$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft File: 294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft (raw, json) Hash identifier: RGBkTUo5f4pI4zEO45SR5UxGHdGLXrVk9NaIQA5+wzI= Subject key identifier: E3:33:C9:2C:1A:44:38:04:33:6E:24:AE:21:FE:96:D3:B6:E2:DA:34 Authority key identifier: 29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8 Certificate issuer: /CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8 Certificate serial: C4A41B3D574255A74177664804666A314B7B6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft Manifest number: 013A Signing time: Sun 02 Nov 2025 07:28:53 +0000 Manifest this update: Sun 02 Nov 2025 07:23:53 +0000 Manifest next update: Thu 06 Nov 2025 18:56:53 +0000 Files and hashes: 1: 34352e3232352e3231362e302f32322d3234203d3e20323635383533.roa (hash: PvMESmwiCQe0CSmjaFWzwEXbm8J+XmotXUIdVUzkUg0=) 2: 294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl (hash: s1irdfg0kqiELxwb+nxKR557qleYBUPW2AwJcr8eHwo=) 3: 34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa (hash: p6gfH6+O9X3JUzrS3seDyt/LssJaHopCsnopCzc/P1A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c4:a4:1b:3d:57:42:55:a7:41:77:66:48:04:66:6a:31:4b:7b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8 Validity Not Before: Nov 2 07:23:53 2025 GMT Not After : Nov 6 18:56:53 2025 GMT Subject: CN=E333C92C1A443804336E24AE21FE96D3B6E2DA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:32:6d:49:11:5b:b7:45:01:6c:d0:cb:7b: 6d:6e:5f:0b:1c:bc:91:54:16:0f:39:1f:7c:cc:2c: 04:30:82:11:f3:23:56:12:96:4b:de:55:97:c4:21: 44:d2:0d:e3:48:05:6f:4f:77:e5:2f:b1:6a:21:b7: 9d:d6:d9:b2:b6:78:22:98:18:45:68:bb:99:cf:ae: 19:34:96:0e:37:72:2d:40:9a:75:5e:60:ea:12:15: ee:2d:c2:26:56:3d:74:7c:7b:f4:c3:c5:bf:ae:5e: 79:53:6d:78:d9:d0:8b:da:65:18:2d:80:f3:fe:92: 4b:89:73:1e:43:85:e8:32:2b:ee:a0:31:f0:a1:1c: cc:de:a4:e3:18:97:7a:23:a7:c8:8d:65:be:da:9f: 8a:07:22:b7:b8:ba:a0:db:05:f4:15:57:fa:1a:fb: 55:fd:bf:bd:b6:7a:02:99:46:dc:a6:71:e5:3f:c2: e7:a6:37:ce:6b:14:9d:10:c1:bb:25:9c:4f:a5:6b: 56:68:85:1a:29:50:38:49:05:2a:31:6b:52:94:52: 18:3b:50:aa:a8:6d:a3:73:ca:d9:72:55:b5:43:01: f9:2c:18:d7:74:c4:a1:58:16:8b:ec:f2:14:f2:3d: 1b:14:88:65:e9:3b:d5:dd:3f:97:cd:d9:9f:29:64: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:33:C9:2C:1A:44:38:04:33:6E:24:AE:21:FE:96:D3:B6:E2:DA:34 X509v3 Authority Key Identifier: keyid:29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0f:a8:9e:76:43:2d:ca:1f:52:fd:8b:67:86:3d:ef:fc:c3: 4f:f7:4d:a6:26:e5:59:14:56:63:2d:21:0f:ab:9f:7b:e3:5e: 5b:6b:06:0c:eb:78:0a:ff:48:5e:3d:8a:85:d4:64:92:e8:39: b8:d5:2e:a1:3e:d2:8a:59:0d:4e:e5:17:d1:94:12:95:e8:31: 06:5e:19:47:6e:aa:ca:28:a9:90:62:c6:08:30:98:15:f2:09: 30:8f:7f:38:3a:d4:ef:f5:d5:9b:e2:35:a4:96:b6:fa:81:43: 62:49:b4:35:b9:8f:d0:34:0b:fc:23:c6:ca:43:1e:9b:0c:72: ca:b1:3f:a3:73:5f:74:76:e6:6f:bc:e9:93:e5:a4:d3:b7:02: 40:7d:9e:ff:d6:13:9d:48:42:eb:43:59:a0:7c:52:d2:91:fa: 52:2b:e4:06:6b:c7:ce:ba:98:40:75:62:03:b2:b6:04:be:a9: 50:79:e0:cd:6e:cf:c6:e9:66:f7:4f:67:ad:92:ad:6d:ed:d5: a7:10:65:63:da:ef:b1:02:4d:54:6b:b6:53:a5:aa:bb:d3:7c: da:f7:ee:b8:7d:28:5c:f9:a0:90:4c:4a:c6:00:61:3d:06:77: 69:96:c5:a7:be:0e:68:a8:10:72:6b:50:58:1e:4d:7f:3e:26: 1d:21:c9:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAMSkGz1XQlWnQXdmSARmajFLe2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0NDA0RDVEMTM2NUIyRjgwNUYyRUI0MDhEMEY4RDIw QjBBRjBFODAeFw0yNTExMDIwNzIzNTNaFw0yNTExMDYxODU2NTNaMDMxMTAvBgNV BAMTKEUzMzNDOTJDMUE0NDM4MDQzMzZFMjRBRTIxRkU5NkQzQjZFMkRBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWuTJtSRFbt0UBbNDLe21uXwsc vJFUFg85H3zMLAQwghHzI1YSlkveVZfEIUTSDeNIBW9Pd+UvsWoht53W2bK2eCKY GEVou5nPrhk0lg43ci1AmnVeYOoSFe4twiZWPXR8e/TDxb+uXnlTbXjZ0IvaZRgt gPP+kkuJcx5DhegyK+6gMfChHMzepOMYl3ojp8iNZb7an4oHIre4uqDbBfQVV/oa +1X9v722egKZRtymceU/wuemN85rFJ0QwbslnE+la1ZohRopUDhJBSoxa1KUUhg7 UKqobaNzytlyVbVDAfksGNd0xKFYFovs8hTyPRsUiGXpO9XdP5fN2Z8pZBozAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4zPJLBpEOAQzbiSuIf6W07bi2jQwHwYDVR0j BBgwFoAUKUQE1dE2Wy+AXy60CND40gsK8OgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84MUI4RkEyNzFGODM2QjAzM0NBMDRBNEEwMjUxM0JCREU4 NjU2RkIzOTkzODM0RkFDQzVFMEM5M0JCRjQ4OEE5LzAvMjk0NDA0RDVEMTM2NUIy RjgwNUYyRUI0MDhEMEY4RDIwQjBBRjBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTQ0MDRENUQxMzY1QjJGODA1 RjJFQjQwOEQwRjhEMjBCMEFGMEU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODFCOEZBMjcxRjgzNkIwMzNDQTA0QTRBMDI1MTNCQkRFODY1NkZCMzk5 MzgzNEZBQ0M1RTBDOTNCQkY0ODhBOS8wLzI5NDQwNEQ1RDEzNjVCMkY4MDVGMkVC NDA4RDBGOEQyMEIwQUYwRTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDD6iedkMtyh9S/Ytnhj3v/MNP 902mJuVZFFZjLSEPq597415bawYM63gK/0hePYqF1GSS6Dm41S6hPtKKWQ1O5RfR lBKV6DEGXhlHbqrKKKmQYsYIMJgV8gkwj384OtTv9dWb4jWklrb6gUNiSbQ1uY/Q NAv8I8bKQx6bDHLKsT+jc190duZvvOmT5aTTtwJAfZ7/1hOdSELrQ1mgfFLSkfpS K+QGa8fOuphAdWIDsrYEvqlQeeDNbs/G6Wb3T2etkq1t7dWnEGVj2u+xAk1Ua7ZT paq703za9+64fShc+aCQTErGAGE9BndplsWnvg5oqBBya1BYHk1/PiYdIcmK -----END CERTIFICATE-----Generated at Mon Nov 3 17:10:06 2025 by rpki-client