$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft File: A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft (raw, json) Hash identifier: fUQ7b9cvCfmQLKYGfMkgXnbi7detroOswB+yCPUoLzE= Subject key identifier: 41:61:EB:2B:6A:67:30:FE:1A:7C:AE:7E:33:DB:94:74:21:53:15:F1 Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A Certificate issuer: /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A Certificate serial: 013ED46B10CABBC28F9BD2ABC0DEB1A4FDC09048 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft Manifest number: 0133 Signing time: Sun 02 Nov 2025 17:50:13 +0000 Manifest this update: Sun 02 Nov 2025 17:45:13 +0000 Manifest next update: Sat 08 Nov 2025 03:52:13 +0000 Files and hashes: 1: 3138312e3137372e3232302e302f32322d3234203d3e20323639393933.roa (hash: oZb0zpnrFMIP9N8YumIxpb9aqBVncCnhhlgvvZY4Q/c=) 2: 3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa (hash: voUB8WTzT6OtlvZC9NSSGDwyrmOKTsjVEQKWzJgKXa0=) 3: 323830333a346430303a3a2f33322d3438203d3e20323639393933.roa (hash: CoAyprqouPrRnUcebHk0JH14hCf/MNrfYiFPRs2lNeM=) 4: 3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa (hash: 92WlxSoWNBdKXq1VaYttIAWiwFy1JXCRa04lVjUIcdw=) 5: A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl (hash: cRCTERgs1YpsryFE2ZF1fuLphFloyomgJuVX8CdpwBo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 03:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3e:d4:6b:10:ca:bb:c2:8f:9b:d2:ab:c0:de:b1:a4:fd:c0:90:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A Validity Not Before: Nov 2 17:45:13 2025 GMT Not After : Nov 8 03:52:13 2025 GMT Subject: CN=4161EB2B6A6730FE1A7CAE7E33DB9474215315F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:fd:58:69:fd:f9:ba:9a:a1:81:40:5b:4e: b0:b1:7e:3d:8a:00:90:69:95:cb:57:e2:0d:7f:dd: 1e:b4:91:b3:b5:14:a1:85:1b:2a:f6:db:bd:02:30: 85:ef:88:23:80:88:39:6c:b7:4f:0b:43:c5:e6:49: 4f:4b:76:33:58:ca:93:78:c0:d0:36:de:b3:7d:e8: b9:f6:32:29:14:2d:6c:47:15:c9:df:0e:29:03:38: 95:1e:71:5f:2c:3e:45:97:d9:ae:73:06:30:64:d2: d4:5d:35:7d:a5:b5:65:67:05:9a:2f:3b:f0:d8:71: 9b:48:5c:cd:4b:71:6b:8c:6b:35:b7:16:65:ca:30: af:99:65:7c:33:a7:b9:39:ea:5c:44:04:af:63:58: ff:99:c7:07:24:d6:8f:a5:4f:c3:99:e4:35:dd:8e: 47:d0:ab:9c:c1:f5:37:74:f9:fc:93:d5:3a:60:6b: 9a:a8:d9:cc:06:b4:66:a1:0f:89:71:87:0a:f1:15: aa:ba:2f:73:10:ec:2c:7e:68:4f:b8:dc:45:0f:aa: bf:cb:7d:31:9c:01:be:d1:29:21:c1:b9:7c:cb:60: 4f:bc:1b:df:56:8e:7c:88:92:af:54:53:57:b0:ce: 38:2a:41:02:9c:7b:f3:21:29:23:c9:40:e9:01:8f: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:EB:2B:6A:67:30:FE:1A:7C:AE:7E:33:DB:94:74:21:53:15:F1 X509v3 Authority Key Identifier: keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:14:87:64:38:2c:3b:ca:8e:47:aa:40:3a:45:01:cb:b4:c8: 1e:db:4e:65:90:6a:fa:07:01:cd:a6:59:44:30:49:a3:e9:a4: 14:5f:79:71:80:c3:4f:bf:68:74:22:4f:75:84:4e:ff:35:d2: ae:4d:16:02:11:42:51:66:f8:6b:36:7d:1f:24:c6:d3:8b:9f: 9c:83:5e:59:c0:37:2e:ba:43:2b:57:29:d3:c7:70:b9:47:5c: a4:a8:9d:6e:0f:28:bc:5a:e9:86:62:3b:33:a4:3b:18:b0:4e: 26:1e:56:0f:ee:b5:af:12:15:96:9e:8b:3f:16:5e:c9:2d:02: 16:08:fe:f8:e5:02:0a:06:8e:1a:9d:f6:4d:b6:50:6d:de:33: 2f:ae:28:71:ba:c4:c7:54:32:fb:9d:2c:1e:41:52:35:fb:c9: b8:86:54:8a:6a:ef:35:66:e8:05:3f:21:9e:f9:fc:21:37:b1: b6:9a:b1:3c:da:44:bf:3c:72:e1:4d:9a:1c:7f:2d:63:85:78: ef:f5:34:cf:1e:3f:2b:c3:be:bc:d8:9b:6e:4d:5e:18:9d:58: ca:27:38:be:34:31:e0:61:5f:37:7a:af:5e:af:6f:71:b3:be: 14:e8:92:a9:f6:a2:7f:3f:80:8b:b2:84:6e:2f:06:9d:77:18: 52:08:04:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAT7UaxDKu8KPm9KrwN6xpP3AkEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEyRkQ3RjNGOUY0NzAwMzBCOUZDQzJDRjRFN0VFMjBG ODJGODk0QTAeFw0yNTExMDIxNzQ1MTNaFw0yNTExMDgwMzUyMTNaMDMxMTAvBgNV BAMTKDQxNjFFQjJCNkE2NzMwRkUxQTdDQUU3RTMzREI5NDc0MjE1MzE1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAm/1Yaf35upqhgUBbTrCxfj2K AJBplctX4g1/3R60kbO1FKGFGyr2270CMIXviCOAiDlst08LQ8XmSU9LdjNYypN4 wNA23rN96Ln2MikULWxHFcnfDikDOJUecV8sPkWX2a5zBjBk0tRdNX2ltWVnBZov O/DYcZtIXM1LcWuMazW3FmXKMK+ZZXwzp7k56lxEBK9jWP+Zxwck1o+lT8OZ5DXd jkfQq5zB9Td0+fyT1Tpga5qo2cwGtGahD4lxhwrxFaq6L3MQ7Cx+aE+43EUPqr/L fTGcAb7RKSHBuXzLYE+8G99WjnyIkq9UU1ewzjgqQQKce/MhKSPJQOkBj4oPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQWHrK2pnMP4afK5+M9uUdCFTFfEwHwYDVR0j BBgwFoAUoS/X8/n0cAMLn8ws9OfuIPgviUowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85QjEyRjhBOEY4QTc1MjAzODRFQjRGRTBGNkFDOEQ2QTYz Q0YzODUzNDFBRTg3QkVFRjdFRENEMTdENUNCMDVCLzAvQTEyRkQ3RjNGOUY0NzAw MzBCOUZDQzJDRjRFN0VFMjBGODJGODk0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTJGRDdGM0Y5RjQ3MDAzMEI5 RkNDMkNGNEU3RUUyMEY4MkY4OTRBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUIxMkY4QThGOEE3NTIwMzg0RUI0RkUwRjZBQzhENkE2M0NGMzg1MzQx QUU4N0JFRUY3RURDRDE3RDVDQjA1Qi8wL0ExMkZEN0YzRjlGNDcwMDMwQjlGQ0My Q0Y0RTdFRTIwRjgyRjg5NEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnFIdkOCw7yo5HqkA6RQHLtMge 205lkGr6BwHNpllEMEmj6aQUX3lxgMNPv2h0Ik91hE7/NdKuTRYCEUJRZvhrNn0f JMbTi5+cg15ZwDcuukMrVynTx3C5R1ykqJ1uDyi8WumGYjszpDsYsE4mHlYP7rWv EhWWnos/Fl7JLQIWCP745QIKBo4anfZNtlBt3jMvrihxusTHVDL7nSweQVI1+8m4 hlSKau81ZugFPyGe+fwhN7G2mrE82kS/PHLhTZocfy1jhXjv9TTPHj8rw7682Jtu TV4YnVjKJzi+NDHgYV83eq9er29xs74U6JKp9qJ/P4CLsoRuLwaddxhSCASp -----END CERTIFICATE-----Generated at Tue Nov 4 17:35:08 2025 by rpki-client