$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft File: 99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft (raw, json) Hash identifier: R78xI1Rh7Wcihs7NCXaQ8A/8v1NXBwSYFFoJVLrgi+E= Subject key identifier: 18:EC:08:76:30:4C:71:34:10:B8:A0:6F:E7:C5:74:E6:64:2A:15:02 Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C Certificate issuer: /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C Certificate serial: 652D5281CB14370435B8C000BDB4F15DBCC08FA7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft Manifest number: 0138 Signing time: Mon 03 Nov 2025 13:16:42 +0000 Manifest this update: Mon 03 Nov 2025 13:11:42 +0000 Manifest next update: Sat 08 Nov 2025 11:59:42 +0000 Files and hashes: 1: 323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa (hash: 7z+6wyaAqeK8gV9myBMXmZHLCZuwjY9gqWJqfv/xIe4=) 2: 3230302e31342e3131362e302f32342d3234203d3e203532333134.roa (hash: YkyfFp5LZfnQcHslAN6Ws7Q0lYqX1IfjfoNa+VRsHLA=) 3: 323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa (hash: Wt6Jxc4wi6Mq35oXq57s49uJ9gt1DgSCbqpJQ4NarrY=) 4: 3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa (hash: nvN/gmc3yvZp7f7+19vhy+DTuti2rBAcYhIc+nT4HHo=) 5: 3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa (hash: FGWjwZVYmC9MXpGdci7iOLcp/kh9H0NFIWzVAL/FtzQ=) 6: 99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl (hash: puAo63tK1fY6tKdlCMdOyN9v4ha83v75OstBP92Qsyw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 11:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2d:52:81:cb:14:37:04:35:b8:c0:00:bd:b4:f1:5d:bc:c0:8f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C Validity Not Before: Nov 3 13:11:42 2025 GMT Not After : Nov 8 11:59:42 2025 GMT Subject: CN=18EC0876304C713410B8A06FE7C574E6642A1502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:61:cb:8c:fb:ae:4b:d5:3e:f1:c2:97:ac: ec:60:e1:e2:42:41:ab:fd:9f:84:0a:de:11:16:91: 6a:41:37:ac:cd:42:73:a1:ac:63:f0:67:4b:ca:5c: 12:ec:6a:8a:1b:1f:8c:b5:28:28:b2:58:d7:7a:f9: fb:4b:d1:33:4b:74:1e:59:75:ac:46:bf:b4:6b:b2: bf:12:2c:fb:0c:71:f3:b0:8c:c5:b8:7e:39:41:d0: fb:0b:2d:22:4f:f7:90:e4:66:b0:08:b0:a1:06:57: 54:66:8e:c5:65:c5:45:a7:72:b7:8f:98:7d:d8:17: 98:a6:f9:af:5f:06:6e:78:89:53:24:2f:2d:f6:42: c5:fc:37:a9:8e:75:e7:67:fd:9d:25:53:09:58:9f: 16:7b:35:54:b7:0d:38:27:c5:ce:66:d3:de:0d:96: 78:6e:16:03:4b:a8:e9:98:77:55:35:95:88:84:fc: eb:cb:60:44:5e:b5:60:6f:a4:9b:2f:f2:f5:a9:86: 9c:a6:e3:00:0a:11:f0:a2:f9:08:20:e8:16:89:2b: cd:95:0b:ef:b2:27:e8:e8:d3:0a:e1:a1:92:8b:16: 5e:89:aa:c2:b7:55:b9:2c:16:94:ad:7e:66:58:ea: 9d:0a:d3:9f:c5:fa:c5:e4:cb:16:28:7e:7d:26:3e: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EC:08:76:30:4C:71:34:10:B8:A0:6F:E7:C5:74:E6:64:2A:15:02 X509v3 Authority Key Identifier: keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ab:6d:07:2e:c9:c8:02:e6:69:ae:f9:57:12:cf:c2:45:37: 45:43:84:75:c0:31:cd:68:38:cd:8a:9f:05:a5:8d:5a:4c:fa: 5e:1b:85:a5:ca:87:e6:7e:7f:14:a5:2d:30:d1:5f:ab:2a:49: b7:12:eb:b5:c0:b2:7c:9b:00:36:94:ca:1a:84:0e:87:0d:1e: cf:9c:1c:97:af:f1:5e:0b:68:71:56:e3:95:84:43:c3:bd:99: b9:6d:61:9f:7d:71:8a:92:4e:a0:d3:11:f0:29:a5:08:5b:3a: f2:44:e8:1d:0e:1e:ce:64:b0:9c:ef:9e:73:b5:4b:1a:ab:ec: ee:80:3d:db:c9:ae:f9:d2:58:e2:f1:88:0b:1f:6c:32:0c:ff: 09:52:db:93:2c:d7:8b:12:44:47:1f:54:b2:02:7f:c1:1f:1e: f0:4d:e7:69:ac:5c:90:18:00:8c:10:98:60:d6:ab:90:25:ef: 81:74:9c:d5:d4:94:d0:f6:f5:52:2b:63:aa:73:eb:fc:c4:b9: 1e:87:2b:4d:6a:2f:48:c5:35:0c:3f:d2:13:fe:98:b3:2c:60: e5:c5:ad:c2:55:c1:b6:74:4b:3d:6f:f1:22:ff:50:2b:ea:58: eb:6d:6f:b7:46:8b:6c:e8:f5:5b:65:b0:cc:33:4d:98:c6:f5: 3a:5c:b9:a7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZS1SgcsUNwQ1uMAAvbTxXbzAj6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBNEI2NDVCQ0UxQTZGQTc0NkM4OUEzRjZFMjI4ODlG OEYyMDg4QzAeFw0yNTExMDMxMzExNDJaFw0yNTExMDgxMTU5NDJaMDMxMTAvBgNV BAMTKDE4RUMwODc2MzA0QzcxMzQxMEI4QTA2RkU3QzU3NEU2NjQyQTE1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRIWHLjPuuS9U+8cKXrOxg4eJC Qav9n4QK3hEWkWpBN6zNQnOhrGPwZ0vKXBLsaoobH4y1KCiyWNd6+ftL0TNLdB5Z daxGv7Rrsr8SLPsMcfOwjMW4fjlB0PsLLSJP95DkZrAIsKEGV1RmjsVlxUWncreP mH3YF5im+a9fBm54iVMkLy32QsX8N6mOdedn/Z0lUwlYnxZ7NVS3DTgnxc5m094N lnhuFgNLqOmYd1U1lYiE/OvLYERetWBvpJsv8vWphpym4wAKEfCi+Qgg6BaJK82V C++yJ+jo0wrhoZKLFl6JqsK3VbksFpStfmZY6p0K05/F+sXkyxYofn0mPi09AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGOwIdjBMcTQQuKBv58V05mQqFQIwHwYDVR0j BBgwFoAUmaS2Rbzhpvp0bImj9uIoifjyCIwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTRFMjA1OTg2NzREQzlEQTgwRTE3NkQ4MzVBRDI3MTY4 QzZDQjgwMjg5RTY0RTIxQzE2MTVCMzVFNTdBMUMwLzAvOTlBNEI2NDVCQ0UxQTZG QTc0NkM4OUEzRjZFMjI4ODlGOEYyMDg4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUE0QjY0NUJDRTFBNkZBNzQ2 Qzg5QTNGNkUyMjg4OUY4RjIwODhDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkE0RTIwNTk4Njc0REM5REE4MEUxNzZEODM1QUQyNzE2OEM2Q0I4MDI4 OUU2NEUyMUMxNjE1QjM1RTU3QTFDMC8wLzk5QTRCNjQ1QkNFMUE2RkE3NDZDODlB M0Y2RTIyODg5RjhGMjA4OEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5q20HLsnIAuZprvlXEs/CRTdF Q4R1wDHNaDjNip8FpY1aTPpeG4Wlyofmfn8UpS0w0V+rKkm3Euu1wLJ8mwA2lMoa hA6HDR7PnByXr/FeC2hxVuOVhEPDvZm5bWGffXGKkk6g0xHwKaUIWzryROgdDh7O ZLCc755ztUsaq+zugD3bya750lji8YgLH2wyDP8JUtuTLNeLEkRHH1SyAn/BHx7w TedprFyQGACMEJhg1quQJe+BdJzV1JTQ9vVSK2Oqc+v8xLkehytNai9IxTUMP9IT /pizLGDlxa3CVcG2dEs9b/Ei/1Ar6ljrbW+3Rots6PVbZbDMM02YxvU6XLmn -----END CERTIFICATE-----Generated at Tue Nov 4 18:26:08 2025 by rpki-client