$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft File: 928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft (raw, json) Hash identifier: WNFjozspt90lPAgL46EgWtOTopl7Yoz3iIQuzcMONko= Subject key identifier: DF:FE:28:8C:48:DC:A7:A3:58:08:07:4F:75:B9:CE:17:A8:54:9A:BA Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37 Certificate issuer: /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237 Certificate serial: 11378A8BB1A46C44F3DEE9443D3DD3243AF483D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft Manifest number: 0136 Signing time: Fri 31 Oct 2025 11:19:31 +0000 Manifest this update: Fri 31 Oct 2025 11:14:31 +0000 Manifest next update: Wed 05 Nov 2025 12:00:31 +0000 Files and hashes: 1: 3137392e31382e302e302f31362d3234203d3e20323731373733.roa (hash: XzG6KJufQ8puoDyUJkDVGMDh6pnFt7+mYe87GBd+mwA=) 2: 3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa (hash: tV3o20s21TsJjqDb5S1/mKBxK0lh/Jbio9TDdjJqjDI=) 3: 928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl (hash: 7DFHr3b+hLSCmUMadV5l7LfRHDTlvRbJxrHKoy7papg=) 4: 3137392e34392e3232382e302f32322d3234203d3e20323731373733.roa (hash: dSO+uVzC1k4Ko/bbdVfvkOYA5rGIyhx+7RWnbH5nFdg=) 5: 3137392e31392e302e302f31362d3234203d3e20323731373733.roa (hash: tZItrZbQmDCBTlWRkGJmVLG0qSliMiAjcs5E7SOE1Fw=) 6: 323830333a663765303a3a2f33322d3438203d3e20323731373733.roa (hash: lelhNvLQtvkUQgfNVv7Zopr5U3iYB5erOGuX5IVY+x0=) 7: 323830333a6138303a3a2f33322d3438203d3e20323731373733.roa (hash: QCnrWxcca0bGBVggAGXujGTEoFrCEltcgp1P4GcI3kk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:37:8a:8b:b1:a4:6c:44:f3:de:e9:44:3d:3d:d3:24:3a:f4:83:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237 Validity Not Before: Oct 31 11:14:31 2025 GMT Not After : Nov 5 12:00:31 2025 GMT Subject: CN=DFFE288C48DCA7A35808074F75B9CE17A8549ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:6e:db:b2:48:da:4e:75:c6:32:28:fb:7d: ec:c9:4d:7f:ee:88:af:3e:db:3a:04:5d:da:5a:86: 80:c9:81:25:04:cb:d6:23:47:fe:b1:29:69:db:a0: bb:89:7e:bb:ae:84:c0:76:74:37:eb:cf:6a:7c:86: 8f:9a:18:aa:28:32:e4:26:aa:7a:ad:80:10:60:96: e3:f5:a7:4d:9f:0b:f2:95:1b:0f:7e:97:0c:fe:14: bd:bc:56:c7:69:38:b4:23:52:bf:a6:98:63:e9:30: 02:b0:0e:37:16:4c:44:f1:e8:8f:71:b1:71:47:ba: 7c:92:6c:9b:d7:b9:d8:ec:b8:da:dd:69:c5:20:78: a7:cb:42:99:b5:36:ab:71:14:29:78:e7:ee:a9:c4: c6:99:01:a9:9b:cb:4d:70:96:d3:b8:a6:f5:eb:21: 05:f4:ba:ea:e1:a0:ff:f1:ec:f8:83:a9:c3:8a:a4: 85:42:db:9c:e3:5e:3e:77:7a:16:50:99:38:45:4e: 2b:d4:ea:b4:92:30:2d:a6:a8:f1:ce:e6:5f:b5:4f: 02:f0:fe:b1:96:b6:78:e8:b1:4e:53:5a:ea:37:66: b6:f7:92:03:a4:3a:70:09:52:45:d3:ae:d9:87:4e: ad:4c:17:a4:cd:d3:71:4d:d5:f9:e6:06:59:ac:a5: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:28:8C:48:DC:A7:A3:58:08:07:4F:75:B9:CE:17:A8:54:9A:BA X509v3 Authority Key Identifier: keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:db:e4:9f:e4:3c:76:d5:e3:b5:f3:d5:61:72:16:a6:06:26: 15:57:c5:2d:24:aa:03:70:3e:54:e8:58:c7:c9:92:8f:27:8c: 8f:03:1e:2a:1b:98:df:db:e4:07:37:1b:e9:5a:a5:f6:5d:07: 25:34:79:dc:6a:58:d7:4f:c7:de:fc:67:45:0a:73:b4:73:12: ca:85:9f:28:6c:32:85:65:8a:39:fd:cb:c1:d2:4b:c3:3b:86: 38:fc:78:14:a3:e6:3c:bf:02:2b:1e:73:8c:25:5e:ca:ea:82: ed:dc:f5:59:09:c6:46:d5:5a:37:48:29:24:c9:77:01:14:a1: 7f:4e:e2:51:bd:ab:82:ec:88:f4:0b:57:6e:c9:90:a2:5d:22: fa:77:d2:65:11:04:69:83:56:5d:74:34:40:f3:43:23:cf:66: bc:13:83:9b:ab:a0:5b:70:45:95:86:e0:e9:28:d4:49:7f:04: 18:94:47:6b:54:42:83:68:5e:de:01:85:83:7e:b9:20:f7:90: 33:a8:a6:d1:1b:87:45:62:5e:d5:c5:d6:57:d5:d2:48:f3:0f: ea:ca:bf:99:f4:af:8e:05:da:d0:a0:ee:85:fe:96:78:50:a5: 6b:0c:46:23:52:85:e5:d4:44:f4:54:41:ab:41:41:2d:7e:8e: d6:03:c8:da -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUETeKi7GkbETz3ulEPT3TJDr0g9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI4MDUyRjBDQjNGMzdBQ0QzQUJDQ0NCQzhBNzQwQjA0 REExMzIzNzAeFw0yNTEwMzExMTE0MzFaFw0yNTExMDUxMjAwMzFaMDMxMTAvBgNV BAMTKERGRkUyODhDNDhEQ0E3QTM1ODA4MDc0Rjc1QjlDRTE3QTg1NDlBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWG7bskjaTnXGMij7fezJTX/u iK8+2zoEXdpahoDJgSUEy9YjR/6xKWnboLuJfruuhMB2dDfrz2p8ho+aGKooMuQm qnqtgBBgluP1p02fC/KVGw9+lwz+FL28VsdpOLQjUr+mmGPpMAKwDjcWTETx6I9x sXFHunySbJvXudjsuNrdacUgeKfLQpm1NqtxFCl45+6pxMaZAamby01wltO4pvXr IQX0uurhoP/x7PiDqcOKpIVC25zjXj53ehZQmThFTivU6rSSMC2mqPHO5l+1TwLw /rGWtnjosU5TWuo3Zrb3kgOkOnAJUkXTrtmHTq1MF6TN03FN1fnmBlmspTPpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3/4ojEjcp6NYCAdPdbnOF6hUmrowHwYDVR0j BBgwFoAUkoBS8Ms/N6zTq8zLyKdAsE2hMjcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENEI1NkQ4Q0I3QjA2NjY0NjNBQ0FFMzFDMzQ5Njk3MTEw OUI0RDUxNTFENjJGQkU4Q0Y3RUIzMDY5RkQ2RkM4LzAvOTI4MDUyRjBDQjNGMzdB Q0QzQUJDQ0NCQzhBNzQwQjA0REExMzIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjgwNTJGMENCM0YzN0FDRDNB QkNDQ0JDOEE3NDBCMDREQTEzMjM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDRCNTZEOENCN0IwNjY2NDYzQUNBRTMxQzM0OTY5NzExMDlCNEQ1MTUx RDYyRkJFOENGN0VCMzA2OUZENkZDOC8wLzkyODA1MkYwQ0IzRjM3QUNEM0FCQ0ND QkM4QTc0MEIwNERBMTMyMzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA92+Sf5Dx21eO189VhchamBiYV V8UtJKoDcD5U6FjHyZKPJ4yPAx4qG5jf2+QHNxvpWqX2XQclNHncaljXT8fe/GdF CnO0cxLKhZ8obDKFZYo5/cvB0kvDO4Y4/HgUo+Y8vwIrHnOMJV7K6oLt3PVZCcZG 1Vo3SCkkyXcBFKF/TuJRvauC7Ij0C1duyZCiXSL6d9JlEQRpg1ZddDRA80Mjz2a8 E4Obq6BbcEWVhuDpKNRJfwQYlEdrVEKDaF7eAYWDfrkg95AzqKbRG4dFYl7VxdZX 1dJI8w/qyr+Z9K+OBdrQoO6F/pZ4UKVrDEYjUoXl1ET0VEGrQUEtfo7WA8ja -----END CERTIFICATE-----Generated at Sat Nov 1 23:32:49 2025 by rpki-client