$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.mft File: D6747CEA07291D5F71FA45A86A646B8833E8F3B5.mft (raw, json) Hash identifier: 1HqJJ47qkBo4CyO2TNhEpffaWru3C2/SY30sZQTXzdY= Subject key identifier: 25:09:17:09:34:5E:C0:E6:24:B2:74:B4:46:A3:83:66:6D:B8:E3:83 Authority key identifier: D6:74:7C:EA:07:29:1D:5F:71:FA:45:A8:6A:64:6B:88:33:E8:F3:B5 Certificate issuer: /CN=D6747CEA07291D5F71FA45A86A646B8833E8F3B5 Certificate serial: 11543628C40A2040AA0A08212520FBE817A22604 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.mft Manifest number: 0133 Signing time: Sun 02 Nov 2025 02:46:01 +0000 Manifest this update: Sun 02 Nov 2025 02:41:01 +0000 Manifest next update: Thu 06 Nov 2025 06:40:01 +0000 Files and hashes: 1: 323830333a346336303a3a2f33322d3438203d3e20323637383435.roa (hash: qoDEPX2fs17Nc1FLicPh9Jt5+bEoUqbZDI2aaukHjHA=) 2: 34352e3137362e39322e302f32322d3234203d3e20323637383435.roa (hash: oDnr09UgDs7KuXy/dP1BjfnvPRrsYkU+3TPW7xDYWSA=) 3: D6747CEA07291D5F71FA45A86A646B8833E8F3B5.crl (hash: gdx56+BMR+SnTMZoI5sB1wiZim3Gc7s6RP6xtWu+zAk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.crl rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:54:36:28:c4:0a:20:40:aa:0a:08:21:25:20:fb:e8:17:a2:26:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6747CEA07291D5F71FA45A86A646B8833E8F3B5 Validity Not Before: Nov 2 02:41:01 2025 GMT Not After : Nov 6 06:40:01 2025 GMT Subject: CN=25091709345EC0E624B274B446A383666DB8E383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:3e:3f:e0:05:c7:c7:9b:b3:94:82:09:11: 2b:1a:70:da:3f:c0:12:35:df:3b:8f:69:f4:ac:27: 2e:1a:38:96:6c:03:6f:92:82:f8:e0:6b:50:a6:b7: 6e:c0:b5:07:70:63:bc:a0:e0:a5:d9:bd:95:9b:39: 57:98:a0:f2:c5:12:7a:05:c8:31:a8:57:1b:d5:76: 15:a7:c7:48:a0:c2:f7:57:24:92:58:d3:b4:05:3d: d3:35:25:16:44:7f:51:e8:8e:a7:f7:63:6a:76:0e: 0f:49:dc:98:41:9a:17:dd:4f:dd:58:72:e1:43:dd: 2b:b6:02:67:f1:77:93:b4:7d:45:42:4a:23:d2:76: a4:fe:f1:a9:21:b3:71:94:f0:75:71:57:34:5b:06: 49:84:dd:d4:bf:09:29:c5:0b:dc:36:5b:13:32:2b: b1:74:c6:64:37:4b:6d:05:69:4d:e7:95:65:05:d6: 95:91:1f:71:b8:70:a1:ba:b2:c1:44:ff:4e:f7:b6: a9:dc:b7:9a:ca:bd:b5:41:f8:3d:ba:b6:0f:76:7f: 78:89:51:ee:49:e3:c7:e0:a9:88:86:7a:25:ea:fc: 20:5c:54:dd:cf:f6:23:05:ba:61:64:1f:a0:8b:01: 9f:58:f5:73:56:e0:4d:c7:14:85:f1:3b:fd:b9:b3: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:17:09:34:5E:C0:E6:24:B2:74:B4:46:A3:83:66:6D:B8:E3:83 X509v3 Authority Key Identifier: keyid:D6:74:7C:EA:07:29:1D:5F:71:FA:45:A8:6A:64:6B:88:33:E8:F3:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F7AE9EC8348461FB13729C27DEF19CCDA5CE93063E2E7CF4F54CDE2905A64/0/D6747CEA07291D5F71FA45A86A646B8833E8F3B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8e:9f:fd:92:28:77:3e:39:23:52:37:59:bb:77:d3:b5:aa: b4:84:8c:b3:ce:39:18:73:60:30:5a:eb:94:be:3c:18:19:66: 1e:e8:35:ea:53:10:67:63:20:3d:ef:a8:ba:86:98:12:74:b4: 65:9a:c7:c1:cc:76:88:1a:5d:a6:75:c7:f0:84:ac:c6:48:8e: c2:19:33:8e:75:e4:39:ca:0e:a3:81:0b:4c:c6:89:77:b1:d6: d2:0a:46:fc:a3:10:62:63:c1:2f:0d:4d:94:2c:53:5b:74:5b: 63:9d:b5:6e:41:1f:d3:65:74:c9:0a:75:9b:2c:b2:7f:3c:60: 86:16:5c:90:50:56:f2:26:74:db:42:f2:a0:28:c0:39:85:7b: 7e:58:26:67:a5:ab:a6:bb:e9:9d:73:2c:a2:76:05:8d:02:77: f9:98:72:44:be:aa:0d:1e:12:f3:d3:cf:99:76:b1:ab:3f:0b: 3b:d3:54:9f:87:e5:8c:e3:b1:5c:2b:23:99:eb:db:46:6f:a9: 6e:a0:69:33:a7:dc:1e:c9:34:79:af:6b:23:c1:e5:ce:30:58: 21:ed:0d:ff:62:64:12:79:9d:d9:1d:46:35:b3:5a:f4:2b:5b: b2:35:3c:be:34:3a:85:bb:dd:cf:25:00:b0:5d:f3:29:af:17: 28:86:55:50 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEVQ2KMQKIECqCgghJSD76BeiJgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3NDdDRUEwNzI5MUQ1RjcxRkE0NUE4NkE2NDZCODgz M0U4RjNCNTAeFw0yNTExMDIwMjQxMDFaFw0yNTExMDYwNjQwMDFaMDMxMTAvBgNV BAMTKDI1MDkxNzA5MzQ1RUMwRTYyNEIyNzRCNDQ2QTM4MzY2NkRCOEUzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIez4/4AXHx5uzlIIJESsacNo/ wBI13zuPafSsJy4aOJZsA2+Sgvjga1Cmt27AtQdwY7yg4KXZvZWbOVeYoPLFEnoF yDGoVxvVdhWnx0igwvdXJJJY07QFPdM1JRZEf1Hojqf3Y2p2Dg9J3JhBmhfdT91Y cuFD3Su2Amfxd5O0fUVCSiPSdqT+8akhs3GU8HVxVzRbBkmE3dS/CSnFC9w2WxMy K7F0xmQ3S20FaU3nlWUF1pWRH3G4cKG6ssFE/073tqnct5rKvbVB+D26tg92f3iJ Ue5J48fgqYiGeiXq/CBcVN3P9iMFumFkH6CLAZ9Y9XNW4E3HFIXxO/25swnbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJQkXCTRewOYksnS0RqODZm2444MwHwYDVR0j BBgwFoAU1nR86gcpHV9x+kWoamRriDPo87UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjFGN0FFOUVDODM0ODQ2MUZCMTM3MjlDMjdERUYxOUND REE1Q0U5MzA2M0UyRTdDRjRGNTRDREUyOTA1QTY0LzAvRDY3NDdDRUEwNzI5MUQ1 RjcxRkE0NUE4NkE2NDZCODgzM0U4RjNCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjc0N0NFQTA3MjkxRDVGNzFG QTQ1QTg2QTY0NkI4ODMzRThGM0I1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzYxRjdBRTlFQzgzNDg0NjFGQjEzNzI5QzI3REVGMTlDQ0RBNUNFOTMw NjNFMkU3Q0Y0RjU0Q0RFMjkwNUE2NC8wL0Q2NzQ3Q0VBMDcyOTFENUY3MUZBNDVB ODZBNjQ2Qjg4MzNFOEYzQjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPjp/9kih3PjkjUjdZu3fTtaq0 hIyzzjkYc2AwWuuUvjwYGWYe6DXqUxBnYyA976i6hpgSdLRlmsfBzHaIGl2mdcfw hKzGSI7CGTOOdeQ5yg6jgQtMxol3sdbSCkb8oxBiY8EvDU2ULFNbdFtjnbVuQR/T ZXTJCnWbLLJ/PGCGFlyQUFbyJnTbQvKgKMA5hXt+WCZnpaumu+mdcyyidgWNAnf5 mHJEvqoNHhLz08+ZdrGrPws701Sfh+WM47FcKyOZ69tGb6luoGkzp9weyTR5r2sj weXOMFgh7Q3/YmQSeZ3ZHUY1s1r0K1uyNTy+NDqFu93PJQCwXfMprxcohlVQ -----END CERTIFICATE-----Generated at Sun Nov 2 10:32:55 2025 by rpki-client