$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft File: 5D81157E960567670F7461B44557EFEA818501D2.mft (raw, json) Hash identifier: 0d4wqO94v6ZMKwbVpd66GTtwuEEn7q+0YtMwERUnRaY= Subject key identifier: 01:B7:13:93:17:F8:EF:F4:03:77:D6:86:3C:E0:0E:D2:89:51:98:FA Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 Certificate issuer: /CN=5D81157E960567670F7461B44557EFEA818501D2 Certificate serial: 167FFF5C4CFDEF409553E9766AE63AB2F21E89F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft Manifest number: 0131 Signing time: Sun 19 Oct 2025 03:27:31 +0000 Manifest this update: Sun 19 Oct 2025 03:22:31 +0000 Manifest next update: Thu 23 Oct 2025 19:02:31 +0000 Files and hashes: 1: 3230302e372e3136302e302f32302d3234203d3e203237383238.roa (hash: yhraEemo5oNZS1Vp/2RMyrvdvUHvcFt5radrCdAXO9E=) 2: 5D81157E960567670F7461B44557EFEA818501D2.crl (hash: lPWT0dtzgonGj6/SoSHqn58b66sPSf3r791K8UnMSIA=) 3: 323830313a3130343a3a2f34302d3437203d3e203237383238.roa (hash: U0g+ZhC8/zG80aq7e5Hpc9RnzXpIMukrBY3+kAVFjYE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 19:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7f:ff:5c:4c:fd:ef:40:95:53:e9:76:6a:e6:3a:b2:f2:1e:89:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2 Validity Not Before: Oct 19 03:22:31 2025 GMT Not After : Oct 23 19:02:31 2025 GMT Subject: CN=01B7139317F8EFF40377D6863CE00ED2895198FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fa:c1:20:d6:1e:6e:50:74:14:8e:1a:5c:28: af:76:9c:5b:94:08:16:be:f9:1b:dc:01:03:e8:22: 69:22:07:37:0b:52:65:97:55:fe:94:b0:2b:f4:8a: 58:7c:91:28:af:2a:c5:6a:b2:ee:05:1e:a0:42:18: 94:54:b7:ef:22:52:e6:63:d4:c4:69:f2:aa:3c:4c: f0:b2:2f:bb:24:d1:a0:30:4f:a9:dc:5b:90:c5:2b: 09:ce:2a:0b:11:29:e2:a5:dc:c2:7d:06:be:5a:58: 11:92:db:29:49:e6:2f:a5:68:01:a3:32:83:c1:ca: 72:b6:9a:a9:b5:52:b3:a2:e1:72:82:ff:27:fc:7e: fd:35:e6:42:dc:9d:c3:c7:62:f9:b0:f0:99:3f:81: 0e:90:76:f2:5a:57:1c:40:32:b5:0b:7f:8e:ac:fc: ed:3a:12:ab:73:fe:ec:d5:1c:31:90:c8:62:b0:f6: c5:ee:e7:b1:a4:21:10:72:b3:86:b3:45:86:1e:c7: 0d:52:32:fc:58:4c:d1:4a:88:17:b9:0f:80:ac:04: 0c:c1:c8:c6:94:42:81:fd:21:d0:2f:fa:74:8f:99: 8b:fb:3b:96:6d:e9:a7:18:a4:04:b7:12:44:da:62: 64:8b:38:4f:1f:60:46:78:5d:d3:b3:fc:d0:a4:ed: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:13:93:17:F8:EF:F4:03:77:D6:86:3C:E0:0E:D2:89:51:98:FA X509v3 Authority Key Identifier: keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3b:0d:74:84:4b:32:b3:63:50:6a:a1:c8:b1:48:c2:4d:22: 97:ed:a4:a4:93:cb:7b:8f:fe:fb:d0:8d:dd:af:c0:71:db:f7: ed:db:e1:39:9a:c5:18:ed:f1:7e:f5:36:14:97:69:b8:a2:9a: d0:eb:cc:4d:3c:31:ca:b4:38:e7:d7:0e:2b:d9:fb:8e:df:ba: a0:d8:61:d2:40:be:27:2e:f8:83:69:f9:00:fc:89:94:1e:f0: 68:64:bf:ec:af:b2:81:f6:85:de:7a:b3:d2:fc:07:48:44:25: f3:fa:84:55:85:6e:23:48:3a:a6:cf:5b:49:78:28:a0:4e:79: 89:79:cd:f0:e4:5e:15:0e:a8:34:4b:2c:1c:11:86:2c:00:42: 88:74:59:ac:cb:31:31:0f:47:5b:04:19:38:14:07:b0:02:87: 1e:90:9b:cd:f7:8f:97:ec:00:02:1b:3f:2a:ed:1f:35:f2:ed: 0d:ef:ad:5c:07:9f:bf:3f:20:92:dd:47:55:a0:59:22:7b:df: 35:52:ab:6e:a0:a3:40:52:74:ed:93:37:2b:d2:e7:a4:9b:f2: 4f:42:57:0e:82:d6:64:34:f8:fb:a8:9c:d0:22:f1:e9:bb:53: 1b:8b:12:05:2c:5c:b7:74:40:74:5b:3d:80:f6:66:36:e7:82: ae:8d:5f:6b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFn//XEz970CVU+l2auY6svIeifgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4 MTg1MDFEMjAeFw0yNTEwMTkwMzIyMzFaFw0yNTEwMjMxOTAyMzFaMDMxMTAvBgNV BAMTKDAxQjcxMzkzMTdGOEVGRjQwMzc3RDY4NjNDRTAwRUQyODk1MTk4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF+sEg1h5uUHQUjhpcKK92nFuU CBa++RvcAQPoImkiBzcLUmWXVf6UsCv0ilh8kSivKsVqsu4FHqBCGJRUt+8iUuZj 1MRp8qo8TPCyL7sk0aAwT6ncW5DFKwnOKgsRKeKl3MJ9Br5aWBGS2ylJ5i+laAGj MoPBynK2mqm1UrOi4XKC/yf8fv015kLcncPHYvmw8Jk/gQ6QdvJaVxxAMrULf46s /O06Eqtz/uzVHDGQyGKw9sXu57GkIRBys4azRYYexw1SMvxYTNFKiBe5D4CsBAzB yMaUQoH9IdAv+nSPmYv7O5Zt6acYpAS3EkTaYmSLOE8fYEZ4XdOz/NCk7SKtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAbcTkxf47/QDd9aGPOAO0olRmPowHwYDVR0j BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2 NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3 NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzVEODExNTdFOTYwNTY3NjcwRjc0NjFC NDQ1NTdFRkVBODE4NTAxRDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7Ow10hEsys2NQaqHIsUjCTSKX 7aSkk8t7j/770I3dr8Bx2/ft2+E5msUY7fF+9TYUl2m4oprQ68xNPDHKtDjn1w4r 2fuO37qg2GHSQL4nLviDafkA/ImUHvBoZL/sr7KB9oXeerPS/AdIRCXz+oRVhW4j SDqmz1tJeCigTnmJec3w5F4VDqg0SywcEYYsAEKIdFmsyzExD0dbBBk4FAewAoce kJvN94+X7AACGz8q7R818u0N761cB5+/PyCS3UdVoFkie981UqtuoKNAUnTtkzcr 0uekm/JPQlcOgtZkNPj7qJzQIvHpu1MbixIFLFy3dEB0Wz2A9mY254KujV9r -----END CERTIFICATE-----Generated at Mon Oct 20 16:32:33 2025 by rpki-client