$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft File: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft (raw, json) Hash identifier: q5GG7H2Sh0WIxlC7CSxFHy+jDA9itSyjHbrIl00p42k= Subject key identifier: D2:C6:E0:2C:9F:7F:35:20:6E:56:79:57:F3:41:42:2F:7C:D6:17:09 Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98 Certificate issuer: /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498 Certificate serial: 482643792CF0F9F983DBFB0DD1F5DB388980863A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft Manifest number: 0131 Signing time: Wed 22 Oct 2025 15:53:34 +0000 Manifest this update: Wed 22 Oct 2025 15:48:34 +0000 Manifest next update: Tue 28 Oct 2025 11:52:34 +0000 Files and hashes: 1: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (hash: 4enywTReuztkAZA8QfDVVO/DSjhDY+9zSMoXxSl8TDU=) 2: 3133322e3235352e362e302f32342d3234203d3e20323633363937.roa (hash: wXk1gBsCKAVBhA0HEaOwZW0Hk29YTL096/qFnG/gfRM=) 3: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl (hash: mU0hkjdQ7txXWgae/nZEDIQyeZKBDuSzEbLSljl7e8U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:26:43:79:2c:f0:f9:f9:83:db:fb:0d:d1:f5:db:38:89:80:86:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498 Validity Not Before: Oct 22 15:48:34 2025 GMT Not After : Oct 28 11:52:34 2025 GMT Subject: CN=D2C6E02C9F7F35206E567957F341422F7CD61709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:36:0e:3d:25:d2:88:0c:1b:2d:22:94:ff: 4c:0f:57:cc:1c:9e:54:13:23:cd:f2:6b:ab:ad:cb: b9:22:b8:fb:e0:27:ea:9e:21:d9:e1:7c:d7:b6:f3: bb:2c:9a:5a:3f:29:8c:80:fa:10:58:de:91:45:92: 37:b5:4d:9b:5e:43:c1:b1:f7:6b:7d:a3:de:61:1e: 6a:74:21:f8:7e:79:ed:29:89:6b:f5:c5:89:0e:b8: 58:3a:47:cc:5f:43:69:4e:2e:49:72:f2:c4:13:b3: 9a:88:e4:d1:85:2f:27:91:a9:48:c3:52:09:5d:a8: d9:cd:3e:c8:64:24:98:40:9c:e5:de:bb:db:f2:28: 72:cc:7f:cf:4e:6d:dc:fb:e7:02:70:c1:8c:b4:f4: 99:75:46:0f:53:c1:e2:2b:25:08:b3:23:cc:6c:3e: 77:72:7f:64:1c:be:57:4b:a1:11:7b:8d:8a:c4:f9: ee:f5:8c:8b:46:aa:30:90:fe:fc:90:06:1c:e2:1e: ec:61:42:3d:57:38:e9:bf:db:b5:3c:d5:2a:3b:0f: bb:f5:f4:62:69:dd:9d:eb:6d:1c:c1:09:dc:25:67: e0:b0:b4:8d:5b:9f:39:d1:14:8f:8d:f1:2c:63:f8: 9f:e1:3d:f2:3b:de:1e:81:9b:5a:d5:5d:32:b4:73: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C6:E0:2C:9F:7F:35:20:6E:56:79:57:F3:41:42:2F:7C:D6:17:09 X509v3 Authority Key Identifier: keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:00:18:06:56:5f:2d:74:a1:a7:c6:ba:ee:1b:b5:43:dd:75: 5c:1c:e1:31:21:9e:9f:40:85:5c:9d:f7:96:3b:16:e5:a1:55: 8a:15:10:c6:f1:df:bb:64:11:9f:a4:bf:58:fb:49:e3:16:50: 60:dc:ad:0a:a3:64:7b:a1:88:37:aa:0a:eb:14:30:d7:6f:c8: ce:26:b6:b6:bb:6a:e2:72:3b:c4:21:1e:a5:28:f8:86:d3:c8: 19:de:3c:8f:c7:e1:bf:06:af:6a:41:d9:91:3b:36:22:33:13: 99:76:3e:65:5a:5c:cc:bc:10:2d:22:ed:e3:ba:26:76:17:2d: 87:ce:9d:00:45:33:86:1f:2b:43:ad:72:13:11:ff:2c:ae:a3: 03:ee:d2:32:97:62:e3:98:27:cf:5c:32:c3:37:83:c0:bb:56: 33:9b:e0:c0:11:c0:78:6d:ed:a7:f3:52:06:1a:05:5a:77:91: ae:64:3c:82:01:0a:f9:6b:cc:af:71:eb:93:7d:2b:9a:af:bb: 8f:39:9d:37:fa:e8:ab:bd:2b:ee:da:d6:7e:12:cf:0a:90:a9: 8b:4e:ef:84:d0:29:c8:ca:df:4c:8d:68:5f:bf:a8:5b:1d:ca: 5a:5d:6f:a6:33:84:b1:80:fd:a5:37:52:3a:18:87:3b:b3:9d: f0:23:9e:31 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSCZDeSzw+fmD2/sN0fXbOImAhjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxMjNBRThDOUZERUQ0NkU1RjdEM0I0ODg3ODg1MUUx RThCNzQ5ODAeFw0yNTEwMjIxNTQ4MzRaFw0yNTEwMjgxMTUyMzRaMDMxMTAvBgNV BAMTKEQyQzZFMDJDOUY3RjM1MjA2RTU2Nzk1N0YzNDE0MjJGN0NENjE3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkjYOPSXSiAwbLSKU/0wPV8wc nlQTI83ya6uty7kiuPvgJ+qeIdnhfNe287ssmlo/KYyA+hBY3pFFkje1TZteQ8Gx 92t9o95hHmp0Ifh+ee0piWv1xYkOuFg6R8xfQ2lOLkly8sQTs5qI5NGFLyeRqUjD UgldqNnNPshkJJhAnOXeu9vyKHLMf89Obdz75wJwwYy09Jl1Rg9TweIrJQizI8xs Pndyf2QcvldLoRF7jYrE+e71jItGqjCQ/vyQBhziHuxhQj1XOOm/27U81So7D7v1 9GJp3Z3rbRzBCdwlZ+CwtI1bnznRFI+N8Sxj+J/hPfI73h6Bm1rVXTK0c2BlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0sbgLJ9/NSBuVnlX80FCL3zWFwkwHwYDVR0j BBgwFoAUDRI66Mn97Ubl99O0iHiFHh6LdJgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CM0QzOTlDM0I3NzYyMjQwRDMzQzZENEYzRjIxM0E2NkUw NjFBQ0FFMjc4QjQ0MTUwREMyNEM5NzhDMDBFMEY4LzAvMEQxMjNBRThDOUZERUQ0 NkU1RjdEM0I0ODg3ODg1MUUxRThCNzQ5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDEyM0FFOEM5RkRFRDQ2RTVG N0QzQjQ4ODc4ODUxRTFFOEI3NDk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjNEMzk5QzNCNzc2MjI0MEQzM0M2RDRGM0YyMTNBNjZFMDYxQUNBRTI3 OEI0NDE1MERDMjRDOTc4QzAwRTBGOC8wLzBEMTIzQUU4QzlGREVENDZFNUY3RDNC NDg4Nzg4NTFFMUU4Qjc0OTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaABgGVl8tdKGnxrruG7VD3XVc HOExIZ6fQIVcnfeWOxbloVWKFRDG8d+7ZBGfpL9Y+0njFlBg3K0Ko2R7oYg3qgrr FDDXb8jOJra2u2ricjvEIR6lKPiG08gZ3jyPx+G/Bq9qQdmROzYiMxOZdj5lWlzM vBAtIu3juiZ2Fy2Hzp0ARTOGHytDrXITEf8srqMD7tIyl2LjmCfPXDLDN4PAu1Yz m+DAEcB4be2n81IGGgVad5GuZDyCAQr5a8yvceuTfSuar7uPOZ03+uirvSvu2tZ+ Es8KkKmLTu+E0CnIyt9MjWhfv6hbHcpaXW+mM4SxgP2lN1I6GIc7s53wI54x -----END CERTIFICATE-----Generated at Wed Oct 22 18:43:13 2025 by rpki-client