$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.mft File: A4D9D7A66A85EB5BC486BAFEFF00448320545941.mft (raw, json) Hash identifier: 5/CH01vKAY/UUA1n5UnFb9k/JFI2iiRngDG2ty/8ge4= Subject key identifier: 61:C9:E3:48:58:D1:2A:99:F4:A9:94:71:5A:4F:8E:9F:58:6B:8E:95 Authority key identifier: A4:D9:D7:A6:6A:85:EB:5B:C4:86:BA:FE:FF:00:44:83:20:54:59:41 Certificate issuer: /CN=A4D9D7A66A85EB5BC486BAFEFF00448320545941 Certificate serial: 4BB0242E985FF94AB4E7D604266898C8014DF28C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.mft Manifest number: 0135 Signing time: Sat 01 Nov 2025 17:36:06 +0000 Manifest this update: Sat 01 Nov 2025 17:31:06 +0000 Manifest next update: Fri 07 Nov 2025 15:52:06 +0000 Files and hashes: 1: A4D9D7A66A85EB5BC486BAFEFF00448320545941.crl (hash: +I2lh3dr5gb2vUkX+zSq9xPMoOjM3ydGzCQ4qcsqQ2Y=) 2: 3139302e3130332e3139302e302f32342d3234203d3e20323731383533.roa (hash: bMGgvKynI6oCmwoSFi6V4JF1PawVgVWH/q/yi2YMmMM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.crl rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b0:24:2e:98:5f:f9:4a:b4:e7:d6:04:26:68:98:c8:01:4d:f2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9D7A66A85EB5BC486BAFEFF00448320545941 Validity Not Before: Nov 1 17:31:06 2025 GMT Not After : Nov 7 15:52:06 2025 GMT Subject: CN=61C9E34858D12A99F4A994715A4F8E9F586B8E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:bf:59:07:a1:2d:8f:81:0c:56:0c:61:d2: 09:6e:48:33:5f:64:8d:95:bb:47:ac:3b:7b:f8:61: 3e:9a:71:cc:bb:7c:df:de:bb:eb:42:75:b1:38:06: 86:2f:4d:ba:4e:86:d3:ca:3f:fb:27:b4:8f:7a:07: dd:c2:54:32:7b:39:25:d7:12:b9:bc:da:07:f2:07: aa:79:23:db:49:2c:62:2a:81:c2:c6:d7:2e:7d:ba: 84:30:6b:39:a6:06:33:5b:b0:20:f7:0c:05:a7:0f: 69:04:15:fe:ef:d7:6c:52:da:76:3b:67:09:9b:ef: e1:d2:2b:ed:1d:7a:78:52:0d:b3:59:56:34:2e:66: be:d3:30:6a:8a:a0:42:84:21:15:d8:51:a0:66:7a: 6b:ce:c7:54:0a:88:78:e9:14:2c:2e:33:a2:84:0a: bd:e1:ed:ad:32:4b:a1:26:6f:8d:4a:ca:fb:be:b0: b1:59:39:94:df:84:8a:82:99:ff:c5:46:04:a7:2c: ca:20:eb:46:1f:e6:ed:af:d8:da:e3:db:67:5f:5d: a9:91:2d:0c:1b:70:12:c2:65:bd:83:f8:76:07:fc: 31:07:c9:88:cf:b4:23:3a:41:6a:0c:48:a6:77:3d: 2f:7e:3a:b1:1e:e4:76:7f:79:dd:8b:cf:05:05:85: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:E3:48:58:D1:2A:99:F4:A9:94:71:5A:4F:8E:9F:58:6B:8E:95 X509v3 Authority Key Identifier: keyid:A4:D9:D7:A6:6A:85:EB:5B:C4:86:BA:FE:FF:00:44:83:20:54:59:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:7c:8f:ce:30:3e:23:fe:bc:db:65:7c:96:64:69:43:93: e2:e2:29:64:30:5d:4a:33:18:1d:69:2d:48:be:0e:27:55:a1: 49:89:13:0c:a0:bc:44:de:45:84:7a:08:12:10:23:97:c5:84: ba:ae:7b:8d:04:a3:93:35:ab:74:d2:08:d9:53:02:96:a8:a7: 1c:27:23:83:30:e5:05:f8:f6:5e:62:5b:dc:6b:d0:ff:d4:24: 2c:6b:dc:d7:b5:b4:49:8d:fb:aa:a9:e1:0f:0a:09:52:de:09: d5:6e:0f:11:81:13:02:3d:e1:db:8e:45:c1:53:ed:ad:68:f6: 6a:4c:ea:fd:af:a5:fd:cf:bc:e6:73:dc:56:48:08:5b:de:79: aa:ac:b2:ba:76:9d:cd:c1:9d:2d:a6:67:64:06:66:01:23:aa: bd:97:d6:26:d6:6a:fb:36:82:fc:a7:b2:4e:dd:05:1b:68:52: de:bc:67:38:cd:eb:12:40:a5:9e:d5:8f:d3:e1:e8:d6:e5:e0: a5:c9:4f:3b:0b:8b:07:38:19:59:ff:75:f1:1a:ff:c7:c5:48: 2e:4b:0f:72:f9:4d:f7:93:58:15:94:03:5d:64:97:26:82:e8: 34:c6:3b:28:60:1d:f1:7f:20:5f:b4:ac:b3:a8:c2:0c:ae:aa: 3a:c7:86:c4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUS7AkLphf+Uq059YEJmiYyAFN8owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOUQ3QTY2QTg1RUI1QkM0ODZCQUZFRkYwMDQ0ODMy MDU0NTk0MTAeFw0yNTExMDExNzMxMDZaFw0yNTExMDcxNTUyMDZaMDMxMTAvBgNV BAMTKDYxQzlFMzQ4NThEMTJBOTlGNEE5OTQ3MTVBNEY4RTlGNTg2QjhFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeoL9ZB6Etj4EMVgxh0gluSDNf ZI2Vu0esO3v4YT6accy7fN/eu+tCdbE4BoYvTbpOhtPKP/sntI96B93CVDJ7OSXX Erm82gfyB6p5I9tJLGIqgcLG1y59uoQwazmmBjNbsCD3DAWnD2kEFf7v12xS2nY7 Zwmb7+HSK+0denhSDbNZVjQuZr7TMGqKoEKEIRXYUaBmemvOx1QKiHjpFCwuM6KE Cr3h7a0yS6Emb41Kyvu+sLFZOZTfhIqCmf/FRgSnLMog60Yf5u2v2Nrj22dfXamR LQwbcBLCZb2D+HYH/DEHyYjPtCM6QWoMSKZ3PS9+OrEe5HZ/ed2LzwUFhYKfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYcnjSFjRKpn0qZRxWk+On1hrjpUwHwYDVR0j BBgwFoAUpNnXpmqF61vEhrr+/wBEgyBUWUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CODdDRUQ1QUFEMkQxRUI5Q0JCRDgyNTk5QjRDQTY4NjdB RjBBNzdCM0EyNjRFQUM1NDNDNjBCQjFBNTM4ODdDLzAvQTREOUQ3QTY2QTg1RUI1 QkM0ODZCQUZFRkYwMDQ0ODMyMDU0NTk0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEQ5RDdBNjZBODVFQjVCQzQ4 NkJBRkVGRjAwNDQ4MzIwNTQ1OTQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjg3Q0VENUFBRDJEMUVCOUNCQkQ4MjU5OUI0Q0E2ODY3QUYwQTc3QjNB MjY0RUFDNTQzQzYwQkIxQTUzODg3Qy8wL0E0RDlEN0E2NkE4NUVCNUJDNDg2QkFG RUZGMDA0NDgzMjA1NDU5NDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsaXyPzjA+I/6822V8lmRpQ5Pi 4ilkMF1KMxgdaS1Ivg4nVaFJiRMMoLxE3kWEeggSECOXxYS6rnuNBKOTNat00gjZ UwKWqKccJyODMOUF+PZeYlvca9D/1CQsa9zXtbRJjfuqqeEPCglS3gnVbg8RgRMC PeHbjkXBU+2taPZqTOr9r6X9z7zmc9xWSAhb3nmqrLK6dp3NwZ0tpmdkBmYBI6q9 l9Ym1mr7NoL8p7JO3QUbaFLevGc4zesSQKWe1Y/T4ejW5eClyU87C4sHOBlZ/3Xx Gv/HxUguSw9y+U33k1gVlANdZJcmgug0xjsoYB3xfyBftKyzqMIMrqo6x4bE -----END CERTIFICATE-----Generated at Sun Nov 2 11:43:01 2025 by rpki-client