$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: JAZTIpgRd+KFm7Ag5dJagLbABW8ZBdsHe4e6jYX7T5U= Subject key identifier: 73:7F:1B:FC:28:9C:22:27:20:0C:DB:44:CA:21:5A:F4:79:B6:64:D1 Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 0912D5CBA08FBC3639E6A895E0E6CA79C02B89EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 0129 Signing time: Mon 27 Oct 2025 03:49:50 +0000 Manifest this update: Mon 27 Oct 2025 03:44:50 +0000 Manifest next update: Sat 01 Nov 2025 19:22:50 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: ItjXaKOwb+QHZwLhWYBWCIH0VcsHfuLK9e+dIUcT39E=) 2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: N8ytQAVQjGzeRnpBbimOlImBsklJ6uePm71wiQTy8R8=) 3: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Nov 2025 19:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:12:d5:cb:a0:8f:bc:36:39:e6:a8:95:e0:e6:ca:79:c0:2b:89:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Oct 27 03:44:50 2025 GMT Not After : Nov 1 19:22:50 2025 GMT Subject: CN=737F1BFC289C2227200CDB44CA215AF479B664D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:17:29:14:cd:5f:78:87:f2:9f:9e:5f:b5: 22:7e:cc:42:56:67:f6:c1:2f:ad:eb:dd:6e:ec:67: 06:7a:b4:8b:cb:87:16:86:7b:b4:27:c6:6a:33:52: 06:a1:05:09:e3:51:65:ce:c7:da:1c:bb:fe:17:6b: 9e:08:43:df:1c:20:e1:43:2e:bc:f7:24:e5:a5:51: 28:61:74:8c:82:d3:e9:e7:55:88:da:82:c8:3e:5b: 03:38:08:be:4d:7e:8c:40:ab:77:80:cc:b7:80:02: 73:f2:d5:93:c9:94:a1:20:91:68:f9:73:cc:cb:35: 59:5d:18:42:a1:f3:a9:80:7f:15:e1:8a:e4:13:4b: 0a:39:6b:26:69:5c:05:18:d4:f9:e9:80:f9:9b:dd: 20:1a:9b:5d:98:31:6f:71:58:4e:6b:2c:c0:bd:44: ae:07:64:3e:97:56:bd:7c:bc:9d:c5:9f:10:f1:31: 37:7b:65:08:a4:71:e3:05:75:ce:c0:cd:26:57:98: a0:bb:c4:22:9f:7a:70:2f:f0:1a:aa:ea:72:b4:44: d9:43:ff:e6:39:14:0e:41:81:22:55:4b:7d:ae:18: fd:da:bd:84:73:87:67:00:74:4d:2a:96:fc:39:27: ec:e5:2f:72:16:eb:40:94:2a:65:0c:4e:2d:52:55: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7F:1B:FC:28:9C:22:27:20:0C:DB:44:CA:21:5A:F4:79:B6:64:D1 X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:77:3b:b4:bd:df:5a:3e:08:44:8b:42:38:e4:75:5e:74:36: 4b:f3:27:d2:fe:a1:2f:1e:a9:48:93:54:24:a8:b3:a7:7e:d8: 50:9e:30:cd:62:6c:d4:e1:f1:0d:23:b0:e2:b7:2b:b9:88:5f: b7:67:bd:ff:15:64:94:23:03:90:2e:db:3c:8d:72:cb:6d:91: 1a:76:8a:0f:ee:b1:a6:29:b4:52:f5:f9:12:d9:90:b8:ab:34: 5f:dd:2b:88:e0:55:07:dd:44:73:13:7b:8e:6f:24:ff:38:62: 51:43:3e:ab:7d:42:c7:3d:4f:d7:70:fc:02:dd:2d:27:79:af: dc:d7:7f:dc:20:e7:a8:15:34:5c:e8:97:c4:ad:62:53:a1:be: 80:65:cd:f0:48:69:84:0f:04:57:fb:ac:4e:14:1a:42:21:ba: 74:4f:4f:a1:0b:76:c2:06:43:c8:2c:9c:eb:b9:ab:f6:46:6e: ab:4e:44:bc:d3:dd:36:29:53:6e:52:01:27:c7:27:7d:f5:c5: a4:7e:dc:3e:7a:2b:45:58:77:d1:d8:d8:6a:06:d0:78:2c:fc: 07:79:e0:dc:8b:d2:5c:d5:05:d4:60:9e:1b:a3:d8:ff:63:7a: 20:69:4a:5a:d8:89:fd:e0:a0:9c:e1:da:b7:43:ec:4e:a2:6e: 9b:d2:e8:29 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCRLVy6CPvDY55qiV4ObKecArieswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNTEwMjcwMzQ0NTBaFw0yNTExMDExOTIyNTBaMDMxMTAvBgNV BAMTKDczN0YxQkZDMjg5QzIyMjcyMDBDREI0NENBMjE1QUY0NzlCNjY0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7RcpFM1feIfyn55ftSJ+zEJW Z/bBL63r3W7sZwZ6tIvLhxaGe7QnxmozUgahBQnjUWXOx9ocu/4Xa54IQ98cIOFD Lrz3JOWlUShhdIyC0+nnVYjagsg+WwM4CL5NfoxAq3eAzLeAAnPy1ZPJlKEgkWj5 c8zLNVldGEKh86mAfxXhiuQTSwo5ayZpXAUY1PnpgPmb3SAam12YMW9xWE5rLMC9 RK4HZD6XVr18vJ3FnxDxMTd7ZQikceMFdc7AzSZXmKC7xCKfenAv8Bqq6nK0RNlD /+Y5FA5BgSJVS32uGP3avYRzh2cAdE0qlvw5J+zlL3IW60CUKmUMTi1SVVkhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUc38b/CicIicgDNtEyiFa9Hm2ZNEwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpdzu0vd9aPghEi0I45HVedDZL 8yfS/qEvHqlIk1QkqLOnfthQnjDNYmzU4fENI7Dityu5iF+3Z73/FWSUIwOQLts8 jXLLbZEadooP7rGmKbRS9fkS2ZC4qzRf3SuI4FUH3URzE3uObyT/OGJRQz6rfULH PU/XcPwC3S0nea/c13/cIOeoFTRc6JfErWJTob6AZc3wSGmEDwRX+6xOFBpCIbp0 T0+hC3bCBkPILJzruav2Rm6rTkS80902KVNuUgEnxyd99cWkftw+eitFWHfR2Nhq BtB4LPwHeeDci9Jc1QXUYJ4bo9j/Y3ogaUpa2In94KCc4dq3Q+xOom6b0ugp -----END CERTIFICATE-----Generated at Wed Oct 29 02:32:37 2025 by rpki-client