$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft File: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft (raw, json) Hash identifier: Sf0/ExRyYzgq4ureV3KAzOKuOGhn6w6fUlYbhrYFGPA= Subject key identifier: 0A:45:44:C4:B2:1F:64:AF:86:0A:D8:BD:82:5E:C2:2A:F8:8D:62:D2 Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03 Certificate issuer: /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703 Certificate serial: 0A2CC8768BCD98C8A20863398F76DB865903500C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft Manifest number: 0134 Signing time: Fri 31 Oct 2025 19:03:44 +0000 Manifest this update: Fri 31 Oct 2025 18:58:44 +0000 Manifest next update: Wed 05 Nov 2025 12:22:44 +0000 Files and hashes: 1: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl (hash: PcU1g6aTXqjeG/J+yjzVYTHSdwPT8pjJ0A6xiRa8fTo=) 2: 3135392e31362e342e302f32342d3234203d3e20323732333233.roa (hash: MDeJlQE/QYUt0IOXHP5qWTWuvb4cThq/54ZgjGe5N3Q=) 3: 3135392e31362e342e302f32342d3234203d3e20323730313439.roa (hash: 7mm3mCGIoZexDzhAGuH/bf5GqhNwXZ3jwwtWfeQz3c8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2c:c8:76:8b:cd:98:c8:a2:08:63:39:8f:76:db:86:59:03:50:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703 Validity Not Before: Oct 31 18:58:44 2025 GMT Not After : Nov 5 12:22:44 2025 GMT Subject: CN=0A4544C4B21F64AF860AD8BD825EC22AF88D62D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:16:bb:c1:c5:19:fd:26:00:08:9d:b6:fd: cf:43:a3:b1:e4:02:2b:58:b6:70:c2:c0:26:0b:e2: 8c:29:a2:4a:b9:50:44:2c:31:ed:f0:e9:a3:9e:30: e8:c8:fe:4d:69:2f:9d:6f:e9:a0:ac:88:5c:f8:23: 17:a7:22:84:b0:c9:7f:4b:fb:1c:cf:18:8d:10:17: 97:3a:35:35:eb:4b:fb:b7:09:65:e4:40:63:06:9d: ea:8a:e1:81:13:e1:5c:c2:74:43:03:dc:bc:08:a6: 77:3f:7d:dc:ed:a8:10:2e:92:79:59:b3:9d:f7:52: 78:7b:e0:35:6c:4d:16:6d:fb:7d:52:44:87:0b:75: d0:1b:ab:32:44:7d:12:20:e6:22:79:c6:c2:d7:78: b2:fa:21:75:cb:e9:6d:e5:38:99:13:ca:b7:1a:9c: 37:4a:ee:a0:84:e0:d3:85:e5:ca:a0:54:3e:60:db: e8:12:4c:31:a5:ed:8c:b5:9b:9c:66:44:bc:bf:69: 4b:13:32:4a:ec:ce:71:0a:d7:21:0e:88:93:6f:a0: e9:56:b9:52:7d:1c:a5:d3:91:48:54:4a:47:dc:15: 75:4d:98:74:af:31:64:95:df:10:1a:54:ad:53:3f: 45:70:dd:e6:32:9a:f3:52:61:18:06:6c:2f:af:bb: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:45:44:C4:B2:1F:64:AF:86:0A:D8:BD:82:5E:C2:2A:F8:8D:62:D2 X509v3 Authority Key Identifier: keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9e:a6:21:87:90:dc:38:09:1d:68:31:5c:2d:31:93:b0:12: 5c:4d:a1:e2:24:20:65:ef:14:20:a6:9a:5a:ac:42:71:40:4d: fe:41:a3:e4:cd:b4:e2:c0:78:c2:c6:5b:fa:15:d5:63:9d:78: 3d:8a:ed:b2:50:05:c8:b9:9c:47:6d:07:0c:db:57:7d:f0:dc: a9:a7:4a:47:d4:62:16:f2:51:bb:c3:f7:5b:cf:a7:cc:25:41: 23:9f:7f:8a:78:4e:e7:87:71:52:7f:9e:18:b8:ac:94:ba:3d: 45:74:82:2d:d4:9a:d5:d4:ea:0b:c4:e7:49:34:a2:d4:b7:00: d7:b0:59:7b:3b:38:41:9d:98:37:37:87:c6:58:a9:a8:3a:09: 9c:3a:86:f7:a1:12:e5:69:94:f6:d2:d0:9f:c1:50:ec:d9:31: b0:37:8c:a7:1f:b3:83:13:3f:e0:ad:b2:9e:05:ce:d4:52:f3: 6b:90:dc:a1:0b:03:ba:fc:a3:19:66:dc:cf:2f:64:da:f4:1b: f8:b9:85:b7:5c:64:41:fa:88:51:1f:d8:32:0d:68:c0:b6:99: 4e:1b:23:68:6a:35:c8:c8:14:cf:45:a3:44:da:31:0b:47:f3: ea:71:b6:18:c3:d6:c7:d1:cd:51:94:f5:f2:a6:ab:f9:27:45: 7b:51:9a:7c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCizIdovNmMiiCGM5j3bbhlkDUAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQ0E5RTMyOEJBRDY3OEEzQUQyOEM5QzUzNTE4RUY5 RUQwNjcwMzAeFw0yNTEwMzExODU4NDRaFw0yNTExMDUxMjIyNDRaMDMxMTAvBgNV BAMTKDBBNDU0NEM0QjIxRjY0QUY4NjBBRDhCRDgyNUVDMjJBRjg4RDYyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHha7wcUZ/SYACJ22/c9Do7Hk AitYtnDCwCYL4owpokq5UEQsMe3w6aOeMOjI/k1pL51v6aCsiFz4IxenIoSwyX9L +xzPGI0QF5c6NTXrS/u3CWXkQGMGneqK4YET4VzCdEMD3LwIpnc/fdztqBAuknlZ s533Unh74DVsTRZt+31SRIcLddAbqzJEfRIg5iJ5xsLXeLL6IXXL6W3lOJkTyrca nDdK7qCE4NOF5cqgVD5g2+gSTDGl7Yy1m5xmRLy/aUsTMkrsznEK1yEOiJNvoOlW uVJ9HKXTkUhUSkfcFXVNmHSvMWSV3xAaVK1TP0Vw3eYymvNSYRgGbC+vu5BTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCkVExLIfZK+GCti9gl7CKviNYtIwHwYDVR0j BBgwFoAU0+yp4yi61nijrSjJxTUY757QZwMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNEI5QUE3NzQwQUVBQUMxOTQyQzZENDlCRDBDNzU5RUVD QkMwQTZGMzFCRTM4Mjg5NThBOUE5QTc2M0FCQjExLzAvRDNFQ0E5RTMyOEJBRDY3 OEEzQUQyOEM5QzUzNTE4RUY5RUQwNjcwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0VDQTlFMzI4QkFENjc4QTNB RDI4QzlDNTM1MThFRjlFRDA2NzAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjRCOUFBNzc0MEFFQUFDMTk0MkM2RDQ5QkQwQzc1OUVFQ0JDMEE2RjMx QkUzODI4OTU4QTlBOUE3NjNBQkIxMS8wL0QzRUNBOUUzMjhCQUQ2NzhBM0FEMjhD OUM1MzUxOEVGOUVEMDY3MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1nqYhh5DcOAkdaDFcLTGTsBJc TaHiJCBl7xQgppparEJxQE3+QaPkzbTiwHjCxlv6FdVjnXg9iu2yUAXIuZxHbQcM 21d98Nypp0pH1GIW8lG7w/dbz6fMJUEjn3+KeE7nh3FSf54YuKyUuj1FdIIt1JrV 1OoLxOdJNKLUtwDXsFl7OzhBnZg3N4fGWKmoOgmcOob3oRLlaZT20tCfwVDs2TGw N4ynH7ODEz/grbKeBc7UUvNrkNyhCwO6/KMZZtzPL2Ta9Bv4uYW3XGRB+ohRH9gy DWjAtplOGyNoajXIyBTPRaNE2jELR/PqcbYYw9bH0c1RlPXypqv5J0V7UZp8 -----END CERTIFICATE-----Generated at Sat Nov 1 22:40:42 2025 by rpki-client