$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft File: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json) Hash identifier: DuGS3sXK5D51rY3ktJqmJithEAdPiu7KRLm13waDZM0= Subject key identifier: 96:25:3F:50:68:A7:59:5F:F4:C5:B4:1B:9D:84:BE:5F:FE:8F:36:D2 Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A Certificate issuer: /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A Certificate serial: 31DBC3959789B31EE9A5801B64E2B868D7D2C409 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft Manifest number: 0137 Signing time: Fri 31 Oct 2025 02:04:20 +0000 Manifest this update: Fri 31 Oct 2025 01:59:20 +0000 Manifest next update: Wed 05 Nov 2025 17:34:20 +0000 Files and hashes: 1: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: HN6UpAOBFqqfg2gwL4pZ20HlcViH2AJsXmYHgG/N0FE=) 2: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: 4zBv1tQbc4XDcDfs3wAb9HYNQSh+NTSJTdcNQ5zF6OA=) 3: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: wsO0hgTtuuQvAYC72J3jazl1/BtkkYzhIpuBnyoLj2w=) 4: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: rYZb4iJPvLD48DXR2HMXMHWJZNKHF3nVf03MhYz16WM=) 5: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: cqbVZiWp5CmZDOkbVxT/fYs85Y9wjbS/MZnP0Z6WQc0=) 6: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: ltmWI9h4QzLb1beDrfNlEL4sNrMAbCe6RIciFmQe1II=) 7: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: 8DSvH0bx8+mrRuK0l0Xa7OZQNmjEdgLFHgRTRoU/+kI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:db:c3:95:97:89:b3:1e:e9:a5:80:1b:64:e2:b8:68:d7:d2:c4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A Validity Not Before: Oct 31 01:59:20 2025 GMT Not After : Nov 5 17:34:20 2025 GMT Subject: CN=96253F5068A7595FF4C5B41B9D84BE5FFE8F36D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:34:da:6f:cb:d8:9d:57:dd:b5:b0:bd:25: 15:51:69:bf:64:95:6f:20:65:71:e4:53:1d:64:40: a0:ac:93:d4:85:45:ac:46:bd:46:6e:0d:4b:d9:67: f2:d3:aa:de:1e:3b:58:b2:91:a2:5b:dc:34:54:f1: 59:4f:81:67:80:9d:7f:b1:17:65:47:2f:b9:47:aa: 76:81:c4:86:f9:d9:08:5c:2d:6a:89:3e:00:31:3b: 86:33:0a:2f:30:77:86:1a:42:e7:18:a5:a5:d9:80: 83:b8:51:6b:1a:d4:0b:6f:4a:1e:ea:29:07:14:75: 09:29:bb:59:25:28:97:54:03:a9:1d:53:d9:ed:d3: 51:93:58:06:08:f3:45:d1:08:0e:4f:b3:7b:4f:e4: ea:71:fd:51:0e:e3:32:b6:1c:b4:b9:bc:ce:b3:d5: c8:cc:29:a7:d7:8d:03:a4:2a:0f:c6:09:ca:18:9d: 58:3c:d2:c7:6d:fd:7b:bb:74:1c:ab:13:b7:f5:9c: 37:35:1a:e1:c3:d6:70:d4:95:e1:de:af:87:b3:e8: 09:19:d0:80:d0:06:47:53:70:05:e2:ec:95:cb:ea: 6f:ef:55:ab:af:e9:af:2f:64:76:f6:fa:9d:4b:3e: 19:f2:c0:42:07:be:a1:8c:f0:ad:24:78:6d:4f:f0: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:25:3F:50:68:A7:59:5F:F4:C5:B4:1B:9D:84:BE:5F:FE:8F:36:D2 X509v3 Authority Key Identifier: keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:36:23:80:d3:5c:41:8a:86:9f:b1:a3:f5:7b:30:9e:71:1e: 87:30:4f:84:57:6a:f6:1b:f3:22:0f:e9:db:b4:6f:d9:ba:b5: 85:e7:f6:e8:5e:fc:1c:61:15:fb:c1:6a:0b:71:d6:fe:47:0d: 94:e5:94:4a:af:2d:64:83:67:3b:4b:b6:e2:99:19:11:d7:dd: 73:21:44:6a:23:cf:9a:d9:1d:a6:74:e2:0f:1d:b7:fa:c1:f2: fc:de:7a:9f:80:91:c1:ad:7c:74:b6:67:9a:c7:fa:35:61:dd: 83:f1:94:01:52:d3:0d:ea:42:a2:71:58:86:eb:c2:9e:e5:ce: 56:30:e0:1f:38:6e:f7:e9:32:3d:13:4c:b9:cc:6e:72:23:96: be:40:8d:52:03:d7:c3:50:33:0c:78:02:f7:89:3d:12:e1:b3: 9e:4a:e8:2d:7a:64:6a:59:04:9d:67:f7:b9:5c:e8:6d:35:96: 9d:44:27:89:e5:08:da:08:e1:a4:d6:3b:27:af:60:f6:8d:bf: 7a:31:9d:60:05:51:33:ea:83:ad:06:89:d6:87:60:8b:5d:ec: dc:79:b8:40:a7:a5:c8:57:2b:42:2d:1c:e9:9c:39:05:e6:85: bd:8e:ab:08:fc:dd:fc:c8:18:a6:01:10:7d:ea:d0:7e:20:ab: 25:76:cf:0d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMdvDlZeJsx7ppYAbZOK4aNfSxAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG ODVEQjUyQTAeFw0yNTEwMzEwMTU5MjBaFw0yNTExMDUxNzM0MjBaMDMxMTAvBgNV BAMTKDk2MjUzRjUwNjhBNzU5NUZGNEM1QjQxQjlEODRCRTVGRkU4RjM2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/TTab8vYnVfdtbC9JRVRab9k lW8gZXHkUx1kQKCsk9SFRaxGvUZuDUvZZ/LTqt4eO1iykaJb3DRU8VlPgWeAnX+x F2VHL7lHqnaBxIb52QhcLWqJPgAxO4YzCi8wd4YaQucYpaXZgIO4UWsa1AtvSh7q KQcUdQkpu1klKJdUA6kdU9nt01GTWAYI80XRCA5Ps3tP5Opx/VEO4zK2HLS5vM6z 1cjMKafXjQOkKg/GCcoYnVg80sdt/Xu7dByrE7f1nDc1GuHD1nDUleHer4ez6AkZ 0IDQBkdTcAXi7JXL6m/vVauv6a8vZHb2+p1LPhnywEIHvqGM8K0keG1P8CFBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUliU/UGinWV/0xbQbnYS+X/6PNtIwHwYDVR0j BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4 NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1 OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzg1QkYzOEZBNDM4RjRGODcyNDU4RUQz NjQyM0QxQUE3Rjg1REI1MkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxNiOA01xBioafsaP1ezCecR6H ME+EV2r2G/MiD+nbtG/ZurWF5/boXvwcYRX7wWoLcdb+Rw2U5ZRKry1kg2c7S7bi mRkR191zIURqI8+a2R2mdOIPHbf6wfL83nqfgJHBrXx0tmeax/o1Yd2D8ZQBUtMN 6kKicViG68Ke5c5WMOAfOG736TI9E0y5zG5yI5a+QI1SA9fDUDMMeAL3iT0S4bOe SugtemRqWQSdZ/e5XOhtNZadRCeJ5QjaCOGk1jsnr2D2jb96MZ1gBVEz6oOtBonW h2CLXezcebhAp6XIVytCLRzpnDkF5oW9jqsI/N38yBimARB96tB+IKslds8N -----END CERTIFICATE-----Generated at Fri Oct 31 18:09:49 2025 by rpki-client