$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: nz3Zb5gwL1TZNkGvWOIyeBiiaIZZw74/MFVQG6+U0oQ= Subject key identifier: 29:A0:77:EF:CF:9B:E1:FA:DC:04:FB:C9:CF:78:16:30:FE:8C:72:7F Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 562EAC94932F85089D3C6821A6A1401808F73B93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: 0130 Signing time: Wed 05 Nov 2025 19:46:37 +0000 Manifest this update: Wed 05 Nov 2025 19:41:37 +0000 Manifest next update: Tue 11 Nov 2025 02:07:37 +0000 Files and hashes: 1: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=) 2: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: iMWagBts+QGm/iO2dW+dwabQcTVE+HzCJDqkltBZk2s=) 3: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=) 4: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=) 5: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=) 6: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=) 7: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 02:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2e:ac:94:93:2f:85:08:9d:3c:68:21:a6:a1:40:18:08:f7:3b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Nov 5 19:41:37 2025 GMT Not After : Nov 11 02:07:37 2025 GMT Subject: CN=29A077EFCF9BE1FADC04FBC9CF781630FE8C727F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:db:0a:3b:1c:5b:00:6d:a3:cf:91:60:0b: 28:9f:11:bb:6a:b6:67:02:50:1d:8a:28:4e:f5:96: 19:cb:64:c6:74:f8:0f:8e:d6:d3:ab:59:17:1d:2f: f6:72:e9:1f:00:8c:26:59:fc:e0:ce:17:99:ec:cd: 1f:20:eb:a7:ed:9f:a5:28:88:a8:94:66:bf:4c:84: 9f:5c:83:99:7e:fe:e8:04:ef:a1:28:72:ad:f9:25: 1a:0e:0a:22:d5:85:c0:26:63:5c:49:cd:2a:76:24: 1a:58:f0:73:9b:1e:08:d8:5f:64:78:19:9b:f9:34: 31:79:70:f7:d8:40:41:3d:90:d7:ba:0a:bb:3c:a6: 6c:4a:d2:e6:6a:c1:7f:00:ef:61:29:bb:2d:4e:54: a5:9a:58:e9:94:d8:4b:48:f6:1c:1f:86:12:b9:04: 20:b6:9b:d5:9b:dd:87:42:7d:40:56:e4:4e:72:6c: 1a:08:9f:08:af:eb:a7:4b:5c:48:6d:01:59:17:fc: 7a:3f:59:64:b4:b6:05:79:5a:61:08:a5:01:05:56: 3f:de:81:f4:05:8e:34:05:a2:9b:75:b4:40:1b:13: ae:f3:07:c1:9f:19:c7:73:49:63:1a:6e:d7:47:e7: df:b9:b8:3a:97:18:4f:51:fb:c7:18:4c:dc:78:48: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A0:77:EF:CF:9B:E1:FA:DC:04:FB:C9:CF:78:16:30:FE:8C:72:7F X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fd:0c:20:35:67:2c:fc:09:92:7e:7d:b5:eb:26:cf:3f:a8: 17:62:13:ab:41:3c:cf:ac:a4:88:59:37:d1:a6:72:5d:31:59: 86:15:67:51:85:c2:07:78:76:bd:c5:44:29:99:78:d4:fd:89: 1b:24:49:75:dc:85:c4:22:41:b3:e7:83:83:c3:12:c0:89:ff: bd:b7:be:a4:a7:20:48:f2:52:c4:17:84:37:35:08:f5:14:11: 48:5e:e5:79:f1:4a:d3:05:03:63:d7:04:e4:d2:71:d3:be:1e: 8d:e3:33:ca:3b:2f:2b:11:06:b7:81:d5:9b:0d:fd:02:e4:22: ab:ad:f8:f0:fb:1d:1c:56:af:15:48:56:3a:a1:58:fe:91:7a: 4f:f0:6b:db:53:c0:a4:95:de:b7:1c:43:49:5b:0c:00:97:69: e0:f5:2c:28:6f:c8:bd:98:32:4a:b8:bb:69:49:3c:3b:12:6a: cd:6d:93:4e:64:6f:83:3e:4a:e0:4c:78:a7:c3:e8:cc:a3:f3: 6a:2c:b4:32:ad:f0:f3:a1:9f:fe:92:e9:fe:a0:7f:d7:e3:43: ec:27:f1:ed:a2:fd:aa:a7:60:b7:71:2f:c0:22:fb:5e:3c:ee: 17:8b:c9:7a:a4:c2:5f:e2:63:ae:a1:6a:45:e8:29:45:6b:8d: d7:6e:21:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVi6slJMvhQidPGghpqFAGAj3O5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNTExMDUxOTQxMzdaFw0yNTExMTEwMjA3MzdaMDMxMTAvBgNV BAMTKDI5QTA3N0VGQ0Y5QkUxRkFEQzA0RkJDOUNGNzgxNjMwRkU4QzcyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRY9sKOxxbAG2jz5FgCyifEbtq tmcCUB2KKE71lhnLZMZ0+A+O1tOrWRcdL/Zy6R8AjCZZ/ODOF5nszR8g66ftn6Uo iKiUZr9MhJ9cg5l+/ugE76Eocq35JRoOCiLVhcAmY1xJzSp2JBpY8HObHgjYX2R4 GZv5NDF5cPfYQEE9kNe6Crs8pmxK0uZqwX8A72Epuy1OVKWaWOmU2EtI9hwfhhK5 BCC2m9Wb3YdCfUBW5E5ybBoInwiv66dLXEhtAVkX/Ho/WWS0tgV5WmEIpQEFVj/e gfQFjjQFopt1tEAbE67zB8GfGcdzSWMabtdH59+5uDqXGE9R+8cYTNx4SDHTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKaB378+b4frcBPvJz3gWMP6Mcn8wHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCi/QwgNWcs/AmSfn216ybPP6gX YhOrQTzPrKSIWTfRpnJdMVmGFWdRhcIHeHa9xUQpmXjU/YkbJEl13IXEIkGz54OD wxLAif+9t76kpyBI8lLEF4Q3NQj1FBFIXuV58UrTBQNj1wTk0nHTvh6N4zPKOy8r EQa3gdWbDf0C5CKrrfjw+x0cVq8VSFY6oVj+kXpP8GvbU8Ckld63HENJWwwAl2ng 9Swob8i9mDJKuLtpSTw7EmrNbZNOZG+DPkrgTHinw+jMo/NqLLQyrfDzoZ/+kun+ oH/X40PsJ/Htov2qp2C3cS/AIvtePO4Xi8l6pMJf4mOuoWpF6ClFa43XbiGj -----END CERTIFICATE-----Generated at Fri Nov 7 18:01:39 2025 by rpki-client