$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft File: FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft (raw, json) Hash identifier: JIZ7bYdXkXlPJQcPu6RT7PwL30ju/NAJ3ose+HPGKrI= Subject key identifier: C9:BD:90:1B:F0:0D:E4:B9:0B:C0:0D:E6:95:56:B8:BE:C7:9E:20:57 Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4 Certificate issuer: /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4 Certificate serial: 1AD6F1E7B372747CE2E94F2BB7E9A35EF05E6A39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft Manifest number: 013B Signing time: Fri 31 Oct 2025 14:00:59 +0000 Manifest this update: Fri 31 Oct 2025 13:55:59 +0000 Manifest next update: Thu 06 Nov 2025 08:30:59 +0000 Files and hashes: 1: 34352e3232372e39342e302f32342d3234203d3e20323636363533.roa (hash: 7kFx1J08lnSpE4I1ab3yQMKneEmX/VmIFkz2XBQbZaw=) 2: FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl (hash: fleF+kWLk9Ot6Ul1hNI8KIIIq+t7Ino3gomxqF3kECg=) 3: 34352e3232372e39322e302f32322d3232203d3e20323636363533.roa (hash: /yTdZlxCznAvq1mx3AYNgRRVy0A987oOnA4zteaJNxM=) 4: 34352e3232372e39332e302f32342d3234203d3e20323636363533.roa (hash: rNDU2Hfr3Z1ZFwluiAlGSnOh8xcQ+pqCZ7Zt4VmAjhU=) 5: 323830333a383132303a3a2f33322d3332203d3e20323636363533.roa (hash: XgijXp/bTFYwtb3VJSgYKcM+7zzqAemjfJaCZ2TqAnU=) 6: 34352e3232372e39322e302f32342d3234203d3e20323636363533.roa (hash: 2QLDn4G1PF9gzY6XJBm6E/GXU4TZxwKyeE0p8grIpmE=) 7: 34352e3232372e39352e302f32342d3234203d3e20323636363533.roa (hash: TPcrRO0g+QcYqO0psycw6P+GtSc21T0fE0LpSRHLS3g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d6:f1:e7:b3:72:74:7c:e2:e9:4f:2b:b7:e9:a3:5e:f0:5e:6a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4 Validity Not Before: Oct 31 13:55:59 2025 GMT Not After : Nov 6 08:30:59 2025 GMT Subject: CN=C9BD901BF00DE4B90BC00DE69556B8BEC79E2057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:c3:a1:27:ff:97:b9:47:4e:92:8d:2b:5c: a5:28:f7:fc:53:b9:63:5b:9d:94:f7:42:2b:91:3e: 4a:92:fa:3a:8d:dd:6b:29:c4:5d:83:7a:fc:ff:0b: 40:16:b5:1b:0f:0d:96:36:0a:63:b7:25:20:d1:91: a7:59:b2:cb:80:dd:54:72:c0:3e:43:da:e1:16:41: 71:04:26:c9:f8:aa:9b:3c:5f:34:5e:c4:20:c3:55: 37:1e:56:18:f7:2c:58:b9:e2:ff:e6:92:8f:6d:ea: 18:94:14:e3:f7:00:19:17:1c:15:ce:07:30:59:7c: 6f:ae:52:1d:a8:3a:3e:f8:26:4b:d2:ef:ae:8e:f8: 67:f1:52:cb:97:ff:2c:ba:6f:96:7c:4c:59:60:0e: 9a:a8:22:18:50:40:9a:51:50:b6:1c:af:b5:92:d8: ad:3b:7c:74:9b:6b:a6:4b:ab:84:a6:6b:9f:c2:a1: 4c:76:ae:b6:ad:e7:b7:98:b9:dc:79:dd:e0:ad:0a: a5:06:9f:07:0a:f5:cf:14:45:13:b3:a3:1b:cf:1e: ad:8d:d3:07:3f:21:ba:0a:16:89:9f:15:7f:14:a8: cf:52:c5:56:9d:5e:80:1c:e0:4f:1c:62:b0:f7:29: 2f:0a:69:6e:09:6f:dc:ff:a1:46:7e:6b:71:91:ad: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BD:90:1B:F0:0D:E4:B9:0B:C0:0D:E6:95:56:B8:BE:C7:9E:20:57 X509v3 Authority Key Identifier: keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ad:b9:ab:7c:b2:cf:90:43:bd:4f:89:6b:6c:75:24:cf:b5: de:da:60:cb:b2:39:df:41:dd:9c:b7:a6:3f:57:fc:24:d9:d5: e0:5e:5c:e3:1c:37:9d:2f:74:21:df:d6:48:b2:d8:4b:76:06: 94:0b:72:8d:8b:f3:94:6f:e2:a7:32:06:f6:78:25:cc:e0:1e: 75:55:7a:f6:49:3a:0a:89:84:0d:1f:e2:aa:f4:96:61:23:54: 50:f2:56:da:a5:e6:86:39:96:d7:06:5d:79:ef:96:9a:32:82: 33:c6:3c:50:51:1a:2c:38:ce:ca:24:79:88:f6:90:16:a2:c2: eb:02:c3:69:71:f3:5e:21:40:9c:37:d7:43:7b:68:a7:16:a1: 3d:c5:72:2a:c9:0a:0c:0b:11:c8:c5:c6:e8:05:77:6f:d6:13: 47:cc:7e:12:9d:6e:f1:d0:19:ec:35:74:dc:de:84:0f:72:93: 20:e9:a8:48:28:3e:ba:7a:61:4b:e2:0c:7d:67:42:e0:84:64: 64:91:37:15:66:06:ea:1a:db:71:64:f9:2d:00:20:b3:76:72: 4c:4c:77:05:cb:e2:2c:8e:55:fb:ee:de:0e:74:3a:a2:2d:25: e3:d5:d7:fa:d6:4d:a5:4c:4f:72:4c:7c:f1:ce:94:f1:7c:6e: 58:cc:68:f7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGtbx57NydHzi6U8rt+mjXvBeajkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCQTUxMDZFNzBEOTFFMzg2MUI1Mzk1QjJEMTU2QzU2 RTk1ODlFNDAeFw0yNTEwMzExMzU1NTlaFw0yNTExMDYwODMwNTlaMDMxMTAvBgNV BAMTKEM5QkQ5MDFCRjAwREU0QjkwQkMwMERFNjk1NTZCOEJFQzc5RTIwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+8OhJ/+XuUdOko0rXKUo9/xT uWNbnZT3QiuRPkqS+jqN3WspxF2Devz/C0AWtRsPDZY2CmO3JSDRkadZssuA3VRy wD5D2uEWQXEEJsn4qps8XzRexCDDVTceVhj3LFi54v/mko9t6hiUFOP3ABkXHBXO BzBZfG+uUh2oOj74JkvS766O+GfxUsuX/yy6b5Z8TFlgDpqoIhhQQJpRULYcr7WS 2K07fHSba6ZLq4Sma5/CoUx2rrat57eYudx53eCtCqUGnwcK9c8URROzoxvPHq2N 0wc/IboKFomfFX8UqM9SxVadXoAc4E8cYrD3KS8KaW4Jb9z/oUZ+a3GRrZvjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyb2QG/AN5LkLwA3mlVa4vseeIFcwHwYDVR0j BBgwFoAU/7pRBucNkeOGG1OVstFWxW6VieQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRkZDQTc2NzYzOEE0REQzOUM2QTZEN0UyQkEzOTc3MkNE QTI5NkRFRTZCRjM2QTMzM0M3RkRDRTg5RDdGMjI1LzAvRkZCQTUxMDZFNzBEOTFF Mzg2MUI1Mzk1QjJEMTU2QzU2RTk1ODlFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkJBNTEwNkU3MEQ5MUUzODYx QjUzOTVCMkQxNTZDNTZFOTU4OUU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEZGQ0E3Njc2MzhBNEREMzlDNkE2RDdFMkJBMzk3NzJDREEyOTZERUU2 QkYzNkEzMzNDN0ZEQ0U4OUQ3RjIyNS8wL0ZGQkE1MTA2RTcwRDkxRTM4NjFCNTM5 NUIyRDE1NkM1NkU5NTg5RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQrbmrfLLPkEO9T4lrbHUkz7Xe 2mDLsjnfQd2ct6Y/V/wk2dXgXlzjHDedL3Qh39ZIsthLdgaUC3KNi/OUb+KnMgb2 eCXM4B51VXr2SToKiYQNH+Kq9JZhI1RQ8lbapeaGOZbXBl1575aaMoIzxjxQURos OM7KJHmI9pAWosLrAsNpcfNeIUCcN9dDe2inFqE9xXIqyQoMCxHIxcboBXdv1hNH zH4SnW7x0BnsNXTc3oQPcpMg6ahIKD66emFL4gx9Z0LghGRkkTcVZgbqGttxZPkt ACCzdnJMTHcFy+IsjlX77t4OdDqiLSXj1df61k2lTE9yTHzxzpTxfG5YzGj3 -----END CERTIFICATE-----Generated at Sun Nov 2 00:07:14 2025 by rpki-client