$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft File: 0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft (raw, json) Hash identifier: x0oGARd4mCEcA+aovGQIQXB1bCIG6iPYMvrYSUP+uMo= Subject key identifier: D8:9C:36:7B:E2:21:3E:D4:8C:88:16:D7:1F:57:29:C9:6C:D8:C1:4C Authority key identifier: 0D:3E:5E:EA:EF:56:A3:05:23:E1:76:42:5F:74:1B:EF:D5:AC:37:C8 Certificate issuer: /CN=0D3E5EEAEF56A30523E176425F741BEFD5AC37C8 Certificate serial: 17353BFD1BD9B1D6197F098EC24DBE9D70B379CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft Manifest number: 0135 Signing time: Sun 16 Nov 2025 09:22:00 +0000 Manifest this update: Sun 16 Nov 2025 09:17:00 +0000 Manifest next update: Fri 21 Nov 2025 16:43:00 +0000 Files and hashes: 1: 323830313a31633a393830303a3a2f34382d3438203d3e203139343239.roa (hash: /laYQOHmaeg+SibxVmaypmol0fYnXrdUPnCAKwPlT+w=) 2: 323830313a31633a393830303a3a2f34382d3438203d3e20323732303439.roa (hash: fWAhV0fSxWVI6phPFfJBSJKVYY+0y58sOSMhMnlrRN8=) 3: 0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl (hash: hnKNlPufvzcVE4+grOTAoj38U3itDl1raIioVCGS3QA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Nov 2025 23:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:35:3b:fd:1b:d9:b1:d6:19:7f:09:8e:c2:4d:be:9d:70:b3:79:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3E5EEAEF56A30523E176425F741BEFD5AC37C8 Validity Not Before: Nov 16 09:17:00 2025 GMT Not After : Nov 21 16:43:00 2025 GMT Subject: CN=D89C367BE2213ED48C8816D71F5729C96CD8C14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:42:56:9a:f2:0b:c4:60:0e:8b:ec:71:a4: 12:ef:f3:27:aa:ec:ac:90:21:fd:8f:81:2c:be:5a: 07:d4:53:00:28:76:ae:41:8c:21:57:00:08:76:bc: 21:43:5b:18:e2:d5:1f:c7:e3:3b:3a:90:95:7b:1a: dc:0a:22:9e:9b:b1:e8:d7:8a:6c:0f:f1:d2:4b:97: 47:35:71:8d:34:93:95:eb:32:e7:d1:c6:c8:60:95: d6:34:72:5d:57:e2:78:fd:14:ab:4e:06:c3:ee:1e: a4:10:88:4f:7a:b4:d1:20:07:d3:cb:e0:25:d3:f5: 0e:b6:7b:14:80:06:04:9e:ce:55:f4:6a:4e:c3:99: 03:8e:6b:0a:cc:53:31:0a:82:aa:53:1e:b1:f8:29: c2:d7:95:a0:88:ea:a1:8b:62:25:b9:60:d5:78:5a: 94:65:1e:ca:ed:4a:17:7a:fd:91:53:f9:99:c4:03: ea:ef:9d:03:92:fb:49:e0:86:07:d8:ad:ed:9e:33: dc:71:92:08:48:61:b4:9a:41:ae:9e:5a:54:86:a2: 8d:02:bd:fe:6f:f1:93:d2:89:cc:c4:06:e4:d3:1f: 1c:fa:4e:14:64:7d:e9:f0:18:cc:4f:63:85:32:28: a1:b1:99:d4:29:58:4f:aa:d9:e4:b6:02:a3:43:92: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9C:36:7B:E2:21:3E:D4:8C:88:16:D7:1F:57:29:C9:6C:D8:C1:4C X509v3 Authority Key Identifier: keyid:0D:3E:5E:EA:EF:56:A3:05:23:E1:76:42:5F:74:1B:EF:D5:AC:37:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c6:85:ac:99:a5:a5:ff:74:97:0e:94:70:44:0f:fa:83:d5: 58:04:fe:64:0c:2f:c1:51:a7:12:e6:61:04:5c:18:ee:7d:18: 63:d2:9b:8e:7d:f7:f3:dc:76:f1:ab:7e:0d:35:b3:98:b8:28: 91:d9:81:43:ad:d8:41:bc:17:01:21:ec:8c:17:6e:6c:b4:e5: d8:62:43:86:2f:a7:06:64:85:08:56:2d:dd:64:e9:f3:2a:ee: 35:06:89:cd:c1:4f:45:a7:7e:c0:ea:3f:b0:15:f9:bd:4f:64: 7e:1c:18:2c:ac:6b:55:60:39:31:4a:f8:94:3d:42:cd:cd:9b: 59:ff:08:97:c9:9a:6e:08:87:65:80:74:35:82:6e:d9:47:e5: 18:29:6c:99:a7:21:01:bd:03:1a:53:bb:56:15:07:01:46:af: fc:96:76:78:19:92:a3:58:19:e4:2d:b7:34:14:21:20:ed:61: 3e:e6:ea:b7:87:7d:32:f1:7a:1c:1c:3d:5b:c6:f2:dc:73:9a: 6f:15:8a:67:47:8b:8a:e1:ea:0e:07:c3:ed:9a:95:16:11:13: a4:c7:04:d3:b1:4c:d0:1e:f5:0f:1f:0c:95:f5:15:90:8c:27: e0:56:93:75:32:4f:11:b2:53:b7:7b:28:dd:db:2e:03:d5:8a: 38:93:65:61 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFzU7/RvZsdYZfwmOwk2+nXCzecwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzRTVFRUFFRjU2QTMwNTIzRTE3NjQyNUY3NDFCRUZE NUFDMzdDODAeFw0yNTExMTYwOTE3MDBaFw0yNTExMjExNjQzMDBaMDMxMTAvBgNV BAMTKEQ4OUMzNjdCRTIyMTNFRDQ4Qzg4MTZENzFGNTcyOUM5NkNEOEMxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAUJWmvILxGAOi+xxpBLv8yeq 7KyQIf2PgSy+WgfUUwAodq5BjCFXAAh2vCFDWxji1R/H4zs6kJV7GtwKIp6bsejX imwP8dJLl0c1cY00k5XrMufRxshgldY0cl1X4nj9FKtOBsPuHqQQiE96tNEgB9PL 4CXT9Q62exSABgSezlX0ak7DmQOOawrMUzEKgqpTHrH4KcLXlaCI6qGLYiW5YNV4 WpRlHsrtShd6/ZFT+ZnEA+rvnQOS+0nghgfYre2eM9xxkghIYbSaQa6eWlSGoo0C vf5v8ZPSiczEBuTTHxz6ThRkfenwGMxPY4UyKKGxmdQpWE+q2eS2AqNDkkfrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2Jw2e+IhPtSMiBbXH1cpyWzYwUwwHwYDVR0j BBgwFoAUDT5e6u9WowUj4XZCX3Qb79WsN8gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GOTVGMkI4MDc1OTgxNUFBNDcwRTFFQTI0Qzg4OTdGQjRG MkMxNzE0QTUwOTU3RjQwNzAyN0NBQjgyNjJCOERCLzAvMEQzRTVFRUFFRjU2QTMw NTIzRTE3NjQyNUY3NDFCRUZENUFDMzdDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDNFNUVFQUVGNTZBMzA1MjNF MTc2NDI1Rjc0MUJFRkQ1QUMzN0M4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjk1RjJCODA3NTk4MTVBQTQ3MEUxRUEyNEM4ODk3RkI0RjJDMTcxNEE1 MDk1N0Y0MDcwMjdDQUI4MjYyQjhEQi8wLzBEM0U1RUVBRUY1NkEzMDUyM0UxNzY0 MjVGNzQxQkVGRDVBQzM3QzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqxoWsmaWl/3SXDpRwRA/6g9VY BP5kDC/BUacS5mEEXBjufRhj0puOfffz3Hbxq34NNbOYuCiR2YFDrdhBvBcBIeyM F25stOXYYkOGL6cGZIUIVi3dZOnzKu41BonNwU9Fp37A6j+wFfm9T2R+HBgsrGtV YDkxSviUPULNzZtZ/wiXyZpuCIdlgHQ1gm7ZR+UYKWyZpyEBvQMaU7tWFQcBRq/8 lnZ4GZKjWBnkLbc0FCEg7WE+5uq3h30y8XocHD1bxvLcc5pvFYpnR4uK4eoOB8Pt mpUWEROkxwTTsUzQHvUPHwyV9RWQjCfgVpN1Mk8RslO3eyjd2y4D1Yo4k2Vh -----END CERTIFICATE-----Generated at Sun Nov 16 16:24:25 2025 by rpki-client