$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json) Hash identifier: mLZdFo/pPaHyvXu29wrWwhp0CkCFMlbowzrPAd32iHA= Subject key identifier: 8D:08:A4:DF:99:7E:EA:E3:92:B4:1A:28:86:2B:02:11:06:75:2D:04 Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Certificate serial: 4E28BBCBAFD51B5B686B1FC1D5F71D7D720FE67A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 22:07:55 +0000 Manifest this update: Wed 05 Nov 2025 22:02:55 +0000 Manifest next update: Mon 10 Nov 2025 22:15:55 +0000 Files and hashes: 1: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: 36MFiYsj/rbrvvVvLeus9cYnV2iKLxGfalFiHHn+w8M=) 2: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=) 3: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: CEjZLoZgD3Dkwr7oBn4ojN4Wtl2pZUoUoS8pzgW8uHk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:28:bb:cb:af:d5:1b:5b:68:6b:1f:c1:d5:f7:1d:7d:72:0f:e6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Validity Not Before: Nov 5 22:02:55 2025 GMT Not After : Nov 10 22:15:55 2025 GMT Subject: CN=8D08A4DF997EEAE392B41A28862B021106752D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:cb:6f:75:18:a1:7b:bf:c0:c1:f0:d1:12: 65:5c:64:51:5b:a7:2d:5d:d9:27:bb:b0:a0:b9:84: 82:42:b2:69:dd:65:5e:fc:51:45:44:16:73:b7:ec: 3f:3a:6c:fe:48:1a:fa:36:dd:eb:37:dd:4d:a1:e9: f6:cc:b6:dc:fc:5f:b9:41:35:53:b8:ff:fd:86:dc: ad:75:e4:57:4c:a9:3e:f9:88:96:ff:a3:03:03:7c: 63:75:c6:2b:ca:97:d4:33:ed:81:bc:b4:3c:48:68: 10:ef:6f:2d:4e:90:0b:3f:a3:2a:4f:4f:3c:90:c6: b5:78:48:e6:10:8c:2e:fd:30:4e:07:bf:7c:7c:4a: ac:f7:79:fb:ca:f5:97:09:29:aa:4c:55:8f:ca:06: 29:cc:07:38:31:b6:33:3c:dd:89:dc:8f:19:2f:40: 7b:98:72:e0:b0:eb:22:32:ef:36:39:91:63:2d:73: f6:8c:6a:9e:48:64:30:5b:d3:0d:46:a0:a5:b5:8b: 9a:a9:52:a3:70:b7:29:7d:d5:ce:cd:a7:6b:2b:bc: 79:8a:9f:40:08:22:c2:2e:58:4f:cb:ae:6d:a9:5b: af:8a:93:a8:ef:53:8f:32:d4:3a:e5:09:95:ff:09: 63:6c:79:7c:d6:15:7c:fb:b8:ac:bd:91:4a:35:c1: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:08:A4:DF:99:7E:EA:E3:92:B4:1A:28:86:2B:02:11:06:75:2D:04 X509v3 Authority Key Identifier: keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:6b:18:9e:07:b8:0c:17:45:67:21:4a:2f:fc:8c:42:76: 96:4d:c1:aa:6e:bf:87:ba:6d:5c:10:fe:67:a9:34:48:e4:6b: 64:39:10:8d:c9:fb:b8:f8:b3:2b:a5:6d:50:63:ec:3f:10:8e: 9e:ac:0e:ae:94:3e:39:0b:fd:98:c9:24:fd:2c:b3:ff:dc:b8: 8e:5a:74:3f:12:02:e5:38:69:ae:50:5a:09:df:55:ba:22:52: 7d:09:57:08:1b:2f:62:24:7f:16:8b:10:58:8d:9b:44:11:d9: 17:aa:77:6a:1d:71:a3:28:8e:dc:bc:11:0a:c4:e1:74:89:40: 51:71:fd:50:da:98:51:c3:13:53:65:83:6d:d4:5f:a0:63:43: 48:60:ec:09:22:a2:58:39:f1:91:ab:09:02:51:e5:a2:cb:14: a2:ee:c9:b5:7f:29:31:6f:17:0f:23:72:13:2b:d5:ef:fd:08: c8:3d:a7:05:86:62:72:b6:72:a5:82:26:96:d4:24:45:6a:de: 62:a7:d9:03:45:72:c9:76:6e:6c:f5:95:6e:b7:74:d7:b7:62: 24:57:3e:88:18:8c:a5:4c:19:59:c3:87:cd:fe:48:3d:4b:25: 61:73:31:8f:fa:c9:a5:6d:c5:ef:4e:a0:70:e1:79:f2:c2:48: 0a:bd:1c:aa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTii7y6/VG1toax/B1fcdfXIP5nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4RjBCQjE2NkQxNEU3REQyNUZBNzhDNzg2QjkxN0Qy NjQyQThFNjAeFw0yNTExMDUyMjAyNTVaFw0yNTExMTAyMjE1NTVaMDMxMTAvBgNV BAMTKDhEMDhBNERGOTk3RUVBRTM5MkI0MUEyODg2MkIwMjExMDY3NTJEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lMtvdRihe7/AwfDREmVcZFFb py1d2Se7sKC5hIJCsmndZV78UUVEFnO37D86bP5IGvo23es33U2h6fbMttz8X7lB NVO4//2G3K115FdMqT75iJb/owMDfGN1xivKl9Qz7YG8tDxIaBDvby1OkAs/oypP TzyQxrV4SOYQjC79ME4Hv3x8Sqz3efvK9ZcJKapMVY/KBinMBzgxtjM83Yncjxkv QHuYcuCw6yIy7zY5kWMtc/aMap5IZDBb0w1GoKW1i5qpUqNwtyl91c7Np2srvHmK n0AIIsIuWE/Lrm2pW6+Kk6jvU48y1DrlCZX/CWNseXzWFXz7uKy9kUo1wUzZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjQik35l+6uOStBoohisCEQZ1LQQwHwYDVR0j BBgwFoAUaI8LsWbRTn3SX6eMeGuRfSZCqOYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQTdFNjlGNzk2MTY5RTY5QzA2NDU4RDAyMzk4MjY1QUND NkEzMjRCMDNBMTkwQ0ZCRTJDN0NCNzJCRDAyNjA5LzAvNjg4RjBCQjE2NkQxNEU3 REQyNUZBNzhDNzg2QjkxN0QyNjQyQThFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODhGMEJCMTY2RDE0RTdERDI1 RkE3OEM3ODZCOTE3RDI2NDJBOEU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0E3RTY5Rjc5NjE2OUU2OUMwNjQ1OEQwMjM5ODI2NUFDQzZBMzI0QjAz QTE5MENGQkUyQzdDQjcyQkQwMjYwOS8wLzY4OEYwQkIxNjZEMTRFN0REMjVGQTc4 Qzc4NkI5MTdEMjY0MkE4RTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdmmsYnge4DBdFZyFKL/yMQnaW TcGqbr+Hum1cEP5nqTRI5GtkORCNyfu4+LMrpW1QY+w/EI6erA6ulD45C/2YyST9 LLP/3LiOWnQ/EgLlOGmuUFoJ31W6IlJ9CVcIGy9iJH8WixBYjZtEEdkXqndqHXGj KI7cvBEKxOF0iUBRcf1Q2phRwxNTZYNt1F+gY0NIYOwJIqJYOfGRqwkCUeWiyxSi 7sm1fykxbxcPI3ITK9Xv/QjIPacFhmJytnKlgiaW1CRFat5ip9kDRXLJdm5s9ZVu t3TXt2IkVz6IGIylTBlZw4fN/kg9SyVhczGP+smlbcXvTqBw4XnywkgKvRyq -----END CERTIFICATE-----Generated at Thu Nov 6 01:54:53 2025 by rpki-client