$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft File: 309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft (raw, json) Hash identifier: /xw+a7mihbvte+T08zyIsgzAtvtUv7gLmw3T9fZNGsY= Subject key identifier: 1D:06:42:F2:E4:D3:2E:EB:5B:54:4A:0C:CE:EF:58:FE:02:55:F1:E8 Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE Certificate issuer: /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE Certificate serial: 4A2E740D0A97DC65C702C32A280EFED582A1ECA1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft Manifest number: 0131 Signing time: Fri 31 Oct 2025 18:23:23 +0000 Manifest this update: Fri 31 Oct 2025 18:18:23 +0000 Manifest next update: Wed 05 Nov 2025 18:22:23 +0000 Files and hashes: 1: 323830333a316338303a3a2f33322d3438203d3e203136393231.roa (hash: o64LLT61ynUf8RPQNqShE4Vxf87c1C3Qg486OAlLrrw=) 2: 3137392e36312e36342e302f32302d3234203d3e203136393231.roa (hash: snyDcNypTv7ppOWZme9gqrtdRkaa1yQtKAuY3AMkBQY=) 3: 3230302e38312e3131322e302f32312d3234203d3e203136393231.roa (hash: Nq+umXkOHK91isxdCLU9vTh1AW3f65BEu++uAGk69qE=) 4: 309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl (hash: tkwTmHRUy/c+CyEt7xZyg9evg3NZczYZcOalihV0bCA=) 5: 3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa (hash: K+D3vAb/MDFy/4KFKdtsmu7UaFVLiWEmWr2Hrq/vKFs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2e:74:0d:0a:97:dc:65:c7:02:c3:2a:28:0e:fe:d5:82:a1:ec:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE Validity Not Before: Oct 31 18:18:23 2025 GMT Not After : Nov 5 18:22:23 2025 GMT Subject: CN=1D0642F2E4D32EEB5B544A0CCEEF58FE0255F1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:78:70:15:2b:c0:c0:a8:9a:2b:de:57:05: 02:d2:44:e9:06:ca:d4:f0:9d:5e:4f:09:ab:30:c1: 20:85:52:f9:ca:17:47:b5:2b:7b:4a:66:55:ce:e7: a8:7c:e2:05:fd:31:a5:30:7b:1f:81:b4:11:64:d6: 4f:d1:d2:7b:b4:0d:13:3a:1c:9b:57:8e:00:fd:71: 8d:6e:75:7d:50:ae:f6:0f:70:cb:2a:42:aa:c5:a1: 97:27:42:6e:cf:a4:24:ab:e6:37:e7:18:04:8d:1a: b4:c1:0b:ec:83:11:40:4b:de:5e:9b:09:ae:de:40: 53:d5:3d:3d:47:7d:72:ec:12:72:0b:ff:46:85:df: f9:4f:6f:98:8c:e2:23:51:47:4e:cc:32:41:ea:4e: 72:cd:a9:8f:ef:ac:7e:89:af:b8:ef:34:99:50:b6: ab:fb:80:54:56:04:cc:9a:52:74:93:c5:ac:44:c8: 0c:d3:53:5e:ce:3e:73:da:4a:e1:3a:ce:60:e8:74: 1f:e3:35:bc:a4:e8:45:13:09:4f:d2:e6:26:29:ce: 24:30:bc:aa:fc:bb:77:39:ab:a5:75:de:98:25:b7: b9:eb:75:dd:5d:f1:3d:59:44:3b:b2:95:e1:38:06: aa:75:ec:88:a0:ea:94:15:37:c6:ca:88:db:4e:3d: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:06:42:F2:E4:D3:2E:EB:5B:54:4A:0C:CE:EF:58:FE:02:55:F1:E8 X509v3 Authority Key Identifier: keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6f:37:1d:42:35:c3:35:77:fb:69:0f:53:03:56:14:35:85: 1f:ad:5a:d1:d1:47:3a:b1:fd:d5:56:11:24:c0:de:5a:11:ef: 5f:01:e8:87:27:1d:dc:58:69:43:1d:0b:9e:d7:90:12:97:e4: 9a:80:83:f2:aa:17:f2:49:79:3e:a2:ae:ec:4a:7e:5b:b3:d8: ff:47:01:e6:bb:60:03:69:f9:70:9f:f9:47:9f:0a:f0:6d:0e: 53:86:6a:32:65:4c:a3:97:24:d2:00:18:b1:86:6b:ab:62:d5: 51:69:50:be:39:1e:31:fd:2d:58:68:64:77:5b:2e:44:15:2a: b9:c5:55:e7:5d:ff:20:e1:3d:d8:6e:3b:56:3a:16:7a:58:e9: 89:a5:b8:5e:71:75:03:07:90:a0:63:56:41:bf:44:f4:ff:fc: 97:e5:ad:fc:15:87:87:80:df:07:6b:59:f1:be:07:4f:e1:f1: da:72:eb:d0:25:f1:fa:0b:6f:04:3b:78:42:af:81:e5:f8:7d: 99:53:de:4a:6c:9d:d7:62:60:5f:49:a5:1b:cf:61:5e:ac:13: 91:04:eb:f9:77:79:87:67:fb:5f:ca:71:f7:a2:89:1f:93:f9: 4d:38:e6:e3:ef:eb:55:7a:ea:99:ef:a3:b6:bf:ac:3a:be:fb: c9:be:61:67 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSi50DQqX3GXHAsMqKA7+1YKh7KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RjA0NUQzRTFEQTIxNTg5RDdBRkE5RDI5NkFFMjRE MzNBMDlFRTAeFw0yNTEwMzExODE4MjNaFw0yNTExMDUxODIyMjNaMDMxMTAvBgNV BAMTKDFEMDY0MkYyRTREMzJFRUI1QjU0NEEwQ0NFRUY1OEZFMDI1NUYxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLOHhwFSvAwKiaK95XBQLSROkG ytTwnV5PCaswwSCFUvnKF0e1K3tKZlXO56h84gX9MaUwex+BtBFk1k/R0nu0DRM6 HJtXjgD9cY1udX1QrvYPcMsqQqrFoZcnQm7PpCSr5jfnGASNGrTBC+yDEUBL3l6b Ca7eQFPVPT1HfXLsEnIL/0aF3/lPb5iM4iNRR07MMkHqTnLNqY/vrH6Jr7jvNJlQ tqv7gFRWBMyaUnSTxaxEyAzTU17OPnPaSuE6zmDodB/jNbyk6EUTCU/S5iYpziQw vKr8u3c5q6V13pglt7nrdd1d8T1ZRDuyleE4Bqp17Iig6pQVN8bKiNtOPei7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHQZC8uTTLutbVEoMzu9Y/gJV8egwHwYDVR0j BBgwFoAUMJ8EXT4dohWJ16+p0pauJNM6Ce4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NEVCNEMwQjVGRDNFMUIxQzkyREY5Rjk0MzhCNzMwRTU4 Mjk5RDJBQTExRjIwQ0JGOTVEODQ1OTUwRjcwNkJBLzAvMzA5RjA0NUQzRTFEQTIx NTg5RDdBRkE5RDI5NkFFMjREMzNBMDlFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDlGMDQ1RDNFMURBMjE1ODlE N0FGQTlEMjk2QUUyNEQzM0EwOUVFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODRFQjRDMEI1RkQzRTFCMUM5MkRGOUY5NDM4QjczMEU1ODI5OUQyQUEx MUYyMENCRjk1RDg0NTk1MEY3MDZCQS8wLzMwOUYwNDVEM0UxREEyMTU4OUQ3QUZB OUQyOTZBRTI0RDMzQTA5RUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCobzcdQjXDNXf7aQ9TA1YUNYUf rVrR0Uc6sf3VVhEkwN5aEe9fAeiHJx3cWGlDHQue15ASl+SagIPyqhfySXk+oq7s Sn5bs9j/RwHmu2ADaflwn/lHnwrwbQ5ThmoyZUyjlyTSABixhmurYtVRaVC+OR4x /S1YaGR3Wy5EFSq5xVXnXf8g4T3YbjtWOhZ6WOmJpbhecXUDB5CgY1ZBv0T0//yX 5a38FYeHgN8Ha1nxvgdP4fHacuvQJfH6C28EO3hCr4Hl+H2ZU95KbJ3XYmBfSaUb z2FerBORBOv5d3mHZ/tfynH3ookfk/lNOObj7+tVeuqZ76O2v6w6vvvJvmFn -----END CERTIFICATE-----Generated at Sun Nov 2 11:04:33 2025 by rpki-client