$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft File: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft (raw, json) Hash identifier: 9+FZbK8x3VXbBLXneElmUQ2qiW2PFJsKx+x24lmp2Ns= Subject key identifier: 09:D1:09:DD:AE:D6:B6:0E:78:61:A9:F2:CF:A8:09:1B:0D:FF:1B:AD Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E Certificate issuer: /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E Certificate serial: 4C24C3C04C30551DC8E652F4FC86EC05323712EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft Manifest number: 0137 Signing time: Tue 11 Nov 2025 03:14:26 +0000 Manifest this update: Tue 11 Nov 2025 03:09:26 +0000 Manifest next update: Sun 16 Nov 2025 17:25:26 +0000 Files and hashes: 1: 84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl (hash: /O2+vwdPIqounPCIrvDv17rsZQBLjLMVY7mEjWK+B+4=) 2: 34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa (hash: 0yX7u6biszxE6RR/9ymdpIsRGp4J89CZIfVvJYcKuVo=) 3: 323830363a3333633a3a2f33322d3438203d3e20323635353837.roa (hash: 7xiCWr2aOsqXzAqRAqwNIT4EL+ITgtVmg+wIDJZUubc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 16 Nov 2025 17:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:24:c3:c0:4c:30:55:1d:c8:e6:52:f4:fc:86:ec:05:32:37:12:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E Validity Not Before: Nov 11 03:09:26 2025 GMT Not After : Nov 16 17:25:26 2025 GMT Subject: CN=09D109DDAED6B60E7861A9F2CFA8091B0DFF1BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:38:ee:76:3e:7f:a8:fa:ba:8b:03:cb:7b: d7:4f:bb:f3:06:2d:a5:26:a6:ca:4e:91:a1:47:5e: d5:9c:e3:b3:d0:89:b1:34:68:b0:4d:f8:99:46:9c: 78:4a:0d:0a:d5:a7:eb:5e:58:30:78:79:28:5d:c6: e2:b4:7c:1c:d2:6f:a3:07:52:09:b4:63:f5:8e:80: 5f:a3:18:c8:98:a3:62:cc:e4:1e:15:3f:92:08:0f: 0f:88:d4:07:92:da:33:bd:2b:62:ef:45:ee:c1:b7: 93:a2:1f:8c:b3:10:05:a9:2b:6d:6d:7c:ad:56:6a: e7:2c:3b:ac:46:2e:77:db:ca:2e:39:90:70:a6:56: 76:78:b8:42:0a:47:0d:97:51:50:f3:96:80:b6:26: a4:c3:cc:d5:36:d8:97:88:e2:e5:9d:59:7b:22:07: da:e9:c2:3d:3f:d3:66:d6:13:4f:5d:b4:c5:f6:e0: 47:a0:1d:76:c3:f5:56:5f:5d:16:02:31:0a:d5:25: a0:b5:e3:32:13:19:08:53:f7:80:0e:a2:2c:63:77: f1:1b:67:95:93:5b:2a:62:d8:b7:c7:7e:b6:6a:72: fd:26:50:c9:ac:a5:0d:cc:bd:e6:c0:ea:9d:3b:e6: ab:54:ac:cd:8f:c6:2f:2d:66:a0:78:d5:f3:3a:a5: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D1:09:DD:AE:D6:B6:0E:78:61:A9:F2:CF:A8:09:1B:0D:FF:1B:AD X509v3 Authority Key Identifier: keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5d:84:4a:63:07:fb:e1:7d:6a:ca:13:5d:ef:40:70:b6:f4: e0:f3:71:2a:6b:ac:57:94:5f:b2:45:75:3d:de:fb:84:84:3b: 47:da:4b:27:cd:e3:49:3d:cb:c9:00:10:b2:0b:e2:b0:7c:15: c6:3e:c8:7f:16:db:b7:e6:c8:51:43:98:6f:4d:37:26:e6:cb: 1c:ea:03:e5:1b:ee:ca:1a:6e:3c:a0:e0:70:fb:05:b9:9c:54: 7d:a6:36:9f:d4:61:2f:c7:2a:3f:4a:c0:ce:d3:81:c1:bf:73: 71:1a:2b:5e:57:b9:27:77:73:27:72:b4:fa:ca:71:5d:68:5a: 8e:24:82:54:8f:84:69:32:3d:d6:1c:b3:7f:98:c0:e7:53:7d: 6d:e2:2c:ee:73:f9:25:97:85:46:e0:92:19:61:41:5a:c3:98: 6c:c7:8b:1e:a9:55:b9:0e:ca:78:e4:ba:e3:5f:16:2f:b4:de: d7:23:9d:44:1a:70:ef:04:62:45:33:61:76:34:73:5c:94:11: d0:a5:e7:e5:ab:a0:89:60:57:cc:db:c7:2b:19:df:7f:b9:92: 51:2a:12:2c:cf:86:3e:52:07:71:2b:5a:d9:7e:ff:54:05:4f: 49:bf:7f:95:f3:08:e6:01:ce:3b:2f:98:54:52:da:4f:82:d4: cb:9e:5a:8c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTCTDwEwwVR3I5lL0/IbsBTI3EuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODVFN0M4NDQwRDhCQ0REMzg4OEM3NkQ2RDI5N0NC MDEwQzY0RTAeFw0yNTExMTEwMzA5MjZaFw0yNTExMTYxNzI1MjZaMDMxMTAvBgNV BAMTKDA5RDEwOUREQUVENkI2MEU3ODYxQTlGMkNGQTgwOTFCMERGRjFCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SDjudj5/qPq6iwPLe9dPu/MG LaUmpspOkaFHXtWc47PQibE0aLBN+JlGnHhKDQrVp+teWDB4eShdxuK0fBzSb6MH Ugm0Y/WOgF+jGMiYo2LM5B4VP5IIDw+I1AeS2jO9K2LvRe7Bt5OiH4yzEAWpK21t fK1WaucsO6xGLnfbyi45kHCmVnZ4uEIKRw2XUVDzloC2JqTDzNU22JeI4uWdWXsi B9rpwj0/02bWE09dtMX24EegHXbD9VZfXRYCMQrVJaC14zITGQhT94AOoixjd/Eb Z5WTWypi2LfHfrZqcv0mUMmspQ3MvebA6p075qtUrM2Pxi8tZqB41fM6peuZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCdEJ3a7Wtg54Yanyz6gJGw3/G60wHwYDVR0j BBgwFoAUhLhefIRA2LzdOIjHbW0pfLAQxk4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NkZDNTg5RDdFNDAzNTI4NzE3QTNFMDJGMTRFQjdGMzZE M0Y0MTU1MzUyNzY1OEZFQkFDQTBBRjg2MENBNzIwLzAvODRCODVFN0M4NDQwRDhC Q0REMzg4OEM3NkQ2RDI5N0NCMDEwQzY0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEI4NUU3Qzg0NDBEOEJDREQz ODg4Qzc2RDZEMjk3Q0IwMTBDNjRFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODZGQzU4OUQ3RTQwMzUyODcxN0EzRTAyRjE0RUI3RjM2RDNGNDE1NTM1 Mjc2NThGRUJBQ0EwQUY4NjBDQTcyMC8wLzg0Qjg1RTdDODQ0MEQ4QkNERDM4ODhD NzZENkQyOTdDQjAxMEM2NEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQXYRKYwf74X1qyhNd70BwtvTg 83Eqa6xXlF+yRXU93vuEhDtH2ksnzeNJPcvJABCyC+KwfBXGPsh/Ftu35shRQ5hv TTcm5ssc6gPlG+7KGm48oOBw+wW5nFR9pjaf1GEvxyo/SsDO04HBv3NxGiteV7kn d3MncrT6ynFdaFqOJIJUj4RpMj3WHLN/mMDnU31t4izuc/kll4VG4JIZYUFaw5hs x4seqVW5Dsp45LrjXxYvtN7XI51EGnDvBGJFM2F2NHNclBHQpeflq6CJYFfM28cr Gd9/uZJRKhIsz4Y+UgdxK1rZfv9UBU9Jv3+V8wjmAc47L5hUUtpPgtTLnlqM -----END CERTIFICATE-----Generated at Wed Nov 12 17:26:12 2025 by rpki-client