$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft File: D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft (raw, json) Hash identifier: BirKGoXwOHHwN2xHQ/qw2+wimrCVSDYVQPCp9lB7Txk= Subject key identifier: FB:1F:82:BC:92:80:A0:78:B7:3F:AE:3A:90:DC:8E:90:2F:17:8B:99 Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03 Certificate issuer: /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03 Certificate serial: 6D6798A9927EE1D23DD17E4FCD3A3A6DC2CDE02E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft Manifest number: 0138 Signing time: Fri 31 Oct 2025 05:11:10 +0000 Manifest this update: Fri 31 Oct 2025 05:06:10 +0000 Manifest next update: Thu 06 Nov 2025 01:33:10 +0000 Files and hashes: 1: D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl (hash: /Snn51OdxqbYX80q7ZBn++theh9ZggI2QF09fHzqOfQ=) 2: 3133382e3131372e31352e302f32342d3234203d3e20323732383730.roa (hash: iVmlDBcdxKFZ6/VgTekmBsBAKaWyMbkX8AkFMuVjBa8=) 3: 3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa (hash: XHxglRsIznH2oL3Cu9yOSaX8apE6OvGRr2VSqRl+ywM=) 4: 3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa (hash: x8TKGA/ymcnEQ5T/pgbqXFsH+hMaJHOdkeuG0LPaeF8=) 5: 3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa (hash: DZeh4cpa0mbf6PEyU/Y4qhUyvG/Y17E0B7HHEcKqDNo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:98:a9:92:7e:e1:d2:3d:d1:7e:4f:cd:3a:3a:6d:c2:cd:e0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03 Validity Not Before: Oct 31 05:06:10 2025 GMT Not After : Nov 6 01:33:10 2025 GMT Subject: CN=FB1F82BC9280A078B73FAE3A90DC8E902F178B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:8f:cc:c3:3b:8c:4b:9e:3a:7d:a5:ac:b2: 63:5e:49:e7:aa:c1:10:69:df:94:24:5f:7e:2f:b4: 4e:bc:2e:eb:6e:b3:82:4b:ec:30:ee:d5:13:58:b0: 96:f2:86:d0:7b:f6:9c:02:2d:2e:df:b7:39:fc:c2: 3e:ad:da:9c:9b:ec:e0:5b:01:6f:64:d3:a5:b6:f0: 8f:ba:be:de:91:b1:a0:ed:df:dc:5b:35:53:49:f5: 1c:8a:77:ab:bf:0a:a3:15:20:b4:cd:93:d3:d4:89: a7:23:ea:e5:1a:3f:17:c9:56:df:98:1c:c1:72:21: b2:3f:97:04:c3:38:47:37:47:8d:74:cc:ee:ba:d9: 31:cf:4d:b5:a3:30:58:d0:0d:dc:ea:fd:dd:32:67: b5:38:d7:d0:b7:c2:a5:d9:2e:f2:1f:5d:1a:ea:fb: 4b:83:95:cf:fd:00:d6:78:95:a4:a5:2c:69:56:86: 57:b8:d7:57:e2:a8:39:c9:27:b6:db:e8:0c:97:d7: e7:84:c5:7d:19:6f:90:43:0b:d8:e8:07:26:1a:cd: 5b:cc:42:47:5e:28:da:32:b1:64:0e:16:97:96:27: ed:37:87:85:77:cd:79:c9:10:df:57:18:00:eb:4c: 7b:0a:23:30:55:13:91:a1:9f:2a:5b:07:56:1d:b5: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1F:82:BC:92:80:A0:78:B7:3F:AE:3A:90:DC:8E:90:2F:17:8B:99 X509v3 Authority Key Identifier: keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:90:c3:d2:4f:d6:17:f2:cb:09:0a:03:57:3e:35:9e:5c:4f: d6:6d:35:df:1e:64:f0:d6:16:0c:1d:e1:ab:e6:0d:25:39:05: 9e:9d:3b:e0:0d:eb:1b:25:ed:c7:7a:cb:3f:cd:ec:2e:3d:72: 5a:d2:52:4a:a3:94:db:e5:fb:79:5d:06:8e:7f:51:9e:92:17: ac:8d:73:f1:78:84:b9:74:b8:71:75:6e:0f:4f:db:55:40:3d: a5:ba:16:3d:e6:e7:4a:1d:7b:85:fc:91:83:d6:e3:03:c6:56: 5a:b9:11:ca:6c:2b:68:d8:81:52:bc:ea:ab:f4:62:a7:f3:86: 9e:84:a8:59:4f:0b:e0:24:1c:5d:fd:e0:fc:28:86:05:df:22: 1c:53:cc:bd:c0:ad:1c:9e:b3:2e:fa:70:0a:fc:43:1a:72:b9: 4c:6e:a6:53:cf:07:a1:94:a6:0a:98:d0:e5:59:39:7d:40:57: 4c:a9:1a:b4:bd:cb:1c:a1:d0:b7:2a:53:d3:bf:d5:44:76:65: 64:6f:08:26:8c:7b:2d:a5:61:bf:e4:c4:93:a4:7f:33:79:f8: a3:45:df:34:00:ed:0a:86:81:6e:b8:74:f6:d3:86:5c:e7:09: ec:4f:bf:e1:a7:80:1c:62:31:6f:fd:f2:1c:f9:21:dd:d4:46: 85:ba:ab:4d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbWeYqZJ+4dI90X5PzTo6bcLN4C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFNkE4QUYzMjI2NTAxRDhDMEFFODlCMzFBNzhFMzY5 QkNEQkMwMzAeFw0yNTEwMzEwNTA2MTBaFw0yNTExMDYwMTMzMTBaMDMxMTAvBgNV BAMTKEZCMUY4MkJDOTI4MEEwNzhCNzNGQUUzQTkwREM4RTkwMkYxNzhCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11I/MwzuMS546faWssmNeSeeq wRBp35QkX34vtE68Lutus4JL7DDu1RNYsJbyhtB79pwCLS7ftzn8wj6t2pyb7OBb AW9k06W28I+6vt6RsaDt39xbNVNJ9RyKd6u/CqMVILTNk9PUiacj6uUaPxfJVt+Y HMFyIbI/lwTDOEc3R410zO662THPTbWjMFjQDdzq/d0yZ7U419C3wqXZLvIfXRrq +0uDlc/9ANZ4laSlLGlWhle411fiqDnJJ7bb6AyX1+eExX0Zb5BDC9joByYazVvM QkdeKNoysWQOFpeWJ+03h4V3zXnJEN9XGADrTHsKIzBVE5GhnypbB1YdtczjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+x+CvJKAoHi3P646kNyOkC8Xi5kwHwYDVR0j BBgwFoAU0uaorzImUB2MCuibMaeONpvNvAMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QTlCRThCQUMwREJGMDRBMDRFNjU3RjE3NzIyMURFNUVG QUVEMTQ3ODAzNEJERTYyNUZENDMxNTBCQ0ZCRjAyLzAvRDJFNkE4QUYzMjI2NTAx RDhDMEFFODlCMzFBNzhFMzY5QkNEQkMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkU2QThBRjMyMjY1MDFEOEMw QUU4OUIzMUE3OEUzNjlCQ0RCQzAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUE5QkU4QkFDMERCRjA0QTA0RTY1N0YxNzcyMjFERTVFRkFFRDE0Nzgw MzRCREU2MjVGRDQzMTUwQkNGQkYwMi8wL0QyRTZBOEFGMzIyNjUwMUQ4QzBBRTg5 QjMxQTc4RTM2OUJDREJDMDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALkMPST9YX8ssJCgNXPjWeXE/W bTXfHmTw1hYMHeGr5g0lOQWenTvgDesbJe3Hess/zewuPXJa0lJKo5Tb5ft5XQaO f1GekhesjXPxeIS5dLhxdW4PT9tVQD2luhY95udKHXuF/JGD1uMDxlZauRHKbCto 2IFSvOqr9GKn84aehKhZTwvgJBxd/eD8KIYF3yIcU8y9wK0cnrMu+nAK/EMacrlM bqZTzwehlKYKmNDlWTl9QFdMqRq0vcscodC3KlPTv9VEdmVkbwgmjHstpWG/5MST pH8zefijRd80AO0KhoFuuHT204Zc5wnsT7/hp4AcYjFv/fIc+SHd1EaFuqtN -----END CERTIFICATE-----Generated at Sun Nov 2 10:30:41 2025 by rpki-client