$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: dzss3QW9qnTtlwVIUWvjxUBs1GsExyKGTw3zPALHImA= Subject key identifier: DA:27:73:3E:07:F5:C2:1E:32:E9:5E:78:76:1A:90:19:79:09:5A:75 Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 6FAE63AB3C2D405F6826A5CC40256E2C8C0602D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: 0135 Signing time: Sun 16 Nov 2025 11:13:16 +0000 Manifest this update: Sun 16 Nov 2025 11:08:16 +0000 Manifest next update: Fri 21 Nov 2025 19:33:16 +0000 Files and hashes: 1: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=) 2: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=) 3: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=) 4: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: o/e0WfZM+q+kw+P8s4lMInjg8zEC3TMYK+uLpZYeFT0=) 5: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=) 6: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=) 7: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Nov 2025 04:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ae:63:ab:3c:2d:40:5f:68:26:a5:cc:40:25:6e:2c:8c:06:02:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Nov 16 11:08:16 2025 GMT Not After : Nov 21 19:33:16 2025 GMT Subject: CN=DA27733E07F5C21E32E95E78761A901979095A75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:7d:4c:80:64:6b:fd:9c:72:43:9e:fe:66: c6:16:21:73:e3:c9:78:e7:82:2c:a5:0d:01:cf:f4: 75:b2:d3:6a:8a:4a:f9:3c:23:61:83:f4:45:92:20: e0:b0:1d:0d:31:28:b7:3d:ae:5e:77:0e:59:24:de: 79:35:be:cb:1b:6c:fd:98:84:d0:85:81:c0:46:64: 49:99:9c:68:23:33:2d:7b:a8:2c:5b:21:d5:b4:b0: 38:91:05:e8:12:34:b5:6c:10:04:63:dd:d0:72:18: 3f:37:1c:9e:00:64:c0:aa:3b:00:aa:3d:c6:7f:0e: 79:a7:39:36:73:68:56:b2:b4:97:e0:7d:87:68:cf: 7e:2c:a2:5e:cf:f8:e8:35:64:8f:d0:af:ad:10:50: 02:80:e1:66:63:a7:76:24:8d:83:22:81:26:39:a0: 21:f1:c5:8b:95:7b:64:4d:e5:5a:73:e7:51:72:df: e6:e8:2f:67:a8:7f:39:6d:c5:21:e4:60:f1:f3:c6: c0:07:5b:b5:74:d3:6a:12:78:43:9d:61:cf:3b:c6: 9b:36:ea:0a:f8:cc:94:0b:b3:d6:f9:24:ed:61:0d: 81:1e:e1:29:e4:ff:d8:22:60:c8:bb:53:4a:14:fd: 72:fd:af:52:43:23:63:3d:5e:42:58:45:7e:2b:36: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:27:73:3E:07:F5:C2:1E:32:E9:5E:78:76:1A:90:19:79:09:5A:75 X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:55:e6:d9:c0:80:26:82:34:09:53:c9:ec:0a:6a:12:b2:4d: 35:9d:66:29:a0:3b:0d:ee:a1:c3:53:59:bd:d2:95:f4:83:4e: 38:a8:3a:65:b5:15:ba:0a:73:9f:b4:e8:3b:d6:c2:d8:8b:14: e3:60:3c:c6:4b:a1:aa:4a:e8:2d:dd:46:c6:56:c8:72:95:71: 11:a6:4b:66:cc:df:ad:9d:a4:75:5c:c3:39:33:8c:b0:67:64: 21:d0:ae:e5:73:e6:fd:91:27:f9:9f:a3:c9:a1:cb:97:60:8e: 75:25:95:d2:c0:db:52:bd:da:0f:d1:f3:5c:73:1b:15:38:0c: de:8b:a8:1e:ac:bf:9e:1d:57:1b:44:2c:90:e3:ad:44:1a:32: 79:be:0a:3f:6e:e2:84:16:69:7a:eb:c7:5a:4d:5a:73:c0:03: ca:d6:74:e3:d6:3c:58:77:e8:4d:5a:d7:40:c1:a4:d6:a4:1b: 84:05:3c:3b:c9:31:76:d8:81:13:ac:a2:7a:43:14:38:03:b7: 24:46:3f:af:4a:74:02:01:a1:f3:08:0a:a0:f9:64:39:9a:fa: 77:27:ee:3a:8a:7c:fb:20:65:66:86:10:c1:c0:9b:71:d0:ea: 22:6e:19:e0:67:40:aa:15:4e:fd:56:8f:aa:d9:5b:a0:91:f2: 4b:bf:ca:70 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUb65jqzwtQF9oJqXMQCVuLIwGAtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNTExMTYxMTA4MTZaFw0yNTExMjExOTMzMTZaMDMxMTAvBgNV BAMTKERBMjc3MzNFMDdGNUMyMUUzMkU5NUU3ODc2MUE5MDE5NzkwOTVBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUyH1MgGRr/ZxyQ57+ZsYWIXPj yXjngiylDQHP9HWy02qKSvk8I2GD9EWSIOCwHQ0xKLc9rl53Dlkk3nk1vssbbP2Y hNCFgcBGZEmZnGgjMy17qCxbIdW0sDiRBegSNLVsEARj3dByGD83HJ4AZMCqOwCq PcZ/DnmnOTZzaFaytJfgfYdoz34sol7P+Og1ZI/Qr60QUAKA4WZjp3YkjYMigSY5 oCHxxYuVe2RN5Vpz51Fy3+boL2eofzltxSHkYPHzxsAHW7V002oSeEOdYc87xps2 6gr4zJQLs9b5JO1hDYEe4Snk/9giYMi7U0oU/XL9r1JDI2M9XkJYRX4rNjhPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2idzPgf1wh4y6V54dhqQGXkJWnUwHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnVebZwIAmgjQJU8nsCmoSsk01 nWYpoDsN7qHDU1m90pX0g044qDpltRW6CnOftOg71sLYixTjYDzGS6GqSugt3UbG VshylXERpktmzN+tnaR1XMM5M4ywZ2Qh0K7lc+b9kSf5n6PJocuXYI51JZXSwNtS vdoP0fNccxsVOAzei6gerL+eHVcbRCyQ461EGjJ5vgo/buKEFml668daTVpzwAPK 1nTj1jxYd+hNWtdAwaTWpBuEBTw7yTF22IETrKJ6QxQ4A7ckRj+vSnQCAaHzCAqg +WQ5mvp3J+46inz7IGVmhhDBwJtx0OoibhngZ0CqFU79Vo+q2VugkfJLv8pw -----END CERTIFICATE-----Generated at Mon Nov 17 22:59:47 2025 by rpki-client