$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft File: D17A3829AD924E36C68D46B4C17B189D22C8B741.mft (raw, json) Hash identifier: gqZgRMFWGA4l9FmjdWKVsq0+RLoxfVXKcvx4FPpZYVs= Subject key identifier: 93:2D:CD:E5:B9:9A:D8:EE:43:D8:12:1F:59:9C:46:03:79:A3:4C:41 Authority key identifier: D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41 Certificate issuer: /CN=D17A3829AD924E36C68D46B4C17B189D22C8B741 Certificate serial: 0FD7195259E839A4DFBAD0292F091E0BE4C47DC6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft Manifest number: 013A Signing time: Mon 17 Nov 2025 11:57:10 +0000 Manifest this update: Mon 17 Nov 2025 11:52:10 +0000 Manifest next update: Fri 21 Nov 2025 14:49:10 +0000 Files and hashes: 1: D17A3829AD924E36C68D46B4C17B189D22C8B741.crl (hash: 8FNi0MSi7Sm2q0lkQnryeFIiCTrQWir/9me8zyOVM+M=) 2: 323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa (hash: mv6PEhzVEWhR5Eu+zCxtfFppGnkmxsq7cr0OMG227H4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Nov 2025 04:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d7:19:52:59:e8:39:a4:df:ba:d0:29:2f:09:1e:0b:e4:c4:7d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D17A3829AD924E36C68D46B4C17B189D22C8B741 Validity Not Before: Nov 17 11:52:10 2025 GMT Not After : Nov 21 14:49:10 2025 GMT Subject: CN=932DCDE5B99AD8EE43D8121F599C460379A34C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:b0:f8:6a:5d:d4:f1:dc:8f:32:e8:54:98: 8d:08:14:6b:bc:fe:e8:36:db:e5:74:36:a4:22:a8: c6:5d:6a:8e:78:6a:06:dc:33:d8:75:0e:1b:d9:ec: 50:92:34:b6:5c:41:f7:d0:29:37:11:db:70:96:ba: 7d:60:d7:14:ae:3a:c3:6d:47:03:f6:25:46:ba:ee: a0:3b:6f:c7:44:47:61:bf:07:43:0d:ce:e6:3d:a8: a9:bf:6e:3d:07:ab:7d:9b:42:fd:f8:63:f3:46:d0: dd:ab:ab:4a:75:47:f8:d1:ac:f2:e7:82:57:d1:b8: d7:df:85:16:d1:7c:a7:13:1c:12:77:ad:26:03:12: 75:56:fa:68:a0:13:b0:df:50:2c:57:01:d2:45:22: dc:be:6f:18:a3:d6:84:16:a3:ad:c4:75:de:f9:c3: 9f:d7:66:3a:32:8b:6a:f0:75:e7:99:59:dc:e3:f8: 7e:e1:41:5b:49:74:85:52:4c:8a:78:17:60:70:d5: 01:5f:fb:cc:54:20:10:c8:6c:b2:6b:a0:e5:f1:eb: 32:cf:1b:b3:2a:82:3e:3e:7f:1a:da:9d:e8:20:ba: f6:c0:c8:d8:0a:6c:e4:73:9f:55:89:e1:54:72:4f: 20:c7:eb:52:2e:bb:ef:89:4d:4c:b5:2d:f8:74:7e: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2D:CD:E5:B9:9A:D8:EE:43:D8:12:1F:59:9C:46:03:79:A3:4C:41 X509v3 Authority Key Identifier: keyid:D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7e:b0:36:98:ee:30:0a:f8:5d:d6:59:25:c2:a7:ee:2c:c8: ad:d3:f9:53:1a:76:78:bb:17:54:ee:7d:54:cf:af:b9:b5:eb: d4:05:5b:ee:43:11:80:94:b4:fb:8d:7e:84:52:4c:eb:b8:11: 6e:53:b2:3c:62:18:79:df:17:a1:81:59:ee:d9:8c:7e:14:3a: 28:f2:48:99:de:51:30:43:28:be:31:81:d1:9e:15:7a:66:b8: e0:d7:31:d2:b8:e4:79:5d:f6:f7:75:fe:01:94:8e:f2:00:62: 98:0e:c0:53:b8:fe:c1:bd:84:6d:51:e5:89:a3:e0:b3:40:95: c3:5d:b5:77:e6:12:24:2d:cb:cf:31:5a:5c:23:79:76:f4:69: a1:0d:ea:ea:24:88:97:39:8e:e1:b2:a6:2f:41:28:20:bc:15: 49:84:a6:3b:d7:e2:07:41:34:48:0c:1e:f5:56:0b:17:01:c7: 0f:d9:2e:08:e4:6d:2a:53:de:b5:72:4f:db:0a:92:e3:16:81: 5e:8a:67:fc:84:5e:1c:df:c7:49:96:6c:da:4e:1a:64:0a:b4: fc:44:7f:05:bf:0d:3a:39:5f:c9:dc:87:7e:43:42:eb:bc:04: d1:cf:55:a1:f4:51:cf:d7:e4:0d:d0:f2:7c:3e:c7:a6:6e:52: b8:08:13:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD9cZUlnoOaTfutApLwkeC+TEfcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3QTM4MjlBRDkyNEUzNkM2OEQ0NkI0QzE3QjE4OUQy MkM4Qjc0MTAeFw0yNTExMTcxMTUyMTBaFw0yNTExMjExNDQ5MTBaMDMxMTAvBgNV BAMTKDkzMkRDREU1Qjk5QUQ4RUU0M0Q4MTIxRjU5OUM0NjAzNzlBMzRDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2LD4al3U8dyPMuhUmI0IFGu8 /ug22+V0NqQiqMZdao54agbcM9h1DhvZ7FCSNLZcQffQKTcR23CWun1g1xSuOsNt RwP2JUa67qA7b8dER2G/B0MNzuY9qKm/bj0Hq32bQv34Y/NG0N2rq0p1R/jRrPLn glfRuNffhRbRfKcTHBJ3rSYDEnVW+migE7DfUCxXAdJFIty+bxij1oQWo63Edd75 w5/XZjoyi2rwdeeZWdzj+H7hQVtJdIVSTIp4F2Bw1QFf+8xUIBDIbLJroOXx6zLP G7Mqgj4+fxranegguvbAyNgKbORzn1WJ4VRyTyDH61Iuu++JTUy1Lfh0fh3VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUky3N5bma2O5D2BIfWZxGA3mjTEEwHwYDVR0j BBgwFoAU0Xo4Ka2STjbGjUa0wXsYnSLIt0EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDRENERGRDE4MzJCQUFBMEMxRkRGM0JCMjc4QUY1NzYw RThEQzhBRkY0QTVDRkE1QTA3NjRENDIzQjU1OTgxLzAvRDE3QTM4MjlBRDkyNEUz NkM2OEQ0NkI0QzE3QjE4OUQyMkM4Qjc0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMTdBMzgyOUFEOTI0RTM2QzY4 RDQ2QjRDMTdCMTg5RDIyQzhCNzQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQ0RDRERkQxODMyQkFBQTBDMUZERjNCQjI3OEFGNTc2MEU4REM4QUZG NEE1Q0ZBNUEwNzY0RDQyM0I1NTk4MS8wL0QxN0EzODI5QUQ5MjRFMzZDNjhENDZC NEMxN0IxODlEMjJDOEI3NDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcfrA2mO4wCvhd1lklwqfuLMit 0/lTGnZ4uxdU7n1Uz6+5tevUBVvuQxGAlLT7jX6EUkzruBFuU7I8Yhh53xehgVnu 2Yx+FDoo8kiZ3lEwQyi+MYHRnhV6Zrjg1zHSuOR5Xfb3df4BlI7yAGKYDsBTuP7B vYRtUeWJo+CzQJXDXbV35hIkLcvPMVpcI3l29GmhDerqJIiXOY7hsqYvQSggvBVJ hKY71+IHQTRIDB71VgsXAccP2S4I5G0qU961ck/bCpLjFoFeimf8hF4c38dJlmza ThpkCrT8RH8Fvw06OV/J3Id+Q0LrvATRz1Wh9FHP1+QN0PJ8PsemblK4CBMC -----END CERTIFICATE-----Generated at Mon Nov 17 20:57:29 2025 by rpki-client