$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft File: 1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft (raw, json) Hash identifier: 2kiwUDKyigpmXhjkMVXQcoI/hV1cDl6n9V5spvyl80E= Subject key identifier: 92:3D:AE:4A:80:F4:2C:AB:ED:DA:33:D0:8B:B2:12:49:DD:72:7E:FC Authority key identifier: 1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D Certificate issuer: /CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D Certificate serial: 0229850103F0DAF9E405B9970018DA970881CE84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft Manifest number: 0136 Signing time: Thu 30 Oct 2025 20:00:58 +0000 Manifest this update: Thu 30 Oct 2025 19:55:58 +0000 Manifest next update: Wed 05 Nov 2025 17:23:58 +0000 Files and hashes: 1: 3139302e302e3232382e302f32342d3234203d3e20323033333335.roa (hash: 7pW9K4jv8BBvMd1UOHBlpwhllEHrCSfZ2qFV87yPu8U=) 2: 3139302e302e3232342e302f32312d3234203d3e20323633373133.roa (hash: jewCCFAKehkXOm8KAAApRPsZjnaDTDn7UiCm9GiLgyE=) 3: 1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl (hash: DbGu2U/+1R2kh0YkVsdXk2ehAC5363zT74T2z+2PpA8=) 4: 323830333a376138303a3a2f33322d3438203d3e20323633373133.roa (hash: XFuSkwlJX45qbOzJrmGNb3hDLSxMJvvMTQ5f4JzJKIk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:29:85:01:03:f0:da:f9:e4:05:b9:97:00:18:da:97:08:81:ce:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D Validity Not Before: Oct 30 19:55:58 2025 GMT Not After : Nov 5 17:23:58 2025 GMT Subject: CN=923DAE4A80F42CABEDDA33D08BB21249DD727EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b4:63:b6:84:3b:ae:2b:68:70:d7:2f:cd:8d: bd:ad:c6:07:79:27:cd:12:06:77:80:35:64:0b:1f: 24:15:7a:74:ff:18:c3:4f:9d:27:7c:5f:42:d3:60: 36:66:ec:7d:33:7f:7b:6d:04:cc:74:d1:f2:78:a7: c3:d1:c5:80:9a:70:c5:7e:de:07:2e:99:90:bc:28: 8e:79:ec:a1:f2:63:fa:f0:22:7d:f9:5a:c5:65:61: e3:23:5a:aa:d5:74:e8:88:e4:d7:13:09:05:8e:a0: 53:73:24:a1:cd:ad:77:60:1f:f8:18:a4:38:26:be: 8d:70:98:34:b7:40:83:60:7e:da:5d:45:b5:ba:4c: b5:cd:c1:61:e6:c2:7b:fe:9c:f6:72:dd:aa:6e:9b: 18:73:8e:ed:42:4b:e1:d9:60:69:2e:75:22:8e:cb: 96:83:e3:fa:49:aa:64:a3:2c:2c:59:f4:51:3a:a6: a7:d0:0a:d0:3d:81:d4:3a:18:73:39:c9:d8:ac:a9: 49:0c:00:1f:7a:08:3e:ad:e5:2e:e7:19:57:37:59: 3d:01:6c:45:61:3a:6e:e5:f0:d4:93:bb:a2:75:e4: 62:d2:8d:fa:a4:51:5b:21:6d:f1:ac:c7:64:d2:26: ee:0b:e4:2a:18:c5:73:e8:8a:9f:0b:f2:7f:58:ba: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:AE:4A:80:F4:2C:AB:ED:DA:33:D0:8B:B2:12:49:DD:72:7E:FC X509v3 Authority Key Identifier: keyid:1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4b:c6:e0:64:07:08:ed:57:d9:28:2c:ee:57:fa:8c:d5:9c: a2:a7:13:ba:54:54:33:c0:68:ff:bd:c0:78:f0:f5:e3:e5:d9: ea:5e:c4:89:30:39:fe:fe:3b:87:10:a4:ea:6a:bc:0d:48:90: da:d6:b6:d7:e5:60:f3:d6:0c:96:9a:f5:0a:37:9d:ac:6e:92: 91:55:f0:33:1e:00:cf:1f:70:e2:fa:ce:cb:38:a8:cc:cd:71: d6:4e:c8:88:e1:3e:2c:fe:28:d8:6f:43:86:cf:b8:a0:e4:e6: 33:d9:14:82:93:6a:d8:18:cb:96:39:c4:62:57:64:21:0b:fb: 14:98:85:91:08:62:32:7e:f7:70:85:e7:71:a6:3a:95:3e:ef: 4b:ac:25:4f:2d:71:95:57:cd:a4:37:60:22:ad:f5:73:cc:ca: 0d:38:3d:e8:5b:cb:74:8c:fd:0d:f9:3c:fa:8a:a9:47:f8:7e: a7:04:b7:7d:d8:56:06:f5:6e:15:2d:a1:b3:ec:48:0a:06:c7: 5f:f0:10:28:86:fb:6a:9f:3b:85:18:45:5c:2f:b6:a9:10:bd: 77:69:7a:3b:6d:35:bc:cb:13:a0:67:6c:99:2e:e0:34:c6:e3: 78:a9:dd:6d:be:2d:cd:a9:8e:55:0f:92:a0:ed:37:bb:a9:a3: 19:dc:2f:ac -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAimFAQPw2vnkBbmXABjalwiBzoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZFMTRCOTM3REQ3NkU1QkZERDlDQUFCNEJGMTEyQ0Y2 MUUzOTI5RDAeFw0yNTEwMzAxOTU1NThaFw0yNTExMDUxNzIzNThaMDMxMTAvBgNV BAMTKDkyM0RBRTRBODBGNDJDQUJFRERBMzNEMDhCQjIxMjQ5REQ3MjdFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMtGO2hDuuK2hw1y/Njb2txgd5 J80SBneANWQLHyQVenT/GMNPnSd8X0LTYDZm7H0zf3ttBMx00fJ4p8PRxYCacMV+ 3gcumZC8KI557KHyY/rwIn35WsVlYeMjWqrVdOiI5NcTCQWOoFNzJKHNrXdgH/gY pDgmvo1wmDS3QINgftpdRbW6TLXNwWHmwnv+nPZy3apumxhzju1CS+HZYGkudSKO y5aD4/pJqmSjLCxZ9FE6pqfQCtA9gdQ6GHM5ydisqUkMAB96CD6t5S7nGVc3WT0B bEVhOm7l8NSTu6J15GLSjfqkUVshbfGsx2TSJu4L5CoYxXPoip8L8n9YunTvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkj2uSoD0LKvt2jPQi7ISSd1yfvwwHwYDVR0j BBgwFoAUH+FLk33Xblv92cqrS/ESz2Hjkp0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTE5NjIyM0U3M0Y5REQ5RkFDMkI4NkIyRjdBQjdBRTRB QTZBQzY3NkY3MjQ0NkRDNEE5NDgyMTNERjhGRTJBLzAvMUZFMTRCOTM3REQ3NkU1 QkZERDlDQUFCNEJGMTEyQ0Y2MUUzOTI5RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRkUxNEI5MzdERDc2RTVCRkRE OUNBQUI0QkYxMTJDRjYxRTM5MjlELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUExOTYyMjNFNzNGOUREOUZBQzJCODZCMkY3QUI3QUU0QUE2QUM2NzZG NzI0NDZEQzRBOTQ4MjEzREY4RkUyQS8wLzFGRTE0QjkzN0RENzZFNUJGREQ5Q0FB QjRCRjExMkNGNjFFMzkyOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYS8bgZAcI7VfZKCzuV/qM1Zyi pxO6VFQzwGj/vcB48PXj5dnqXsSJMDn+/juHEKTqarwNSJDa1rbX5WDz1gyWmvUK N52sbpKRVfAzHgDPH3Di+s7LOKjMzXHWTsiI4T4s/ijYb0OGz7ig5OYz2RSCk2rY GMuWOcRiV2QhC/sUmIWRCGIyfvdwhedxpjqVPu9LrCVPLXGVV82kN2AirfVzzMoN OD3oW8t0jP0N+Tz6iqlH+H6nBLd92FYG9W4VLaGz7EgKBsdf8BAohvtqnzuFGEVc L7apEL13aXo7bTW8yxOgZ2yZLuA0xuN4qd1tvi3NqY5VD5Kg7Te7qaMZ3C+s -----END CERTIFICATE-----Generated at Sun Nov 2 01:24:07 2025 by rpki-client