$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft File: D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft (raw, json) Hash identifier: RBqXpd3Bk+AI2U48xQH4WQjeZ3LwtYhYImqsr+DVOgI= Subject key identifier: C8:9F:D5:9A:57:B8:C3:18:5D:50:C9:1B:7C:EE:2C:AE:2B:ED:F2:2D Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 Certificate issuer: /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Certificate serial: 3CACBF707C1ACAAF33D9673E8A0CC4D2DB617F2C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft Manifest number: 0137 Signing time: Sun 16 Nov 2025 13:49:40 +0000 Manifest this update: Sun 16 Nov 2025 13:44:40 +0000 Manifest next update: Sat 22 Nov 2025 10:36:40 +0000 Files and hashes: 1: D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl (hash: k5OC0hq9wScnEXpUZIq5mLbjLfkBgEOvyV5iHW8N79Y=) 2: 323830333a653538303a3a2f33322d3332203d3e203631343637.roa (hash: VPdQcvxY+Djypk/d3zIynnwjkLRuN2kmRMjzxd8Khgg=) 3: 3133312e302e3133362e302f32322d3232203d3e203631343637.roa (hash: hIcGTsTzrbpPkkDFPHDJ/vJiVZDkozy3mhBw4FInUkg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Nov 2025 04:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ac:bf:70:7c:1a:ca:af:33:d9:67:3e:8a:0c:c4:d2:db:61:7f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Validity Not Before: Nov 16 13:44:40 2025 GMT Not After : Nov 22 10:36:40 2025 GMT Subject: CN=C89FD59A57B8C3185D50C91B7CEE2CAE2BEDF22D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:e5:5e:bc:d2:87:2e:a0:c6:16:ce:d8:45: 3e:cc:9e:e9:61:33:62:5d:70:d6:59:47:2c:62:ba: 33:da:de:62:2b:19:0d:27:cc:39:b1:1d:31:71:93: 25:99:a9:7b:c7:17:d9:aa:67:50:e6:24:83:29:dd: 9c:2f:01:2d:7b:fb:2d:31:3b:a8:4d:40:5b:75:56: ef:3e:2f:82:d0:a0:9f:6b:a3:a2:10:df:d8:28:3a: c9:24:41:0c:2c:b5:7f:5a:b1:ed:15:92:55:8e:e8: 58:a5:99:df:79:8c:30:98:84:a9:f7:0c:d2:65:c7: 7f:8b:8c:32:be:1c:a9:30:d4:91:5b:6d:04:5d:a3: 2c:3d:33:8a:a4:c9:b4:9f:76:a8:b1:4f:5b:e2:04: 65:d3:0d:ed:cd:32:a5:3a:6f:fb:cd:35:8b:22:32: 1c:c9:23:08:ff:bb:e9:9c:29:fc:ed:45:b6:9f:45: 19:42:ca:25:24:75:5d:57:56:fc:1a:42:fd:71:41: b1:05:70:20:20:0f:c8:36:18:6c:2a:37:e1:1d:58: 9b:9e:47:52:82:4d:f0:03:37:55:e8:1b:11:97:06: 9b:67:e5:f6:e3:cf:c6:1f:81:85:b0:24:31:d9:5b: 10:32:bc:22:8b:d8:58:b3:69:c7:18:30:cf:5d:f9: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9F:D5:9A:57:B8:C3:18:5D:50:C9:1B:7C:EE:2C:AE:2B:ED:F2:2D X509v3 Authority Key Identifier: keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:59:b8:c6:12:a4:ca:7b:3c:78:44:b9:39:f2:68:3c:64:87: 9b:61:f2:18:7c:b2:b5:e4:7e:d9:3d:4f:a1:d2:3a:12:dd:20: f5:0e:05:74:55:7d:e6:f1:ae:04:d4:58:17:21:d2:14:b2:74: bb:f8:14:dd:46:3f:de:6e:70:1f:ed:2f:ee:56:40:0c:13:ed: 38:f7:cf:f3:c4:a3:ba:0a:a5:e6:b8:6c:3a:61:ef:40:af:63: f5:b2:fe:9f:24:d8:9b:77:e0:ca:03:8c:32:5f:58:d6:fa:ef: 7d:da:e8:91:0f:db:c4:3f:8b:09:34:e5:75:a0:42:46:78:a6: 05:32:f8:c4:2a:d4:85:b6:da:f6:44:2d:ad:6d:56:f0:18:39: cf:b0:78:36:b8:4a:e8:de:e3:23:85:7f:d2:c8:fb:5c:cc:b1: 6c:9a:77:5f:4e:1c:66:d3:6e:01:26:97:d4:c4:a8:59:67:72: 7c:5b:d2:bc:1d:1e:64:90:07:86:07:e3:8d:26:78:c2:3c:a8: 75:09:35:75:c9:11:f0:11:b9:55:52:63:c6:86:e6:fa:96:59: d3:a3:19:40:f2:0f:bf:0e:94:da:fb:54:73:c6:0b:fe:d8:ab: 79:ce:0e:06:93:34:b8:58:6e:df:a9:10:5c:35:0d:87:0b:3e: c6:20:d5:f8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPKy/cHwayq8z2Wc+igzE0tthfywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwODczNURDRkJENDQzOUYxRjYxQTYxNzlEQkU5MjBE ODZCMUUyODAeFw0yNTExMTYxMzQ0NDBaFw0yNTExMjIxMDM2NDBaMDMxMTAvBgNV BAMTKEM4OUZENTlBNTdCOEMzMTg1RDUwQzkxQjdDRUUyQ0FFMkJFREYyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbouVevNKHLqDGFs7YRT7Mnulh M2JdcNZZRyxiujPa3mIrGQ0nzDmxHTFxkyWZqXvHF9mqZ1DmJIMp3ZwvAS17+y0x O6hNQFt1Vu8+L4LQoJ9ro6IQ39goOskkQQwstX9ase0VklWO6Filmd95jDCYhKn3 DNJlx3+LjDK+HKkw1JFbbQRdoyw9M4qkybSfdqixT1viBGXTDe3NMqU6b/vNNYsi MhzJIwj/u+mcKfztRbafRRlCyiUkdV1XVvwaQv1xQbEFcCAgD8g2GGwqN+EdWJue R1KCTfADN1XoGxGXBptn5fbjz8YfgYWwJDHZWxAyvCKL2FizaccYMM9d+X4RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyJ/Vmle4wxhdUMkbfO4srivt8i0wHwYDVR0j BBgwFoAU0whzXc+9RDnx9hphedvpINhrHigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUY0MzdERDdEMTFGMjhDNTgzMjk1RjkzQjlDNTRDRkU5 ODAyNUNBREQyNzdBNTM2NEJDMDU2NzQ5NjE4ODY5LzAvRDMwODczNURDRkJENDQz OUYxRjYxQTYxNzlEQkU5MjBEODZCMUUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzA4NzM1RENGQkQ0NDM5RjFG NjFBNjE3OURCRTkyMEQ4NkIxRTI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFGNDM3REQ3RDExRjI4QzU4MzI5NUY5M0I5QzU0Q0ZFOTgwMjVDQURE Mjc3QTUzNjRCQzA1Njc0OTYxODg2OS8wL0QzMDg3MzVEQ0ZCRDQ0MzlGMUY2MUE2 MTc5REJFOTIwRDg2QjFFMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMWbjGEqTKezx4RLk58mg8ZIeb YfIYfLK15H7ZPU+h0joS3SD1DgV0VX3m8a4E1FgXIdIUsnS7+BTdRj/ebnAf7S/u VkAME+0498/zxKO6CqXmuGw6Ye9Ar2P1sv6fJNibd+DKA4wyX1jW+u992uiRD9vE P4sJNOV1oEJGeKYFMvjEKtSFttr2RC2tbVbwGDnPsHg2uEro3uMjhX/SyPtczLFs mndfThxm024BJpfUxKhZZ3J8W9K8HR5kkAeGB+ONJnjCPKh1CTV1yRHwEblVUmPG hub6llnToxlA8g+/DpTa+1Rzxgv+2Kt5zg4GkzS4WG7fqRBcNQ2HCz7GINX4 -----END CERTIFICATE-----Generated at Tue Nov 18 01:37:53 2025 by rpki-client