$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft File: D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft (raw, json) Hash identifier: Nk8ZBoHbTNIBYiLvMpD9ZL5vKJTgd9i63Xor4Nroxuo= Subject key identifier: E8:89:83:E5:43:9A:C2:47:E5:2D:C3:53:38:A2:53:4D:3E:43:94:57 Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE Certificate issuer: /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE Certificate serial: 56A99593D785744D5A874C63FAE5842E1BA4AAB3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft Manifest number: 0130 Signing time: Sun 02 Nov 2025 09:04:45 +0000 Manifest this update: Sun 02 Nov 2025 08:59:45 +0000 Manifest next update: Fri 07 Nov 2025 16:33:45 +0000 Files and hashes: 1: 34352e3138392e3233332e302f32342d3234203d3e203130373533.roa (hash: 1DfrxIUcmFdLvx+0CYxYpFbtYC2tgWnePALDvqsz1OY=) 2: 34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa (hash: 5+0feaWnWVqOge2khHl2R9u7pQ02o9VCNk2gGX2DlsQ=) 3: D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl (hash: MxZolsz4+EfdHqa5hxKjJolAJaQnOJWRVMX3YYWuAIo=) 4: 34352e3138392e3233332e302f32342d3234203d3e20323639393135.roa (hash: zrbUrDsAcyNmxo8fdPCrK4CIjwGQFu1IQ6Lzczt1A5U=) 5: 34352e3138372e38392e302f32342d3234203d3e20323639393135.roa (hash: eH4mEzmSIlFH4LH2Sb1+aclqCYyUA34THwvryUcZUcU=) 6: 323830333a336365303a3a2f33322d3332203d3e20323639393135.roa (hash: EW5/U1SDjlIkCCd0SSMXKzhpnkPvbQgYu2Pg6zQD46s=) 7: 34352e3138392e3233322e302f32342d3234203d3e20323639393135.roa (hash: uQDnVHdtB0qXC0HOj6lYDQXopqo7nCO59AQFm9IVTJs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a9:95:93:d7:85:74:4d:5a:87:4c:63:fa:e5:84:2e:1b:a4:aa:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE Validity Not Before: Nov 2 08:59:45 2025 GMT Not After : Nov 7 16:33:45 2025 GMT Subject: CN=E88983E5439AC247E52DC35338A2534D3E439457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:ab:72:ef:dd:33:b6:25:12:22:bb:7f:07: fe:f5:0c:19:81:d8:85:2d:76:0c:21:1a:7d:d5:33: f3:cd:29:50:44:fb:e8:da:bf:75:90:0c:b2:bf:21: 5c:8c:1c:cb:09:c3:60:b8:23:f8:e1:8f:bd:9c:f5: f1:2f:75:89:c0:1c:42:82:09:5d:af:ca:c2:38:1a: 65:db:6e:c5:a2:5e:e4:2c:41:56:c2:ba:59:0c:44: f7:c6:81:a7:f7:1d:53:30:bc:65:9d:e1:21:57:00: fe:2d:cb:2d:9e:13:72:8d:52:24:b0:69:aa:0d:b8: 6d:f4:91:7f:1b:51:a6:60:fb:f5:0b:9c:a2:d1:fe: 60:10:22:ea:44:5d:06:b9:36:3f:ca:bc:bc:82:fc: d8:de:e2:ae:b4:f4:5b:17:f5:1c:6f:03:e3:f2:11: bf:fa:63:12:3f:ce:15:29:88:86:f4:56:c8:e0:6b: af:33:59:59:d7:27:41:ad:b3:f7:85:e1:50:7e:fe: b1:76:15:0f:19:4e:2a:b4:16:f1:a3:6d:f0:d6:f1: 28:07:d5:6a:27:e5:b2:6e:49:44:61:b8:c0:e2:9f: 72:35:48:9f:f9:32:bb:2f:fc:00:7d:0b:05:3b:00: ff:f5:db:5f:f3:ca:d6:ee:27:c6:4c:4b:b1:48:94: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:89:83:E5:43:9A:C2:47:E5:2D:C3:53:38:A2:53:4D:3E:43:94:57 X509v3 Authority Key Identifier: keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d9:0b:d4:97:2d:74:07:cc:15:0d:03:fc:b3:e0:66:4e:47: 68:12:34:e3:ac:64:e9:0f:f9:e0:85:5b:7a:8a:65:f5:04:f4: fa:a0:e2:7d:f6:d0:a2:1c:cf:a2:78:2b:95:5b:3f:d0:6c:bc: 77:11:1d:b0:3f:94:2b:a1:c8:c2:45:ee:6b:ae:05:de:47:a2: b7:aa:58:ba:f0:8e:50:cc:6b:9d:c6:05:a5:c3:a4:8c:bf:cb: 7c:4a:75:5f:1c:80:01:41:1c:5f:85:95:5d:4d:72:5c:05:3f: 98:8d:a9:34:38:fa:54:2e:1f:45:38:e8:c5:37:d1:0f:62:49: 55:e1:7e:8b:25:63:f8:00:32:61:48:e6:a7:cd:77:2c:d4:a8: ba:1f:5b:f8:54:7d:d0:ae:99:36:6c:97:d0:d4:3f:ac:d6:86: 1e:67:a9:b5:83:d6:20:53:9f:3e:d9:87:67:f2:44:4e:d6:12: 98:ad:b8:a6:3b:d3:25:0b:82:7c:c5:7c:27:c6:62:fa:04:66: e7:08:93:22:e8:ef:f0:da:b2:0d:ef:2e:78:ae:26:22:c1:06: 62:a8:28:b5:ee:0e:ec:a2:73:67:85:9a:75:4f:cd:f0:4a:61: a3:e0:65:28:1a:f1:0b:bc:9b:eb:92:5d:7f:90:e9:36:36:b1: ae:61:16:0f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVqmVk9eFdE1ah0xj+uWELhukqrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDMkM4MENCNTlDOEUzM0M3QkI0RUQxMEJFQTU3RTIx Q0U3NkNFRTAeFw0yNTExMDIwODU5NDVaFw0yNTExMDcxNjMzNDVaMDMxMTAvBgNV BAMTKEU4ODk4M0U1NDM5QUMyNDdFNTJEQzM1MzM4QTI1MzREM0U0Mzk0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwqty790ztiUSIrt/B/71DBmB 2IUtdgwhGn3VM/PNKVBE++jav3WQDLK/IVyMHMsJw2C4I/jhj72c9fEvdYnAHEKC CV2vysI4GmXbbsWiXuQsQVbCulkMRPfGgaf3HVMwvGWd4SFXAP4tyy2eE3KNUiSw aaoNuG30kX8bUaZg+/ULnKLR/mAQIupEXQa5Nj/KvLyC/Nje4q609FsX9RxvA+Py Eb/6YxI/zhUpiIb0Vsjga68zWVnXJ0Gts/eF4VB+/rF2FQ8ZTiq0FvGjbfDW8SgH 1Won5bJuSURhuMDin3I1SJ/5Mrsv/AB9CwU7AP/121/zytbuJ8ZMS7FIlD89AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6ImD5UOawkflLcNTOKJTTT5DlFcwHwYDVR0j BBgwFoAU18LIDLWcjjPHu07RC+pX4hznbO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQkUxREYxNDEwMkQyMjlEMkEzMkVGODMwOTI3RTAzQ0Q2 NDI5MDQ0RjY3RUQ4RTIzOUVGNjExNEI5Q0EyRkY2LzAvRDdDMkM4MENCNTlDOEUz M0M3QkI0RUQxMEJFQTU3RTIxQ0U3NkNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0MyQzgwQ0I1OUM4RTMzQzdC QjRFRDEwQkVBNTdFMjFDRTc2Q0VFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREJFMURGMTQxMDJEMjI5RDJBMzJFRjgzMDkyN0UwM0NENjQyOTA0NEY2 N0VEOEUyMzlFRjYxMTRCOUNBMkZGNi8wL0Q3QzJDODBDQjU5QzhFMzNDN0JCNEVE MTBCRUE1N0UyMUNFNzZDRUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAx2QvUly10B8wVDQP8s+BmTkdo EjTjrGTpD/nghVt6imX1BPT6oOJ99tCiHM+ieCuVWz/QbLx3ER2wP5QrocjCRe5r rgXeR6K3qli68I5QzGudxgWlw6SMv8t8SnVfHIABQRxfhZVdTXJcBT+Yjak0OPpU Lh9FOOjFN9EPYklV4X6LJWP4ADJhSOanzXcs1Ki6H1v4VH3Qrpk2bJfQ1D+s1oYe Z6m1g9YgU58+2Ydn8kRO1hKYrbimO9MlC4J8xXwnxmL6BGbnCJMi6O/w2rIN7y54 riYiwQZiqCi17g7sonNnhZp1T83wSmGj4GUoGvELvJvrkl1/kOk2NrGuYRYP -----END CERTIFICATE-----Generated at Sun Nov 2 20:59:53 2025 by rpki-client