$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft File: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft (raw, json) Hash identifier: 5cW51bgC4vSVxxQcZxJtHQ8zT4FAV/SqlgXCIZw9KNs= Subject key identifier: 29:7A:38:6B:C2:CA:ED:CF:32:82:E8:CA:E1:AC:E9:4A:8C:75:05:B4 Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD Certificate issuer: /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Certificate serial: 4CC7A4FAA3F2AF64777565A75EAA016F453E0656 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft Manifest number: 81 Signing time: Sat 25 Oct 2025 15:15:20 +0000 Manifest this update: Sat 25 Oct 2025 15:10:20 +0000 Manifest next update: Thu 30 Oct 2025 12:54:20 +0000 Files and hashes: 1: 323830333a643235303a3a2f33322d3438203d3e20323733313637.roa (hash: zqMMKCkFdouQccillLfonx6zoQUGUVMhftJE8TOMWWc=) 2: 323830333a643235303a3a2f33322d3438203d3e20323732383237.roa (hash: e58Gafs3SHJ2RbKcTBdQ4etki7t0Yu0X9IXpmL+ZrFM=) 3: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl (hash: gj8TGvgJT3qQbqB0w3c1iMj1JXizoS7TcNwgvCgxQrM=) 4: 323830333a643235303a3a2f33322d3438203d3e20323733313430.roa (hash: geoujJRGCj9IdFnQTVkXi07vvN0KssDDUghEY7PjuWI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c7:a4:fa:a3:f2:af:64:77:75:65:a7:5e:aa:01:6f:45:3e:06:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Validity Not Before: Oct 25 15:10:20 2025 GMT Not After : Oct 30 12:54:20 2025 GMT Subject: CN=297A386BC2CAEDCF3282E8CAE1ACE94A8C7505B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:75:86:76:ad:a8:10:08:4d:2b:b9:ea:52: e6:a7:2b:44:1b:89:4b:9f:95:97:78:8e:ea:7e:95: c4:c8:98:25:7f:8c:49:0a:e7:43:3d:33:73:68:c1: ea:5f:3c:00:4b:99:24:15:cd:22:49:c6:8f:75:e6: fa:b6:72:43:53:97:ae:05:3a:62:5b:73:75:7d:e2: 1c:80:cc:07:f8:c5:0b:a2:92:35:02:4e:f4:12:b4: a7:13:59:8c:91:82:74:77:df:bb:1d:2e:58:12:38: 78:3d:06:19:fd:f5:bd:d0:5b:f2:6f:09:50:ad:de: 91:0a:a4:bc:e1:ab:a2:4e:2a:8e:2c:f4:05:e4:9c: 69:13:00:15:22:70:9a:df:1c:da:e8:36:c6:ea:1c: f1:64:a8:28:37:65:e1:44:d4:00:c0:68:9a:c7:58: d1:c8:a4:2b:ab:3a:59:9a:30:36:00:c7:28:08:68: 32:5f:66:c7:f4:f1:64:f9:32:89:73:7a:c5:d2:a6: 8c:df:02:b9:d4:20:23:b3:45:f0:be:dc:9c:21:a3: a9:bd:cd:07:7f:f1:b3:31:12:01:9e:f3:82:d0:db: d8:c7:17:48:27:41:9b:52:4e:bf:48:b6:e4:c0:97: 12:9f:93:45:e2:60:c3:b0:2c:46:08:e0:15:4f:4d: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7A:38:6B:C2:CA:ED:CF:32:82:E8:CA:E1:AC:E9:4A:8C:75:05:B4 X509v3 Authority Key Identifier: keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ef:b5:68:78:7c:c5:0b:bf:13:4c:0e:06:40:b1:e7:08:45: 93:24:1a:95:c9:d4:9e:52:2a:cc:01:29:5d:be:30:d7:4b:82: de:bf:2e:25:b4:df:d2:bb:f7:46:51:f8:96:f4:c0:7b:20:f2: aa:b2:4c:ed:08:95:31:35:c6:0b:c0:3d:3b:ae:42:5f:b0:2b: 8d:47:5c:20:86:b0:52:dd:68:f5:ea:c0:20:94:b2:89:56:10: f3:d6:f4:53:1f:1a:ce:81:c5:e2:01:e5:40:22:29:10:6d:0f: 22:4b:88:e3:c4:42:a3:66:ac:4e:ec:6e:d5:7d:d4:ea:74:4d: 15:a1:78:d2:d2:81:9d:aa:d9:af:1c:4a:66:9b:77:08:20:8b: 84:a2:7e:47:87:de:87:48:c4:ad:a6:cc:10:55:e0:e7:d5:31: fd:e0:9c:70:c4:ae:58:6e:d8:82:09:68:19:09:14:17:9e:7d: 80:86:2d:f3:36:c1:d7:c7:c4:34:ba:d1:b4:0b:6a:73:a8:59: c8:15:b3:49:0b:2f:5e:4c:ca:17:b0:48:b5:fd:2e:0c:45:e3: 59:3d:ce:ee:05:78:64:df:69:76:2d:93:c1:d4:37:39:56:82: 73:3e:b5:19:4f:47:0b:be:b4:40:6d:a6:8a:9b:f2:ef:25:72: 9d:6e:05:ec -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTMek+qPyr2R3dWWnXqoBb0U+BlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD NzUwRENCRDAeFw0yNTEwMjUxNTEwMjBaFw0yNTEwMzAxMjU0MjBaMDMxMTAvBgNV BAMTKDI5N0EzODZCQzJDQUVEQ0YzMjgyRThDQUUxQUNFOTRBOEM3NTA1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0nWGdq2oEAhNK7nqUuanK0Qb iUuflZd4jup+lcTImCV/jEkK50M9M3NowepfPABLmSQVzSJJxo915vq2ckNTl64F OmJbc3V94hyAzAf4xQuikjUCTvQStKcTWYyRgnR337sdLlgSOHg9Bhn99b3QW/Jv CVCt3pEKpLzhq6JOKo4s9AXknGkTABUicJrfHNroNsbqHPFkqCg3ZeFE1ADAaJrH WNHIpCurOlmaMDYAxygIaDJfZsf08WT5MolzesXSpozfArnUICOzRfC+3Jwho6m9 zQd/8bMxEgGe84LQ29jHF0gnQZtSTr9ItuTAlxKfk0XiYMOwLEYI4BVPTf0xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKXo4a8LK7c8ygujK4azpSox1BbQwHwYDVR0j BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wL0Q0M0VBREU1QjhDRDZEQ0Q4MEY3MEZE NDZBNkQxQkY0Qzc1MERDQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK77VoeHzFC78TTA4GQLHnCEWT JBqVydSeUirMASldvjDXS4Levy4ltN/Su/dGUfiW9MB7IPKqskztCJUxNcYLwD07 rkJfsCuNR1wghrBS3Wj16sAglLKJVhDz1vRTHxrOgcXiAeVAIikQbQ8iS4jjxEKj ZqxO7G7VfdTqdE0VoXjS0oGdqtmvHEpmm3cIIIuEon5Hh96HSMStpswQVeDn1TH9 4JxwxK5YbtiCCWgZCRQXnn2Ahi3zNsHXx8Q0utG0C2pzqFnIFbNJCy9eTMoXsEi1 /S4MReNZPc7uBXhk32l2LZPB1Dc5VoJzPrUZT0cLvrRAbaaKm/LvJXKdbgXs -----END CERTIFICATE-----Generated at Sun Oct 26 11:31:52 2025 by rpki-client