$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: FwbSiHpvGH6uQc8z144e1AvrjZvms3IkDGuoeQHdi9A= Subject key identifier: F8:FD:07:FE:1D:EA:91:4F:51:F6:B5:FA:15:6C:3D:F2:EC:2B:9E:E2 Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 0BBE1270B63A026A4894D8911E7D934860B74D28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: 0134 Signing time: Thu 13 Nov 2025 14:23:43 +0000 Manifest this update: Thu 13 Nov 2025 14:18:43 +0000 Manifest next update: Wed 19 Nov 2025 11:11:43 +0000 Files and hashes: 1: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=) 2: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: N1Lf9V9n5uVJKPF4OPZ8LX9GNPtJByrQ72tCH8OjraM=) 3: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=) 4: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=) 5: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=) 6: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=) 7: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Nov 2025 23:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:be:12:70:b6:3a:02:6a:48:94:d8:91:1e:7d:93:48:60:b7:4d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Nov 13 14:18:43 2025 GMT Not After : Nov 19 11:11:43 2025 GMT Subject: CN=F8FD07FE1DEA914F51F6B5FA156C3DF2EC2B9EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:42:c5:f5:41:8f:f3:f0:47:3d:5e:f5:4a: b3:a7:9f:cc:c0:e3:c3:90:aa:7c:8f:e8:24:6b:2e: 2c:50:19:42:d2:c9:c6:f5:7a:b8:93:d8:26:9d:8d: a7:f7:eb:56:a4:ce:c1:b2:d6:fb:89:0e:98:c0:95: b5:f2:5c:d7:a6:a6:76:b5:a7:01:de:66:7d:91:5c: c4:6c:3b:c5:65:d8:1f:0b:59:0d:61:6c:b8:e1:eb: 74:29:52:44:d4:a1:36:b8:f6:cb:c7:8a:be:a9:99: a0:b1:15:a0:47:43:76:c5:6a:bc:82:9a:f7:81:f7: d4:33:16:7f:b8:5b:be:1f:bb:68:7a:a5:63:48:d2: 20:cd:fa:4b:8c:bf:50:0d:de:c9:a7:a2:38:10:f5: bc:dd:4a:8a:61:28:10:d3:a9:27:b1:a1:f4:fb:4d: 21:70:5f:d1:0b:53:9d:02:f4:4d:b1:da:c0:c8:bf: b1:cf:a4:8c:db:50:ed:26:15:6d:ac:ee:7e:5e:c0: ad:88:88:cb:92:8f:13:c3:d6:c1:11:09:af:a4:e2: 69:47:0c:dc:4c:20:4c:00:4c:79:53:6b:52:7c:03: 04:2d:8a:2f:e7:67:19:df:88:66:23:25:e8:00:a8: 78:b3:dc:cc:d5:1d:2b:06:ae:39:a2:cb:55:48:a6: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FD:07:FE:1D:EA:91:4F:51:F6:B5:FA:15:6C:3D:F2:EC:2B:9E:E2 X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9e:23:44:63:43:c0:38:1d:2a:55:e8:d9:b6:c9:c9:e1:c3: cf:55:b6:1a:5c:31:8c:41:72:cc:d9:90:a4:dc:90:14:3e:46: 20:9e:28:37:51:38:49:92:40:bb:3b:c3:c5:76:d1:e0:ce:09: 0d:ea:de:09:a2:21:9b:59:d8:de:f3:62:c2:49:76:4a:b5:4f: c4:4d:f5:7f:62:54:63:e0:04:2e:c4:6c:b0:c1:cc:fe:c8:65: 9e:65:1f:24:81:2f:f8:e8:ad:0b:bf:8c:e8:8a:b2:33:56:b7: 90:9e:a4:20:f2:ea:ca:ba:91:1b:af:2d:c6:0c:be:a0:bd:c8: 09:d3:44:10:a7:78:4c:1b:4a:7a:2f:77:93:e3:ab:1d:26:8f: 10:a5:25:b5:ea:8a:36:66:7c:06:e6:d1:ab:26:be:52:f4:fd: 82:06:40:52:b0:ce:ac:4f:30:7a:95:9f:99:56:cf:f0:12:eb: 24:71:a1:e1:cb:93:7e:f2:17:fd:85:aa:47:ed:62:e1:95:23: b4:03:9f:d0:06:0e:fd:2e:cc:24:34:1d:e2:09:77:e2:b2:77: 40:13:30:38:5d:28:eb:8f:c3:54:e2:81:ea:ed:a2:6f:68:3a: 70:11:37:cd:f1:9f:53:86:87:10:d0:e2:6b:70:45:9f:27:31: fb:5b:82:75 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC74ScLY6AmpIlNiRHn2TSGC3TSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNTExMTMxNDE4NDNaFw0yNTExMTkxMTExNDNaMDMxMTAvBgNV BAMTKEY4RkQwN0ZFMURFQTkxNEY1MUY2QjVGQTE1NkMzREYyRUMyQjlFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyELF9UGP8/BHPV71SrOnn8zA 48OQqnyP6CRrLixQGULSycb1eriT2Cadjaf361akzsGy1vuJDpjAlbXyXNempna1 pwHeZn2RXMRsO8Vl2B8LWQ1hbLjh63QpUkTUoTa49svHir6pmaCxFaBHQ3bFaryC mveB99QzFn+4W74fu2h6pWNI0iDN+kuMv1AN3smnojgQ9bzdSophKBDTqSexofT7 TSFwX9ELU50C9E2x2sDIv7HPpIzbUO0mFW2s7n5ewK2IiMuSjxPD1sERCa+k4mlH DNxMIEwATHlTa1J8AwQtii/nZxnfiGYjJegAqHiz3MzVHSsGrjmiy1VIplOtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+P0H/h3qkU9R9rX6FWw98uwrnuIwHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+niNEY0PAOB0qVejZtsnJ4cPP VbYaXDGMQXLM2ZCk3JAUPkYgnig3UThJkkC7O8PFdtHgzgkN6t4JoiGbWdje82LC SXZKtU/ETfV/YlRj4AQuxGywwcz+yGWeZR8kgS/46K0Lv4zoirIzVreQnqQg8urK upEbry3GDL6gvcgJ00QQp3hMG0p6L3eT46sdJo8QpSW16oo2ZnwG5tGrJr5S9P2C BkBSsM6sTzB6lZ+ZVs/wEuskcaHhy5N+8hf9hapH7WLhlSO0A5/QBg79LswkNB3i CXfisndAEzA4XSjrj8NU4oHq7aJvaDpwETfN8Z9ThocQ0OJrcEWfJzH7W4J1 -----END CERTIFICATE-----Generated at Fri Nov 14 20:33:21 2025 by rpki-client