$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft File: ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft (raw, json) Hash identifier: ed10VDImb7E/CLI7Gqt/XMLpPL97GLhIuExpIC4APT8= Subject key identifier: AF:2D:01:94:D6:1F:65:CC:9A:9E:BB:C1:5B:36:F1:21:39:15:7D:8C Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37 Certificate issuer: /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137 Certificate serial: 226D8FE8AF6F8C934D21EF42439DE620ED431766 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft Manifest number: 0132 Signing time: Sat 01 Nov 2025 21:17:59 +0000 Manifest this update: Sat 01 Nov 2025 21:12:59 +0000 Manifest next update: Fri 07 Nov 2025 12:07:59 +0000 Files and hashes: 1: ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl (hash: LbgRl2mW3JfN+b94qlsugHmBmbG9UPR3OS6sV0hrUq0=) 2: 323830333a363261303a3a2f33322d3634203d3e20323636383534.roa (hash: kSQiTmxSVwDeobrKEOWHpINXRKId/q/CFCwSfzJ13sc=) 3: 34352e3233392e36302e302f32322d3234203d3e20323636383534.roa (hash: JHiHXiO6qeu5XX943d69nnW0YRGSS4CfGS5Sann83pM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 12:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6d:8f:e8:af:6f:8c:93:4d:21:ef:42:43:9d:e6:20:ed:43:17:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137 Validity Not Before: Nov 1 21:12:59 2025 GMT Not After : Nov 7 12:07:59 2025 GMT Subject: CN=AF2D0194D61F65CC9A9EBBC15B36F12139157D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:6f:40:5f:e0:d3:ff:c0:4e:1d:7a:56:3e: 72:02:78:1f:0d:4c:cf:95:6c:e3:7e:18:aa:fe:2c: 30:6d:90:d0:98:69:41:33:db:ee:54:2b:9e:f7:d7: f7:02:e1:d1:ef:c1:d6:ec:73:c7:42:d4:14:cc:4f: b5:09:b8:77:87:cd:e0:54:c4:aa:c5:b5:f3:9a:eb: 86:d3:67:a7:81:4d:e4:3e:8c:08:19:40:67:e1:bb: 3f:bb:b6:ff:d6:11:51:f3:67:a5:e5:2a:06:f2:3f: 81:32:c4:55:32:6b:3b:88:bc:3e:5e:f6:dd:9b:ca: 6e:66:28:b5:94:29:eb:8f:d0:bd:ca:49:c6:60:47: 4a:8d:74:6d:9f:cc:c1:c7:44:6e:a9:6d:93:98:3b: b3:9c:ca:ac:13:4a:62:7c:e4:d7:4d:f4:3b:af:3e: d1:f3:be:0a:9b:2a:9f:95:c9:7a:62:93:23:49:d6: bb:89:51:54:d9:4a:83:05:aa:df:a0:92:be:83:8d: 23:54:f3:eb:c5:42:a0:5d:c4:46:ad:76:0e:f2:93: 56:7e:6b:73:77:12:6a:f4:a0:e0:e7:f4:ef:d8:64: 99:c7:ce:e7:3c:65:18:45:b4:2b:e2:46:a2:86:42: 97:62:b0:2a:e9:3e:fe:cf:9c:27:4e:c9:8f:80:ab: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2D:01:94:D6:1F:65:CC:9A:9E:BB:C1:5B:36:F1:21:39:15:7D:8C X509v3 Authority Key Identifier: keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6c:ce:b0:f3:1e:8f:89:9b:a2:52:cd:d2:ee:95:0b:a4:96: f0:9d:da:2d:29:e5:4a:ac:54:eb:d4:7a:db:e2:4f:fe:5f:6f: aa:fd:6e:3a:94:86:c9:0e:a0:32:dd:30:81:70:58:44:b8:a9: 41:6b:ab:1f:52:e8:03:02:f4:3b:43:57:0a:b5:ad:ec:d5:ec: 3b:89:09:14:a8:e7:ad:e9:e9:81:8f:a2:49:8f:ff:48:bf:38: b7:29:cd:10:e0:f2:28:5d:7b:6c:8f:e6:9b:1e:2b:9e:39:ea: 04:ab:22:6f:6e:b3:08:33:f1:bb:a0:cf:9a:d0:f0:74:93:d7: de:30:66:7a:d5:ce:a3:20:98:1c:88:36:30:5b:69:8a:ac:ee: 87:b2:7c:76:cc:33:40:e7:ab:d0:df:ba:6e:92:31:83:a3:36: 35:db:73:84:75:f6:53:65:73:17:85:52:8e:5f:a6:a7:5b:6b: dd:81:a5:bc:ac:c2:b7:01:26:1e:ab:43:fe:38:1c:66:92:55: 2e:42:6a:cc:25:35:cf:ce:0b:99:26:67:bb:f0:2e:59:1f:4e: 2a:d0:7e:e4:73:66:a9:8a:2c:a5:f5:08:8d:a0:93:54:e4:e5: f9:06:fd:6d:51:a3:3e:dc:74:fc:4c:c5:db:86:66:ac:97:6f: f2:de:e0:e1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIm2P6K9vjJNNIe9CQ53mIO1DF2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURBMjA3REQxRjIzRDA0NjdDNjdFNkE0MEFEN0Y3MzU5 Nzg1QTEzNzAeFw0yNTExMDEyMTEyNTlaFw0yNTExMDcxMjA3NTlaMDMxMTAvBgNV BAMTKEFGMkQwMTk0RDYxRjY1Q0M5QTlFQkJDMTVCMzZGMTIxMzkxNTdEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkwW9AX+DT/8BOHXpWPnICeB8N TM+VbON+GKr+LDBtkNCYaUEz2+5UK5731/cC4dHvwdbsc8dC1BTMT7UJuHeHzeBU xKrFtfOa64bTZ6eBTeQ+jAgZQGfhuz+7tv/WEVHzZ6XlKgbyP4EyxFUyazuIvD5e 9t2bym5mKLWUKeuP0L3KScZgR0qNdG2fzMHHRG6pbZOYO7OcyqwTSmJ85NdN9Duv PtHzvgqbKp+VyXpikyNJ1ruJUVTZSoMFqt+gkr6DjSNU8+vFQqBdxEatdg7yk1Z+ a3N3Emr0oODn9O/YZJnHzuc8ZRhFtCviRqKGQpdisCrpPv7PnCdOyY+Aq9cvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUry0BlNYfZcyanrvBWzbxITkVfYwwHwYDVR0j BBgwFoAUraIH3R8j0EZ8Z+akCtf3NZeFoTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOEM3QUJCOUI2QzIyOTc1NjE2MjQ4QzQ4QjlFODM0NjYz M0MzMzVDMEQ2NjU4MTE2RTUyOEU2MEQ4N0RFNjYyLzAvQURBMjA3REQxRjIzRDA0 NjdDNjdFNkE0MEFEN0Y3MzU5Nzg1QTEzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BREEyMDdERDFGMjNEMDQ2N0M2 N0U2QTQwQUQ3RjczNTk3ODVBMTM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzhDN0FCQjlCNkMyMjk3NTYxNjI0OEM0OEI5RTgzNDY2MzNDMzM1QzBE NjY1ODExNkU1MjhFNjBEODdERTY2Mi8wL0FEQTIwN0REMUYyM0QwNDY3QzY3RTZB NDBBRDdGNzM1OTc4NUExMzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVbM6w8x6PiZuiUs3S7pULpJbw ndotKeVKrFTr1Hrb4k/+X2+q/W46lIbJDqAy3TCBcFhEuKlBa6sfUugDAvQ7Q1cK ta3s1ew7iQkUqOet6emBj6JJj/9Ivzi3Kc0Q4PIoXXtsj+abHiueOeoEqyJvbrMI M/G7oM+a0PB0k9feMGZ61c6jIJgciDYwW2mKrO6Hsnx2zDNA56vQ37pukjGDozY1 23OEdfZTZXMXhVKOX6anW2vdgaW8rMK3ASYeq0P+OBxmklUuQmrMJTXPzguZJme7 8C5ZH04q0H7kc2apiiyl9QiNoJNU5OX5Bv1tUaM+3HT8TMXbhmasl2/y3uDh -----END CERTIFICATE-----Generated at Tue Nov 4 09:08:32 2025 by rpki-client