$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json) Hash identifier: lf9aFsO1awQzYULiRSaP8n15MmI0F9ak4ScbKvQEDig= Subject key identifier: 14:5D:DA:F2:95:61:F2:38:7F:8B:1F:1B:D9:DF:99:9C:73:0C:D1:2E Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Certificate serial: 4AA2ECF11E03706F22A0CA0DAAEA2F6E92C5421A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft Manifest number: 0137 Signing time: Wed 12 Nov 2025 16:41:53 +0000 Manifest this update: Wed 12 Nov 2025 16:36:53 +0000 Manifest next update: Tue 18 Nov 2025 16:21:53 +0000 Files and hashes: 1: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: I/Y7ft0YxVHkzrxJDA8tbaD62a5ZPauJUlj0QUCShZ8=) 2: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: 7UfKWaQAr95bPBridFn/arYQ/3LdRnATvxQ9sAAQ4B4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Nov 2025 23:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a2:ec:f1:1e:03:70:6f:22:a0:ca:0d:aa:ea:2f:6e:92:c5:42:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Validity Not Before: Nov 12 16:36:53 2025 GMT Not After : Nov 18 16:21:53 2025 GMT Subject: CN=145DDAF29561F2387F8B1F1BD9DF999C730CD12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:d6:c5:6a:42:f7:60:7e:a9:22:a0:e9:42: 06:52:38:62:3e:19:8f:5a:ff:0f:96:bc:30:e1:c0: dc:03:bb:a1:20:fd:91:73:47:83:cd:ef:70:f6:d0: ea:a0:39:4e:2d:ac:7b:2b:04:7c:60:ab:6e:0c:25: c1:10:13:fb:fe:21:8d:8d:4b:7d:99:10:7b:61:9d: e2:5a:1d:73:e7:e0:3a:97:a9:7c:6a:7a:8b:a7:de: d1:0d:d5:b8:d0:cd:52:d1:49:29:91:93:0d:43:23: 6e:0a:65:05:5d:55:10:40:82:71:df:95:e7:b8:45: ed:e3:31:1b:d9:db:89:c3:3e:d7:e0:ed:92:5e:d3: 58:66:82:19:0e:d4:de:c3:db:42:4a:e5:f9:9a:79: eb:15:60:53:d7:e1:f2:1e:cf:9c:a9:a2:1b:22:6f: 7a:a9:d8:c1:50:e7:44:e7:a1:ad:d6:79:6b:29:b1: 73:f3:eb:89:2f:dd:7d:18:c8:2b:f2:6b:2d:eb:85: 53:ff:1a:45:60:e7:65:f2:af:61:7e:37:53:0b:28: 3b:64:33:a2:7b:19:2b:dd:5a:74:08:2c:ee:fe:4a: ab:08:5f:91:2a:00:9b:73:87:c9:ee:a7:b6:7e:99: a5:e9:cd:10:3a:d8:f7:c1:f5:0e:67:d4:57:b0:fd: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5D:DA:F2:95:61:F2:38:7F:8B:1F:1B:D9:DF:99:9C:73:0C:D1:2E X509v3 Authority Key Identifier: keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5a:30:5f:21:a6:a6:b7:64:75:85:b0:af:0c:73:4b:45:f8: 38:23:d8:96:0a:0f:f9:6d:ff:17:9f:af:63:31:9d:a8:cc:5b: e2:67:d4:d4:58:c4:50:3a:45:6d:cb:0a:c7:7e:ea:5f:d1:bb: 5a:42:b0:8e:96:34:a4:d9:94:41:9d:de:8f:2e:10:ee:fc:d6: ee:ee:0e:b8:aa:d5:bb:39:d2:d7:10:20:31:e0:74:73:10:dc: 43:b2:14:c8:28:ab:c1:97:f5:42:26:d3:b1:25:19:bc:5b:2f: 7a:0b:88:8f:fb:9e:d6:28:e5:e6:cb:08:cf:44:a3:6d:74:f2: 7e:75:52:b6:b7:63:4a:e1:f9:a1:e5:fe:58:42:e3:34:19:6c: 6e:7f:77:4e:66:17:f7:fd:9d:42:43:b8:e9:d6:3b:ab:5c:39: 55:6c:28:2f:0a:da:85:20:6f:49:14:4c:96:18:5f:2a:c8:92: 61:80:2c:6a:4d:3e:e5:fe:bc:3b:98:cd:12:34:d5:f3:3c:ad: b1:b8:77:19:5a:21:4d:6d:d3:1f:b6:e4:e3:fc:bb:01:84:a3: e5:a0:91:a6:2d:bb:67:fd:81:3d:db:77:3b:5a:86:23:d5:d1: f5:12:44:36:3f:53:92:e9:7d:9b:89:dd:3b:b6:cd:1e:f3:7a: 2f:d9:ee:85 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSqLs8R4DcG8ioMoNquovbpLFQhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCOERGMUYwQkU2MDlGQjZGOTgwMDNFQjk2QzlDREU3 MkI1M0FGODAeFw0yNTExMTIxNjM2NTNaFw0yNTExMTgxNjIxNTNaMDMxMTAvBgNV BAMTKDE0NUREQUYyOTU2MUYyMzg3RjhCMUYxQkQ5REY5OTlDNzMwQ0QxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiNbFakL3YH6pIqDpQgZSOGI+ GY9a/w+WvDDhwNwDu6Eg/ZFzR4PN73D20OqgOU4trHsrBHxgq24MJcEQE/v+IY2N S32ZEHthneJaHXPn4DqXqXxqeoun3tEN1bjQzVLRSSmRkw1DI24KZQVdVRBAgnHf lee4Re3jMRvZ24nDPtfg7ZJe01hmghkO1N7D20JK5fmaeesVYFPX4fIez5ypohsi b3qp2MFQ50Tnoa3WeWspsXPz64kv3X0YyCvyay3rhVP/GkVg52Xyr2F+N1MLKDtk M6J7GSvdWnQILO7+SqsIX5EqAJtzh8nup7Z+maXpzRA62PfB9Q5n1Few/aGJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFF3a8pVh8jh/ix8b2d+ZnHMM0S4wHwYDVR0j BBgwFoAU37jfHwvmCftvmAA+uWyc3nK1OvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNzEzNDREQzk5NzdBRjIxQjJGM0NERjY1NTYyODI5NTk2 OEY5OTA3OUI1QTlGMzlBQkNEMDRBNzk0OUQ5RDMxLzAvREZCOERGMUYwQkU2MDlG QjZGOTgwMDNFQjk2QzlDREU3MkI1M0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkI4REYxRjBCRTYwOUZCNkY5 ODAwM0VCOTZDOUNERTcyQjUzQUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjcxMzQ0REM5OTc3QUYyMUIyRjNDREY2NTU2MjgyOTU5NjhGOTkwNzlC NUE5RjM5QUJDRDA0QTc5NDlEOUQzMS8wL0RGQjhERjFGMEJFNjA5RkI2Rjk4MDAz RUI5NkM5Q0RFNzJCNTNBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsWjBfIaamt2R1hbCvDHNLRfg4 I9iWCg/5bf8Xn69jMZ2ozFviZ9TUWMRQOkVtywrHfupf0btaQrCOljSk2ZRBnd6P LhDu/Nbu7g64qtW7OdLXECAx4HRzENxDshTIKKvBl/VCJtOxJRm8Wy96C4iP+57W KOXmywjPRKNtdPJ+dVK2t2NK4fmh5f5YQuM0GWxuf3dOZhf3/Z1CQ7jp1jurXDlV bCgvCtqFIG9JFEyWGF8qyJJhgCxqTT7l/rw7mM0SNNXzPK2xuHcZWiFNbdMftuTj /LsBhKPloJGmLbtn/YE923c7WoYj1dH1EkQ2P1OS6X2bid07ts0e83ov2e6F -----END CERTIFICATE-----Generated at Fri Nov 14 17:07:33 2025 by rpki-client