$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: 4vQM3VOxUuiNyGtCIMG0RAocI/iGyTPqGtjcrkh+Y0s= Subject key identifier: 44:3E:D9:4A:D2:E6:DD:85:91:5A:CB:BD:65:7A:B8:2F:40:22:03:3C Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 35D203D3041CE0A74E2A4A26EE95A1464F8A79CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 013C Signing time: Sat 01 Nov 2025 07:25:53 +0000 Manifest this update: Sat 01 Nov 2025 07:20:53 +0000 Manifest next update: Wed 05 Nov 2025 08:07:53 +0000 Files and hashes: 1: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 2: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) 3: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) 4: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: NeGWFlyUOQanHrM10F5wWHkmKh0p2fKy5mkV2IEv1uk=) 5: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 08:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d2:03:d3:04:1c:e0:a7:4e:2a:4a:26:ee:95:a1:46:4f:8a:79:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Nov 1 07:20:53 2025 GMT Not After : Nov 5 08:07:53 2025 GMT Subject: CN=443ED94AD2E6DD85915ACBBD657AB82F4022033C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:d7:6c:61:fd:86:64:b2:67:27:cc:15:18: 3e:77:70:26:62:3f:58:09:80:a8:f7:f1:5f:5d:df: 02:59:1d:43:ad:40:d5:0b:50:67:d4:fe:20:b8:d4: 04:1c:80:c7:a6:cc:d9:9b:1b:85:05:2c:64:97:79: 9b:8b:44:b8:f3:70:a8:c6:0b:bd:53:34:2d:42:ec: a6:d6:2f:26:df:76:d9:10:97:03:43:f8:3c:10:42: 38:b7:d5:a8:63:72:b7:da:fc:06:84:6e:52:b8:87: 35:9d:b6:28:d6:4d:1b:e9:cf:b0:0d:6a:c8:2a:25: 42:1c:28:99:34:dc:35:f1:f2:82:4b:51:4d:a3:3b: 01:45:a0:7a:70:23:69:05:9a:ca:f0:6e:92:fa:bf: 30:fe:98:e4:a1:d7:9a:4f:a4:d1:ec:d0:cb:0a:39: 4f:aa:0e:b0:a3:16:1a:7c:83:42:11:97:08:54:22: aa:6b:ca:65:40:30:94:45:82:33:b2:d5:3a:75:a1: b4:e4:6f:1b:1d:23:32:af:e3:54:62:53:cf:40:8a: 7c:31:26:8a:54:5d:a4:aa:9b:fe:9c:19:01:6d:01: ee:5a:b6:db:a4:4d:29:a4:9d:a7:5c:0e:20:f0:42: d5:29:15:38:7a:d6:14:92:c3:f1:cf:46:5d:20:55: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3E:D9:4A:D2:E6:DD:85:91:5A:CB:BD:65:7A:B8:2F:40:22:03:3C X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b5:99:07:2e:95:f8:4e:79:d7:0f:ec:a0:13:b1:06:2d:ca: 8f:b0:93:e2:e7:da:95:a8:82:3b:bf:e9:53:87:f5:fe:4d:27: a9:c2:00:0a:84:29:8a:50:f0:92:69:0f:37:a1:5f:36:27:14: 39:44:ac:0a:9c:8d:24:c9:7c:36:40:61:d9:d9:f3:9b:70:51: b9:58:db:14:b0:39:1a:83:94:4b:a4:00:33:e7:f8:ff:7f:c9: 6d:5d:51:fe:0d:cc:ac:12:db:fa:e9:f6:42:16:fa:23:dc:93: 9e:c7:1b:6d:94:41:f8:a1:e8:62:f6:3b:58:c6:f4:93:53:a6: ae:a2:d8:32:07:74:e6:67:22:2c:82:7e:89:54:2c:55:40:3c: 55:a2:9d:92:70:1e:14:59:4d:ba:d8:35:24:5d:99:27:0f:89: 98:df:b2:09:69:19:7c:9b:1f:45:bf:f8:63:8a:81:7a:f4:b4: fb:04:b5:0a:e7:83:23:5a:20:54:08:34:3f:61:25:28:27:8c: 45:46:8c:51:db:5e:6c:62:1c:91:87:2f:f4:2a:7d:2d:2a:73: ab:07:c7:58:d6:de:79:52:b4:9b:6d:87:30:ba:7f:da:d0:5f: 77:22:46:d3:d8:29:ca:40:0c:f0:20:30:f8:5b:6d:cd:c2:c7: c8:b9:76:fa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNdID0wQc4KdOKkom7pWhRk+Kec4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTExMDEwNzIwNTNaFw0yNTExMDUwODA3NTNaMDMxMTAvBgNV BAMTKDQ0M0VEOTRBRDJFNkREODU5MTVBQ0JCRDY1N0FCODJGNDAyMjAzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChn9dsYf2GZLJnJ8wVGD53cCZi P1gJgKj38V9d3wJZHUOtQNULUGfU/iC41AQcgMemzNmbG4UFLGSXeZuLRLjzcKjG C71TNC1C7KbWLybfdtkQlwND+DwQQji31ahjcrfa/AaEblK4hzWdtijWTRvpz7AN asgqJUIcKJk03DXx8oJLUU2jOwFFoHpwI2kFmsrwbpL6vzD+mOSh15pPpNHs0MsK OU+qDrCjFhp8g0IRlwhUIqprymVAMJRFgjOy1Tp1obTkbxsdIzKv41RiU89Ainwx JopUXaSqm/6cGQFtAe5attukTSmknadcDiDwQtUpFTh61hSSw/HPRl0gVXaPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURD7ZStLm3YWRWsu9ZXq4L0AiAzwwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCltZkHLpX4TnnXD+ygE7EGLcqP sJPi59qVqII7v+lTh/X+TSepwgAKhCmKUPCSaQ83oV82JxQ5RKwKnI0kyXw2QGHZ 2fObcFG5WNsUsDkag5RLpAAz5/j/f8ltXVH+DcysEtv66fZCFvoj3JOexxttlEH4 oehi9jtYxvSTU6auotgyB3TmZyIsgn6JVCxVQDxVop2ScB4UWU262DUkXZknD4mY 37IJaRl8mx9Fv/hjioF69LT7BLUK54MjWiBUCDQ/YSUoJ4xFRoxR215sYhyRhy/0 Kn0tKnOrB8dY1t55UrSbbYcwun/a0F93IkbT2CnKQAzwIDD4W23NwsfIuXb6 -----END CERTIFICATE-----Generated at Sun Nov 2 00:07:25 2025 by rpki-client