$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.mft File: 410286DB57C8E11037CA1FA15398D477DB32FDE9.mft (raw, json) Hash identifier: 6Rli60I4ctROrUf+Ysu2tSAL11NooLHa3xDoQWsbNpQ= Subject key identifier: D3:90:C5:FE:89:D9:7C:54:FC:99:52:23:CB:D3:F7:02:E5:47:BF:27 Authority key identifier: 41:02:86:DB:57:C8:E1:10:37:CA:1F:A1:53:98:D4:77:DB:32:FD:E9 Certificate issuer: /CN=410286DB57C8E11037CA1FA15398D477DB32FDE9 Certificate serial: 19A5986BC4994F34B24D94F6D7177A171C33A323 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.mft Manifest number: 0131 Signing time: Sun 02 Nov 2025 23:13:07 +0000 Manifest this update: Sun 02 Nov 2025 23:08:07 +0000 Manifest next update: Sat 08 Nov 2025 02:39:07 +0000 Files and hashes: 1: 410286DB57C8E11037CA1FA15398D477DB32FDE9.crl (hash: F6QReMHIiR6NTWW7p9zn1Vda2livxI0GAEzAAE1D9vQ=) 2: 3230302e32342e31322e302f32322d3234203d3e20323632323536.roa (hash: pQvzhGvNQCY5GK0y3fxe/VtWcTFCg0yzXxenkrjj9Hw=) 3: 3230302e32342e31322e302f32322d3234203d3e203430363736.roa (hash: n3u3NGt/4Pqy5+I7zq779l9vXpvO2iX4kmoEIL4cXLU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.crl rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 02:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a5:98:6b:c4:99:4f:34:b2:4d:94:f6:d7:17:7a:17:1c:33:a3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=410286DB57C8E11037CA1FA15398D477DB32FDE9 Validity Not Before: Nov 2 23:08:07 2025 GMT Not After : Nov 8 02:39:07 2025 GMT Subject: CN=D390C5FE89D97C54FC995223CBD3F702E547BF27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:79:5f:36:c6:b1:a0:06:a0:b2:ed:16:e0: 4e:0b:62:3c:19:76:da:27:0b:93:1c:27:90:0b:1e: 79:e5:dc:68:3e:80:9b:f7:0f:69:fe:3b:1a:a3:6b: b3:18:ae:bd:59:98:d6:cb:83:1f:86:22:dc:9f:cf: 95:e3:c6:eb:1f:2d:9f:c1:1f:17:d6:61:70:07:b2: a1:ac:17:0d:fb:6b:43:4e:57:31:20:4c:6f:07:5a: a3:6b:31:7b:21:e3:48:2d:22:31:db:bb:89:75:7a: 52:e7:98:2e:a8:95:61:48:9d:a6:2b:a3:2b:52:39: 8d:6e:be:e3:1c:c1:c7:3f:d5:97:ab:6f:ae:4d:31: 9d:07:98:e7:d5:31:cd:1e:65:3a:6d:e6:0a:ea:82: 90:fc:28:03:dc:8b:61:f5:19:89:2b:ea:b0:03:99: 0f:23:67:77:5e:9e:1f:b2:91:19:45:4a:29:60:3a: 58:9e:2b:7e:89:69:ff:6e:0d:33:17:4b:d6:b1:83: 7b:ce:e5:62:95:03:16:db:a6:f0:c3:00:77:f5:00: ac:3e:ae:58:fd:fd:37:78:73:e9:01:26:14:8e:5d: 45:ea:da:b3:ea:4f:61:8e:ee:1b:08:21:33:64:67: f9:4e:65:95:5b:22:b5:61:04:5c:21:1f:aa:d9:97: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:90:C5:FE:89:D9:7C:54:FC:99:52:23:CB:D3:F7:02:E5:47:BF:27 X509v3 Authority Key Identifier: keyid:41:02:86:DB:57:C8:E1:10:37:CA:1F:A1:53:98:D4:77:DB:32:FD:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5b:13:04:d5:78:1e:c4:33:ae:db:c6:94:10:0d:5a:64:c1: 01:ec:28:6e:50:b5:da:63:7e:7c:ec:1e:22:37:5e:7d:cd:fc: 15:2b:ad:e5:a0:57:c6:e9:25:e3:ab:8d:22:f0:63:57:fb:bb: e6:1d:a0:c5:3b:54:15:4f:88:32:fd:0a:4c:49:09:e5:71:af: 14:ed:5f:e2:11:31:c9:6e:6b:95:cc:12:fc:e8:25:60:dd:fc: 79:95:5d:2b:62:00:98:fb:c7:e2:9e:56:69:e1:a2:78:38:0e: 57:f4:63:d9:23:20:18:82:c1:0d:f1:6a:70:a7:ae:86:39:97: 76:9d:00:a0:42:12:10:4e:0d:ee:72:c6:3c:ac:db:f3:50:30: d3:c7:89:d4:f1:70:c1:60:6c:db:92:e9:fe:f9:2f:4e:02:f4: ce:eb:cd:8e:ce:60:6a:bb:1e:05:eb:a3:5c:d5:49:24:0a:1d: 93:c8:94:4c:5c:1e:31:bc:74:ff:af:33:54:bc:fe:ce:d9:89: 69:d3:1e:a9:40:c5:99:93:18:95:d6:71:1b:cd:8d:99:31:57: b0:59:c3:60:22:a6:43:a3:eb:c5:2d:5b:21:6a:ff:1e:41:b0: 10:6c:4b:cd:31:8b:44:bc:4e:08:41:21:ff:5f:69:be:65:6b: 74:5d:b4:44 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGaWYa8SZTzSyTZT21xd6FxwzoyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwMjg2REI1N0M4RTExMDM3Q0ExRkExNTM5OEQ0NzdE QjMyRkRFOTAeFw0yNTExMDIyMzA4MDdaFw0yNTExMDgwMjM5MDdaMDMxMTAvBgNV BAMTKEQzOTBDNUZFODlEOTdDNTRGQzk5NTIyM0NCRDNGNzAyRTU0N0JGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1h3lfNsaxoAagsu0W4E4LYjwZ dtonC5McJ5ALHnnl3Gg+gJv3D2n+Oxqja7MYrr1ZmNbLgx+GItyfz5XjxusfLZ/B HxfWYXAHsqGsFw37a0NOVzEgTG8HWqNrMXsh40gtIjHbu4l1elLnmC6olWFInaYr oytSOY1uvuMcwcc/1Zerb65NMZ0HmOfVMc0eZTpt5grqgpD8KAPci2H1GYkr6rAD mQ8jZ3denh+ykRlFSilgOlieK36Jaf9uDTMXS9axg3vO5WKVAxbbpvDDAHf1AKw+ rlj9/Td4c+kBJhSOXUXq2rPqT2GO7hsIITNkZ/lOZZVbIrVhBFwhH6rZlw5jAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU05DF/onZfFT8mVIjy9P3AuVHvycwHwYDVR0j BBgwFoAUQQKG21fI4RA3yh+hU5jUd9sy/ekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QTEyQ0YyMEUzNzRFNEFBQjczNkU1M0YzRThBNDNFOTk1 OTI0OUE1NEQ2OUQyRTM0Q0NERDcxN0RBODgwNkVFLzAvNDEwMjg2REI1N0M4RTEx MDM3Q0ExRkExNTM5OEQ0NzdEQjMyRkRFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTAyODZEQjU3QzhFMTEwMzdD QTFGQTE1Mzk4RDQ3N0RCMzJGREU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0ExMkNGMjBFMzc0RTRBQUI3MzZFNTNGM0U4QTQzRTk5NTkyNDlBNTRE NjlEMkUzNENDREQ3MTdEQTg4MDZFRS8wLzQxMDI4NkRCNTdDOEUxMTAzN0NBMUZB MTUzOThENDc3REIzMkZERTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXWxME1XgexDOu28aUEA1aZMEB 7ChuULXaY3587B4iN159zfwVK63loFfG6SXjq40i8GNX+7vmHaDFO1QVT4gy/QpM SQnlca8U7V/iETHJbmuVzBL86CVg3fx5lV0rYgCY+8finlZp4aJ4OA5X9GPZIyAY gsEN8Wpwp66GOZd2nQCgQhIQTg3ucsY8rNvzUDDTx4nU8XDBYGzbkun++S9OAvTO 682OzmBqux4F66Nc1UkkCh2TyJRMXB4xvHT/rzNUvP7O2Ylp0x6pQMWZkxiV1nEb zY2ZMVewWcNgIqZDo+vFLVshav8eQbAQbEvNMYtEvE4IQSH/X2m+ZWt0XbRE -----END CERTIFICATE-----Generated at Tue Nov 4 09:47:57 2025 by rpki-client