29:84:8a:a6:a7:56:0a:4c:36:48:2f:70:32:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F Validity Not Before: Oct 20 16:37:30 2025 GMT Not After : Oct 24 23:50:30 2025 GMT Subject: CN=ED032011B2FBB57D2BA2907706D9E23367AA7BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:1e:3f:f2:c4:8c:9b:e2:66:c9:9e:d8:ac: d0:4a:cb:2b:8d:5e:99:1b:ca:c3:da:a9:c2:9c:1a: ce:7d:f5:23:02:10:54:62:ae:c8:fa:f3:12:0d:4f: 64:c7:9f:06:10:14:2a:77:f5:08:8a:35:f4:5e:18: b0:aa:3d:a7:d4:16:ba:42:2d:68:2d:e5:da:0c:d4: 69:08:a6:80:41:22:b3:6e:25:80:b1:f7:8a:7e:a5: dc:1a:9d:f9:28:05:b2:dc:ae:d6:30:a6:1a:e9:54: 2a:59:a7:da:d3:1f:a5:a4:be:f1:85:d2:19:ed:7a: 51:2a:fe:7d:d9:dd:ef:12:f8:88:7a:91:d1:94:b9: 37:48:c3:43:12:1d:b6:79:79:5b:db:23:ff:d4:b2: 66:c3:7f:dd:09:06:1b:6d:ed:5c:5e:a6:ed:f0:18: b7:23:7d:46:d6:41:27:7b:eb:2c:ed:11:cc:8c:50: e5:e2:2f:6f:ce:d4:38:59:41:ef:dd:d6:88:76:93: dc:86:d1:99:e0:aa:e3:4f:a8:d6:ab:52:7a:6f:f2: 1a:5d:da:6a:97:d7:18:61:34:67:82:b3:cb:45:e7: 7b:e8:c2:f4:fc:c5:14:1b:22:a3:e7:30:53:37:ba: 99:0f:31:b7:c3:65:ef:54:0b:9f:c4:a3:0a:80:b8: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:03:20:11:B2:FB:B5:7D:2B:A2:90:77:06:D9:E2:33:67:AA:7B:AB X509v3 Authority Key Identifier: keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:71:e2:3b:f5:6b:f0:40:16:d3:73:72:7d:ef:cd:d6:e5:96: 8a:69:be:2d:69:55:50:3d:0f:41:3d:09:7d:f7:e7:4b:12:9e: 78:4a:37:5f:97:d3:97:20:50:8e:49:4d:ed:82:11:01:33:9f: 90:e3:c1:e1:f3:65:47:4a:92:2a:02:1e:3e:ca:81:4a:03:3c: a6:c6:90:7f:a9:4c:6f:cf:c3:22:92:8e:62:bb:b2:ec:2e:28: 7f:f3:c3:cb:31:cf:73:d8:2f:27:ec:20:ac:34:9e:4f:ad:66: 01:93:4d:28:50:fb:84:5e:2a:a7:a1:29:66:06:62:83:cf:a9: 84:5b:80:dd:0f:ad:c4:fb:91:88:3b:32:4e:2c:74:ec:c8:ba: f9:ac:a2:fc:29:67:07:79:d2:00:92:95:a5:23:13:8a:c4:ba: 95:78:ff:59:e4:66:4b:ee:22:db:7a:62:20:eb:a9:41:d6:ac: 71:d3:c6:14:ab:49:62:a1:f5:83:7c:a6:1d:9d:99:d7:91:ac: 38:fc:38:17:5c:10:8a:78:a7:a7:d3:ec:8a:e3:31:e8:ee:14: 88:01:3d:6e:30:a5:71:5d:56:88:77:d8:13:ab:7d:74:c2:8e: 5e:04:40:e8:cc:2f:e0:f0:b7:bb:e0:9f:53:0f:ef:e4:cd:4f: 2d:86:80:e4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQDb6robIKYSKpqdWCkw2SC9wMkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QjdEQzVCRDlFOUNENTlGMzE2OTNDMzI3QUI3RTBB RURCODQwRjAeFw0yNTEwMjAxNjM3MzBaFw0yNTEwMjQyMzUwMzBaMDMxMTAvBgNV BAMTKEVEMDMyMDExQjJGQkI1N0QyQkEyOTA3NzA2RDlFMjMzNjdBQTdCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZh4/8sSMm+JmyZ7YrNBKyyuN XpkbysPaqcKcGs599SMCEFRirsj68xINT2THnwYQFCp39QiKNfReGLCqPafUFrpC LWgt5doM1GkIpoBBIrNuJYCx94p+pdwanfkoBbLcrtYwphrpVCpZp9rTH6WkvvGF 0hntelEq/n3Z3e8S+Ih6kdGUuTdIw0MSHbZ5eVvbI//UsmbDf90JBhtt7Vxepu3w GLcjfUbWQSd76yztEcyMUOXiL2/O1DhZQe/d1oh2k9yG0ZngquNPqNarUnpv8hpd 2mqX1xhhNGeCs8tF53vowvT8xRQbIqPnMFM3upkPMbfDZe9UC5/EowqAuKIVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7QMgEbL7tX0ropB3BtniM2eqe6swHwYDVR0j BBgwFoAUhmt9xb2enNWfMWk8Mnq34K7bhA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DN0VERTI5RUJCQ0YzM0REOTA1RDU3MTczRTRCMEM4M0M1 RTM3RDY1RTBGRTM2RjlBNzQ2M0FGRDMxRUZFNEFGLzAvODY2QjdEQzVCRDlFOUNE NTlGMzE2OTNDMzI3QUI3RTBBRURCODQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjZCN0RDNUJEOUU5Q0Q1OUYz MTY5M0MzMjdBQjdFMEFFREI4NDBGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzdFREUyOUVCQkNGMzNERDkwNUQ1NzE3M0U0QjBDODNDNUUzN0Q2NUUw RkUzNkY5QTc0NjNBRkQzMUVGRTRBRi8wLzg2NkI3REM1QkQ5RTlDRDU5RjMxNjkz QzMyN0FCN0UwQUVEQjg0MEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGceI79WvwQBbTc3J9783W5ZaK ab4taVVQPQ9BPQl99+dLEp54Sjdfl9OXIFCOSU3tghEBM5+Q48Hh82VHSpIqAh4+ yoFKAzymxpB/qUxvz8Miko5iu7LsLih/88PLMc9z2C8n7CCsNJ5PrWYBk00oUPuE XiqnoSlmBmKDz6mEW4DdD63E+5GIOzJOLHTsyLr5rKL8KWcHedIAkpWlIxOKxLqV eP9Z5GZL7iLbemIg66lB1qxx08YUq0liofWDfKYdnZnXkaw4/DgXXBCKeKen0+yK 4zHo7hSIAT1uMKVxXVaId9gTq310wo5eBEDozC/g8Le74J9TD+/kzU8thoDk -----END CERTIFICATE-----Generated at Tue Oct 21 02:01:34 2025 by rpki-client