$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft File: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft (raw, json) Hash identifier: /c/H3lKJLglR7GjAlngQ++Z8Wm+XseO+X8XOYZnJuU8= Subject key identifier: 2A:66:51:2D:A7:2D:7A:DD:F5:B7:59:77:04:07:69:2A:1E:D1:6E:C9 Authority key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 Certificate issuer: /CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Certificate serial: 0FD2EF71878D3BEA56580AF32E9356035CDAB95C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft Manifest number: 0134 Signing time: Mon 20 Oct 2025 05:10:00 +0000 Manifest this update: Mon 20 Oct 2025 05:05:00 +0000 Manifest next update: Fri 24 Oct 2025 08:30:00 +0000 Files and hashes: 1: 3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa (hash: qUaUogpkuXlI6UdZShWT28vTDeo497JS7pQvOTMptlo=) 2: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl (hash: m5w6L64ExVrBhSomVhFIGZnW5zfRNH04NdWpszfAvxo=) 3: 323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa (hash: SLmOXsQAz+Y6eTT1rCpJx8cfBuSzYasoltxqUKom0Ew=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d2:ef:71:87:8d:3b:ea:56:58:0a:f3:2e:93:56:03:5c:da:b9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Validity Not Before: Oct 20 05:05:00 2025 GMT Not After : Oct 24 08:30:00 2025 GMT Subject: CN=2A66512DA72D7ADDF5B759770407692A1ED16EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:38:31:92:9d:21:28:47:2f:78:bf:08:4f: 85:c9:2f:c2:a7:af:7c:38:5c:78:27:3b:bb:74:2c: 7d:39:58:8e:1f:10:4c:22:0c:fd:ec:0c:d2:be:4b: a6:f9:75:6b:20:ea:de:16:f9:73:8b:0d:b3:f7:76: 36:4b:c8:ac:b5:67:fd:26:03:0e:5c:80:bd:0d:ae: 4e:9b:3c:cb:3c:a0:c1:18:1a:ab:76:fe:24:e2:dc: e1:c6:b4:9e:ed:f3:c1:d7:c4:d0:cb:bc:62:5a:c0: 07:34:b3:41:d3:b6:51:f9:13:e5:e3:de:2e:5c:cd: 19:b4:b8:41:33:04:b4:75:74:ee:b1:d9:b2:93:db: 0a:13:f1:1a:86:08:f1:16:54:90:43:4a:a6:80:fa: e7:e8:de:e9:e8:18:04:bb:1a:92:66:48:ce:cd:9c: 4b:c2:01:0b:3d:96:51:dc:50:c5:b2:15:99:21:01: c5:f0:52:f3:7f:29:99:69:7f:2f:42:f9:b0:2d:00: 64:0b:e0:b6:57:46:5f:86:e2:28:40:de:ad:3d:b9: ff:63:1f:24:ad:61:ca:08:77:44:c4:60:05:40:a2: ba:d2:32:06:a7:21:ba:e4:88:55:70:fc:46:99:fb: d8:85:2b:6c:87:6a:25:ae:05:d1:44:a5:b7:36:80: ff:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:66:51:2D:A7:2D:7A:DD:F5:B7:59:77:04:07:69:2A:1E:D1:6E:C9 X509v3 Authority Key Identifier: keyid:25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3c:a3:f8:17:6c:b2:75:de:d2:86:85:9f:69:c3:9b:c4:67: d7:0b:a8:1a:45:03:d0:3a:6b:f0:8d:b8:57:fb:f7:4e:53:dc: 28:8d:09:34:79:35:04:13:92:3f:ac:d0:6a:17:21:34:9b:69: 23:0f:1c:81:91:bc:8e:b6:69:d8:a5:e2:3a:16:7b:31:25:9d: 4e:32:9c:dc:ed:42:ab:f6:5f:40:c1:b2:f4:23:9d:7e:f4:7a: 37:97:f2:4a:05:a4:7a:17:e5:6f:ef:fe:24:d9:70:13:6e:aa: 4f:b4:bb:59:db:72:b7:e8:16:a8:b8:57:a3:30:b4:f3:e7:cd: d4:dc:ce:0a:eb:27:0e:ad:cc:02:c6:ba:3e:7d:dc:2e:54:65: 60:03:27:2e:91:89:72:3f:3d:a0:89:ee:46:6c:86:ae:04:1a: ec:42:8e:9f:39:87:09:37:d6:88:c1:b5:c1:01:11:0a:c7:ea: a4:1a:e9:88:43:75:77:d8:e7:d8:8c:b8:cf:4b:03:b1:27:ee: 25:70:df:b4:b2:bf:02:70:a9:82:46:77:12:48:c0:b1:82:e4: 0b:61:64:56:5f:23:ab:8f:65:1e:c1:ad:95:89:eb:39:da:f4: 69:a9:18:74:26:dc:1b:de:7e:5e:6b:ca:99:55:60:25:dd:ba: fc:71:f8:8f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD9LvcYeNO+pWWArzLpNWA1zauVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERERFQzJBODA0NEY2ODhBQTc5OUE2NjEyQzQzNEIy QUJFQTk3OTAeFw0yNTEwMjAwNTA1MDBaFw0yNTEwMjQwODMwMDBaMDMxMTAvBgNV BAMTKDJBNjY1MTJEQTcyRDdBRERGNUI3NTk3NzA0MDc2OTJBMUVEMTZFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNDgxkp0hKEcveL8IT4XJL8Kn r3w4XHgnO7t0LH05WI4fEEwiDP3sDNK+S6b5dWsg6t4W+XOLDbP3djZLyKy1Z/0m Aw5cgL0Nrk6bPMs8oMEYGqt2/iTi3OHGtJ7t88HXxNDLvGJawAc0s0HTtlH5E+Xj 3i5czRm0uEEzBLR1dO6x2bKT2woT8RqGCPEWVJBDSqaA+ufo3unoGAS7GpJmSM7N nEvCAQs9llHcUMWyFZkhAcXwUvN/KZlpfy9C+bAtAGQL4LZXRl+G4ihA3q09uf9j HyStYcoId0TEYAVAorrSMganIbrkiFVw/EaZ+9iFK2yHaiWuBdFEpbc2gP9ZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKmZRLactet31t1l3BAdpKh7RbskwHwYDVR0j BBgwFoAUJd3ewqgET2iKp5mmYSxDSyq+qXkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMTQ5QzFBNjNFQTE0Njg5RUEwNEZBQUY2NUVEQ0U5RDU3 MDZBNzZEMEY2OTBDOTM5MDM2OTY4Nzg4REYyOTJGLzAvMjVERERFQzJBODA0NEY2 ODhBQTc5OUE2NjEyQzQzNEIyQUJFQTk3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUREREVDMkE4MDQ0RjY4OEFB Nzk5QTY2MTJDNDM0QjJBQkVBOTc5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjE0OUMxQTYzRUExNDY4OUVBMDRGQUFGNjVFRENFOUQ1NzA2QTc2RDBG NjkwQzkzOTAzNjk2ODc4OERGMjkyRi8wLzI1RERERUMyQTgwNDRGNjg4QUE3OTlB NjYxMkM0MzRCMkFCRUE5NzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmPKP4F2yydd7ShoWfacObxGfX C6gaRQPQOmvwjbhX+/dOU9wojQk0eTUEE5I/rNBqFyE0m2kjDxyBkbyOtmnYpeI6 FnsxJZ1OMpzc7UKr9l9AwbL0I51+9Ho3l/JKBaR6F+Vv7/4k2XATbqpPtLtZ23K3 6BaouFejMLTz583U3M4K6ycOrcwCxro+fdwuVGVgAycukYlyPz2gie5GbIauBBrs Qo6fOYcJN9aIwbXBAREKx+qkGumIQ3V32OfYjLjPSwOxJ+4lcN+0sr8CcKmCRncS SMCxguQLYWRWXyOrj2Uewa2Vies52vRpqRh0Jtwb3n5ea8qZVWAl3br8cfiP -----END CERTIFICATE-----Generated at Tue Oct 21 01:39:33 2025 by rpki-client