$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft File: DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft (raw, json) Hash identifier: 34ABtjMxYgum99UYLaJ7+5Lc0LkWqlISnXOfNATHqKg= Subject key identifier: 88:BC:CE:1D:50:11:78:64:4E:CF:7C:10:7B:A0:D3:D9:AB:C8:53:9B Authority key identifier: DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90 Certificate issuer: /CN=DA31E8AD07ACB0D12007DCE39E0F54D13D470890 Certificate serial: 049AF0904AD9B2A7AFAB9F83A9D1868E0E308B31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft Manifest number: 0138 Signing time: Sat 01 Nov 2025 20:22:31 +0000 Manifest this update: Sat 01 Nov 2025 20:17:31 +0000 Manifest next update: Wed 05 Nov 2025 22:27:31 +0000 Files and hashes: 1: DA31E8AD07ACB0D12007DCE39E0F54D13D470890.crl (hash: 5aajM/NzMvksD5LpwPLonandwNL8+zGyAkWtS8fNo4E=) 2: 323830333a353538303a3a2f33322d3634203d3e20323636383832.roa (hash: HxANff2InLgRZu+pmNwVpWAY02xcWLc03JzykuEYRpg=) 3: 3230312e3134382e3233322e302f32322d3234203d3e20323636383832.roa (hash: 4oxlE+iWrrS1SWRmxRKZYrtW6bepTnjAre+bPTAcGqI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.crl rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9a:f0:90:4a:d9:b2:a7:af:ab:9f:83:a9:d1:86:8e:0e:30:8b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA31E8AD07ACB0D12007DCE39E0F54D13D470890 Validity Not Before: Nov 1 20:17:31 2025 GMT Not After : Nov 5 22:27:31 2025 GMT Subject: CN=88BCCE1D501178644ECF7C107BA0D3D9ABC8539B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:7f:08:86:14:b1:34:0d:99:94:8a:66:d2: 6e:d2:66:ac:3b:6f:00:31:2c:30:85:51:4a:80:49: 68:c8:01:56:e3:19:07:51:f7:35:4f:b0:4c:a6:4b: 75:c8:81:88:c5:f9:ff:29:65:bf:44:4e:a2:18:8b: 3d:2a:2d:26:49:02:63:16:02:a7:f0:82:df:64:03: 37:6e:f7:1d:67:fd:5b:e5:bc:74:c1:fc:79:a8:10: 8a:c1:1b:a1:8c:51:c9:f8:cf:03:8c:b2:bb:91:fc: 07:f0:eb:71:4c:02:11:fc:bd:3f:9b:ce:57:32:fd: 9d:37:2c:6c:7f:01:83:ff:f7:5f:b9:c2:ed:51:e1: 10:ef:3a:db:ac:ce:c1:f7:aa:10:d6:14:a6:fb:7a: 8a:32:81:bd:c6:cd:28:8b:2f:ca:b9:e1:8e:c7:90: df:df:5d:e1:70:28:89:50:97:71:b6:aa:84:ac:6b: bb:7c:a0:c2:bf:c6:ea:3c:ac:c4:aa:5d:58:c1:cf: 07:1c:1b:9a:f3:3c:2b:bc:b8:6c:b8:bb:e2:e8:8c: d6:25:a6:c0:d0:a5:32:10:aa:f2:ec:d6:5a:8f:d0: 9a:a1:be:cd:3e:8a:6e:fc:98:b7:3d:ef:83:0b:6a: 69:6b:f8:44:50:5c:23:36:ea:5f:a3:87:61:5e:46: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BC:CE:1D:50:11:78:64:4E:CF:7C:10:7B:A0:D3:D9:AB:C8:53:9B X509v3 Authority Key Identifier: keyid:DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:1d:6e:9d:b7:e1:53:3e:d7:40:56:42:88:6d:cd:6a:b5:1e: b1:a9:a3:37:e9:2d:82:85:fd:d2:d4:16:66:10:cf:66:8a:b5: 9f:1d:fb:90:36:d3:5e:44:62:d4:a7:59:4b:0f:68:f1:44:6b: 42:7b:1a:76:47:72:89:f7:a2:83:81:7d:39:89:81:8e:f2:19: bd:d4:dd:ce:ef:73:8b:dd:cb:42:4a:36:62:89:05:80:76:36: 4b:7a:53:8c:ac:f8:60:1a:9c:17:8c:04:a4:93:b9:17:47:27: 95:a8:13:9e:c8:07:c9:4c:7a:94:94:78:65:12:fa:46:75:9d: a7:ab:ed:43:7d:e9:71:12:dd:5d:3b:55:20:62:e8:84:bd:2d: 35:dc:ec:df:1c:bd:cb:57:00:6b:11:79:fb:ff:4b:bb:b6:e2: dd:20:c6:d7:6c:79:4a:aa:65:bf:fc:80:6e:11:bc:0a:fb:37: 22:7b:e6:6b:14:b2:ad:63:c7:f6:bd:24:8d:82:30:a4:b9:22: 14:b8:4b:99:fa:1b:ae:cc:65:a4:36:e5:87:b4:db:e1:43:23: c3:f0:70:7c:5b:a3:8e:e0:21:e3:64:37:07:c9:a1:f6:aa:a5: 2b:9f:52:0e:18:64:64:42:23:15:f5:e4:f6:a5:67:b3:da:aa: f7:37:ff:f3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBJrwkErZsqevq5+DqdGGjg4wizEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzMUU4QUQwN0FDQjBEMTIwMDdEQ0UzOUUwRjU0RDEz RDQ3MDg5MDAeFw0yNTExMDEyMDE3MzFaFw0yNTExMDUyMjI3MzFaMDMxMTAvBgNV BAMTKDg4QkNDRTFENTAxMTc4NjQ0RUNGN0MxMDdCQTBEM0Q5QUJDODUzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7X8IhhSxNA2ZlIpm0m7SZqw7 bwAxLDCFUUqASWjIAVbjGQdR9zVPsEymS3XIgYjF+f8pZb9ETqIYiz0qLSZJAmMW Aqfwgt9kAzdu9x1n/VvlvHTB/HmoEIrBG6GMUcn4zwOMsruR/Afw63FMAhH8vT+b zlcy/Z03LGx/AYP/91+5wu1R4RDvOtuszsH3qhDWFKb7eooygb3GzSiLL8q54Y7H kN/fXeFwKIlQl3G2qoSsa7t8oMK/xuo8rMSqXVjBzwccG5rzPCu8uGy4u+LojNYl psDQpTIQqvLs1lqP0Jqhvs0+im78mLc974MLamlr+ERQXCM26l+jh2FeRtSZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiLzOHVAReGROz3wQe6DT2avIU5swHwYDVR0j BBgwFoAU2jHorQessNEgB9zjng9U0T1HCJAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQTNENENGMUMwQkYyRjVDN0RCRDQ5QjZCMDc2RUE1NDM5 QTYxMkQ3NTcyNjJFQUI5RUVFRjQzMDE2OTUwNzRDLzAvREEzMUU4QUQwN0FDQjBE MTIwMDdEQ0UzOUUwRjU0RDEzRDQ3MDg5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTMxRThBRDA3QUNCMEQxMjAw N0RDRTM5RTBGNTREMTNENDcwODkwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0EzRDRDRjFDMEJGMkY1QzdEQkQ0OUI2QjA3NkVBNTQzOUE2MTJENzU3 MjYyRUFCOUVFRUY0MzAxNjk1MDc0Qy8wL0RBMzFFOEFEMDdBQ0IwRDEyMDA3RENF MzlFMEY1NEQxM0Q0NzA4OTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqHW6dt+FTPtdAVkKIbc1qtR6x qaM36S2Chf3S1BZmEM9mirWfHfuQNtNeRGLUp1lLD2jxRGtCexp2R3KJ96KDgX05 iYGO8hm91N3O73OL3ctCSjZiiQWAdjZLelOMrPhgGpwXjASkk7kXRyeVqBOeyAfJ THqUlHhlEvpGdZ2nq+1DfelxEt1dO1UgYuiEvS013OzfHL3LVwBrEXn7/0u7tuLd IMbXbHlKqmW//IBuEbwK+zcie+ZrFLKtY8f2vSSNgjCkuSIUuEuZ+huuzGWkNuWH tNvhQyPD8HB8W6OO4CHjZDcHyaH2qqUrn1IOGGRkQiMV9eT2pWez2qr3N//z -----END CERTIFICATE-----Generated at Sun Nov 2 11:33:10 2025 by rpki-client