$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft File: 3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft (raw, json) Hash identifier: deB8Gpmb7IyiYk+eodEohx07I7IXsLXwvYH8Y+XuJrI= Subject key identifier: 40:30:CB:1E:F7:15:03:B4:41:C5:A9:D1:D4:1D:51:E6:BA:FE:9C:4B Authority key identifier: 3B:FD:A9:56:D2:EB:AA:D5:BE:52:A0:17:61:CB:47:69:6C:BD:D7:31 Certificate issuer: /CN=3BFDA956D2EBAAD5BE52A01761CB47696CBDD731 Certificate serial: 1D0E975490DD692EB227851B73F6E1A64115AA7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft Manifest number: 0128 Signing time: Tue 04 Nov 2025 01:48:31 +0000 Manifest this update: Tue 04 Nov 2025 01:43:31 +0000 Manifest next update: Mon 10 Nov 2025 01:17:31 +0000 Files and hashes: 1: 3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.crl (hash: z7Qp1wWZ7+rndPAtw9YEN0rTR4QK+cn+03ArOIeFWyU=) 2: 3136342e3136332e38382e302f32322d3234203d3e203631343636.roa (hash: QvLp+ld12vbH+HV5d7Sca/gi872PqEsE38+f/W9++EU=) 3: 323830333a313763303a3a2f33322d3332203d3e203631343636.roa (hash: hMF0a500sclmmguXsSvDLop8/P6hogPV3ggKF5W4Xu4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.crl rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0e:97:54:90:dd:69:2e:b2:27:85:1b:73:f6:e1:a6:41:15:aa:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BFDA956D2EBAAD5BE52A01761CB47696CBDD731 Validity Not Before: Nov 4 01:43:31 2025 GMT Not After : Nov 10 01:17:31 2025 GMT Subject: CN=4030CB1EF71503B441C5A9D1D41D51E6BAFE9C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:90:81:9a:26:1f:e5:93:f5:25:9a:40:a8:e8: a6:99:33:4f:dd:93:ae:8a:cc:88:40:51:77:8f:5a: a3:fb:95:c6:b4:79:e5:d9:f4:b2:ab:af:ce:f0:b1: 45:b4:76:ad:2b:f9:5f:1e:05:51:dd:61:70:8a:1a: 77:4b:2d:c0:5e:96:4e:84:eb:17:8c:59:69:b4:bd: db:a7:ae:1d:b8:1e:07:de:50:22:58:ba:40:5c:fc: 7d:63:22:59:ad:e4:0f:55:be:0d:6d:85:8e:39:8d: 46:19:88:8a:33:da:d7:cd:84:91:53:90:68:16:30: 94:89:9c:3c:c9:5b:f4:cc:3b:09:88:b8:a7:bd:ec: 33:cb:85:ff:bc:52:c5:50:54:5b:80:6e:1e:2d:4c: 04:0a:08:e5:d2:79:8f:83:32:fd:9f:eb:8c:15:c0: 35:d9:0e:6c:06:b5:67:45:1c:57:0e:ec:61:f8:41: 13:23:ef:c8:ba:21:10:a6:fd:b7:a6:1d:96:d0:04: 6e:55:bd:b5:ec:b6:b1:d1:0c:c2:db:9c:b8:91:c3: a9:b4:56:4c:83:cc:8e:cc:bc:54:f9:b7:e7:44:e2: fd:df:55:4a:29:52:d1:b3:d1:26:27:34:53:9c:0d: 8a:df:fb:af:46:10:37:83:83:61:89:a9:8b:28:d8: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:30:CB:1E:F7:15:03:B4:41:C5:A9:D1:D4:1D:51:E6:BA:FE:9C:4B X509v3 Authority Key Identifier: keyid:3B:FD:A9:56:D2:EB:AA:D5:BE:52:A0:17:61:CB:47:69:6C:BD:D7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fc:ce:5a:c0:2f:fa:19:2b:a9:ee:90:87:b8:cf:23:4f:99: a4:cb:bf:a2:c0:0c:83:7b:53:f8:f0:26:8e:ff:5c:48:7e:5a: 41:ff:58:76:c1:08:e6:93:22:1c:32:c2:cb:0b:0e:a6:50:c1: 97:02:ab:46:e9:f1:2a:64:b0:64:f3:42:0a:24:6a:0d:04:74: 9c:20:87:76:11:4c:a8:fb:0d:e0:e6:f8:8e:c1:4f:a1:06:00: 74:c5:5a:49:15:82:47:3c:4f:c3:3f:0a:59:3b:ee:be:5a:88: f0:be:0f:4b:69:74:5e:77:2d:a5:36:a9:a4:70:e6:86:92:d8: 94:d7:36:1e:39:d0:c9:00:78:f9:8e:84:db:1d:19:39:8c:14: 48:d3:f1:15:3c:a1:43:82:c4:37:ef:1f:2a:21:1a:e5:57:51: 86:a5:ae:d0:1f:e2:b2:b9:32:27:c6:c7:18:41:59:0f:ac:5a: 9c:0c:66:da:39:24:97:f0:e5:90:5b:e1:10:fe:a2:1e:b1:52: 32:39:8e:af:4c:3e:7f:1b:d4:15:b7:93:11:59:13:97:07:c0: 59:ea:f2:a4:a0:9d:f9:e0:3b:64:c7:e0:01:d5:d7:4e:cf:0e: 18:42:25:b8:29:20:42:54:90:6b:ee:f2:38:a1:52:c8:a4:0b: 30:35:5a:d2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHQ6XVJDdaS6yJ4Ubc/bhpkEVqn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JGREE5NTZEMkVCQUFENUJFNTJBMDE3NjFDQjQ3Njk2 Q0JERDczMTAeFw0yNTExMDQwMTQzMzFaFw0yNTExMTAwMTE3MzFaMDMxMTAvBgNV BAMTKDQwMzBDQjFFRjcxNTAzQjQ0MUM1QTlEMUQ0MUQ1MUU2QkFGRTlDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDakIGaJh/lk/UlmkCo6KaZM0/d k66KzIhAUXePWqP7lca0eeXZ9LKrr87wsUW0dq0r+V8eBVHdYXCKGndLLcBelk6E 6xeMWWm0vdunrh24HgfeUCJYukBc/H1jIlmt5A9Vvg1thY45jUYZiIoz2tfNhJFT kGgWMJSJnDzJW/TMOwmIuKe97DPLhf+8UsVQVFuAbh4tTAQKCOXSeY+DMv2f64wV wDXZDmwGtWdFHFcO7GH4QRMj78i6IRCm/bemHZbQBG5VvbXstrHRDMLbnLiRw6m0 VkyDzI7MvFT5t+dE4v3fVUopUtGz0SYnNFOcDYrf+69GEDeDg2GJqYso2O7xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQDDLHvcVA7RBxanR1B1R5rr+nEswHwYDVR0j BBgwFoAUO/2pVtLrqtW+UqAXYctHaWy91zEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMDAwNkUwREQ0QTRCQ0FCRkI0MjkxNUQyODZEMTZGQTNG RTcxOTJGNjJFNThEMUIyQUY2RDJCMDQ3NTFFOEQzLzAvM0JGREE5NTZEMkVCQUFE NUJFNTJBMDE3NjFDQjQ3Njk2Q0JERDczMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQkZEQTk1NkQyRUJBQUQ1QkU1 MkEwMTc2MUNCNDc2OTZDQkRENzMxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDAwMDZFMERENEE0QkNBQkZCNDI5MTVEMjg2RDE2RkEzRkU3MTkyRjYy RTU4RDFCMkFGNkQyQjA0NzUxRThEMy8wLzNCRkRBOTU2RDJFQkFBRDVCRTUyQTAx NzYxQ0I0NzY5NkNCREQ3MzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA/M5awC/6GSup7pCHuM8jT5mk y7+iwAyDe1P48CaO/1xIflpB/1h2wQjmkyIcMsLLCw6mUMGXAqtG6fEqZLBk80IK JGoNBHScIId2EUyo+w3g5viOwU+hBgB0xVpJFYJHPE/DPwpZO+6+Wojwvg9LaXRe dy2lNqmkcOaGktiU1zYeOdDJAHj5joTbHRk5jBRI0/EVPKFDgsQ37x8qIRrlV1GG pa7QH+KyuTInxscYQVkPrFqcDGbaOSSX8OWQW+EQ/qIesVIyOY6vTD5/G9QVt5MR WROXB8BZ6vKkoJ354Dtkx+AB1ddOzw4YQiW4KSBCVJBr7vI4oVLIpAswNVrS -----END CERTIFICATE-----Generated at Wed Nov 5 22:45:43 2025 by rpki-client