$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft File: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft (raw, json) Hash identifier: n90Lt9dzaxY16C7d7QseXN6oVt7nChVo5mKLYrvSAbE= Subject key identifier: 8C:08:1B:F1:2D:70:51:79:E4:99:D0:DF:3D:C7:96:5D:AE:80:FC:B8 Authority key identifier: D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0 Certificate issuer: /CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0 Certificate serial: 59F82863FA1F6D270922ADBD8BCF025C708BBE42 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft Manifest number: 2D Signing time: Thu 23 Oct 2025 16:04:26 +0000 Manifest this update: Thu 23 Oct 2025 15:59:26 +0000 Manifest next update: Wed 29 Oct 2025 07:42:26 +0000 Files and hashes: 1: 323830333a343165303a3a2f33322d3332203d3e20323639393935.roa (hash: 9a73hHXsUpINg4/Jlvrnj1XEPuNRON7CSa8QHkSYsnI=) 2: 3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa (hash: HTar7+pZfbldc2ylEfFBE6h06Z0KculQNaqKWJvTnig=) 3: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl (hash: Z2WeAcLrPhaLTpTjZij/EtVMqRDws7WG6U4HiQS0UTI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 07:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:28:63:fa:1f:6d:27:09:22:ad:bd:8b:cf:02:5c:70:8b:be:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0 Validity Not Before: Oct 23 15:59:26 2025 GMT Not After : Oct 29 07:42:26 2025 GMT Subject: CN=8C081BF12D705179E499D0DF3DC7965DAE80FCB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a5:20:3d:ec:28:aa:fd:71:f2:aa:b9:54:c7: 4a:60:49:d8:27:d1:f0:29:82:17:5a:05:e3:0b:b5: f2:63:51:ab:51:9d:d3:4b:5e:9b:c9:51:21:b0:2d: 81:17:1f:bb:a6:03:46:aa:d3:fe:99:31:9c:99:67: 29:dd:f9:b2:4f:fc:d2:75:9b:21:c2:8a:d6:3e:72: 26:07:25:83:56:4d:e7:b1:88:fc:e0:bf:5d:b0:a7: 29:c0:77:26:11:1c:4c:a7:2e:ed:ca:42:8c:00:34: 8e:11:a6:3c:22:5b:7d:ae:9a:ef:86:33:6a:0a:3a: a8:ee:f4:b7:21:21:dc:e3:b8:8a:a4:e4:5a:56:d1: 7b:c0:10:83:29:8f:bf:d8:38:52:0d:03:d1:f9:cd: be:f3:e8:8a:4d:6e:7b:0d:6b:3b:72:a2:8b:0b:63: da:1f:fa:d6:89:79:4c:46:e2:70:8d:1b:6f:bd:1b: 2f:46:0b:a3:2a:7c:f4:db:1d:dc:d7:89:c7:cc:74: 26:91:8d:2d:13:2a:f1:6f:c6:7b:58:86:07:c8:0d: 31:ca:df:0e:b6:4a:e2:94:e9:2d:bf:10:8a:aa:0b: 97:4c:ea:e1:81:8f:8c:a5:3a:03:70:98:fa:c1:2b: 60:99:88:0f:b8:75:ec:9e:43:e2:ac:65:9d:7a:df: f1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:08:1B:F1:2D:70:51:79:E4:99:D0:DF:3D:C7:96:5D:AE:80:FC:B8 X509v3 Authority Key Identifier: keyid:D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e5:d7:93:6b:41:2e:24:a6:ff:bc:d8:5b:29:d2:3f:c2:b8: cd:ee:8e:bf:7a:73:be:b3:8c:3c:23:9f:51:98:af:f1:ae:e0: cb:d5:e0:9c:c3:96:03:88:1d:f2:bf:27:fb:ba:37:71:fc:13: 23:42:93:6c:c2:ea:d8:75:a9:31:c2:e0:b0:61:47:25:83:fb: e3:bb:dc:79:00:f3:0b:92:e0:a1:ae:dd:a3:05:94:10:03:62: 56:bf:81:09:61:2d:5d:7d:d3:eb:78:39:5d:22:8e:7f:28:ed: d6:1f:e6:be:5b:e6:5b:df:9a:d2:83:ac:d7:2c:b8:e3:fa:0e: ef:7c:b9:95:4e:4b:73:87:01:af:cf:9a:fc:89:cc:c8:03:d8: db:76:e4:ef:d7:5d:c7:b5:2c:63:15:44:b2:f1:4b:95:db:39: 84:2d:4e:54:9f:16:c3:89:17:de:92:0a:22:fe:97:d1:4a:c8: 3b:9d:30:21:21:2e:87:ed:e5:47:ef:0c:1d:83:ce:c4:99:36: 18:82:ec:9f:82:71:1e:d5:59:c1:ce:5b:ca:37:ec:3e:77:c2: 50:f5:9e:ff:a0:30:96:e4:fa:26:ff:f5:5b:6c:5b:2b:84:39: 06:51:1f:b4:94:20:9a:95:16:25:cb:89:27:6d:59:24:9e:46: dd:e7:65:40 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWfgoY/ofbScJIq29i88CXHCLvkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTBBM0U4MjM3RkZCNjFBMUU1RkY1QTMzNTk1RDRB QjREQzlFMDAeFw0yNTEwMjMxNTU5MjZaFw0yNTEwMjkwNzQyMjZaMDMxMTAvBgNV BAMTKDhDMDgxQkYxMkQ3MDUxNzlFNDk5RDBERjNEQzc5NjVEQUU4MEZDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgpSA97Ciq/XHyqrlUx0pgSdgn 0fApghdaBeMLtfJjUatRndNLXpvJUSGwLYEXH7umA0aq0/6ZMZyZZynd+bJP/NJ1 myHCitY+ciYHJYNWTeexiPzgv12wpynAdyYRHEynLu3KQowANI4RpjwiW32umu+G M2oKOqju9LchIdzjuIqk5FpW0XvAEIMpj7/YOFINA9H5zb7z6IpNbnsNaztyoosL Y9of+taJeUxG4nCNG2+9Gy9GC6MqfPTbHdzXicfMdCaRjS0TKvFvxntYhgfIDTHK 3w62SuKU6S2/EIqqC5dM6uGBj4ylOgNwmPrBK2CZiA+4deyeQ+KsZZ163/EjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjAgb8S1wUXnkmdDfPceWXa6A/LgwHwYDVR0j BBgwFoAU2KkKPoI3/7YaHl/1ozWV1KtNyeAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMEY4NzBFMDdFMEUyMzNFQThFQzk2RUE3RjQ5MDc3Qjc1 OEVGNTE2NEE1Qzk3RjMwNjQyQUI1NzgyQTY5OUIyLzAvRDhBOTBBM0U4MjM3RkZC NjFBMUU1RkY1QTMzNTk1RDRBQjREQzlFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEE5MEEzRTgyMzdGRkI2MUEx RTVGRjVBMzM1OTVENEFCNERDOUUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDBGODcwRTA3RTBFMjMzRUE4RUM5NkVBN0Y0OTA3N0I3NThFRjUxNjRB NUM5N0YzMDY0MkFCNTc4MkE2OTlCMi8wL0Q4QTkwQTNFODIzN0ZGQjYxQTFFNUZG NUEzMzU5NUQ0QUI0REM5RTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBs5deTa0EuJKb/vNhbKdI/wrjN 7o6/enO+s4w8I59RmK/xruDL1eCcw5YDiB3yvyf7ujdx/BMjQpNswurYdakxwuCw YUclg/vju9x5APMLkuChrt2jBZQQA2JWv4EJYS1dfdPreDldIo5/KO3WH+a+W+Zb 35rSg6zXLLjj+g7vfLmVTktzhwGvz5r8iczIA9jbduTv113HtSxjFUSy8UuV2zmE LU5UnxbDiRfekgoi/pfRSsg7nTAhIS6H7eVH7wwdg87EmTYYguyfgnEe1VnBzlvK N+w+d8JQ9Z7/oDCW5Pom//VbbFsrhDkGUR+0lCCalRYly4knbVkknkbd52VA -----END CERTIFICATE-----Generated at Sat Oct 25 15:42:22 2025 by rpki-client