$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft File: D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft (raw, json) Hash identifier: zhKMdRKxfZPyhGpJVmbjQZk+pLqvKllPhc5KGFpNhLQ= Subject key identifier: 8A:82:35:FA:45:D7:1E:F4:E4:89:36:BF:6B:DF:1B:6E:3B:8E:BC:9D Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA Certificate issuer: /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA Certificate serial: 1D0AAB113FAF0E7B88CAA3BA1AFFAC497D747BB5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft Manifest number: 0128 Signing time: Fri 24 Oct 2025 13:48:48 +0000 Manifest this update: Fri 24 Oct 2025 13:43:48 +0000 Manifest next update: Thu 30 Oct 2025 08:06:48 +0000 Files and hashes: 1: D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl (hash: 7BTywyEXlhCvwYnBL4VVhU7GkA0ALIlx+QekYvVe4ys=) 2: 34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa (hash: Ih7oDld5f4O9rxONT5YsfxaDf1v+Yr2JwZVTF/Bo4bU=) 3: 34352e3233382e3137362e302f32332d3234203d3e20323635373033.roa (hash: V9eQ9AJUEuBDrH6/4cy9D6A11Mdrk2RGIvfe/G0DihQ=) 4: 3133382e302e3132322e302f32332d3234203d3e20323636383436.roa (hash: uQZJ3MWVXhnHJVO3d2EPCTnIhe692klUyBUsgITVDvc=) 5: 3133382e302e3132332e302f32342d3234203d3e203634313339.roa (hash: C+EfL3m+CBc1rEWDXAzXamIIQGKAtXtd+ejROE9iQVc=) 6: 34352e3233382e3137362e302f32342d3234203d3e203634313339.roa (hash: tDbhmRPKzcA1vexp8Cf/ZAzIF5JPQhSC5hM/O3svroQ=) 7: 3133382e302e3132322e302f32332d3234203d3e20323635373033.roa (hash: 9DN2a6/2yOaXSrp+epSvgmKQ8NkP3j4MxC0Fdv49nEM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0a:ab:11:3f:af:0e:7b:88:ca:a3:ba:1a:ff:ac:49:7d:74:7b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA Validity Not Before: Oct 24 13:43:48 2025 GMT Not After : Oct 30 08:06:48 2025 GMT Subject: CN=8A8235FA45D71EF4E48936BF6BDF1B6E3B8EBC9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:7e:8b:f9:d8:5d:86:17:21:e2:24:3b:63: da:81:0e:6a:0b:9f:0c:3f:ed:35:15:e9:12:a6:7f: 22:ad:8b:3d:ec:d1:9d:44:0b:ba:46:d0:66:dc:e3: b3:f4:56:b6:ea:55:e4:3a:7e:70:12:fc:37:ce:83: c5:11:42:7e:7b:fa:67:9e:a3:ff:bb:d6:36:9b:25: 6f:a8:24:62:f3:93:50:d6:79:f1:57:ca:c3:49:64: e4:f8:67:d1:c4:42:c8:a2:1f:81:ec:ed:08:64:f9: fb:1e:e4:7f:36:45:c2:d7:86:b4:34:f3:63:47:c0: a8:88:04:3e:0f:72:a7:2a:7a:b6:fb:12:08:32:32: 07:8a:90:08:68:9f:07:c6:92:df:56:94:69:18:ac: 39:b4:63:4d:86:ab:9c:fd:a0:c2:f3:9d:26:26:35: 81:73:1a:f4:93:c0:6d:c7:59:69:aa:98:af:e6:e2: 5c:a1:df:de:54:ee:b6:43:91:4a:6f:53:56:02:f6: 78:af:40:d2:be:1b:d9:76:ef:98:3b:5a:eb:cf:15: bb:40:bf:b6:03:d1:91:49:57:f7:df:14:3a:fa:6f: 7d:58:f0:be:7b:28:86:06:f1:f8:d0:ea:0b:f5:49: 59:28:93:7d:0f:b9:d4:08:14:19:a3:c0:9e:c7:70: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:35:FA:45:D7:1E:F4:E4:89:36:BF:6B:DF:1B:6E:3B:8E:BC:9D X509v3 Authority Key Identifier: keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:41:fe:7e:99:ad:3b:62:91:34:37:dd:0d:e4:86:05:15:0e: 0f:cf:9c:80:32:4d:88:f9:70:22:f1:0f:e2:ec:43:a0:5a:91: b6:1d:a3:0a:51:5c:c3:7c:1c:f9:91:9d:37:92:da:bd:5f:c6: e4:d1:ac:7f:14:da:b1:d2:ee:91:9d:b2:e7:13:b2:ef:c3:91: 60:83:4a:ef:2f:61:c0:36:e5:b9:d9:88:cc:9d:d0:8e:14:94: ff:b4:28:a2:ab:be:28:f6:ac:cd:7c:47:44:de:5f:5f:08:25: f4:62:24:06:96:fb:06:51:2b:e6:7a:21:49:f5:73:d8:ef:36: be:ee:94:ce:ab:db:70:b0:68:30:88:ae:2a:19:82:c2:b8:b0: 51:89:75:93:09:9b:a6:1f:16:80:f5:21:42:72:32:6f:d0:9f: 11:2e:ff:3d:05:b5:ab:af:d3:60:23:c5:ff:6b:7e:2e:09:74: 6d:ba:ba:44:3e:bf:01:e3:d9:86:7d:14:ce:25:c7:c1:6c:19: 64:cb:ce:2c:ab:eb:e0:a1:b3:8a:cb:6a:32:75:10:22:e6:87: e9:7e:de:d0:75:76:8c:4f:4b:2b:1b:5c:da:61:40:a2:71:18: 0c:1e:f6:a1:91:9a:a1:d1:b9:2b:64:65:65:86:33:78:34:46: 49:36:0f:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHQqrET+vDnuIyqO6Gv+sSX10e7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgxQUE0M0RGMDMxRTAzMTIxQjEwMzc0QzA1QjUyQkJC MTdBQ0JFQTAeFw0yNTEwMjQxMzQzNDhaFw0yNTEwMzAwODA2NDhaMDMxMTAvBgNV BAMTKDhBODIzNUZBNDVENzFFRjRFNDg5MzZCRjZCREYxQjZFM0I4RUJDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iH6L+dhdhhch4iQ7Y9qBDmoL nww/7TUV6RKmfyKtiz3s0Z1EC7pG0Gbc47P0VrbqVeQ6fnAS/DfOg8URQn57+mee o/+71jabJW+oJGLzk1DWefFXysNJZOT4Z9HEQsiiH4Hs7Qhk+fse5H82RcLXhrQ0 82NHwKiIBD4Pcqcqerb7EggyMgeKkAhonwfGkt9WlGkYrDm0Y02Gq5z9oMLznSYm NYFzGvSTwG3HWWmqmK/m4lyh395U7rZDkUpvU1YC9nivQNK+G9l275g7WuvPFbtA v7YD0ZFJV/ffFDr6b31Y8L57KIYG8fjQ6gv1SVkok30PudQIFBmjwJ7HcC/RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUioI1+kXXHvTkiTa/a98bbjuOvJ0wHwYDVR0j BBgwFoAU2BqkPfAx4DEhsQN0wFtSu7F6y+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERkYxQjgxRUFCODhFQ0QxMTQwODhEOTkyNjBGRkFCNDhE NjgwRURGNTE2QTQzQURCMjkxODdBRDI1NTkxRTFCLzAvRDgxQUE0M0RGMDMxRTAz MTIxQjEwMzc0QzA1QjUyQkJCMTdBQ0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODFBQTQzREYwMzFFMDMxMjFC MTAzNzRDMDVCNTJCQkIxN0FDQkVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREZGMUI4MUVBQjg4RUNEMTE0MDg4RDk5MjYwRkZBQjQ4RDY4MEVERjUx NkE0M0FEQjI5MTg3QUQyNTU5MUUxQi8wL0Q4MUFBNDNERjAzMUUwMzEyMUIxMDM3 NEMwNUI1MkJCQjE3QUNCRUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmQf5+ma07YpE0N90N5IYFFQ4P z5yAMk2I+XAi8Q/i7EOgWpG2HaMKUVzDfBz5kZ03ktq9X8bk0ax/FNqx0u6RnbLn E7Lvw5Fgg0rvL2HANuW52YjMndCOFJT/tCiiq74o9qzNfEdE3l9fCCX0YiQGlvsG USvmeiFJ9XPY7za+7pTOq9twsGgwiK4qGYLCuLBRiXWTCZumHxaA9SFCcjJv0J8R Lv89BbWrr9NgI8X/a34uCXRturpEPr8B49mGfRTOJcfBbBlky84sq+vgobOKy2oy dRAi5ofpft7QdXaMT0srG1zaYUCicRgMHvahkZqh0bkrZGVlhjN4NEZJNg/J -----END CERTIFICATE-----Generated at Sun Oct 26 23:17:40 2025 by rpki-client