$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: 2dXhfRu3M39BfeHD/sfSPGxp8oF/Qs+zwfoW+FIzaj8= Subject key identifier: 15:5C:74:AA:5E:98:F5:DA:7F:EB:3B:9C:B6:9E:56:48:2F:90:C2:45 Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 76FE2EBEAB8743B375877721A9E1AD349EE46843 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: 0127 Signing time: Sun 19 Oct 2025 18:32:57 +0000 Manifest this update: Sun 19 Oct 2025 18:27:57 +0000 Manifest next update: Sat 25 Oct 2025 12:47:57 +0000 Files and hashes: 1: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: lk62iRGc6yqijvB5SfBRynlndscd7atMIAP4v/udWF0=) 2: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: Tpu5mtmY/E6RnTTm3zG1QJJywy3a24/BBCfGwU0oGCo=) 3: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: awSHfYu5olO3Sr1hdIR9ko/TcZ0IMSchh5DLzNlGd+k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fe:2e:be:ab:87:43:b3:75:87:77:21:a9:e1:ad:34:9e:e4:68:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Oct 19 18:27:57 2025 GMT Not After : Oct 25 12:47:57 2025 GMT Subject: CN=155C74AA5E98F5DA7FEB3B9CB69E56482F90C245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6a:87:2b:84:fa:11:c2:39:88:77:fc:a4:e1: 15:30:b3:64:e9:c1:01:2a:ee:ce:07:a1:37:8b:c2: 2a:9a:b8:fc:66:3b:af:88:cb:c5:4a:a1:b9:62:95: 55:33:ed:ac:1a:15:d6:81:3e:00:3f:21:28:61:96: 95:2b:53:b5:e0:c4:fb:ef:45:fc:b6:49:bd:bc:2b: c7:1f:ec:9c:82:c4:62:c7:78:ba:aa:78:e1:44:fc: 90:2e:a9:fb:b3:6a:76:c3:e7:0c:38:38:58:43:23: 83:16:a5:0a:59:2d:ba:2f:5e:91:2e:cd:97:2d:c5: 63:67:c4:0e:64:6f:fc:90:d9:50:e7:da:79:9e:ce: b4:03:81:17:04:d6:95:49:df:4b:c3:26:07:ad:33: b0:b6:5f:2c:98:f5:f1:3c:f1:3a:04:8f:3e:71:6a: 55:1a:d6:86:a7:da:05:6e:34:84:5b:19:91:f1:7a: 6b:56:78:8c:53:cc:b7:c8:95:49:a0:9d:3d:43:9b: 8c:51:b0:f9:87:84:10:c1:2f:26:03:9f:36:62:25: b8:0d:88:0c:80:8f:e6:49:86:66:9b:5d:7b:d1:6e: ad:69:f8:a3:af:0c:d2:61:70:1f:dc:33:40:27:00: 02:86:28:da:df:22:f3:86:f9:e4:36:be:f7:ad:ab: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5C:74:AA:5E:98:F5:DA:7F:EB:3B:9C:B6:9E:56:48:2F:90:C2:45 X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f2:ea:1e:72:9a:f4:ed:d2:dd:b1:42:20:22:ce:e1:0b:06: e5:f9:74:86:aa:9d:24:96:a4:80:74:25:0f:89:d9:27:2b:36: 92:5c:65:10:f6:3b:4e:6a:13:22:79:95:4c:c7:6b:f0:0d:80: d5:c6:b1:fb:58:8d:d4:b6:cf:6e:3c:37:78:f2:b2:75:3f:32: 8d:d7:c7:ce:2f:43:7d:20:98:79:e5:a1:c7:d9:00:8b:7a:04: f2:75:86:0a:d0:5e:29:e3:4b:25:2d:7f:9a:a4:60:32:18:63: 8b:c2:a8:33:32:ee:77:8a:ec:a5:01:0a:23:45:71:31:e1:27: 84:fd:47:01:63:a2:6b:e8:7f:7f:1f:03:3d:9a:97:95:e5:46: fe:0c:e8:31:10:07:f8:6a:72:a7:b4:25:ea:ca:9c:a3:5f:59: e0:80:8d:9b:8e:08:40:55:96:2d:6f:16:fb:b7:9b:65:06:26: 5e:6a:23:a9:94:af:0f:99:96:48:fb:12:e4:8b:ce:57:14:12: 29:a1:b4:97:d2:1d:e9:d8:ac:3c:80:6b:b0:0a:a0:2d:26:ef: 89:53:01:c3:c9:60:fb:e7:20:4b:52:fd:a1:ec:f8:29:cf:b3: cb:73:04:b6:b9:2f:61:1f:45:f7:6d:c2:39:d7:75:21:01:c5: 0f:e0:a1:5a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdv4uvquHQ7N1h3chqeGtNJ7kaEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNTEwMTkxODI3NTdaFw0yNTEwMjUxMjQ3NTdaMDMxMTAvBgNV BAMTKDE1NUM3NEFBNUU5OEY1REE3RkVCM0I5Q0I2OUU1NjQ4MkY5MEMyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkaocrhPoRwjmId/yk4RUws2Tp wQEq7s4HoTeLwiqauPxmO6+Iy8VKoblilVUz7awaFdaBPgA/IShhlpUrU7XgxPvv Rfy2Sb28K8cf7JyCxGLHeLqqeOFE/JAuqfuzanbD5ww4OFhDI4MWpQpZLbovXpEu zZctxWNnxA5kb/yQ2VDn2nmezrQDgRcE1pVJ30vDJgetM7C2XyyY9fE88ToEjz5x alUa1oan2gVuNIRbGZHxemtWeIxTzLfIlUmgnT1Dm4xRsPmHhBDBLyYDnzZiJbgN iAyAj+ZJhmabXXvRbq1p+KOvDNJhcB/cM0AnAAKGKNrfIvOG+eQ2vvetqzrxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFVx0ql6Y9dp/6zuctp5WSC+QwkUwHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAy8uoecpr07dLdsUIgIs7hCwbl +XSGqp0klqSAdCUPidknKzaSXGUQ9jtOahMieZVMx2vwDYDVxrH7WI3Uts9uPDd4 8rJ1PzKN18fOL0N9IJh55aHH2QCLegTydYYK0F4p40slLX+apGAyGGOLwqgzMu53 iuylAQojRXEx4SeE/UcBY6Jr6H9/HwM9mpeV5Ub+DOgxEAf4anKntCXqypyjX1ng gI2bjghAVZYtbxb7t5tlBiZeaiOplK8PmZZI+xLki85XFBIpobSX0h3p2Kw8gGuw CqAtJu+JUwHDyWD75yBLUv2h7Pgpz7PLcwS2uS9hH0X3bcI513UhAcUP4KFa -----END CERTIFICATE-----Generated at Mon Oct 20 17:40:10 2025 by rpki-client