$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json) Hash identifier: s+8eRn4dEKPllBgkKrn3iIRZLPpuwqizCJiPD4aeI60= Subject key identifier: 4E:7D:50:F6:53:94:CB:B6:F5:97:E5:6E:20:92:CE:30:3F:32:3D:58 Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 6B29ED4656F68FEEF4F464840C0CAE0F01BFD28F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft Manifest number: 0132 Signing time: Sun 19 Oct 2025 07:00:11 +0000 Manifest this update: Sun 19 Oct 2025 06:55:11 +0000 Manifest next update: Sat 25 Oct 2025 01:18:11 +0000 Files and hashes: 1: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: gfviGrTFnzyeLB88khtlrnlCTNwPw5ULi+OBoE5f+t4=) 2: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: /D7cnLnJXa5ipFVdP+IaE3sgufXRlHkmM6F8ATrITQk=) 3: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: 8g4iby4gGlSFyTDkoB/fm7IVpj/7gXB4a+/JwGDiMkY=) 4: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: vZjAfk2z5Z6b+6GTrUBJdEEDa8DBAoi/pI9ehH+AnYk=) 5: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: 0u08Cid5xh0s+ifK8ZpB7h+HuLO4xH8CFKw8rUTG+LU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:29:ed:46:56:f6:8f:ee:f4:f4:64:84:0c:0c:ae:0f:01:bf:d2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: Oct 19 06:55:11 2025 GMT Not After : Oct 25 01:18:11 2025 GMT Subject: CN=4E7D50F65394CBB6F597E56E2092CE303F323D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:ce:32:b5:66:89:f5:93:5b:a2:21:dd:79: 16:8e:bf:1f:5e:04:32:26:1c:64:ec:f2:63:e3:66: 17:32:49:fc:eb:41:aa:0e:64:93:80:1a:28:4e:50: c1:30:d9:7f:b8:17:56:45:69:3e:db:e5:74:19:bf: 32:a6:60:3c:4a:fd:4a:22:2a:63:9f:03:54:23:30: 24:4a:31:d2:f0:56:a2:20:95:e4:92:bb:e0:d5:fc: dc:c1:37:4b:cb:65:2f:28:03:18:6b:e1:04:f1:d2: a7:94:f7:bb:73:fa:4f:bd:bd:ec:04:28:7d:c5:d4: 5f:f2:c2:9e:ef:f3:fc:25:30:ff:c4:7a:f1:f7:cd: 85:2d:4f:f5:ac:c3:42:a8:15:ba:8b:ec:71:6b:37: e1:11:a0:67:7b:49:1a:68:72:ce:ef:86:09:f7:3f: 7e:91:9c:d5:6a:ac:61:7b:24:14:84:d6:f9:07:eb: 78:91:a8:12:36:32:33:ce:b9:af:ac:50:45:a0:48: ee:22:ae:87:1f:05:cb:4f:52:62:91:e2:bd:c6:bc: 9f:9a:e0:79:78:75:f2:84:3d:ca:d0:64:16:e3:52: 75:4b:7c:fe:b0:c4:b5:ae:83:d1:c5:75:b6:26:c5: 88:84:f0:d7:b8:2a:05:9e:25:1c:7e:3c:40:f9:63: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:50:F6:53:94:CB:B6:F5:97:E5:6E:20:92:CE:30:3F:32:3D:58 X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:31:36:62:82:a6:5c:cb:dd:60:62:c1:06:89:51:6e:7b:d9: c9:4c:61:bb:fc:31:f2:00:3d:2f:b3:ba:c8:7c:f7:85:2e:c4: 0c:b1:02:0b:2c:be:92:81:06:4e:75:c2:cf:06:b1:13:1f:1d: a5:44:4f:c6:6c:99:96:c7:de:d4:aa:94:ad:ab:e1:97:48:97: ca:56:d9:d2:44:85:3f:48:fc:ba:d6:ad:a4:a5:f4:83:61:9c: 0b:a7:19:de:d6:70:6a:01:86:85:d7:32:9d:fb:af:be:fc:3e: ae:03:b4:b5:ff:2a:24:28:cf:a7:19:23:6a:d4:97:73:e9:a3: af:4c:e8:82:ac:91:eb:69:39:9a:b5:23:16:1e:4c:62:b4:66: 63:12:c0:2b:c9:f0:99:1d:2d:c4:1f:1f:e1:35:48:2f:82:e9: db:ae:6b:25:ff:d6:7e:59:68:37:78:9c:a7:45:be:d0:66:ed: 6f:4b:12:59:12:37:ec:2d:78:99:e3:bf:f5:0e:f9:42:e2:bb: 40:4e:86:d1:ce:e4:ab:81:14:0b:88:6e:be:1b:6e:44:8d:4d: 79:4e:bb:30:53:7c:f4:fa:f6:ce:39:42:56:69:18:fe:53:11: 05:dd:18:9b:79:98:22:bb:8f:43:96:ce:77:50:a7:1c:ba:3f: 32:a5:c3:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUayntRlb2j+709GSEDAyuDwG/0o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNTEwMTkwNjU1MTFaFw0yNTEwMjUwMTE4MTFaMDMxMTAvBgNV BAMTKDRFN0Q1MEY2NTM5NENCQjZGNTk3RTU2RTIwOTJDRTMwM0YzMjNENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UM4ytWaJ9ZNboiHdeRaOvx9e BDImHGTs8mPjZhcySfzrQaoOZJOAGihOUMEw2X+4F1ZFaT7b5XQZvzKmYDxK/Uoi KmOfA1QjMCRKMdLwVqIgleSSu+DV/NzBN0vLZS8oAxhr4QTx0qeU97tz+k+9vewE KH3F1F/ywp7v8/wlMP/EevH3zYUtT/Wsw0KoFbqL7HFrN+ERoGd7SRpocs7vhgn3 P36RnNVqrGF7JBSE1vkH63iRqBI2MjPOua+sUEWgSO4irocfBctPUmKR4r3GvJ+a 4Hl4dfKEPcrQZBbjUnVLfP6wxLWug9HFdbYmxYiE8Ne4KgWeJRx+PED5Y0F5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTn1Q9lOUy7b1l+VuIJLOMD8yPVgwHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsMTZigqZcy91gYsEGiVFue9nJ TGG7/DHyAD0vs7rIfPeFLsQMsQILLL6SgQZOdcLPBrETHx2lRE/GbJmWx97UqpSt q+GXSJfKVtnSRIU/SPy61q2kpfSDYZwLpxne1nBqAYaF1zKd+6++/D6uA7S1/yok KM+nGSNq1Jdz6aOvTOiCrJHraTmatSMWHkxitGZjEsAryfCZHS3EHx/hNUgvgunb rmsl/9Z+WWg3eJynRb7QZu1vSxJZEjfsLXiZ47/1DvlC4rtATobRzuSrgRQLiG6+ G25EjU15TrswU3z0+vbOOUJWaRj+UxEF3RibeZgiu49Dls53UKccuj8ypcOg -----END CERTIFICATE-----Generated at Mon Oct 20 00:36:10 2025 by rpki-client