$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft File: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft (raw, json) Hash identifier: Lk421aYtTBrnWX6ecFkhCZVGEjIeBIktiSV+fm+sMPg= Subject key identifier: CA:E3:16:B9:06:90:61:B9:34:9C:F4:37:42:B5:E6:30:65:95:95:94 Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F Certificate issuer: /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F Certificate serial: 66F4EFB5D5FFD121B4B703D7154FA81FB9B4BC97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft Manifest number: DC Signing time: Fri 31 Oct 2025 17:17:44 +0000 Manifest this update: Fri 31 Oct 2025 17:12:44 +0000 Manifest next update: Thu 06 Nov 2025 01:40:44 +0000 Files and hashes: 1: 323830333a376535303a3a2f33322d3438203d3e20323632353839.roa (hash: eCaEFSjE7aZuQizaw6/baM+QHao5Mv042kghMe+uIo0=) 2: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl (hash: NYTZIKKNVAJu/BaXJeqmtaC84wScIHyWpMO52YIpKwg=) 3: 323830333a376535303a3a2f33322d3438203d3e20323633313935.roa (hash: oJnk7HghAfllaWlCWdC4nj4Eg5ypd+tMzoPry4NKeww=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f4:ef:b5:d5:ff:d1:21:b4:b7:03:d7:15:4f:a8:1f:b9:b4:bc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F Validity Not Before: Oct 31 17:12:44 2025 GMT Not After : Nov 6 01:40:44 2025 GMT Subject: CN=CAE316B9069061B9349CF43742B5E63065959594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:97:01:78:d3:14:33:10:57:e0:c2:f3:49: 9f:57:ab:30:c0:a3:ec:19:9e:e2:33:6c:e8:04:6e: 20:b5:82:4e:e4:b6:a7:7e:19:39:cc:5b:db:21:00: 61:10:b6:df:1e:62:99:be:03:27:fd:65:1f:38:6a: 5c:15:cf:88:14:2f:5a:90:0c:e7:d7:93:74:f9:74: d3:8e:70:ab:f8:84:b8:97:7c:89:47:2d:10:12:2b: a7:18:4e:43:bc:6b:21:de:22:d6:f8:e0:be:ee:6a: bc:b9:23:13:2b:13:0e:43:a6:25:99:b1:78:27:05: f6:c8:54:c1:36:64:14:fb:10:9d:ec:1d:07:6d:30: 02:a1:49:ba:1e:28:2b:f1:e5:a7:7f:27:46:fe:32: ab:25:d4:a0:65:3f:01:c2:7e:9d:1e:df:74:3a:1d: e8:0b:95:52:9e:32:25:5d:2a:d7:ee:b3:31:80:f6: fb:a7:98:83:e4:43:cb:b0:7d:aa:c1:cc:4b:9e:84: 7d:fa:26:72:0f:8e:4f:3b:1d:3c:44:87:c9:75:d2: 5d:8f:dd:d2:8b:0c:48:bc:7d:7a:9e:55:fb:19:98: 29:a8:c5:bf:5a:e0:62:36:e7:2b:e4:fa:77:83:a7: 30:fe:a3:10:db:a7:50:f5:7b:8d:2f:4b:79:af:99: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:16:B9:06:90:61:B9:34:9C:F4:37:42:B5:E6:30:65:95:95:94 X509v3 Authority Key Identifier: keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:71:4b:4e:19:f0:75:e3:71:8a:90:2c:3f:e4:95:9e:8b:e1: 80:3c:85:72:d6:74:e9:10:b5:f3:fd:02:b7:39:96:4e:f4:e7: c6:e3:ee:bf:73:37:31:bd:cf:63:5a:fa:49:cb:58:e6:86:12: 39:0c:9e:90:66:d8:d8:af:68:71:a6:c0:80:bc:8c:ba:6f:21: 14:2d:7f:5d:db:97:fa:99:ab:62:46:6c:b6:7c:77:3f:de:66: 68:99:36:03:b8:c4:36:80:94:f4:74:58:17:dd:ef:3c:7d:ff: 48:11:97:c5:fd:1a:ab:93:1d:5e:60:9c:62:54:bd:fb:60:88: 82:97:4d:70:25:04:23:d7:bf:c3:b2:b9:b5:fe:9c:00:ca:39: e9:47:56:35:0e:84:09:c2:3b:46:16:ab:8d:d5:17:e8:7e:e9: 28:85:00:f7:66:5d:26:ee:da:7b:0d:06:d7:a2:ac:c6:ef:db: 5f:e9:87:dc:e9:76:48:2b:81:49:b0:01:4c:71:94:e5:80:ec: 21:9b:05:a7:d4:5f:f4:0b:35:1d:6a:f0:55:af:cc:7e:79:4e: 61:12:ca:0c:22:b1:42:0f:0a:02:fa:b6:28:07:c7:b1:aa:9b: 6f:e1:bb:e1:f0:e8:e4:97:5b:ce:f4:6f:75:70:fc:2c:1b:05: c1:9f:db:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZvTvtdX/0SG0twPXFU+oH7m0vJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJDQUFCMkNEQzI5NUM4QkEyNzYxNjlEMTBEMTg3MEJC QjkyRDc0RjAeFw0yNTEwMzExNzEyNDRaFw0yNTExMDYwMTQwNDRaMDMxMTAvBgNV BAMTKENBRTMxNkI5MDY5MDYxQjkzNDlDRjQzNzQyQjVFNjMwNjU5NTk1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd95cBeNMUMxBX4MLzSZ9XqzDA o+wZnuIzbOgEbiC1gk7ktqd+GTnMW9shAGEQtt8eYpm+Ayf9ZR84alwVz4gUL1qQ DOfXk3T5dNOOcKv4hLiXfIlHLRASK6cYTkO8ayHeItb44L7uary5IxMrEw5DpiWZ sXgnBfbIVME2ZBT7EJ3sHQdtMAKhSboeKCvx5ad/J0b+Mqsl1KBlPwHCfp0e33Q6 HegLlVKeMiVdKtfuszGA9vunmIPkQ8uwfarBzEuehH36JnIPjk87HTxEh8l10l2P 3dKLDEi8fXqeVfsZmCmoxb9a4GI25yvk+neDpzD+oxDbp1D1e40vS3mvmZEvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyuMWuQaQYbk0nPQ3QrXmMGWVlZQwHwYDVR0j BBgwFoAU0sqrLNwpXIuidhadENGHC7uS108wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85ODVBRUZEQ0E5QzYzM0RGODg0QkQ1RUQzRkQ5RkNCMUU3 MDY1RDdDODU5NTIzQUY4ODZFOTE4MDVFRUFCNDA2LzAvRDJDQUFCMkNEQzI5NUM4 QkEyNzYxNjlEMTBEMTg3MEJCQjkyRDc0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkNBQUIyQ0RDMjk1QzhCQTI3 NjE2OUQxMEQxODcwQkJCOTJENzRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTg1QUVGRENBOUM2MzNERjg4NEJENUVEM0ZEOUZDQjFFNzA2NUQ3Qzg1 OTUyM0FGODg2RTkxODA1RUVBQjQwNi8wL0QyQ0FBQjJDREMyOTVDOEJBMjc2MTY5 RDEwRDE4NzBCQkI5MkQ3NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTcUtOGfB143GKkCw/5JWei+GA PIVy1nTpELXz/QK3OZZO9OfG4+6/czcxvc9jWvpJy1jmhhI5DJ6QZtjYr2hxpsCA vIy6byEULX9d25f6matiRmy2fHc/3mZomTYDuMQ2gJT0dFgX3e88ff9IEZfF/Rqr kx1eYJxiVL37YIiCl01wJQQj17/Dsrm1/pwAyjnpR1Y1DoQJwjtGFquN1Rfofuko hQD3Zl0m7tp7DQbXoqzG79tf6Yfc6XZIK4FJsAFMcZTlgOwhmwWn1F/0CzUdavBV r8x+eU5hEsoMIrFCDwoC+rYoB8exqptv4bvh8Ojkl1vO9G91cPwsGwXBn9te -----END CERTIFICATE-----Generated at Sat Nov 1 04:09:16 2025 by rpki-client