$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft File: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft (raw, json) Hash identifier: oqpoBWVGg9GfodW5btOlMJ1IoYJuFbreWLNHf04SPzs= Subject key identifier: BD:36:64:A5:7C:C5:99:34:95:B1:C5:08:51:4A:2D:AB:79:51:4C:C4 Authority key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 Certificate issuer: /CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Certificate serial: 1657B7A5A49F785E0BA41C6566F02BC555F6E32E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft Manifest number: 013B Signing time: Sun 02 Nov 2025 13:22:54 +0000 Manifest this update: Sun 02 Nov 2025 13:17:54 +0000 Manifest next update: Sat 08 Nov 2025 07:45:54 +0000 Files and hashes: 1: 323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa (hash: SLmOXsQAz+Y6eTT1rCpJx8cfBuSzYasoltxqUKom0Ew=) 2: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl (hash: BinoyMnKcl/wfyTZ7BcNY9mOT7m/svhm8GDmSmsNpUI=) 3: 3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa (hash: qUaUogpkuXlI6UdZShWT28vTDeo497JS7pQvOTMptlo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 07:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:57:b7:a5:a4:9f:78:5e:0b:a4:1c:65:66:f0:2b:c5:55:f6:e3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Validity Not Before: Nov 2 13:17:54 2025 GMT Not After : Nov 8 07:45:54 2025 GMT Subject: CN=BD3664A57CC5993495B1C508514A2DAB79514CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:32:8b:7b:ed:91:99:b6:11:5a:10:f0:14: 27:99:8c:c3:59:7e:33:db:6c:9f:a0:ec:46:97:c6: 5b:6f:05:76:71:ea:7f:07:eb:27:0d:c3:4a:6e:46: 83:6c:61:21:aa:f7:df:a0:54:c2:51:a8:18:d6:5a: 45:3a:a8:30:37:1f:34:94:93:ef:bd:d1:ff:e6:44: 81:a6:af:a4:77:71:76:d9:31:0f:8a:90:f9:87:a3: 7f:a4:b2:94:86:a0:42:25:81:77:86:3f:31:67:cc: 21:86:ef:3c:86:22:f1:09:72:cd:6a:b6:da:9c:70: 0a:d1:2d:c7:f0:ff:73:b0:ae:c3:59:75:14:97:de: b6:a7:34:25:00:04:fd:91:fd:be:0d:79:5d:36:49: 95:06:7b:fa:a3:cb:68:a2:21:ed:c2:f8:88:97:f6: 0f:33:b9:07:2a:ca:8b:8e:de:99:f5:bd:7b:ef:24: 79:73:f4:00:5a:6e:5d:33:30:38:3f:46:ff:70:4c: 7d:aa:95:bd:e4:5f:2d:a7:0e:e7:31:55:5c:40:94: db:e9:6f:dd:64:1d:5a:21:e1:79:b0:9b:48:64:6f: 3c:7e:42:43:c4:4d:33:d7:04:c2:2f:97:fc:1a:21: 35:50:3e:87:73:f9:9b:22:af:21:49:d2:07:36:e4: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:64:A5:7C:C5:99:34:95:B1:C5:08:51:4A:2D:AB:79:51:4C:C4 X509v3 Authority Key Identifier: keyid:25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:24:5a:0e:a4:fa:c3:9d:27:28:1b:b2:3a:e5:65:cf:a0: d3:92:37:30:0f:a1:73:86:63:8c:88:7b:51:89:67:ef:77:24: c9:10:e3:6a:d6:bf:68:b9:67:9a:6c:1c:fb:93:11:59:3f:53: 84:02:a0:0c:37:26:b4:da:cc:a8:f6:1d:20:fb:55:6d:a4:4e: b4:44:12:7d:5d:d0:e7:e0:a8:20:f3:18:6c:d6:94:c0:60:28: b5:f1:ef:b9:43:61:70:5a:a4:65:59:e4:8c:60:25:13:e8:b2: ad:96:4c:6f:0c:50:30:45:0a:be:a5:6c:da:77:a6:eb:0e:f2: 39:dd:51:f9:7e:f8:2b:81:20:e9:86:f5:35:3c:36:2a:93:fb: 96:dd:8d:05:6e:a4:d1:34:30:2f:62:f8:d7:ad:35:e7:e2:b0: 1e:da:2f:9c:f7:4f:72:16:24:ab:cd:ca:cc:94:24:60:d4:b1: 24:59:96:fe:b2:4e:92:07:30:bb:1c:5e:a4:dc:86:a2:c6:70: a2:9a:75:7e:33:38:fd:02:ac:6e:20:b8:33:e1:17:2c:af:14: 00:9c:a8:12:05:cd:bf:2b:92:ae:d2:e1:0a:eb:4b:08:b3:16: c0:f8:6a:3f:7a:fb:37:9a:5e:93:d1:da:14:54:7f:ea:04:29: 08:06:03:19 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFle3paSfeF4LpBxlZvArxVX24y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERERFQzJBODA0NEY2ODhBQTc5OUE2NjEyQzQzNEIy QUJFQTk3OTAeFw0yNTExMDIxMzE3NTRaFw0yNTExMDgwNzQ1NTRaMDMxMTAvBgNV BAMTKEJEMzY2NEE1N0NDNTk5MzQ5NUIxQzUwODUxNEEyREFCNzk1MTRDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVjKLe+2RmbYRWhDwFCeZjMNZ fjPbbJ+g7EaXxltvBXZx6n8H6ycNw0puRoNsYSGq99+gVMJRqBjWWkU6qDA3HzSU k++90f/mRIGmr6R3cXbZMQ+KkPmHo3+kspSGoEIlgXeGPzFnzCGG7zyGIvEJcs1q ttqccArRLcfw/3OwrsNZdRSX3ranNCUABP2R/b4NeV02SZUGe/qjy2iiIe3C+IiX 9g8zuQcqyouO3pn1vXvvJHlz9ABabl0zMDg/Rv9wTH2qlb3kXy2nDucxVVxAlNvp b91kHVoh4Xmwm0hkbzx+QkPETTPXBMIvl/waITVQPodz+ZsiryFJ0gc25MTtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvTZkpXzFmTSVscUIUUotq3lRTMQwHwYDVR0j BBgwFoAUJd3ewqgET2iKp5mmYSxDSyq+qXkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMTQ5QzFBNjNFQTE0Njg5RUEwNEZBQUY2NUVEQ0U5RDU3 MDZBNzZEMEY2OTBDOTM5MDM2OTY4Nzg4REYyOTJGLzAvMjVERERFQzJBODA0NEY2 ODhBQTc5OUE2NjEyQzQzNEIyQUJFQTk3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUREREVDMkE4MDQ0RjY4OEFB Nzk5QTY2MTJDNDM0QjJBQkVBOTc5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjE0OUMxQTYzRUExNDY4OUVBMDRGQUFGNjVFRENFOUQ1NzA2QTc2RDBG NjkwQzkzOTAzNjk2ODc4OERGMjkyRi8wLzI1RERERUMyQTgwNDRGNjg4QUE3OTlB NjYxMkM0MzRCMkFCRUE5NzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdhyRaDqT6w50nKBuyOuVlz6DT kjcwD6FzhmOMiHtRiWfvdyTJEONq1r9ouWeabBz7kxFZP1OEAqAMNya02syo9h0g +1VtpE60RBJ9XdDn4Kgg8xhs1pTAYCi18e+5Q2FwWqRlWeSMYCUT6LKtlkxvDFAw RQq+pWzad6brDvI53VH5fvgrgSDphvU1PDYqk/uW3Y0FbqTRNDAvYvjXrTXn4rAe 2i+c909yFiSrzcrMlCRg1LEkWZb+sk6SBzC7HF6k3IaixnCimnV+Mzj9AqxuILgz 4RcsrxQAnKgSBc2/K5Ku0uEK60sIsxbA+Go/evs3ml6T0doUVH/qBCkIBgMZ -----END CERTIFICATE-----Generated at Tue Nov 4 07:32:27 2025 by rpki-client