$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft File: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft (raw, json) Hash identifier: OWjM4X0TaXGvA25oVjEZIA69nCMoqs0/Ruw2CuRs1hk= Subject key identifier: 3E:83:B3:E4:C6:D3:2C:74:51:9A:A8:D4:3D:77:5C:AA:EB:04:09:B5 Authority key identifier: E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 Certificate issuer: /CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Certificate serial: 220ED8359113E948051E9F2DCDBB7FAE66A8AFCB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft Manifest number: 65 Signing time: Sat 01 Nov 2025 07:05:38 +0000 Manifest this update: Sat 01 Nov 2025 07:00:38 +0000 Manifest next update: Thu 06 Nov 2025 20:20:38 +0000 Files and hashes: 1: 323830333a646635303a3a2f33322d3438203d3e20323634383237.roa (hash: N8nRydDsI2tiV6DHAMhvtvi2V5MfGNZnPYiz+i/wyDM=) 2: 323830333a646635303a3a2f33322d3438203d3e20323733393533.roa (hash: rXJHooALxtqUoqtc5ejw7QdDd9EkWLD+ss3DQG66d3o=) 3: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl (hash: /97heLgt3cgMjmJYylHY9uTPUnRINXN/m3NePDkCHck=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 20:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0e:d8:35:91:13:e9:48:05:1e:9f:2d:cd:bb:7f:ae:66:a8:af:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Validity Not Before: Nov 1 07:00:38 2025 GMT Not After : Nov 6 20:20:38 2025 GMT Subject: CN=3E83B3E4C6D32C74519AA8D43D775CAAEB0409B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:c0:59:c1:b5:a2:d9:b3:01:62:d0:0b:5b: b0:73:46:02:3f:d9:9d:6c:a8:4a:69:36:66:fc:0f: 9b:73:04:8c:3b:d8:04:44:3a:61:f1:66:87:af:8b: 3a:24:98:3d:76:22:c8:2e:9c:c1:be:ee:60:cb:a3: 55:49:1b:7f:07:08:0e:bd:51:11:42:c5:b5:34:b4: 96:d3:98:45:e9:a0:62:32:74:af:16:74:12:79:ba: 3d:ed:0e:59:46:07:f3:1f:62:95:53:b4:6c:91:d9: ae:ef:ce:a2:dd:6e:2b:10:b6:c7:1e:ae:e3:a9:99: d8:e7:2f:05:81:fd:a5:51:4c:36:96:13:f8:15:28: fa:96:c0:19:67:c6:0e:30:22:62:06:2e:bc:79:e9: da:62:64:d4:6e:a5:5d:24:18:ec:f4:0a:32:35:61: ad:7c:28:5c:07:37:26:fe:7c:08:60:d7:a1:d1:c7: dd:02:51:b1:fe:07:f0:cb:a9:52:cc:dd:86:f3:7c: 1e:0c:85:3f:a0:c2:9f:6e:74:93:c6:d1:da:ad:f8: 80:26:5f:81:6c:0f:47:eb:68:e9:6c:44:3a:09:71: 88:c0:d9:97:d6:fc:d7:69:8b:54:4c:bd:25:62:f0: bb:19:fb:71:bd:25:9a:49:98:d1:c4:b3:7f:27:8a: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:83:B3:E4:C6:D3:2C:74:51:9A:A8:D4:3D:77:5C:AA:EB:04:09:B5 X509v3 Authority Key Identifier: keyid:E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8a:0c:0e:0d:ff:4d:0b:b1:dc:fb:26:b8:8d:1a:15:0f:bd: fe:fb:93:ab:4a:7f:6a:81:f5:19:a7:b9:70:fc:0d:06:cb:03: 24:5f:d4:5c:54:75:ca:33:4d:d8:8f:27:b4:3e:44:1e:75:2e: 7d:26:ca:3e:03:c9:05:25:a1:c2:1d:a3:3f:07:de:00:90:39: 56:e2:33:9c:d1:7f:0c:9f:ec:e0:6d:f7:80:26:16:31:0c:46: 06:20:9d:68:fa:ed:a4:f5:e3:8f:bd:26:92:4d:ff:48:4a:96: 7c:88:36:90:56:fd:49:08:c9:e3:4e:2c:3e:85:c6:a8:6c:3f: 58:42:ef:4d:ae:62:56:92:a5:b9:fe:88:37:7a:df:2d:76:d1: 6a:79:ea:a0:58:e3:a4:90:9d:5f:be:bd:05:65:1f:29:5b:bb: 4b:b8:d9:f7:38:6a:51:b4:f5:e3:ad:2d:af:f9:fe:7f:45:6c: ec:e0:76:77:9d:ee:cd:dd:15:2f:49:61:56:5c:bb:a3:a8:8d: cf:c7:0f:a6:f9:2e:e1:52:c4:7b:83:69:9b:00:3f:fa:16:a5: f6:ac:b8:56:2d:5d:89:53:33:e3:3a:06:31:3b:2f:cd:12:5f: 41:87:0a:f1:1b:5b:0f:b1:94:7a:5f:a5:01:4c:fe:03:3c:4a: 11:37:b7:85 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIg7YNZET6UgFHp8tzbt/rmaor8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThBOEVDMzY1QkE0NzBDOUZEOTMxMzYzM0ZEODlBQTFD N0REMTZFMjAeFw0yNTExMDEwNzAwMzhaFw0yNTExMDYyMDIwMzhaMDMxMTAvBgNV BAMTKDNFODNCM0U0QzZEMzJDNzQ1MTlBQThENDNENzc1Q0FBRUIwNDA5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KsBZwbWi2bMBYtALW7BzRgI/ 2Z1sqEppNmb8D5tzBIw72AREOmHxZoevizokmD12IsgunMG+7mDLo1VJG38HCA69 URFCxbU0tJbTmEXpoGIydK8WdBJ5uj3tDllGB/MfYpVTtGyR2a7vzqLdbisQtsce ruOpmdjnLwWB/aVRTDaWE/gVKPqWwBlnxg4wImIGLrx56dpiZNRupV0kGOz0CjI1 Ya18KFwHNyb+fAhg16HRx90CUbH+B/DLqVLM3YbzfB4MhT+gwp9udJPG0dqt+IAm X4FsD0fraOlsRDoJcYjA2ZfW/Ndpi1RMvSVi8LsZ+3G9JZpJmNHEs38nijz3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPoOz5MbTLHRRmqjUPXdcqusECbUwHwYDVR0j BBgwFoAU6KjsNlukcMn9kxNjP9iaocfdFuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkE3REI5MTU2QTQ3MTlCNDZGOUYzMjM1MEM2RTNDNTlC MDA4M0YzRkMyMDUzRDU4REU5OUVDRjM0MDA2NDE3LzAvRThBOEVDMzY1QkE0NzBD OUZEOTMxMzYzM0ZEODlBQTFDN0REMTZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOEE4RUMzNjVCQTQ3MEM5RkQ5 MzEzNjMzRkQ4OUFBMUM3REQxNkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZBN0RCOTE1NkE0NzE5QjQ2RjlGMzIzNTBDNkUzQzU5QjAwODNGM0ZD MjA1M0Q1OERFOTlFQ0YzNDAwNjQxNy8wL0U4QThFQzM2NUJBNDcwQzlGRDkzMTM2 MzNGRDg5QUExQzdERDE2RTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQigwODf9NC7Hc+ya4jRoVD73+ +5OrSn9qgfUZp7lw/A0GywMkX9RcVHXKM03Yjye0PkQedS59Jso+A8kFJaHCHaM/ B94AkDlW4jOc0X8Mn+zgbfeAJhYxDEYGIJ1o+u2k9eOPvSaSTf9ISpZ8iDaQVv1J CMnjTiw+hcaobD9YQu9NrmJWkqW5/og3et8tdtFqeeqgWOOkkJ1fvr0FZR8pW7tL uNn3OGpRtPXjrS2v+f5/RWzs4HZ3ne7N3RUvSWFWXLujqI3Pxw+m+S7hUsR7g2mb AD/6FqX2rLhWLV2JUzPjOgYxOy/NEl9BhwrxG1sPsZR6X6UBTP4DPEoRN7eF -----END CERTIFICATE-----Generated at Sun Nov 2 10:17:43 2025 by rpki-client