$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft File: A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft (raw, json) Hash identifier: +K6e5wz/9vjC2Qug+J9zCsUhDEVQbsi/1yFacgLNlOc= Subject key identifier: 1A:65:88:4C:ED:70:4E:71:EA:39:E7:44:C4:D8:0C:1F:30:87:94:8E Authority key identifier: A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC Certificate issuer: /CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC Certificate serial: 40C90C1ACFC04A9B902FA8E474820118127B5337 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft Manifest number: 012F Signing time: Tue 28 Oct 2025 19:44:24 +0000 Manifest this update: Tue 28 Oct 2025 19:39:24 +0000 Manifest next update: Mon 03 Nov 2025 08:42:24 +0000 Files and hashes: 1: 34352e3136382e36382e302f32322d3234203d3e203631343636.roa (hash: 4wKIFxPyOHxB1hVgyvSGGiZwMaZ5/CS/f5kA0eScA4E=) 2: 323830333a643561303a3a2f33322d3332203d3e203631343636.roa (hash: 902o53uSz6SM1zIv7xd0/KR7sm+wAq+W3wSdLGNfOMs=) 3: A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl (hash: vkiXiCsn3rE7FB4axxCmhgNshJuevzZajtKkg4Bh+fQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Nov 2025 00:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c9:0c:1a:cf:c0:4a:9b:90:2f:a8:e4:74:82:01:18:12:7b:53:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC Validity Not Before: Oct 28 19:39:24 2025 GMT Not After : Nov 3 08:42:24 2025 GMT Subject: CN=1A65884CED704E71EA39E744C4D80C1F3087948E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:f2:c0:98:cd:54:be:54:e9:9a:e9:5f:9e: b0:30:de:53:5c:87:4c:50:46:fd:f8:f2:56:52:b4: ec:50:93:32:39:d4:8c:92:4c:ff:35:b0:71:10:8d: 38:0d:59:da:4a:b9:c3:c5:29:6c:49:70:f4:d5:2a: 1f:16:8a:64:78:03:d5:3e:b4:db:a2:cc:6c:18:c6: 67:da:ba:b5:da:4d:d2:a8:ea:74:86:6d:95:90:67: b9:9c:4e:f3:1e:2f:34:4a:86:59:d7:f2:7e:05:67: cc:86:ce:d2:1b:40:1f:31:78:00:c5:8e:31:11:28: 4a:2d:27:6d:99:b6:2e:66:0f:1c:d2:12:e2:2a:97: 0d:3c:ac:02:4a:b8:76:28:a2:5d:69:e3:dd:ac:c1: 8a:f2:80:6c:26:05:d0:f9:0a:d6:20:2d:0e:ee:90: 21:19:e6:79:9c:ce:b7:c3:98:71:3f:53:fc:a6:89: 0c:12:a7:c1:31:79:26:b5:09:72:77:1d:9d:1e:a7: e9:76:dd:77:65:e7:f0:7c:4d:8f:49:f5:6d:5d:22: a4:ce:f3:44:43:88:38:a3:71:31:e1:cf:7f:0f:81: a6:31:8f:fa:cf:7a:98:d1:8b:72:1d:cf:5f:bb:a3: e6:8c:5d:2c:cf:ab:bb:90:76:53:8d:f8:c6:72:14: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:65:88:4C:ED:70:4E:71:EA:39:E7:44:C4:D8:0C:1F:30:87:94:8E X509v3 Authority Key Identifier: keyid:A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:59:7b:ea:8d:5b:c9:a2:ed:a4:bf:5e:5b:ee:ab:d4:b2:53: 35:de:4c:f4:9b:b8:ce:70:7b:98:b9:eb:af:c8:8e:3a:59:97: d6:fb:24:c2:64:90:b3:b8:39:e8:78:43:5d:56:4a:3f:bb:28: 69:08:6f:38:9d:6a:3c:b6:66:66:73:3f:95:54:a1:3a:80:08: ca:bf:f6:3c:12:b2:08:99:89:32:c7:4d:c0:79:ed:8e:4c:38: 3c:32:35:14:5a:20:26:45:f5:24:75:29:72:47:1a:cd:c1:bf: 15:c2:3f:d0:8b:6f:62:43:b4:03:0a:93:cc:de:c5:f0:16:2c: e8:b7:e9:e0:14:f3:2d:39:cd:28:66:2c:f3:18:9a:47:18:9b: 10:32:86:32:18:e9:8c:22:ec:0c:a9:d4:11:67:73:5a:20:1a: 64:f8:d8:2d:91:b8:fc:3f:49:31:8b:91:3f:23:45:84:7d:0f: 50:f0:ec:0c:d6:05:19:73:66:01:a9:09:e5:85:d6:11:43:5b: bd:1c:e1:22:64:a5:81:8a:67:c9:03:e1:d8:5c:a8:bd:78:c4: d9:9e:5c:1d:3e:7d:db:f5:41:63:95:dd:7e:d7:cc:5a:d8:d1: 6b:de:ba:b3:96:d3:20:e8:17:ec:49:07:d0:82:e2:df:0b:33: 29:11:c9:fb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQMkMGs/ASpuQL6jkdIIBGBJ7UzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENUU0Mzg0OEE4Q0YzODg5MzlBNTMzOTVDMDNFQTdC QjEwQjJFQzAeFw0yNTEwMjgxOTM5MjRaFw0yNTExMDMwODQyMjRaMDMxMTAvBgNV BAMTKDFBNjU4ODRDRUQ3MDRFNzFFQTM5RTc0NEM0RDgwQzFGMzA4Nzk0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAfLAmM1UvlTpmulfnrAw3lNc h0xQRv348lZStOxQkzI51IySTP81sHEQjTgNWdpKucPFKWxJcPTVKh8WimR4A9U+ tNuizGwYxmfaurXaTdKo6nSGbZWQZ7mcTvMeLzRKhlnX8n4FZ8yGztIbQB8xeADF jjERKEotJ22Zti5mDxzSEuIqlw08rAJKuHYool1p492swYrygGwmBdD5CtYgLQ7u kCEZ5nmczrfDmHE/U/ymiQwSp8ExeSa1CXJ3HZ0ep+l23Xdl5/B8TY9J9W1dIqTO 80RDiDijcTHhz38PgaYxj/rPepjRi3Idz1+7o+aMXSzPq7uQdlON+MZyFKYRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGmWITO1wTnHqOedExNgMHzCHlI4wHwYDVR0j BBgwFoAUqNXkOEiozziJOaUzlcA+p7sQsuwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDVGNjZGMDhBN0QxQUMxNDFCMkQ2MkVENjVGQUVDOUY3 Qzk1N0REMDBCODQ5MzdCNTE3NUI2MzhFRTUyRjA0LzAvQThENUU0Mzg0OEE4Q0Yz ODg5MzlBNTMzOTVDMDNFQTdCQjEwQjJFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOEQ1RTQzODQ4QThDRjM4ODkz OUE1MzM5NUMwM0VBN0JCMTBCMkVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0Q1RjY2RjA4QTdEMUFDMTQxQjJENjJFRDY1RkFFQzlGN0M5NTdERDAw Qjg0OTM3QjUxNzVCNjM4RUU1MkYwNC8wL0E4RDVFNDM4NDhBOENGMzg4OTM5QTUz Mzk1QzAzRUE3QkIxMEIyRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7WXvqjVvJou2kv15b7qvUslM1 3kz0m7jOcHuYueuvyI46WZfW+yTCZJCzuDnoeENdVko/uyhpCG84nWo8tmZmcz+V VKE6gAjKv/Y8ErIImYkyx03Aee2OTDg8MjUUWiAmRfUkdSlyRxrNwb8Vwj/Qi29i Q7QDCpPM3sXwFizot+ngFPMtOc0oZizzGJpHGJsQMoYyGOmMIuwMqdQRZ3NaIBpk +Ngtkbj8P0kxi5E/I0WEfQ9Q8OwM1gUZc2YBqQnlhdYRQ1u9HOEiZKWBimfJA+HY XKi9eMTZnlwdPn3b9UFjld1+18xa2NFr3rqzltMg6BfsSQfQguLfCzMpEcn7 -----END CERTIFICATE-----Generated at Tue Oct 28 21:13:51 2025 by rpki-client