$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft File: A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft (raw, json) Hash identifier: 2eY4Ed5A5MMJcDrvODpEmRLHYhYxHNlNsdWFVhTPB5w= Subject key identifier: BD:AC:42:32:8D:FC:3C:9F:BD:2F:3E:95:EA:7C:99:FF:85:09:52:2A Authority key identifier: A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78 Certificate issuer: /CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478 Certificate serial: 17DE463BBCA02AEB261CE6706138C9B2DAB30162 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft Manifest number: 012D Signing time: Sun 26 Oct 2025 02:22:26 +0000 Manifest this update: Sun 26 Oct 2025 02:17:26 +0000 Manifest next update: Fri 31 Oct 2025 05:57:26 +0000 Files and hashes: 1: A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl (hash: JAoHWkc5at1/ZuUl6/K/7Bjb25KdRTX77RkYqhxnUeY=) 2: 323830333a643638303a3a2f33322d3336203d3e20323633323234.roa (hash: iFfy/fPWKpIoluhGN2CThRqibNtWe9X59SrKN8WRLAM=) 3: 3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa (hash: yrB/l0MxLVnwRds3mdsUMC0Y5ZI+kRtQ1bArHu/Ma8w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:de:46:3b:bc:a0:2a:eb:26:1c:e6:70:61:38:c9:b2:da:b3:01:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478 Validity Not Before: Oct 26 02:17:26 2025 GMT Not After : Oct 31 05:57:26 2025 GMT Subject: CN=BDAC42328DFC3C9FBD2F3E95EA7C99FF8509522A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:dc:04:d7:2f:00:ef:b1:da:52:70:99:0e: 08:24:fb:46:70:f6:e3:cd:55:86:5c:53:d7:62:3f: ad:a4:3c:ab:19:8b:f9:66:a6:31:f8:bd:ca:3b:41: 1d:a9:e4:8f:f2:a5:26:6d:02:1a:1d:4e:b3:50:c3: 78:c3:28:02:8f:d3:e8:0e:24:02:be:b2:6a:8b:3c: 89:a4:81:24:8c:74:d5:d1:ca:35:77:03:b1:5c:cb: f4:cd:80:19:52:60:d2:92:91:50:55:b9:01:0e:a9: 40:c1:c5:b3:d9:bc:81:2e:c5:9c:11:28:de:60:1d: 42:47:68:38:0b:95:07:1c:e5:69:bc:d6:bd:76:4c: 9c:33:8d:49:3f:45:a8:cb:a4:24:6d:e3:49:58:d4: 40:2a:88:97:bf:36:3c:5f:76:f6:ed:12:de:16:f3: 86:71:96:7e:d5:6d:e2:08:9e:37:92:05:cb:27:cc: dd:d9:3c:75:8e:4a:3a:66:4e:b8:1f:6d:24:fe:d1: dd:53:64:8e:b7:f1:7e:29:60:57:67:49:ae:d8:83: 35:0a:97:51:b1:bd:95:10:31:c9:4c:be:e1:90:e9: a5:79:75:ac:15:59:11:cf:10:e1:6d:43:4f:e7:a3: 17:db:1f:b4:b8:49:04:a3:dc:1d:09:64:1e:a0:25: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AC:42:32:8D:FC:3C:9F:BD:2F:3E:95:EA:7C:99:FF:85:09:52:2A X509v3 Authority Key Identifier: keyid:A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:21:fb:13:8d:b6:b9:a7:40:c6:80:13:02:6f:71:e5:12:c5: fd:6a:28:f1:62:c8:45:32:a0:d3:b2:46:54:8b:0a:55:e6:52: 8a:c8:13:3c:e0:a2:80:44:27:22:ef:c0:b3:b4:37:b8:e4:65: 2c:b8:fb:81:08:f0:7b:54:29:74:af:06:81:3a:c4:0b:38:b4: 3e:55:af:2d:cd:e1:43:10:b3:24:4e:a0:bf:b6:73:ff:1a:38: a6:d0:8c:1e:16:19:a6:10:32:55:23:40:9b:cf:85:7e:8a:62: 90:03:bc:0b:21:38:5e:d8:c4:98:66:fa:6f:c7:b8:58:d2:1b: c3:04:2d:cd:d2:a3:87:2a:ee:72:be:5c:2b:b3:ea:af:47:09: ad:0a:eb:38:2d:02:8f:7d:31:38:65:69:a9:78:34:d5:d5:ba: a2:88:e4:a7:23:0d:c3:4e:bf:fe:bc:c9:23:db:03:3a:96:38: ca:10:f0:e1:ea:6f:0e:52:63:c9:46:31:0a:2e:43:da:3e:ca: a6:0f:de:7d:49:8a:16:e5:6c:e9:0d:29:4b:eb:40:08:c7:25: 04:f9:62:a1:a3:32:b5:74:a5:b4:2f:89:87:50:32:52:d1:aa: 40:cb:91:79:bb:9e:f8:a2:b4:bd:a1:5a:8b:78:d3:71:00:96: a2:4a:7e:f3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUF95GO7ygKusmHOZwYTjJstqzAWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5NkE1RkU4M0NERjRDMEMyQTMxMUYyMkEyQ0YzREIx RDAyQzQ3ODAeFw0yNTEwMjYwMjE3MjZaFw0yNTEwMzEwNTU3MjZaMDMxMTAvBgNV BAMTKEJEQUM0MjMyOERGQzNDOUZCRDJGM0U5NUVBN0M5OUZGODUwOTUyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrdwE1y8A77HaUnCZDggk+0Zw 9uPNVYZcU9diP62kPKsZi/lmpjH4vco7QR2p5I/ypSZtAhodTrNQw3jDKAKP0+gO JAK+smqLPImkgSSMdNXRyjV3A7Fcy/TNgBlSYNKSkVBVuQEOqUDBxbPZvIEuxZwR KN5gHUJHaDgLlQcc5Wm81r12TJwzjUk/RajLpCRt40lY1EAqiJe/NjxfdvbtEt4W 84Zxln7VbeIInjeSBcsnzN3ZPHWOSjpmTrgfbST+0d1TZI638X4pYFdnSa7YgzUK l1GxvZUQMclMvuGQ6aV5dawVWRHPEOFtQ0/noxfbH7S4SQSj3B0JZB6gJdqRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvaxCMo38PJ+9Lz6V6nyZ/4UJUiowHwYDVR0j BBgwFoAUqZal/oPN9MDCoxHyKizz2x0CxHgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FODlBMjU3NjJFODE3QjRBQkFENEFFNjE5NjE4QTIwMjdD REExMEU2NUVBMTdBRTMyMEVBQjI0ODI5RjEwMkY3LzAvQTk5NkE1RkU4M0NERjRD MEMyQTMxMUYyMkEyQ0YzREIxRDAyQzQ3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTk2QTVGRTgzQ0RGNEMwQzJB MzExRjIyQTJDRjNEQjFEMDJDNDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTg5QTI1NzYyRTgxN0I0QUJBRDRBRTYxOTYxOEEyMDI3Q0RBMTBFNjVF QTE3QUUzMjBFQUIyNDgyOUYxMDJGNy8wL0E5OTZBNUZFODNDREY0QzBDMkEzMTFG MjJBMkNGM0RCMUQwMkM0NzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABIfsTjba5p0DGgBMCb3HlEsX9 aijxYshFMqDTskZUiwpV5lKKyBM84KKARCci78CztDe45GUsuPuBCPB7VCl0rwaB OsQLOLQ+Va8tzeFDELMkTqC/tnP/Gjim0IweFhmmEDJVI0Cbz4V+imKQA7wLIThe 2MSYZvpvx7hY0hvDBC3N0qOHKu5yvlwrs+qvRwmtCus4LQKPfTE4ZWmpeDTV1bqi iOSnIw3DTr/+vMkj2wM6ljjKEPDh6m8OUmPJRjEKLkPaPsqmD959SYoW5WzpDSlL 60AIxyUE+WKhozK1dKW0L4mHUDJS0apAy5F5u574orS9oVqLeNNxAJaiSn7z -----END CERTIFICATE-----Generated at Sun Oct 26 11:34:21 2025 by rpki-client