$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft File: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft (raw, json) Hash identifier: KP9QUAcYJyhv1nRKyNISjE0BE8gqHe4HJYADZJ+ja1o= Subject key identifier: F3:75:07:BF:25:77:35:CD:22:6F:EF:59:3D:AD:7D:92:D8:27:A0:62 Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Certificate serial: 666B0674418290293A0F8D70DAC9AAB61D7F6EED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft Manifest number: 43 Signing time: Sun 19 Oct 2025 20:44:16 +0000 Manifest this update: Sun 19 Oct 2025 20:39:15 +0000 Manifest next update: Fri 24 Oct 2025 17:40:15 +0000 Files and hashes: 1: 3230302e32342e302e302f32332d3234203d3e203138363738.roa (hash: RDpns3uQkHJjJ6ZEVv0fHm7AtHuypdjnZoRTV11H/50=) 2: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl (hash: OOzizX6rwTTrKTvRWXuuuGjEFLC0EvSb844dAWuhUh4=) 3: 3230302e32342e322e302f32342d3234203d3e20323632353839.roa (hash: 8hwcwgOUQnslDeHwMH4mxXmu+aaYI3ja58BF7Smg5EA=) 4: 3230302e32342e342e302f32342d3234203d3e20323632353839.roa (hash: /cq/M3M2PBJx0XRNTOLE/4/zdKmI/6CURhYvAxoiK3k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6b:06:74:41:82:90:29:3a:0f:8d:70:da:c9:aa:b6:1d:7f:6e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Validity Not Before: Oct 19 20:39:15 2025 GMT Not After : Oct 24 17:40:15 2025 GMT Subject: CN=F37507BF257735CD226FEF593DAD7D92D827A062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:85:70:70:6e:fc:88:d2:f2:72:27:2d:0f: 2a:24:b6:04:da:3e:55:06:98:d9:f9:24:6f:6c:17: c5:52:3d:c6:58:10:37:8f:dd:98:0b:9f:d1:67:cd: 0d:4c:fb:8f:a2:98:68:18:33:b4:c2:02:6d:3e:9a: a8:a4:83:83:06:55:fb:d2:1a:74:32:e3:27:1d:5e: 10:19:67:74:8a:0e:37:f7:4b:ba:ce:21:a5:e3:4c: b4:5b:0e:86:6a:12:e0:7e:0c:b4:88:97:3f:e1:a3: a0:41:b2:49:2c:ef:66:3e:36:bd:8c:3e:dc:33:0f: e0:f7:fd:45:e0:81:17:57:c5:c5:b7:bc:5b:f0:38: a7:63:a3:c7:70:04:16:96:a6:8d:64:90:3c:1f:92: d3:70:53:01:d7:21:78:e2:69:32:4f:0e:e7:bf:b8: b1:e1:47:90:a3:e7:70:c7:81:09:80:b3:45:b3:ba: f2:ea:f1:23:9f:d3:81:cc:9e:c7:a8:09:6d:b9:8f: 67:59:4a:84:bd:00:8d:96:e3:74:33:e0:28:6a:c2: d0:43:b0:c8:16:4d:7c:47:7d:86:5a:d9:af:46:7c: b1:e7:33:1e:13:ec:2a:93:44:b3:c1:41:c7:39:9d: 12:e0:0e:68:e5:3d:bb:6b:1c:be:66:2d:91:53:80: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:75:07:BF:25:77:35:CD:22:6F:EF:59:3D:AD:7D:92:D8:27:A0:62 X509v3 Authority Key Identifier: keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:45:61:4e:ce:3e:28:81:d3:1d:45:9b:58:6d:67:0c:49:b1: 4a:44:ee:7c:fb:3d:6a:f1:d9:52:61:e0:2b:c0:d0:02:6b:b0: 22:c8:bd:57:3e:ef:65:76:e3:1a:c0:80:26:34:b6:9e:3b:9b: cd:7b:ce:7d:6b:04:e9:3c:d4:33:cc:94:dd:b3:27:8d:1d:29: 49:01:01:f8:61:d8:cf:ea:d9:3c:6b:74:c6:8a:2f:52:b1:4b: 12:1d:0f:9e:7c:c9:d4:7a:1d:ec:f2:d1:3f:58:01:c7:5a:03: 2b:2a:e3:10:e7:d0:e9:08:ab:8e:8b:d7:ef:38:2f:dd:94:b4: 41:33:50:00:ca:a9:3e:d6:eb:4b:f6:44:49:19:36:c6:b1:41: 3a:9c:af:25:f7:70:42:d3:5c:17:5b:2b:31:9b:96:89:a9:de: 59:0f:c9:7b:60:39:12:05:27:24:0c:3b:27:1f:fe:ff:ae:fb: 02:ff:f5:8b:4b:9a:8c:0b:a2:d6:23:d7:9c:7f:9b:1a:a3:bf: be:9b:b6:57:47:df:c1:51:e0:a2:d5:3a:4a:45:f4:32:a3:58: 97:dd:8b:5b:c4:85:73:8a:04:f4:52:a6:32:f1:0d:07:49:15: cf:05:24:ed:4f:1d:87:02:6a:54:cd:fe:ea:cd:9f:33:2c:b6: 2d:0b:1b:e7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZmsGdEGCkCk6D41w2smqth1/bu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFOUYwMzVGOEIxNkQxRTk4QjkxOUI0RUZDNzM5NzhB M0EyRThBMzAeFw0yNTEwMTkyMDM5MTVaFw0yNTEwMjQxNzQwMTVaMDMxMTAvBgNV BAMTKEYzNzUwN0JGMjU3NzM1Q0QyMjZGRUY1OTNEQUQ3RDkyRDgyN0EwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClIVwcG78iNLycictDyoktgTa PlUGmNn5JG9sF8VSPcZYEDeP3ZgLn9FnzQ1M+4+imGgYM7TCAm0+mqikg4MGVfvS GnQy4ycdXhAZZ3SKDjf3S7rOIaXjTLRbDoZqEuB+DLSIlz/ho6BBskks72Y+Nr2M PtwzD+D3/UXggRdXxcW3vFvwOKdjo8dwBBaWpo1kkDwfktNwUwHXIXjiaTJPDue/ uLHhR5Cj53DHgQmAs0WzuvLq8SOf04HMnseoCW25j2dZSoS9AI2W43Qz4ChqwtBD sMgWTXxHfYZa2a9GfLHnMx4T7CqTRLPBQcc5nRLgDmjlPbtrHL5mLZFTgET3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU83UHvyV3Nc0ib+9ZPa19ktgnoGIwHwYDVR0j BBgwFoAUjenwNfixbR6YuRm078c5eKOi6KMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERjMzRDkwOTc5QTlBRjMxNDc4QkFGQzRCQjczRkEyNTk5 OEE3MDkxOUVERjE4N0U4MTU0MEM4QUJGMTQyODk3LzAvOERFOUYwMzVGOEIxNkQx RTk4QjkxOUI0RUZDNzM5NzhBM0EyRThBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REU5RjAzNUY4QjE2RDFFOThC OTE5QjRFRkM3Mzk3OEEzQTJFOEEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREYzM0Q5MDk3OUE5QUYzMTQ3OEJBRkM0QkI3M0ZBMjU5OThBNzA5MTlF REYxODdFODE1NDBDOEFCRjE0Mjg5Ny8wLzhERTlGMDM1RjhCMTZEMUU5OEI5MTlC NEVGQzczOTc4QTNBMkU4QTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmRWFOzj4ogdMdRZtYbWcMSbFK RO58+z1q8dlSYeArwNACa7AiyL1XPu9lduMawIAmNLaeO5vNe859awTpPNQzzJTd syeNHSlJAQH4YdjP6tk8a3TGii9SsUsSHQ+efMnUeh3s8tE/WAHHWgMrKuMQ59Dp CKuOi9fvOC/dlLRBM1AAyqk+1utL9kRJGTbGsUE6nK8l93BC01wXWysxm5aJqd5Z D8l7YDkSBSckDDsnH/7/rvsC//WLS5qMC6LWI9ecf5sao7++m7ZXR9/BUeCi1TpK RfQyo1iX3YtbxIVzigT0UqYy8Q0HSRXPBSTtTx2HAmpUzf7qzZ8zLLYtCxvn -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:09 2025 by rpki-client