$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft File: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft (raw, json) Hash identifier: yslAj1Os9K+rR7euWTrooMu4I9TsYTn6ga/W0gMnmWA= Subject key identifier: B8:05:64:07:49:90:42:71:C4:42:B8:F3:77:E6:CF:EA:14:8B:CC:33 Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Certificate serial: 3105149031DD4E028031B459BEF79EA0E8072028 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft Manifest number: 49 Signing time: Fri 31 Oct 2025 10:18:56 +0000 Manifest this update: Fri 31 Oct 2025 10:13:56 +0000 Manifest next update: Wed 05 Nov 2025 18:42:56 +0000 Files and hashes: 1: 3230302e32342e322e302f32342d3234203d3e20323632353839.roa (hash: 8hwcwgOUQnslDeHwMH4mxXmu+aaYI3ja58BF7Smg5EA=) 2: 3230302e32342e342e302f32342d3234203d3e20323632353839.roa (hash: /cq/M3M2PBJx0XRNTOLE/4/zdKmI/6CURhYvAxoiK3k=) 3: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl (hash: hKQh5k83ywo4L3wrKT4l2tPCut5qpxdUestzRf1wQzI=) 4: 3230302e32342e302e302f32332d3234203d3e203138363738.roa (hash: RDpns3uQkHJjJ6ZEVv0fHm7AtHuypdjnZoRTV11H/50=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:05:14:90:31:dd:4e:02:80:31:b4:59:be:f7:9e:a0:e8:07:20:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Validity Not Before: Oct 31 10:13:56 2025 GMT Not After : Nov 5 18:42:56 2025 GMT Subject: CN=B805640749904271C442B8F377E6CFEA148BCC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:16:45:29:11:1f:46:df:9f:c8:27:08:fc:8f: 0f:c3:58:8b:7e:b1:8b:a3:c1:ee:21:f8:dd:d8:b5: 0c:d8:1d:c5:47:6e:5b:a6:fb:a2:17:42:f7:5e:1e: 38:68:24:6c:54:35:3d:81:6d:bd:3b:a2:10:9f:88: 04:9c:ee:72:e7:7a:03:c7:2b:5c:bf:ea:8a:87:f5: b0:40:14:29:77:7b:a1:62:a1:9e:c6:bf:ba:f1:19: 96:4c:6a:13:e5:66:74:8c:c5:6d:aa:61:a5:f4:53: 14:60:7a:9a:be:af:03:b8:fa:79:05:ef:78:59:a4: 76:81:a6:05:dc:49:1d:08:a1:cd:2e:db:ff:0e:31: 54:20:a5:f0:d2:7d:da:a3:d7:3c:6d:2a:96:06:42: 4f:50:75:47:58:12:35:e2:13:33:a2:26:35:7f:30: b8:db:b6:5e:29:99:d8:ec:2a:69:a4:2c:08:93:ac: f0:8d:3b:05:20:8c:29:b8:5d:8d:08:8b:ac:ec:c7: f2:08:45:c1:75:50:aa:97:f1:8b:7d:d2:3b:8d:75: b1:01:c9:9f:92:99:9d:56:98:4c:a2:63:9e:c4:c5: 4d:06:ab:b3:58:8e:71:c5:ec:c0:a9:5b:15:cd:98: 5f:71:ae:5a:ea:38:f6:07:97:3c:d9:e4:81:23:91: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:05:64:07:49:90:42:71:C4:42:B8:F3:77:E6:CF:EA:14:8B:CC:33 X509v3 Authority Key Identifier: keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:29:17:b4:ae:f3:2d:48:f5:47:aa:ff:f2:77:90:e7:37:63: 0d:c5:df:32:a3:26:13:8f:c6:58:e5:3c:73:59:e9:98:3e:08: 49:e9:07:72:26:b4:78:0a:ae:dd:cb:5d:0d:26:c6:0d:9a:21: 6f:99:e1:b5:54:b6:4a:1d:be:da:f9:fa:9f:d0:85:e8:93:9a: c6:d2:8b:d3:3f:06:12:00:16:eb:6a:74:da:1f:84:4e:95:9e: 21:43:4f:33:de:19:a0:af:c6:c9:90:05:d9:02:ba:0c:64:19: c8:da:0e:28:93:b4:1d:9c:50:00:83:ea:9a:72:8c:04:53:e0: 28:4a:d9:49:e3:44:25:ac:d9:af:7a:4f:56:25:6d:91:4b:0c: 0a:25:51:8a:4b:71:85:44:7a:d4:e8:38:a6:52:d4:8f:1b:51: 62:fc:d3:27:4b:60:9f:de:b4:3f:4a:5f:b5:04:fb:c5:db:a7: 4c:19:03:9e:3b:e0:0d:19:b5:eb:db:63:14:7b:cc:23:c2:dd: a4:46:c4:f6:4a:3b:27:32:d7:34:00:eb:d6:4c:60:c4:b9:46: d0:72:22:15:d9:c9:d7:28:55:97:07:08:84:95:f6:e6:43:e0: 1e:11:88:4d:62:69:89:76:51:7b:f9:b6:9a:dc:d5:41:80:3d: b9:88:40:10 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMQUUkDHdTgKAMbRZvveeoOgHICgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFOUYwMzVGOEIxNkQxRTk4QjkxOUI0RUZDNzM5NzhB M0EyRThBMzAeFw0yNTEwMzExMDEzNTZaFw0yNTExMDUxODQyNTZaMDMxMTAvBgNV BAMTKEI4MDU2NDA3NDk5MDQyNzFDNDQyQjhGMzc3RTZDRkVBMTQ4QkNDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFkUpER9G35/IJwj8jw/DWIt+ sYujwe4h+N3YtQzYHcVHblum+6IXQvdeHjhoJGxUNT2Bbb07ohCfiASc7nLnegPH K1y/6oqH9bBAFCl3e6FioZ7Gv7rxGZZMahPlZnSMxW2qYaX0UxRgepq+rwO4+nkF 73hZpHaBpgXcSR0Ioc0u2/8OMVQgpfDSfdqj1zxtKpYGQk9QdUdYEjXiEzOiJjV/ MLjbtl4pmdjsKmmkLAiTrPCNOwUgjCm4XY0Ii6zsx/IIRcF1UKqX8Yt90juNdbEB yZ+SmZ1WmEyiY57ExU0Gq7NYjnHF7MCpWxXNmF9xrlrqOPYHlzzZ5IEjkb7TAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuAVkB0mQQnHEQrjzd+bP6hSLzDMwHwYDVR0j BBgwFoAUjenwNfixbR6YuRm078c5eKOi6KMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERjMzRDkwOTc5QTlBRjMxNDc4QkFGQzRCQjczRkEyNTk5 OEE3MDkxOUVERjE4N0U4MTU0MEM4QUJGMTQyODk3LzAvOERFOUYwMzVGOEIxNkQx RTk4QjkxOUI0RUZDNzM5NzhBM0EyRThBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REU5RjAzNUY4QjE2RDFFOThC OTE5QjRFRkM3Mzk3OEEzQTJFOEEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREYzM0Q5MDk3OUE5QUYzMTQ3OEJBRkM0QkI3M0ZBMjU5OThBNzA5MTlF REYxODdFODE1NDBDOEFCRjE0Mjg5Ny8wLzhERTlGMDM1RjhCMTZEMUU5OEI5MTlC NEVGQzczOTc4QTNBMkU4QTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwKRe0rvMtSPVHqv/yd5DnN2MN xd8yoyYTj8ZY5TxzWemYPghJ6QdyJrR4Cq7dy10NJsYNmiFvmeG1VLZKHb7a+fqf 0IXok5rG0ovTPwYSABbranTaH4ROlZ4hQ08z3hmgr8bJkAXZAroMZBnI2g4ok7Qd nFAAg+qacowEU+AoStlJ40QlrNmvek9WJW2RSwwKJVGKS3GFRHrU6DimUtSPG1Fi /NMnS2Cf3rQ/Sl+1BPvF26dMGQOeO+ANGbXr22MUe8wjwt2kRsT2SjsnMtc0AOvW TGDEuUbQciIV2cnXKFWXBwiElfbmQ+AeEYhNYmmJdlF7+baa3NVBgD25iEAQ -----END CERTIFICATE-----Generated at Sat Nov 1 04:07:27 2025 by rpki-client