$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/310A9CE62ECBDFB9F1D1DA69A6C31043A4C7A9BFBA0A1E0C3E57CD4723C45E17/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.mft File: DBE70C321EC566D5AC6E26F61434102BF34EBD5F.mft (raw, json) Hash identifier: OrVWgslHqfFLUJu3lwGAMdTi2IFvNypOiT+VrG7l5Ps= Subject key identifier: 54:81:BF:3E:5A:F1:32:2A:25:01:22:05:B9:2C:4B:37:36:82:CE:82 Authority key identifier: DB:E7:0C:32:1E:C5:66:D5:AC:6E:26:F6:14:34:10:2B:F3:4E:BD:5F Certificate issuer: /CN=DBE70C321EC566D5AC6E26F61434102BF34EBD5F Certificate serial: 17659F7C841BA9E8EEBD41D44830FD07C601F389 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/310A9CE62ECBDFB9F1D1DA69A6C31043A4C7A9BFBA0A1E0C3E57CD4723C45E17/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.mft Manifest number: 0129 Signing time: Wed 22 Oct 2025 20:26:22 +0000 Manifest this update: Wed 22 Oct 2025 20:21:22 +0000 Manifest next update: Mon 27 Oct 2025 19:54:22 +0000 Files and hashes: 1: DBE70C321EC566D5AC6E26F61434102BF34EBD5F.crl (hash: pAa1RqpAshlEC0v5BuXZQwLzUBhjQyXGaPHIbZSCFxI=) 2: 3136352e3138332e3132332e302f32342d3234203d3e20323632323032.roa (hash: gFfpe1yvSNrXvaYGm4QdMSrm48Kvh5GQcDosywit8lQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/310A9CE62ECBDFB9F1D1DA69A6C31043A4C7A9BFBA0A1E0C3E57CD4723C45E17/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.crl rsync://repository.lacnic.net/rpki/lacnic/310A9CE62ECBDFB9F1D1DA69A6C31043A4C7A9BFBA0A1E0C3E57CD4723C45E17/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:65:9f:7c:84:1b:a9:e8:ee:bd:41:d4:48:30:fd:07:c6:01:f3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE70C321EC566D5AC6E26F61434102BF34EBD5F Validity Not Before: Oct 22 20:21:22 2025 GMT Not After : Oct 27 19:54:22 2025 GMT Subject: CN=5481BF3E5AF1322A25012205B92C4B373682CE82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:8d:3a:0d:99:db:c5:e4:5b:f6:15:fc:8d: 66:b8:62:9c:89:c8:f5:b8:02:b6:64:4c:da:7c:74: fe:94:37:5e:66:66:b5:f6:8c:76:e4:8f:a7:0d:b8: dd:ea:d0:a7:49:42:b5:77:88:eb:c4:7c:fa:d1:54: 92:3d:21:f2:b3:22:f9:ec:b8:1e:6a:a6:0a:6e:dd: 3c:8d:ec:69:b4:33:9f:ab:27:89:1d:b3:fd:52:7d: 83:77:4f:49:fe:69:5e:64:0d:85:ee:f4:5f:ee:f8: fe:6e:af:2c:a0:87:14:cb:74:e0:59:17:66:df:fd: 92:f5:f6:3e:68:32:04:c4:68:89:4b:43:10:d9:ca: 04:c9:76:7e:ca:ef:f1:0a:29:c5:53:56:1b:db:f7: a7:d9:2c:1b:2f:47:eb:28:f0:6a:26:30:db:4b:fd: 34:31:4c:5d:02:1e:a2:39:bf:fe:7c:00:95:f6:f9: ab:fa:bf:51:07:bc:14:cb:e6:af:6d:14:3f:37:30: 66:c3:8a:e4:39:41:3b:1d:cb:24:e9:36:0a:58:eb: 6f:51:a7:3e:4f:a1:45:25:63:e8:85:99:db:71:0f: 1b:fa:79:73:8c:eb:ec:16:79:33:02:7b:b7:ec:94: 39:a5:80:18:c6:42:31:1c:1b:f0:b2:07:cc:4c:19: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:81:BF:3E:5A:F1:32:2A:25:01:22:05:B9:2C:4B:37:36:82:CE:82 X509v3 Authority Key Identifier: keyid:DB:E7:0C:32:1E:C5:66:D5:AC:6E:26:F6:14:34:10:2B:F3:4E:BD:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/310A9CE62ECBDFB9F1D1DA69A6C31043A4C7A9BFBA0A1E0C3E57CD4723C45E17/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/310A9CE62ECBDFB9F1D1DA69A6C31043A4C7A9BFBA0A1E0C3E57CD4723C45E17/0/DBE70C321EC566D5AC6E26F61434102BF34EBD5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:54:47:76:18:52:33:36:08:74:82:59:43:24:bc:6b:5a:ee: a8:ce:9d:64:53:10:cf:ab:f7:23:91:72:fc:86:38:36:dc:30: 49:c0:0d:f9:bb:46:83:25:c1:a1:87:a0:bd:93:0c:d3:5e:74: da:ac:f0:a1:9b:ef:a8:b9:ad:78:b3:11:1c:72:e4:e9:38:64: d0:83:bf:fe:12:19:b4:b4:b4:c2:4d:ee:e4:a5:74:7d:6e:d5: 49:02:ae:38:5f:39:d8:69:1b:d4:48:b0:33:a7:2b:55:1b:91: 51:f3:a7:77:c0:32:47:ec:2c:89:c3:04:52:35:cb:3b:17:9b: 2c:e3:06:11:8e:0a:e1:f0:ae:48:92:60:21:b8:78:42:fa:38: 88:50:cf:66:32:89:51:6d:f0:45:10:8a:c9:3f:25:66:26:75: fb:b9:27:cb:74:e1:1d:40:62:c4:1d:e5:31:71:ca:ed:14:92: 53:2b:52:be:91:83:7f:d8:34:9b:bc:9c:01:57:ca:f4:2e:cd: fb:f5:77:24:30:cd:b2:de:c3:e6:19:8c:78:e9:a8:37:be:5e: b7:e8:ce:d6:29:4b:24:41:ee:07:2c:a3:be:f0:64:af:53:0b: c0:35:41:c8:0e:8e:61:e5:71:5d:a6:59:05:71:08:59:a2:36: fa:51:de:59 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUF2WffIQbqejuvUHUSDD9B8YB84kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFNzBDMzIxRUM1NjZENUFDNkUyNkY2MTQzNDEwMkJG MzRFQkQ1RjAeFw0yNTEwMjIyMDIxMjJaFw0yNTEwMjcxOTU0MjJaMDMxMTAvBgNV BAMTKDU0ODFCRjNFNUFGMTMyMkEyNTAxMjIwNUI5MkM0QjM3MzY4MkNFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSo06DZnbxeRb9hX8jWa4YpyJ yPW4ArZkTNp8dP6UN15mZrX2jHbkj6cNuN3q0KdJQrV3iOvEfPrRVJI9IfKzIvns uB5qpgpu3TyN7Gm0M5+rJ4kds/1SfYN3T0n+aV5kDYXu9F/u+P5uryyghxTLdOBZ F2bf/ZL19j5oMgTEaIlLQxDZygTJdn7K7/EKKcVTVhvb96fZLBsvR+so8GomMNtL /TQxTF0CHqI5v/58AJX2+av6v1EHvBTL5q9tFD83MGbDiuQ5QTsdyyTpNgpY629R pz5PoUUlY+iFmdtxDxv6eXOM6+wWeTMCe7fslDmlgBjGQjEcG/CyB8xMGV+BAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUVIG/PlrxMiolASIFuSxLNzaCzoIwHwYDVR0j BBgwFoAU2+cMMh7FZtWsbib2FDQQK/NOvV8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMTBBOUNFNjJFQ0JERkI5RjFEMURBNjlBNkMzMTA0M0E0 QzdBOUJGQkEwQTFFMEMzRTU3Q0Q0NzIzQzQ1RTE3LzAvREJFNzBDMzIxRUM1NjZE NUFDNkUyNkY2MTQzNDEwMkJGMzRFQkQ1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQkU3MEMzMjFFQzU2NkQ1QUM2 RTI2RjYxNDM0MTAyQkYzNEVCRDVGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzEwQTlDRTYyRUNCREZCOUYxRDFEQTY5QTZDMzEwNDNBNEM3QTlCRkJB MEExRTBDM0U1N0NENDcyM0M0NUUxNy8wL0RCRTcwQzMyMUVDNTY2RDVBQzZFMjZG NjE0MzQxMDJCRjM0RUJENUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9VEd2GFIzNgh0gllDJLxrWu6o zp1kUxDPq/cjkXL8hjg23DBJwA35u0aDJcGhh6C9kwzTXnTarPChm++oua14sxEc cuTpOGTQg7/+Ehm0tLTCTe7kpXR9btVJAq44XznYaRvUSLAzpytVG5FR86d3wDJH 7CyJwwRSNcs7F5ss4wYRjgrh8K5IkmAhuHhC+jiIUM9mMolRbfBFEIrJPyVmJnX7 uSfLdOEdQGLEHeUxccrtFJJTK1K+kYN/2DSbvJwBV8r0Ls379XckMM2y3sPmGYx4 6ag3vl636M7WKUskQe4HLKO+8GSvUwvANUHIDo5h5XFdplkFcQhZojb6Ud5Z -----END CERTIFICATE-----Generated at Thu Oct 23 21:19:51 2025 by rpki-client