$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft File: 5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft (raw, json) Hash identifier: oUSqHkm72GNzGFvbiBlmpQpiPhDrA0dhyNj2yzR5B/8= Subject key identifier: D9:B6:01:4C:68:72:95:94:1D:9F:A6:DE:D0:2B:2B:1D:B7:62:F8:F4 Authority key identifier: 5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9 Certificate issuer: /CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9 Certificate serial: 51CCBB7878BB9CDD378AC9F6948181AC7CDDA5D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft Manifest number: 012E Signing time: Sun 26 Oct 2025 13:20:02 +0000 Manifest this update: Sun 26 Oct 2025 13:15:02 +0000 Manifest next update: Sat 01 Nov 2025 08:26:02 +0000 Files and hashes: 1: 3230372e3234382e37362e302f32332d3233203d3e20323632313734.roa (hash: +um6f4Itnz3r5EkzXKSQDWEpEVIeh+S1Rp4feZfOJ10=) 2: 3137392e302e302e302f32332d3233203d3e20323632313734.roa (hash: zHovRi7fsRFroAQXay/7QJ21RESAXDxP6jrxdKR6gsk=) 3: 3230302e36312e3235342e302f32332d3233203d3e20323632313734.roa (hash: mHfYDbznc/EFsXW/UtniBvS/fH8hhV6/aagspziX5jM=) 4: 323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa (hash: PVXHlvzrKlTHJpb0oHj+V/SZs2ZG0/lc9dYefzIv3po=) 5: 5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl (hash: /mU8Q7hbiGYqF9uYZ0JrEb6W/e1hDOhEousvLyG+Ok0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Nov 2025 08:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cc:bb:78:78:bb:9c:dd:37:8a:c9:f6:94:81:81:ac:7c:dd:a5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9 Validity Not Before: Oct 26 13:15:02 2025 GMT Not After : Nov 1 08:26:02 2025 GMT Subject: CN=D9B6014C687295941D9FA6DED02B2B1DB762F8F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:14:b9:8f:fb:16:30:52:7b:5c:7e:28:44: 87:56:b2:8e:b0:21:41:82:a7:9f:dc:13:50:d0:15: 40:12:e1:38:22:c2:3d:de:cf:a7:05:22:04:c0:72: b8:28:cb:13:28:c8:f4:d7:e0:9f:5c:a2:73:3e:ed: 12:0a:e6:4e:df:34:c5:66:68:b0:0b:89:23:e0:f7: 7b:3d:8c:d0:06:da:24:43:77:03:a4:62:dd:b3:3e: 69:aa:d8:95:e1:fc:c7:ce:08:02:d5:61:d5:ca:8c: d3:15:34:b2:7c:51:4d:c5:90:67:18:b5:5f:02:fb: 0e:c0:ed:c2:1f:62:f3:db:7b:42:60:76:22:c7:4a: 7c:94:ba:b1:b9:8e:53:da:0e:c2:4a:e5:09:fb:73: 69:c4:dd:14:81:72:79:a1:ca:9d:cc:81:1d:74:a3: b8:ad:81:37:4b:b7:39:a6:75:87:67:be:a1:bd:1f: f9:78:83:e8:08:1a:fe:02:1d:d5:59:92:09:4e:ee: 29:7c:6e:74:08:c2:ef:a1:28:4c:05:36:1e:82:c4: 05:d3:8d:dc:27:a7:88:f7:99:ba:b8:bb:58:6e:8f: 4e:ad:c5:de:c8:4f:4e:b2:5a:f9:80:b6:3d:52:b4: 25:46:66:f6:d3:02:2c:af:ff:40:c9:43:83:16:02: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B6:01:4C:68:72:95:94:1D:9F:A6:DE:D0:2B:2B:1D:B7:62:F8:F4 X509v3 Authority Key Identifier: keyid:5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8c:bc:be:e7:a2:7b:b9:a0:7d:30:27:3f:e9:70:29:1a:de: d9:2f:e2:ec:c1:fa:15:cc:4c:0c:a3:ef:81:70:35:aa:fa:83: cf:11:59:0a:29:53:6e:12:87:0b:1a:57:25:11:7a:3a:80:95: 34:c6:37:15:b3:8e:02:d6:bc:56:5a:34:c0:dc:5a:dc:79:26: 32:b1:0a:96:ed:e2:ae:cb:e1:93:0a:15:64:de:8e:6c:a5:c3: 38:60:f7:4e:55:2c:9f:ca:65:00:cf:ed:52:73:55:a7:c4:02: ef:df:be:59:0f:ec:38:7c:73:08:05:1f:78:9c:23:45:b2:e3: a0:b2:7f:7b:bf:7f:1d:39:15:5a:a2:bf:3c:9a:f5:50:eb:c1: e0:aa:10:43:74:65:a1:50:5a:74:1f:32:86:34:4b:43:30:96: fc:e6:50:15:d2:f1:91:a5:6e:2b:8c:3d:5e:bd:00:ef:2a:b7: 8b:e6:44:c2:21:38:43:9b:97:a5:44:30:de:30:80:cf:a4:e7: 35:78:3a:ee:b4:16:48:82:5b:2e:21:60:9a:4d:1d:32:d7:59: 1b:69:83:27:42:2f:59:c9:bf:ba:ca:23:18:c0:66:ca:c9:7c: 5c:ea:61:3e:7b:3a:41:a1:95:70:2e:d2:35:d1:63:de:53:12: fa:24:e2:09 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUcy7eHi7nN03isn2lIGBrHzdpdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY1RDRCQUVGMERFNzZFMkNCNEQ0MUI0NUEwQjRCNTMw MkJGRTFFOTAeFw0yNTEwMjYxMzE1MDJaFw0yNTExMDEwODI2MDJaMDMxMTAvBgNV BAMTKEQ5QjYwMTRDNjg3Mjk1OTQxRDlGQTZERUQwMkIyQjFEQjc2MkY4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRBS5j/sWMFJ7XH4oRIdWso6w IUGCp5/cE1DQFUAS4Tgiwj3ez6cFIgTAcrgoyxMoyPTX4J9conM+7RIK5k7fNMVm aLALiSPg93s9jNAG2iRDdwOkYt2zPmmq2JXh/MfOCALVYdXKjNMVNLJ8UU3FkGcY tV8C+w7A7cIfYvPbe0JgdiLHSnyUurG5jlPaDsJK5Qn7c2nE3RSBcnmhyp3MgR10 o7itgTdLtzmmdYdnvqG9H/l4g+gIGv4CHdVZkglO7il8bnQIwu+hKEwFNh6CxAXT jdwnp4j3mbq4u1huj06txd7IT06yWvmAtj1StCVGZvbTAiyv/0DJQ4MWApljAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2bYBTGhylZQdn6be0CsrHbdi+PQwHwYDVR0j BBgwFoAUX11LrvDeduLLTUG0WgtLUwK/4ekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMTc3ODkwMTczMDE0MzhBNjRFRkRFN0MwQzYwM0I1MkI3 QUUwRUJEQjNCREVCREM1RjcxQjVEQ0U1QTFDQTk2LzAvNUY1RDRCQUVGMERFNzZF MkNCNEQ0MUI0NUEwQjRCNTMwMkJGRTFFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjVENEJBRUYwREU3NkUyQ0I0 RDQxQjQ1QTBCNEI1MzAyQkZFMUU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDE3Nzg5MDE3MzAxNDM4QTY0RUZERTdDMEM2MDNCNTJCN0FFMEVCREIz QkRFQkRDNUY3MUI1RENFNUExQ0E5Ni8wLzVGNUQ0QkFFRjBERTc2RTJDQjRENDFC NDVBMEI0QjUzMDJCRkUxRTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvjLy+56J7uaB9MCc/6XApGt7Z L+LswfoVzEwMo++BcDWq+oPPEVkKKVNuEocLGlclEXo6gJU0xjcVs44C1rxWWjTA 3FrceSYysQqW7eKuy+GTChVk3o5spcM4YPdOVSyfymUAz+1Sc1WnxALv375ZD+w4 fHMIBR94nCNFsuOgsn97v38dORVaor88mvVQ68HgqhBDdGWhUFp0HzKGNEtDMJb8 5lAV0vGRpW4rjD1evQDvKreL5kTCIThDm5elRDDeMIDPpOc1eDrutBZIglsuIWCa TR0y11kbaYMnQi9Zyb+6yiMYwGbKyXxc6mE+ezpBoZVwLtI10WPeUxL6JOIJ -----END CERTIFICATE-----Generated at Wed Oct 29 06:47:46 2025 by rpki-client