$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft File: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft (raw, json) Hash identifier: cAO8A9wzJjCk+P/qjABkvCME0iTj49WmUmDjWvVC0AI= Subject key identifier: F2:D4:26:FE:40:6A:93:44:72:E9:D8:3D:A3:08:E0:4B:FC:3B:63:7C Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF Certificate issuer: /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF Certificate serial: 51C79CC55F8D9D814F90264209EBEC916DC2AE86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft Manifest number: 0138 Signing time: Mon 10 Nov 2025 11:41:11 +0000 Manifest this update: Mon 10 Nov 2025 11:36:10 +0000 Manifest next update: Sun 16 Nov 2025 00:48:10 +0000 Files and hashes: 1: 323830333a356239303a3a2f33322d3438203d3e20323733303438.roa (hash: vbmhuabCX3kIp1FpRu5OFaEVu9ZZo5hsFff0qsFsrQQ=) 2: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl (hash: zo6w68gBHq+sSO8T8sIHVbRDydm7/bFG7Z2L2wvPCeY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 16 Nov 2025 00:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c7:9c:c5:5f:8d:9d:81:4f:90:26:42:09:eb:ec:91:6d:c2:ae:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF Validity Not Before: Nov 10 11:36:10 2025 GMT Not After : Nov 16 00:48:10 2025 GMT Subject: CN=F2D426FE406A934472E9D83DA308E04BFC3B637C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:b6:f1:cf:dc:76:0a:ea:ae:53:65:12:83: ae:ea:c1:5a:c6:18:72:fc:93:a0:a1:7f:46:ca:19: 6d:89:ac:4e:4e:d9:b0:5a:c9:ae:51:14:27:a2:fb: dd:c6:0a:16:ce:fe:b8:ab:0a:11:18:cf:bb:9a:6c: a4:2f:b3:bc:41:62:c9:d0:04:cc:b2:b8:ff:dd:cc: 1e:e7:6d:c6:4b:29:25:c5:29:31:fd:e0:99:44:53: 63:ce:7f:61:96:04:eb:12:19:e8:70:7a:3d:3c:7b: 2b:84:62:70:c8:63:da:72:a1:b4:fc:ed:cf:43:09: 5f:3b:70:a5:18:9f:ee:62:db:4b:bc:a6:b6:3c:68: 9e:f2:a9:4d:51:d2:9a:10:18:f1:c4:5c:ff:ab:69: 5d:53:e4:99:bd:f5:d5:c7:07:81:dc:f5:b8:68:07: b7:ad:71:72:97:f9:e7:a0:ca:e9:51:c9:1a:8e:08: 5e:08:0e:f0:a9:a7:6c:cb:ce:3a:3c:62:f6:23:6d: e0:22:c9:cf:1d:09:a1:38:ee:cd:00:9d:69:f2:1c: 35:32:03:d4:f9:48:4d:ee:d9:85:86:66:08:c1:ea: 63:42:91:37:e6:46:82:27:5b:75:ba:4a:29:ac:ff: 11:05:84:2d:ee:8b:b1:de:c9:da:e2:33:8f:a6:b5: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D4:26:FE:40:6A:93:44:72:E9:D8:3D:A3:08:E0:4B:FC:3B:63:7C X509v3 Authority Key Identifier: keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:49:1b:25:b5:d8:c5:4d:35:b7:5d:9f:c2:e0:f5:63:86:d1: 4d:53:1e:7e:4c:67:11:f5:c7:5d:09:36:8a:11:f9:fd:60:f1: f0:0d:d1:f4:c7:1e:e4:37:4e:75:d0:af:bb:54:c5:bd:dd:34: ac:a0:aa:45:b1:1d:c5:d4:f4:78:94:c9:59:00:71:b5:9f:b5: 1d:99:df:23:cd:50:97:b8:05:04:1b:15:a6:b8:00:41:3f:3d: 2a:b8:9e:1d:26:24:1b:6b:92:2d:86:bf:6c:5a:eb:00:3f:52: c9:ec:c4:94:36:92:a9:33:24:c2:1d:53:8a:6c:72:aa:16:7c: a6:12:ce:c3:dd:a2:75:b4:b0:ce:56:4c:d4:5b:ce:49:46:bf: 2a:f6:7f:92:f6:c4:85:14:d6:0e:4a:25:48:2b:e9:1d:ea:c6: 3a:df:22:df:07:de:ff:0f:74:fb:e4:6e:49:6b:55:b5:c9:2d: fc:7f:13:f2:bb:9d:93:77:73:a9:96:fc:bf:d2:08:dd:93:1f: b0:34:2d:ab:c9:66:1a:a2:15:dc:d3:b4:d0:00:b6:95:75:49: 54:ac:31:c0:e6:98:e3:5a:f9:41:0b:ea:fb:7c:e2:c9:9a:40: 84:0a:9c:ea:92:e8:f2:ac:ec:50:b5:ae:30:27:db:65:68:d0: a3:3b:9e:98 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUcecxV+NnYFPkCZCCevskW3CroYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRjEwOEFFQUQ1MzJCQTdFNTNDNTRDMEJGMTA1OTQz NkQxRTlFRjAeFw0yNTExMTAxMTM2MTBaFw0yNTExMTYwMDQ4MTBaMDMxMTAvBgNV BAMTKEYyRDQyNkZFNDA2QTkzNDQ3MkU5RDgzREEzMDhFMDRCRkMzQjYzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs47bxz9x2CuquU2USg67qwVrG GHL8k6Chf0bKGW2JrE5O2bBaya5RFCei+93GChbO/rirChEYz7uabKQvs7xBYsnQ BMyyuP/dzB7nbcZLKSXFKTH94JlEU2POf2GWBOsSGehwej08eyuEYnDIY9pyobT8 7c9DCV87cKUYn+5i20u8prY8aJ7yqU1R0poQGPHEXP+raV1T5Jm99dXHB4Hc9bho B7etcXKX+eegyulRyRqOCF4IDvCpp2zLzjo8YvYjbeAiyc8dCaE47s0AnWnyHDUy A9T5SE3u2YWGZgjB6mNCkTfmRoInW3W6Sims/xEFhC3ui7HeydriM4+mtfFJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8tQm/kBqk0Ry6dg9owjgS/w7Y3wwHwYDVR0j BBgwFoAUSs8QiurVMrp+U8VMC/EFlDbR6e8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMUVDRjNEMDhBRUQ1OUI2Rjk1MkJBOTA4RkE5MDJCOUU5 Q0JCNkZGRTk0Q0IyMUI5ODEwMjFCRTk2NEY1RDk2LzAvNEFDRjEwOEFFQUQ1MzJC QTdFNTNDNTRDMEJGMTA1OTQzNkQxRTlFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QUNGMTA4QUVBRDUzMkJBN0U1 M0M1NEMwQkYxMDU5NDM2RDFFOUVGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzFFQ0YzRDA4QUVENTlCNkY5NTJCQTkwOEZBOTAyQjlFOUNCQjZGRkU5 NENCMjFCOTgxMDIxQkU5NjRGNUQ5Ni8wLzRBQ0YxMDhBRUFENTMyQkE3RTUzQzU0 QzBCRjEwNTk0MzZEMUU5RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjSRsltdjFTTW3XZ/C4PVjhtFN Ux5+TGcR9cddCTaKEfn9YPHwDdH0xx7kN0510K+7VMW93TSsoKpFsR3F1PR4lMlZ AHG1n7Udmd8jzVCXuAUEGxWmuABBPz0quJ4dJiQba5Ithr9sWusAP1LJ7MSUNpKp MyTCHVOKbHKqFnymEs7D3aJ1tLDOVkzUW85JRr8q9n+S9sSFFNYOSiVIK+kd6sY6 3yLfB97/D3T75G5Ja1W1yS38fxPyu52Td3Oplvy/0gjdkx+wNC2ryWYaohXc07TQ ALaVdUlUrDHA5pjjWvlBC+r7fOLJmkCECpzqkujyrOxQta4wJ9tlaNCjO56Y -----END CERTIFICATE-----Generated at Wed Nov 12 02:31:16 2025 by rpki-client