$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft File: A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft (raw, json) Hash identifier: H69DAUG8WZAh4wt7qKJuwvGqu/IjsoCSEOSfURftcps= Subject key identifier: 3B:55:31:B3:6F:48:9E:36:DC:98:57:2F:0B:A2:2E:AD:E9:BA:4F:21 Authority key identifier: A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07 Certificate issuer: /CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907 Certificate serial: 16C809794294E7B6365312BD812AABD380235FE7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft Manifest number: 0136 Signing time: Tue 04 Nov 2025 02:59:11 +0000 Manifest this update: Tue 04 Nov 2025 02:54:11 +0000 Manifest next update: Sat 08 Nov 2025 15:20:11 +0000 Files and hashes: 1: 3139302e3130332e3131392e302f32342d3234203d3e20323635353534.roa (hash: C7XSX1h/+4WMJoR/W5saz6oaUSNqm+Fw5MTtoPq8CjY=) 2: 3139302e3130332e39362e302f31392d3234203d3e203237383535.roa (hash: 4u8m1blz369Okxvn304H1xuOu0hO2kvxYjp2BXgU28M=) 3: A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl (hash: JGTQVWXyqXCkb+Jl9jrhJidRILWoWO6zSBjNcntOJpU=) 4: 3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa (hash: 3dJUa7OTP0q9mOvs2JsamRkYVxtAPTJOujhTQG01Kno=) 5: 3139302e3130332e3131362e302f32342d3234203d3e20323635353534.roa (hash: kUDyQdS++csJ8Z3npRkcjwUtd8I2f2ftOGlOqjAwoF8=) 6: 323830333a313234303a3a2f33322d3438203d3e203237383535.roa (hash: GPfRSkFJh6tdaplaZPCup7AUjneSLyT0xoeg56kPmGw=) 7: 3139302e3130332e3131342e302f32342d3234203d3e20323635353534.roa (hash: 0Ebjodw4L+OV6GpZIKBS8C7s0fdPTio3ngUhNXaForo=) 8: 3139302e372e36342e302f31392d3234203d3e203237383535.roa (hash: EJvLIPGLrYb6Xb26nvGUNtEEVVFxBSKCzqXvhv3/nLQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c8:09:79:42:94:e7:b6:36:53:12:bd:81:2a:ab:d3:80:23:5f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907 Validity Not Before: Nov 4 02:54:11 2025 GMT Not After : Nov 8 15:20:11 2025 GMT Subject: CN=3B5531B36F489E36DC98572F0BA22EADE9BA4F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:ca:2a:46:9d:6e:5c:e8:e8:bb:e5:77:62: cf:07:b4:6e:61:00:ba:b4:a9:4a:0c:77:9c:11:5a: 94:d4:99:e7:52:5c:14:9a:73:20:75:96:ff:d8:12: 11:79:78:4f:5d:56:10:6f:c0:fa:66:2a:15:ec:61: f0:bb:9d:51:19:01:bd:be:c0:c3:7d:f5:8c:77:12: 48:c0:73:f3:75:47:62:5a:e3:19:e1:94:94:ab:e3: 4e:b5:83:60:70:cc:05:35:ed:c3:51:f7:53:65:e3: 16:57:5d:44:94:13:40:88:aa:98:29:61:a8:85:2f: ee:58:b5:83:9d:68:21:ae:59:2d:ee:ef:42:e1:60: 9e:09:58:02:cd:cf:f3:59:af:07:0c:57:c1:43:2e: d1:41:22:d6:00:0f:87:54:3a:96:a9:98:6e:ee:44: 68:e0:c1:e4:08:26:c3:c5:f5:f4:c0:c6:7f:e4:d3: 03:42:d2:2f:f3:ed:03:80:f3:d7:4c:7c:47:d2:d9: 0e:e0:d0:26:23:fc:76:3b:af:5b:f0:fa:c5:30:9b: 89:3d:cc:df:37:39:9a:a6:02:fd:7a:75:79:69:78: 1a:d4:64:03:f4:73:9d:c0:77:9a:1a:d1:fc:e8:e8: 8d:76:2f:5b:46:55:9d:e4:73:47:5d:33:2a:79:99: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:55:31:B3:6F:48:9E:36:DC:98:57:2F:0B:A2:2E:AD:E9:BA:4F:21 X509v3 Authority Key Identifier: keyid:A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3e:44:52:94:9d:da:6f:a4:ee:91:a5:43:19:b0:e3:b7:af: d3:5d:15:78:e7:70:96:56:bf:b6:1d:35:34:5a:a3:a2:73:9f: fc:68:a0:ab:d2:1f:6a:ea:cb:c9:ba:00:1a:e4:fc:68:08:35: 3c:39:99:3b:e3:b1:9c:43:b2:08:df:19:be:4a:96:3c:92:4c: 4b:9b:9c:2f:37:8b:2d:35:b0:95:f5:ea:da:e9:81:6d:46:68: 3b:ee:e2:b0:be:95:80:8c:d6:ac:6a:7f:19:68:0c:7d:d1:a0: fe:83:f8:7b:0f:f2:26:15:50:86:15:42:3f:fc:91:eb:d0:e9: 28:18:f2:ad:8c:0f:42:9a:b3:12:4d:e4:33:a9:ac:06:3e:6e: ee:b8:68:75:a5:9e:a3:6a:0f:3a:3b:6d:1f:c4:9a:74:da:67: 4a:ad:e4:2c:bd:cf:0a:f5:89:c8:9b:c9:70:16:4e:31:45:ec: 07:2d:0e:a3:36:1c:26:e2:02:85:d8:e5:72:74:2f:65:16:da: 15:de:10:2e:b4:33:09:f6:b2:6b:8e:1b:51:25:4a:87:ca:42: 71:95:d7:2d:18:58:08:f8:08:90:ff:2c:3b:dc:33:f5:66:84: 45:e9:3f:81:f6:6f:2b:ce:7f:05:dc:b9:d9:12:4c:88:f5:ea: 85:d6:5f:16 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFsgJeUKU57Y2UxK9gSqr04AjX+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcyOThCQUExRUQxRTE5RENDOEIzQzlCOUUxMjNFOTIx RUVENzkwNzAeFw0yNTExMDQwMjU0MTFaFw0yNTExMDgxNTIwMTFaMDMxMTAvBgNV BAMTKDNCNTUzMUIzNkY0ODlFMzZEQzk4NTcyRjBCQTIyRUFERTlCQTRGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9soqRp1uXOjou+V3Ys8HtG5h ALq0qUoMd5wRWpTUmedSXBSacyB1lv/YEhF5eE9dVhBvwPpmKhXsYfC7nVEZAb2+ wMN99Yx3EkjAc/N1R2Ja4xnhlJSr4061g2BwzAU17cNR91Nl4xZXXUSUE0CIqpgp YaiFL+5YtYOdaCGuWS3u70LhYJ4JWALNz/NZrwcMV8FDLtFBItYAD4dUOpapmG7u RGjgweQIJsPF9fTAxn/k0wNC0i/z7QOA89dMfEfS2Q7g0CYj/HY7r1vw+sUwm4k9 zN83OZqmAv16dXlpeBrUZAP0c53Ad5oa0fzo6I12L1tGVZ3kc0ddMyp5mS4/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUO1Uxs29InjbcmFcvC6Iurem6TyEwHwYDVR0j BBgwFoAUpymLqh7R4Z3MizybnhI+kh7teQcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOUUwMENFNjAyQjM5M0I0MTc5QkE3MjlEQzk4MjMzODIz Q0MyMTM2NUYxQkRGQkM5NDQzODQ1OUNEMTMyOEIyLzAvQTcyOThCQUExRUQxRTE5 RENDOEIzQzlCOUUxMjNFOTIxRUVENzkwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzI5OEJBQTFFRDFFMTlEQ0M4 QjNDOUI5RTEyM0U5MjFFRUQ3OTA3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjlFMDBDRTYwMkIzOTNCNDE3OUJBNzI5REM5ODIzMzgyM0NDMjEzNjVG MUJERkJDOTQ0Mzg0NTlDRDEzMjhCMi8wL0E3Mjk4QkFBMUVEMUUxOURDQzhCM0M5 QjlFMTIzRTkyMUVFRDc5MDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYPkRSlJ3ab6TukaVDGbDjt6/T XRV453CWVr+2HTU0WqOic5/8aKCr0h9q6svJugAa5PxoCDU8OZk747GcQ7II3xm+ SpY8kkxLm5wvN4stNbCV9era6YFtRmg77uKwvpWAjNasan8ZaAx90aD+g/h7D/Im FVCGFUI//JHr0OkoGPKtjA9CmrMSTeQzqawGPm7uuGh1pZ6jag86O20fxJp02mdK reQsvc8K9YnIm8lwFk4xRewHLQ6jNhwm4gKF2OVydC9lFtoV3hAutDMJ9rJrjhtR JUqHykJxldctGFgI+AiQ/yw73DP1ZoRF6T+B9m8rzn8F3LnZEkyI9eqF1l8W -----END CERTIFICATE-----Generated at Tue Nov 4 14:06:11 2025 by rpki-client