$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft File: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft (raw, json) Hash identifier: J/Ou7gDX3s/f4Gu/qO9lRVEgzYbasGRJ98lqvIQsJrY= Subject key identifier: BC:08:61:69:43:17:15:32:E3:FF:73:E4:F0:BD:AF:6E:20:D7:6B:F6 Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD Certificate issuer: /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Certificate serial: 406191A7CC9C0FE31BD18F7C25E6E8848FB73C20 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft Manifest number: 7D Signing time: Sun 19 Oct 2025 22:05:09 +0000 Manifest this update: Sun 19 Oct 2025 22:00:09 +0000 Manifest next update: Fri 24 Oct 2025 23:06:09 +0000 Files and hashes: 1: 323830333a643235303a3a2f33322d3438203d3e20323733313637.roa (hash: zqMMKCkFdouQccillLfonx6zoQUGUVMhftJE8TOMWWc=) 2: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl (hash: xNKguyJ2OzgNf2ClsZayKmFEJuYOUQ/IEnmEeuPAPMg=) 3: 323830333a643235303a3a2f33322d3438203d3e20323732383237.roa (hash: e58Gafs3SHJ2RbKcTBdQ4etki7t0Yu0X9IXpmL+ZrFM=) 4: 323830333a643235303a3a2f33322d3438203d3e20323733313430.roa (hash: geoujJRGCj9IdFnQTVkXi07vvN0KssDDUghEY7PjuWI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:61:91:a7:cc:9c:0f:e3:1b:d1:8f:7c:25:e6:e8:84:8f:b7:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Validity Not Before: Oct 19 22:00:09 2025 GMT Not After : Oct 24 23:06:09 2025 GMT Subject: CN=BC08616943171532E3FF73E4F0BDAF6E20D76BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:6c:9d:ef:b1:3a:19:8b:76:17:14:38:60: b3:87:16:cb:16:4a:82:8f:5b:d7:cc:8e:76:3e:7e: 64:43:e8:e4:0a:4a:42:b3:01:61:d4:17:5d:64:a5: ba:6a:64:1c:a5:25:48:94:bb:4d:d8:e0:01:1e:32: 55:e7:2a:ce:39:da:44:63:38:12:07:68:16:e0:e7: c3:d4:24:e7:3c:61:2d:dc:fc:1a:67:0e:83:ff:da: 4f:f0:01:35:29:79:24:bd:d9:da:9c:17:fc:3e:51: 45:ee:53:04:6e:82:42:a4:95:99:ea:06:76:48:ea: 88:c8:2a:98:ea:7a:41:f5:61:10:1c:d7:bd:75:ea: 49:5a:81:12:60:c3:16:40:02:70:38:6a:7f:b7:68: c6:04:a7:5a:38:dc:47:2b:7a:b8:13:cf:e8:30:03: 16:67:36:0c:a6:7d:e8:72:72:bc:fb:16:41:4f:2e: ae:38:3b:b8:5b:28:1b:ef:f9:a8:9a:72:36:6b:5a: a8:b7:b3:84:f8:11:36:3d:6c:c4:0e:cd:d1:d9:72: c1:76:9b:0a:20:46:17:2c:0e:37:5f:1b:0b:01:20: ce:6b:85:88:93:1d:9e:e2:55:71:0c:36:93:cd:3a: 2e:46:55:4b:10:6f:d9:a6:d0:bb:e8:c5:77:ed:9c: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:08:61:69:43:17:15:32:E3:FF:73:E4:F0:BD:AF:6E:20:D7:6B:F6 X509v3 Authority Key Identifier: keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:af:ea:3a:b6:87:fd:e6:eb:eb:81:17:5e:45:c8:3d:18:b2: 99:34:15:1f:74:3d:07:71:dc:1c:8c:75:df:c3:4f:8f:d8:73: 54:07:a9:2f:6d:94:54:d2:8e:44:78:53:b9:fe:3e:ef:af:4c: f0:9d:9a:fe:78:d1:26:96:b3:60:cd:78:aa:a6:68:9d:fa:15: 78:04:09:ef:fa:54:aa:d5:31:f9:db:79:2f:74:62:8d:26:54: 95:ff:a0:9c:42:6f:63:a6:2f:9a:0a:59:bd:73:80:b5:3a:bb: 17:7c:7c:e7:d1:6c:1d:78:55:77:ab:84:81:46:99:79:7b:41: e4:11:a0:7c:61:20:32:a4:f7:be:13:62:2d:e4:a3:49:4b:52: e6:37:c6:6c:fb:e0:41:2d:d5:9c:a8:f4:0a:a5:a6:5f:9d:3d: d9:b0:41:98:d5:e7:8e:16:27:b5:74:7d:2c:52:8b:1a:37:fa: ef:04:d0:d7:67:72:d7:6c:2a:82:ec:a1:ae:12:a5:a9:ea:e4: 38:df:4d:99:de:10:ee:d4:35:20:e5:d3:8f:9a:9e:5b:bf:80: 7c:68:a2:d2:81:6a:ae:17:68:c6:ab:63:e5:2b:e5:15:ce:20: 19:ba:87:61:85:8c:82:80:47:8d:94:00:3e:e8:72:e2:ca:cd: b7:01:0e:5a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQGGRp8ycD+Mb0Y98JebohI+3PCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD NzUwRENCRDAeFw0yNTEwMTkyMjAwMDlaFw0yNTEwMjQyMzA2MDlaMDMxMTAvBgNV BAMTKEJDMDg2MTY5NDMxNzE1MzJFM0ZGNzNFNEYwQkRBRjZFMjBENzZCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk42yd77E6GYt2FxQ4YLOHFssW SoKPW9fMjnY+fmRD6OQKSkKzAWHUF11kpbpqZBylJUiUu03Y4AEeMlXnKs452kRj OBIHaBbg58PUJOc8YS3c/BpnDoP/2k/wATUpeSS92dqcF/w+UUXuUwRugkKklZnq BnZI6ojIKpjqekH1YRAc17116klagRJgwxZAAnA4an+3aMYEp1o43EcrergTz+gw AxZnNgymfehycrz7FkFPLq44O7hbKBvv+aiacjZrWqi3s4T4ETY9bMQOzdHZcsF2 mwogRhcsDjdfGwsBIM5rhYiTHZ7iVXEMNpPNOi5GVUsQb9mm0LvoxXftnHybAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvAhhaUMXFTLj/3Pk8L2vbiDXa/YwHwYDVR0j BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wL0Q0M0VBREU1QjhDRDZEQ0Q4MEY3MEZE NDZBNkQxQkY0Qzc1MERDQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmr+o6tof95uvrgRdeRcg9GLKZ NBUfdD0HcdwcjHXfw0+P2HNUB6kvbZRU0o5EeFO5/j7vr0zwnZr+eNEmlrNgzXiq pmid+hV4BAnv+lSq1TH523kvdGKNJlSV/6CcQm9jpi+aClm9c4C1OrsXfHzn0Wwd eFV3q4SBRpl5e0HkEaB8YSAypPe+E2It5KNJS1LmN8Zs++BBLdWcqPQKpaZfnT3Z sEGY1eeOFie1dH0sUosaN/rvBNDXZ3LXbCqC7KGuEqWp6uQ4302Z3hDu1DUg5dOP mp5bv4B8aKLSgWquF2jGq2PlK+UVziAZuodhhYyCgEeNlAA+6HLiys23AQ5a -----END CERTIFICATE-----Generated at Mon Oct 20 17:27:30 2025 by rpki-client