$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft File: A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft (raw, json) Hash identifier: g4ms7vtXQqDlkvC498qa5popZJFNzXRTYR8DcdP4QYw= Subject key identifier: 24:6A:B7:CE:CB:8C:BF:14:C0:CA:E8:3B:F3:6A:03:B3:40:53:02:1B Authority key identifier: A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC Certificate issuer: /CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC Certificate serial: 0C399D716EBE12902CD08EAC1DCEAACDB68B5101 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft Manifest number: 0135 Signing time: Tue 11 Nov 2025 08:13:42 +0000 Manifest this update: Tue 11 Nov 2025 08:08:42 +0000 Manifest next update: Sat 15 Nov 2025 23:41:42 +0000 Files and hashes: 1: A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl (hash: gs/rSxOf6lzONYjJUcTps9wIG6STnDkwKGcKMQV3iCg=) 2: 323830333a643561303a3a2f33322d3332203d3e203631343636.roa (hash: 902o53uSz6SM1zIv7xd0/KR7sm+wAq+W3wSdLGNfOMs=) 3: 34352e3136382e36382e302f32322d3234203d3e203631343636.roa (hash: 4wKIFxPyOHxB1hVgyvSGGiZwMaZ5/CS/f5kA0eScA4E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 15 Nov 2025 20:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:39:9d:71:6e:be:12:90:2c:d0:8e:ac:1d:ce:aa:cd:b6:8b:51:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC Validity Not Before: Nov 11 08:08:42 2025 GMT Not After : Nov 15 23:41:42 2025 GMT Subject: CN=246AB7CECB8CBF14C0CAE83BF36A03B34053021B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:ae:e7:79:94:ef:da:56:51:9c:7b:5d:77: 1a:8e:a9:70:81:0c:27:15:16:54:3b:76:dd:2a:2c: 25:35:b0:da:ff:5d:fb:59:61:43:99:58:6e:38:83: 33:48:2a:78:0c:a1:c3:6e:63:e6:4c:7e:38:69:91: 2f:ed:79:dc:93:54:ea:1a:6f:19:cc:8c:b1:80:8d: 40:72:4e:af:7c:18:84:22:7d:30:6e:9a:31:a9:04: 6b:cf:3a:09:35:f9:54:72:93:66:5e:b3:41:58:5e: e5:7b:ea:88:13:8a:5c:2e:2e:25:db:e0:af:bd:26: a4:cb:a9:08:09:47:7c:8d:5e:68:5f:c0:02:01:e6: 61:72:32:84:86:eb:9f:d6:96:fa:94:f3:01:11:50: 30:86:37:53:e6:93:91:8b:cc:49:77:eb:44:2e:e4: 72:3a:ce:2f:c0:56:3e:ae:32:38:d9:9b:3a:b7:0d: 47:89:0c:fb:b1:38:fd:e1:4f:f0:05:c5:29:05:e3: 42:ca:a3:11:c3:43:33:54:1b:80:32:41:87:8c:d3: 1b:47:c4:45:10:43:60:f7:e0:0f:16:f2:f0:37:cf: 92:10:77:72:b6:85:66:ee:30:2d:98:5d:24:f5:ea: 4d:e1:fc:d6:28:8c:8e:45:f0:f7:de:15:6c:2a:80: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6A:B7:CE:CB:8C:BF:14:C0:CA:E8:3B:F3:6A:03:B3:40:53:02:1B X509v3 Authority Key Identifier: keyid:A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7e:22:25:83:5c:82:84:46:a6:90:45:cf:05:5d:2b:d2:96: 93:3c:22:ce:bf:1b:15:dc:9b:94:d9:fd:52:d4:67:82:af:01: 15:ac:ce:d1:f2:53:f4:b1:45:1c:ac:e7:e3:98:bd:05:d7:84: e1:cb:81:b5:4c:02:cd:96:b0:47:92:d8:3d:dd:23:5f:f9:58: 27:98:0a:a4:8e:63:81:68:35:1f:2d:d2:56:5a:18:b5:5d:69: f3:ac:ad:d8:c1:89:9a:f4:f7:0f:ea:01:b4:ce:5d:98:18:0c: 32:3b:f3:66:3a:0f:f2:60:bd:21:d8:f6:7f:1f:9b:4a:52:6b: 8b:30:81:eb:b7:f7:ad:47:4e:6a:a4:db:12:96:9c:47:0f:11: b6:52:dc:42:02:3f:11:17:3e:9a:a5:93:60:a8:dd:a5:27:74: b4:4b:d3:d5:eb:69:79:b9:78:83:15:58:c4:44:11:2e:b3:58: 16:03:d3:79:e0:46:d2:a8:23:aa:49:03:18:66:2d:b9:10:cf: f1:c2:1f:86:e8:8e:ac:c8:99:bf:1f:11:e2:18:6f:d9:0f:43: ca:0a:e1:3e:5e:37:51:f5:ba:af:34:c2:4b:42:b7:18:bb:40: e4:b3:fa:02:8b:9f:4f:54:e8:04:30:da:f7:f2:79:3a:49:3d: e0:50:65:8b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDDmdcW6+EpAs0I6sHc6qzbaLUQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENUU0Mzg0OEE4Q0YzODg5MzlBNTMzOTVDMDNFQTdC QjEwQjJFQzAeFw0yNTExMTEwODA4NDJaFw0yNTExMTUyMzQxNDJaMDMxMTAvBgNV BAMTKDI0NkFCN0NFQ0I4Q0JGMTRDMENBRTgzQkYzNkEwM0IzNDA1MzAyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv767neZTv2lZRnHtddxqOqXCB DCcVFlQ7dt0qLCU1sNr/XftZYUOZWG44gzNIKngMocNuY+ZMfjhpkS/tedyTVOoa bxnMjLGAjUByTq98GIQifTBumjGpBGvPOgk1+VRyk2Zes0FYXuV76ogTilwuLiXb 4K+9JqTLqQgJR3yNXmhfwAIB5mFyMoSG65/WlvqU8wERUDCGN1Pmk5GLzEl360Qu 5HI6zi/AVj6uMjjZmzq3DUeJDPuxOP3hT/AFxSkF40LKoxHDQzNUG4AyQYeM0xtH xEUQQ2D34A8W8vA3z5IQd3K2hWbuMC2YXST16k3h/NYojI5F8PfeFWwqgEBFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJGq3zsuMvxTAyug782oDs0BTAhswHwYDVR0j BBgwFoAUqNXkOEiozziJOaUzlcA+p7sQsuwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDVGNjZGMDhBN0QxQUMxNDFCMkQ2MkVENjVGQUVDOUY3 Qzk1N0REMDBCODQ5MzdCNTE3NUI2MzhFRTUyRjA0LzAvQThENUU0Mzg0OEE4Q0Yz ODg5MzlBNTMzOTVDMDNFQTdCQjEwQjJFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOEQ1RTQzODQ4QThDRjM4ODkz OUE1MzM5NUMwM0VBN0JCMTBCMkVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0Q1RjY2RjA4QTdEMUFDMTQxQjJENjJFRDY1RkFFQzlGN0M5NTdERDAw Qjg0OTM3QjUxNzVCNjM4RUU1MkYwNC8wL0E4RDVFNDM4NDhBOENGMzg4OTM5QTUz Mzk1QzAzRUE3QkIxMEIyRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqfiIlg1yChEamkEXPBV0r0paT PCLOvxsV3JuU2f1S1GeCrwEVrM7R8lP0sUUcrOfjmL0F14Thy4G1TALNlrBHktg9 3SNf+VgnmAqkjmOBaDUfLdJWWhi1XWnzrK3YwYma9PcP6gG0zl2YGAwyO/NmOg/y YL0h2PZ/H5tKUmuLMIHrt/etR05qpNsSlpxHDxG2UtxCAj8RFz6apZNgqN2lJ3S0 S9PV62l5uXiDFVjERBEus1gWA9N54EbSqCOqSQMYZi25EM/xwh+G6I6syJm/HxHi GG/ZD0PKCuE+XjdR9bqvNMJLQrcYu0Dks/oCi59PVOgEMNr38nk6ST3gUGWL -----END CERTIFICATE-----Generated at Tue Nov 11 21:33:21 2025 by rpki-client