$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft File: 8F14B752BDD95C05C00A4F586E5817068B49A668.mft (raw, json) Hash identifier: UkmRzIVF3pVR01IFKGjHZoOYUXJAOYG3JqRudQC4GQI= Subject key identifier: F8:37:C9:EC:23:65:57:A8:5A:3E:D3:D8:BD:10:C4:2B:38:54:7D:A8 Authority key identifier: 8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68 Certificate issuer: /CN=8F14B752BDD95C05C00A4F586E5817068B49A668 Certificate serial: 422D86A05D40B17ADC95245848FA32E03C2A16E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft Manifest number: 3D Signing time: Fri 24 Oct 2025 12:58:15 +0000 Manifest this update: Fri 24 Oct 2025 12:53:15 +0000 Manifest next update: Wed 29 Oct 2025 18:03:15 +0000 Files and hashes: 1: 8F14B752BDD95C05C00A4F586E5817068B49A668.crl (hash: fDwqPvmIfjA9jaWfQzStJSjzYcjD9W7sHJLqcfINBbw=) 2: 323830333a383964303a3a2f33322d3438203d3e20323734313436.roa (hash: bae3vFu+GCIslHlcv+q/GPp0+Cilol9DlBsqSwspn8g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.crl rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 18:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2d:86:a0:5d:40:b1:7a:dc:95:24:58:48:fa:32:e0:3c:2a:16:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F14B752BDD95C05C00A4F586E5817068B49A668 Validity Not Before: Oct 24 12:53:15 2025 GMT Not After : Oct 29 18:03:15 2025 GMT Subject: CN=F837C9EC236557A85A3ED3D8BD10C42B38547DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:0d:73:fe:c4:4d:5d:39:0b:85:fe:0e:f8: 32:7b:9d:33:5c:ad:fb:44:74:3d:02:35:e4:e2:40: 23:70:ca:4a:24:a6:97:bc:24:c2:83:23:22:62:04: bc:c1:8d:9a:2e:79:13:f7:8d:95:3c:be:47:42:e7: 65:ab:45:ea:cb:29:c6:84:1e:30:b3:61:9c:a7:ae: b9:81:6b:a1:8a:fc:4c:50:e8:76:05:0a:dd:51:71: db:26:be:d0:dd:70:da:47:45:f7:2c:6b:c5:53:cb: 41:ee:4f:47:11:fb:d3:f8:ac:47:19:65:bf:28:5e: 36:d8:4a:5b:d3:4b:18:0d:b8:c4:6a:3c:b1:1a:93: 27:50:4e:f9:5d:59:b0:3a:1e:b9:ae:c0:5e:43:c0: e6:ee:f2:5d:ab:f4:eb:20:55:e6:51:80:4a:c5:0e: d1:47:bb:c5:7c:99:1d:77:59:e1:88:80:b0:71:04: ac:25:ef:f2:7f:76:68:a0:e1:2d:c1:6f:5c:34:6d: 70:41:4a:b7:d6:8a:43:75:ee:4c:23:f8:98:29:4f: 5c:b1:9e:d3:ab:e5:13:0c:9e:61:88:f3:d2:8e:76: 3c:56:eb:ea:3c:21:31:fb:60:71:be:b1:ad:e4:91: a0:91:1d:04:d1:f3:fb:d0:36:54:b6:3f:4b:74:cd: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:37:C9:EC:23:65:57:A8:5A:3E:D3:D8:BD:10:C4:2B:38:54:7D:A8 X509v3 Authority Key Identifier: keyid:8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9a:a0:06:48:07:6b:14:24:44:eb:5d:2e:36:39:90:15:ca: c3:c3:f5:c0:e0:ad:f6:36:ef:a9:fa:84:70:65:17:8b:f4:ce: 97:31:5a:bd:d6:23:e6:8d:7a:89:e0:71:34:13:0d:9e:d1:3c: 0e:4a:5c:bd:c4:89:6c:b5:40:32:63:6d:70:e5:47:6f:fd:ec: 96:8d:e9:19:c1:69:7c:4c:8a:63:43:53:9b:cd:f3:88:0a:04: 1c:84:33:f3:95:7a:0f:91:ef:77:87:80:35:93:91:bc:01:dd: b1:08:37:78:76:4a:f7:50:cf:11:fb:b6:01:19:40:b9:f7:ce: 7d:9b:e8:22:87:16:4f:be:63:a2:1e:1c:32:7d:81:62:03:d9: 23:3a:ad:86:e6:9e:73:f2:71:5d:24:d8:f8:39:c0:8d:f8:31: 5b:18:42:63:7e:55:19:3e:92:5b:4d:f4:63:34:e7:5e:9e:0b: 39:70:a6:dd:36:54:58:6c:cd:98:ce:8a:5b:3a:1b:eb:4c:bd: 08:c0:44:cb:96:03:11:2f:22:5a:3f:20:a6:68:04:51:cf:f5: 4b:eb:b9:bf:a7:ee:bb:99:c4:98:76:01:4f:ae:48:19:78:5b: 51:33:ee:c3:ef:dc:66:19:82:a3:84:1f:6a:78:2b:34:f1:41: b3:18:a9:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQi2GoF1AsXrclSRYSPoy4DwqFuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNEI3NTJCREQ5NUMwNUMwMEE0RjU4NkU1ODE3MDY4 QjQ5QTY2ODAeFw0yNTEwMjQxMjUzMTVaFw0yNTEwMjkxODAzMTVaMDMxMTAvBgNV BAMTKEY4MzdDOUVDMjM2NTU3QTg1QTNFRDNEOEJEMTBDNDJCMzg1NDdEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7w1z/sRNXTkLhf4O+DJ7nTNc rftEdD0CNeTiQCNwykokppe8JMKDIyJiBLzBjZoueRP3jZU8vkdC52WrRerLKcaE HjCzYZynrrmBa6GK/ExQ6HYFCt1RcdsmvtDdcNpHRfcsa8VTy0HuT0cR+9P4rEcZ Zb8oXjbYSlvTSxgNuMRqPLEakydQTvldWbA6HrmuwF5DwObu8l2r9OsgVeZRgErF DtFHu8V8mR13WeGIgLBxBKwl7/J/dmig4S3Bb1w0bXBBSrfWikN17kwj+JgpT1yx ntOr5RMMnmGI89KOdjxW6+o8ITH7YHG+sa3kkaCRHQTR8/vQNlS2P0t0zan5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+DfJ7CNlV6haPtPYvRDEKzhUfagwHwYDVR0j BBgwFoAUjxS3Ur3ZXAXACk9YblgXBotJpmgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BREM0QUZFMUIyRTFDQzg4MzNGNjVEQzA4RUMyNDFFQkZD MTMwNTZCMkUwOTY2RTNEM0VDNDg1RTI3REY5ODk4LzAvOEYxNEI3NTJCREQ5NUMw NUMwMEE0RjU4NkU1ODE3MDY4QjQ5QTY2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjE0Qjc1MkJERDk1QzA1QzAw QTRGNTg2RTU4MTcwNjhCNDlBNjY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQURDNEFGRTFCMkUxQ0M4ODMzRjY1REMwOEVDMjQxRUJGQzEzMDU2QjJF MDk2NkUzRDNFQzQ4NUUyN0RGOTg5OC8wLzhGMTRCNzUyQkREOTVDMDVDMDBBNEY1 ODZFNTgxNzA2OEI0OUE2NjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArmqAGSAdrFCRE610uNjmQFcrD w/XA4K32Nu+p+oRwZReL9M6XMVq91iPmjXqJ4HE0Ew2e0TwOSly9xIlstUAyY21w 5Udv/eyWjekZwWl8TIpjQ1ObzfOICgQchDPzlXoPke93h4A1k5G8Ad2xCDd4dkr3 UM8R+7YBGUC59859m+gihxZPvmOiHhwyfYFiA9kjOq2G5p5z8nFdJNj4OcCN+DFb GEJjflUZPpJbTfRjNOdengs5cKbdNlRYbM2YzopbOhvrTL0IwETLlgMRLyJaPyCm aARRz/VL67m/p+67mcSYdgFPrkgZeFtRM+7D79xmGYKjhB9qeCs08UGzGKnx -----END CERTIFICATE-----Generated at Sun Oct 26 11:34:19 2025 by rpki-client