$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft File: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft (raw, json) Hash identifier: MByoyqDwYZ/m7HPPiP7s+ACa7LiK6lyuN8NDvs7O5OY= Subject key identifier: E8:E4:36:06:48:14:D8:E2:8F:06:C9:B0:F5:23:44:82:47:E9:31:50 Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 Certificate issuer: /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Certificate serial: 7D0C3E601DFE59503E3563B378960628A9B77AA6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft Manifest number: 0129 Signing time: Tue 21 Oct 2025 16:52:44 +0000 Manifest this update: Tue 21 Oct 2025 16:47:44 +0000 Manifest next update: Sun 26 Oct 2025 10:05:44 +0000 Files and hashes: 1: 34352e3233322e39322e302f32322d3234203d3e203532333431.roa (hash: NC3RwdVt5UqW2/N1ehB2fy1qKcsjAb3wdsWcCgiOjWg=) 2: 323830333a336232303a3a2f33322d3438203d3e203532333431.roa (hash: fThQs6XPP9GBXIx/GQcX6pB6oahUwiln/3+wrqw737c=) 3: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl (hash: pgQBh6XFH2cWE7v7WJjI/5Aj/wYtPEE+r0IBMlqXSSI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 26 Oct 2025 10:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0c:3e:60:1d:fe:59:50:3e:35:63:b3:78:96:06:28:a9:b7:7a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Validity Not Before: Oct 21 16:47:44 2025 GMT Not After : Oct 26 10:05:44 2025 GMT Subject: CN=E8E436064814D8E28F06C9B0F523448247E93150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:0d:d8:71:78:7f:26:06:16:d3:9b:13:a0: 07:4a:35:57:cc:b4:fb:ab:e7:ca:27:d0:e3:c6:a0: 19:ee:c9:c5:26:03:18:6a:c0:ad:95:c7:86:18:33: b6:b1:ac:84:6d:21:1d:72:d8:14:eb:ad:89:5f:50: 01:95:e3:e9:8f:ea:19:1d:2e:e1:8d:9a:0d:24:34: d0:f5:8c:98:82:a0:f6:a2:c6:f9:28:61:d8:64:11: 7f:32:39:d3:02:ea:a7:60:c4:14:61:6c:55:ef:ec: a8:f0:f4:f3:ec:69:5b:c5:d0:7a:00:e3:42:51:b7: 68:ed:84:86:40:59:f6:44:bd:a6:78:a8:cb:f1:94: 4a:42:a0:89:3d:8d:34:f5:53:9e:ea:0e:57:17:b3: de:c0:06:96:a4:6d:b3:09:fe:77:bc:ce:30:2d:84: 36:03:77:7c:46:f5:12:ba:e7:41:41:b9:a4:ff:b9: a6:80:86:92:15:65:2d:1c:01:90:49:f1:20:f1:fc: c0:ca:43:51:bf:51:98:7b:7a:fd:d0:e6:f0:6b:1f: 97:81:c4:f7:da:ad:06:af:13:22:c9:01:f5:cc:d4: 5f:1f:82:6c:6d:82:df:44:95:dc:ff:ac:24:83:c2: 57:73:26:61:4a:74:f5:f7:38:5a:86:9e:e9:97:52: 8f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E4:36:06:48:14:D8:E2:8F:06:C9:B0:F5:23:44:82:47:E9:31:50 X509v3 Authority Key Identifier: keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b8:76:b1:da:51:ba:6e:ef:a4:c5:3c:89:5b:ec:02:31:c3: d9:18:9d:aa:3d:4c:a7:06:27:21:55:de:e1:45:8f:38:16:c0: 75:5a:57:84:df:11:c7:5d:ca:13:ad:29:5a:31:fd:34:91:eb: ae:85:17:e0:94:7a:59:23:da:7a:03:1f:26:fc:34:41:fb:95: 20:5b:f4:96:d6:ad:9d:87:91:35:08:a7:97:fd:c2:f6:ce:ab: 63:cd:d0:95:38:c5:39:c0:2e:f7:44:ce:61:0f:e9:21:f3:95: a5:86:48:72:9d:48:4a:6b:a5:34:8b:23:20:f5:13:95:18:8d: 4a:c4:d9:79:b9:aa:b7:91:53:51:f8:7b:e5:4a:e6:c1:49:62: 15:d0:10:9f:2c:b1:f6:9e:9b:98:c7:7f:15:97:a0:5a:72:ac: 3c:99:77:77:ad:e4:3f:60:a0:69:5e:aa:be:ea:7c:91:cd:ef: 74:19:85:a8:32:0a:b4:1e:4b:42:8b:34:7f:d4:4f:cb:72:ea: c8:4a:3d:e0:87:6b:14:73:b4:6b:07:97:0a:63:2d:56:a7:c0: e0:05:6f:46:58:18:7a:4f:c1:77:e9:0e:06:21:80:17:77:ad: e2:25:5d:49:8a:9d:8d:11:6c:d6:89:14:7e:bd:9c:38:c5:c9: d3:cb:6d:3d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfQw+YB3+WVA+NWOzeJYGKKm3eqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4M0EzOEMxQjkyNkNENUYyRjk3NDFGOEFGRUU3QzMx NzlENjYwMzAeFw0yNTEwMjExNjQ3NDRaFw0yNTEwMjYxMDA1NDRaMDMxMTAvBgNV BAMTKEU4RTQzNjA2NDgxNEQ4RTI4RjA2QzlCMEY1MjM0NDgyNDdFOTMxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhQ3YcXh/JgYW05sToAdKNVfM tPur58on0OPGoBnuycUmAxhqwK2Vx4YYM7axrIRtIR1y2BTrrYlfUAGV4+mP6hkd LuGNmg0kNND1jJiCoPaixvkoYdhkEX8yOdMC6qdgxBRhbFXv7Kjw9PPsaVvF0HoA 40JRt2jthIZAWfZEvaZ4qMvxlEpCoIk9jTT1U57qDlcXs97ABpakbbMJ/ne8zjAt hDYDd3xG9RK650FBuaT/uaaAhpIVZS0cAZBJ8SDx/MDKQ1G/UZh7ev3Q5vBrH5eB xPfarQavEyLJAfXM1F8fgmxtgt9Eldz/rCSDwldzJmFKdPX3OFqGnumXUo+bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6OQ2BkgU2OKPBsmw9SNEgkfpMVAwHwYDVR0j BBgwFoAU3YOjjBuSbNXy+XQfiv7nwxedZgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjk1MTFFQkE5RTZCQ0NBMzlBMEM0MDdEQkVCRTNFRUYx RjEwMjZGRTQzNjZBNjgzMUUxQjkwNDM3MDY4ODZELzAvREQ4M0EzOEMxQjkyNkNE NUYyRjk3NDFGOEFGRUU3QzMxNzlENjYwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDgzQTM4QzFCOTI2Q0Q1RjJG OTc0MUY4QUZFRTdDMzE3OUQ2NjAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkI5NTExRUJBOUU2QkNDQTM5QTBDNDA3REJFQkUzRUVGMUYxMDI2RkU0 MzY2QTY4MzFFMUI5MDQzNzA2ODg2RC8wL0REODNBMzhDMUI5MjZDRDVGMkY5NzQx RjhBRkVFN0MzMTc5RDY2MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWuHax2lG6bu+kxTyJW+wCMcPZ GJ2qPUynBichVd7hRY84FsB1WleE3xHHXcoTrSlaMf00keuuhRfglHpZI9p6Ax8m /DRB+5UgW/SW1q2dh5E1CKeX/cL2zqtjzdCVOMU5wC73RM5hD+kh85WlhkhynUhK a6U0iyMg9ROVGI1KxNl5uaq3kVNR+HvlSubBSWIV0BCfLLH2npuYx38Vl6Bacqw8 mXd3reQ/YKBpXqq+6nyRze90GYWoMgq0HktCizR/1E/LcurISj3gh2sUc7RrB5cK Yy1Wp8DgBW9GWBh6T8F36Q4GIYAXd63iJV1Jip2NEWzWiRR+vZw4xcnTy209 -----END CERTIFICATE-----Generated at Wed Oct 22 11:40:50 2025 by rpki-client