$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft File: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json) Hash identifier: 3Ot6uYGPs8KZe7s03fU6ZanIDwiW4ZO2Wvht4XLTc7Y= Subject key identifier: 31:E4:E4:DF:64:F8:30:F9:75:2C:FB:37:93:DC:99:61:69:A4:B0:AF Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A Certificate issuer: /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A Certificate serial: 42D2F070C6F8DCBA20F1915B8FFD3BE1599C5E05 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft Manifest number: 013E Signing time: Wed 12 Nov 2025 22:29:59 +0000 Manifest this update: Wed 12 Nov 2025 22:24:59 +0000 Manifest next update: Tue 18 Nov 2025 11:02:59 +0000 Files and hashes: 1: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: rYZb4iJPvLD48DXR2HMXMHWJZNKHF3nVf03MhYz16WM=) 2: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: HN6UpAOBFqqfg2gwL4pZ20HlcViH2AJsXmYHgG/N0FE=) 3: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: 8DSvH0bx8+mrRuK0l0Xa7OZQNmjEdgLFHgRTRoU/+kI=) 4: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: wsO0hgTtuuQvAYC72J3jazl1/BtkkYzhIpuBnyoLj2w=) 5: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: MOTkEo54jFXWs+LeLnYhmZP75g8ulpj3G+V/77OdmFY=) 6: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: cqbVZiWp5CmZDOkbVxT/fYs85Y9wjbS/MZnP0Z6WQc0=) 7: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: ltmWI9h4QzLb1beDrfNlEL4sNrMAbCe6RIciFmQe1II=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Nov 2025 23:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d2:f0:70:c6:f8:dc:ba:20:f1:91:5b:8f:fd:3b:e1:59:9c:5e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A Validity Not Before: Nov 12 22:24:59 2025 GMT Not After : Nov 18 11:02:59 2025 GMT Subject: CN=31E4E4DF64F830F9752CFB3793DC996169A4B0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ff:49:3e:07:c7:73:83:00:55:ae:24:9e:ea: ab:69:2d:d9:2e:3b:55:83:ca:fb:88:05:6b:dd:cb: 12:7a:e9:a1:c7:3b:d1:19:7f:31:22:82:f2:1f:d8: 61:91:57:b9:4c:5a:dd:ef:7c:e6:97:6e:fa:1c:8c: e4:7f:53:07:80:f0:64:0b:03:9d:92:e5:42:b1:51: 04:a9:6f:3b:95:06:5d:4e:0e:0e:e1:05:5f:b7:b4: 7d:bd:9b:3d:77:17:ce:7b:17:40:99:69:f0:49:4b: f6:93:07:7e:e4:a1:1a:41:b8:4b:9c:f1:dc:9f:13: 1d:87:d7:01:ff:2a:33:43:a0:7e:f1:86:c8:f0:43: a2:9e:fd:01:48:de:9f:4f:c5:d6:d7:37:d0:7c:f2: b1:2d:14:df:e1:58:79:d8:57:da:27:73:b2:55:d8: a7:d2:ee:2f:9f:8a:a7:2c:0c:26:1f:e0:d7:90:4b: af:5e:2d:79:bc:de:0b:8e:91:47:e5:f4:38:1d:e3: 31:b8:97:2b:b4:52:a4:78:41:a9:17:37:83:3d:4b: 6c:f5:67:e2:e5:59:b4:2a:78:53:63:5a:43:f3:89: 85:6f:b2:fe:33:70:b9:cc:22:73:48:d0:3b:75:d5: 73:23:ba:83:ff:60:29:99:17:da:1a:04:db:bd:2b: 9e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E4:E4:DF:64:F8:30:F9:75:2C:FB:37:93:DC:99:61:69:A4:B0:AF X509v3 Authority Key Identifier: keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fa:a8:91:a3:58:66:c9:f5:24:2e:56:b7:ec:b6:bb:17:f4: 30:a0:07:88:1b:42:89:e0:99:c1:b3:03:05:ca:0b:82:03:20: b9:ea:d5:71:63:95:e0:2e:96:81:17:e1:5f:46:2f:26:17:10: 2d:50:71:e7:67:09:09:83:be:a8:97:9f:40:72:36:84:d7:eb: 49:9b:28:ed:b2:cb:8b:2d:4a:ad:11:40:28:15:b2:38:9e:ef: 39:e4:99:1f:ce:fd:3e:ee:67:7a:13:a3:11:07:ff:4b:92:4e: bc:ae:db:c8:76:18:68:01:08:38:20:90:5e:2c:50:37:31:9a: cc:04:cf:51:3a:99:17:29:21:f9:98:42:80:67:31:75:87:2e: 6e:d4:92:7b:5a:4a:6a:e3:4b:31:75:df:82:dd:c7:cb:50:53: 8a:0c:c3:54:b9:82:8e:0d:a4:38:78:08:c1:bc:4d:bc:3a:24: 4e:75:c3:48:85:9d:71:4e:cf:e1:e2:cd:27:88:95:f5:f7:4a: 59:f2:7f:1d:23:3e:c4:71:79:67:b6:74:bf:79:b3:e8:cf:ed: 37:a4:50:71:82:5c:7d:45:4e:83:3d:cd:f4:77:8a:69:18:c8: 06:91:9f:1f:6e:1d:f0:01:fc:e3:ad:69:52:2f:08:a2:1e:a6: bd:bf:f3:b8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQtLwcMb43Log8ZFbj/074VmcXgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG ODVEQjUyQTAeFw0yNTExMTIyMjI0NTlaFw0yNTExMTgxMTAyNTlaMDMxMTAvBgNV BAMTKDMxRTRFNERGNjRGODMwRjk3NTJDRkIzNzkzREM5OTYxNjlBNEIwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/0k+B8dzgwBVriSe6qtpLdku O1WDyvuIBWvdyxJ66aHHO9EZfzEigvIf2GGRV7lMWt3vfOaXbvocjOR/UweA8GQL A52S5UKxUQSpbzuVBl1ODg7hBV+3tH29mz13F857F0CZafBJS/aTB37koRpBuEuc 8dyfEx2H1wH/KjNDoH7xhsjwQ6Ke/QFI3p9PxdbXN9B88rEtFN/hWHnYV9onc7JV 2KfS7i+fiqcsDCYf4NeQS69eLXm83guOkUfl9Dgd4zG4lyu0UqR4QakXN4M9S2z1 Z+LlWbQqeFNjWkPziYVvsv4zcLnMInNI0Dt11XMjuoP/YCmZF9oaBNu9K55XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMeTk32T4MPl1LPs3k9yZYWmksK8wHwYDVR0j BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4 NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1 OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzg1QkYzOEZBNDM4RjRGODcyNDU4RUQz NjQyM0QxQUE3Rjg1REI1MkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ+qiRo1hmyfUkLla37La7F/Qw oAeIG0KJ4JnBswMFyguCAyC56tVxY5XgLpaBF+FfRi8mFxAtUHHnZwkJg76ol59A cjaE1+tJmyjtssuLLUqtEUAoFbI4nu855Jkfzv0+7md6E6MRB/9Lkk68rtvIdhho AQg4IJBeLFA3MZrMBM9ROpkXKSH5mEKAZzF1hy5u1JJ7Wkpq40sxdd+C3cfLUFOK DMNUuYKODaQ4eAjBvE28OiROdcNIhZ1xTs/h4s0niJX190pZ8n8dIz7EcXlntnS/ ebPoz+03pFBxglx9RU6DPc30d4ppGMgGkZ8fbh3wAfzjrWlSLwiiHqa9v/O4 -----END CERTIFICATE-----Generated at Fri Nov 14 17:45:11 2025 by rpki-client