$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft File: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft (raw, json) Hash identifier: xXIjZSOQ7Rzgq01OekzXnOQomrg1v4mUze86q/wU4Js= Subject key identifier: B0:0C:E6:69:BC:06:1E:4B:5B:57:6C:F2:6A:85:BC:C5:14:6E:C3:CE Authority key identifier: D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5 Certificate issuer: /CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5 Certificate serial: 488FA97E3E5CB117AC1ADB5DFB3F1D6077C662F6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft Manifest number: 0123 Signing time: Mon 20 Oct 2025 02:37:58 +0000 Manifest this update: Mon 20 Oct 2025 02:32:58 +0000 Manifest next update: Fri 24 Oct 2025 20:19:58 +0000 Files and hashes: 1: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl (hash: vG6xRXZG0VMgmnM90ECKk5HiFf+8CPstPuf9mZYga8o=) 2: 34352e3138392e3131392e302f32342d3234203d3e20323639383637.roa (hash: vY+MQl3uNJuLOfblqtskseOQr2WJVp4QQCG30RccBB4=) 3: 323830313a31353a373030303a3a2f34382d3438203d3e20323639383637.roa (hash: 0wS+mvLE2Nv0YFVR+HZgUIyvob6LC2FurHqmQHnQRLo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8f:a9:7e:3e:5c:b1:17:ac:1a:db:5d:fb:3f:1d:60:77:c6:62:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5 Validity Not Before: Oct 20 02:32:58 2025 GMT Not After : Oct 24 20:19:58 2025 GMT Subject: CN=B00CE669BC061E4B5B576CF26A85BCC5146EC3CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:c0:48:c5:9e:87:a7:ef:c9:2a:0e:af:0f: fa:f1:d5:a0:9d:8d:74:be:69:9c:1a:51:af:b0:69: b1:8d:97:31:35:b0:fc:c4:60:49:48:51:26:40:08: 16:0d:8a:74:56:a1:95:be:b0:5b:a5:81:83:df:5a: ca:6e:3a:16:eb:d0:3c:63:2e:b9:d5:ce:c9:55:bd: d4:3f:36:27:c8:52:b7:b8:0e:b7:e7:b2:ed:cc:aa: fb:55:04:08:f2:e0:34:07:12:9c:aa:40:66:c7:ff: 43:f8:1e:b7:6d:40:21:25:88:33:ea:84:54:c2:77: 33:17:59:ce:f4:e8:57:8e:e6:29:fb:40:e9:3f:37: 36:5b:70:45:c2:4e:ff:da:62:29:0c:8a:1d:c6:2b: 82:62:47:26:38:db:cc:cf:40:bd:c5:89:3c:5f:6e: e0:5b:9b:94:cd:9f:91:f8:57:38:df:e8:39:a3:22: 1b:62:9b:6a:0e:dc:a0:6d:0c:34:3f:dd:f5:67:a2: 7c:dc:38:4c:bb:3a:20:59:de:f6:e5:d0:c1:21:da: f9:25:36:73:07:67:06:9a:cf:ab:f2:ca:c4:5a:d8: 14:8f:e2:63:51:cb:51:0c:ca:c2:81:d0:a3:ef:53: b6:27:b7:cc:e6:1b:7e:16:8a:32:73:27:b8:51:eb: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0C:E6:69:BC:06:1E:4B:5B:57:6C:F2:6A:85:BC:C5:14:6E:C3:CE X509v3 Authority Key Identifier: keyid:D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:74:94:37:79:91:b4:aa:c7:86:0e:f9:71:f6:b3:9c:39:37: 97:9e:6b:f6:b8:3c:f8:94:10:7e:e7:5b:94:b5:27:dc:e0:5f: 3a:54:b7:f1:13:d5:70:14:d6:cc:9c:87:17:de:ae:5e:75:9d: d6:a5:90:7f:67:a2:a1:12:0b:61:76:4c:a5:24:f2:7e:54:21: 43:d0:99:3b:27:84:e4:d2:01:2f:e8:16:31:d9:e5:01:89:51: 46:10:6a:49:bb:a2:1b:95:40:f0:47:45:21:f5:cb:43:1c:c6: fc:53:ee:66:4c:8d:c4:0d:d4:d0:05:c8:dd:2a:ec:23:a7:92: 28:2f:49:f5:26:a9:17:bf:9a:99:08:38:25:d1:5f:39:3c:ff: b8:fe:9e:e6:ae:33:0d:6e:48:70:c7:c1:b0:84:e6:2a:f9:bb: 97:a2:e5:ed:72:7e:44:8f:70:ec:72:fe:79:79:e1:4d:e8:72: c4:4e:7e:ae:72:90:1f:d9:4f:d5:6a:e2:78:bf:14:45:1d:28: 04:28:82:e5:5c:11:b1:45:0a:0a:50:3f:03:ac:f9:af:00:c5: cc:47:2c:f1:5e:f4:b8:03:9f:89:88:9c:c4:1f:51:3a:fd:df: 1f:74:98:b9:35:0d:a8:ff:87:b4:9c:28:01:bb:66:02:36:7f: 0d:fa:1b:47 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSI+pfj5csResGttd+z8dYHfGYvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwNDM5QTUzQTJFM0JDOTBEQjAxQkVDRTI2RTdDMDg4 OEU0N0VGNTAeFw0yNTEwMjAwMjMyNThaFw0yNTEwMjQyMDE5NThaMDMxMTAvBgNV BAMTKEIwMENFNjY5QkMwNjFFNEI1QjU3NkNGMjZBODVCQ0M1MTQ2RUMzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClG8BIxZ6Hp+/JKg6vD/rx1aCd jXS+aZwaUa+wabGNlzE1sPzEYElIUSZACBYNinRWoZW+sFulgYPfWspuOhbr0Dxj LrnVzslVvdQ/NifIUre4Drfnsu3MqvtVBAjy4DQHEpyqQGbH/0P4HrdtQCEliDPq hFTCdzMXWc706FeO5in7QOk/NzZbcEXCTv/aYikMih3GK4JiRyY428zPQL3FiTxf buBbm5TNn5H4Vzjf6DmjIhtim2oO3KBtDDQ/3fVnonzcOEy7OiBZ3vbl0MEh2vkl NnMHZwaaz6vyysRa2BSP4mNRy1EMysKB0KPvU7Ynt8zmG34WijJzJ7hR6y1hAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsAzmabwGHktbV2zyaoW8xRRuw84wHwYDVR0j BBgwFoAU2QQ5pTouO8kNsBvs4m58CIjkfvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRUE3RDc0RkU3NjEwNzA5MTBGREJGOUJCQzcyRkVGNkFD NDc3NkNGRTIzNjYzM0Y0RjMzQzI0MUU4MTNCRUQ2LzAvRDkwNDM5QTUzQTJFM0JD OTBEQjAxQkVDRTI2RTdDMDg4OEU0N0VGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOTA0MzlBNTNBMkUzQkM5MERC MDFCRUNFMjZFN0MwODg4RTQ3RUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0VBN0Q3NEZFNzYxMDcwOTEwRkRCRjlCQkM3MkZFRjZBQzQ3NzZDRkUy MzY2MzNGNEYzM0MyNDFFODEzQkVENi8wL0Q5MDQzOUE1M0EyRTNCQzkwREIwMUJF Q0UyNkU3QzA4ODhFNDdFRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsdJQ3eZG0qseGDvlx9rOcOTeX nmv2uDz4lBB+51uUtSfc4F86VLfxE9VwFNbMnIcX3q5edZ3WpZB/Z6KhEgthdkyl JPJ+VCFD0Jk7J4Tk0gEv6BYx2eUBiVFGEGpJu6IblUDwR0Uh9ctDHMb8U+5mTI3E DdTQBcjdKuwjp5IoL0n1JqkXv5qZCDgl0V85PP+4/p7mrjMNbkhwx8GwhOYq+buX ouXtcn5Ej3Dscv55eeFN6HLETn6ucpAf2U/VauJ4vxRFHSgEKILlXBGxRQoKUD8D rPmvAMXMRyzxXvS4A5+JiJzEH1E6/d8fdJi5NQ2o/4e0nCgBu2YCNn8N+htH -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:43 2025 by rpki-client