$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft File: 39DA2872E102D36A2456FA542BEBDF503603A4A9.mft (raw, json) Hash identifier: idUJ8xImNtNER6x+jZFsQEemqR/Fugu/hOJsa6/F3/E= Subject key identifier: 48:EE:CD:B9:04:CE:C6:83:F3:E2:99:72:4A:09:F8:15:E3:C7:9A:B0 Authority key identifier: 39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9 Certificate issuer: /CN=39DA2872E102D36A2456FA542BEBDF503603A4A9 Certificate serial: 545F90C61D13BB91F60A56E6E8C68C179F8FCCCB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft Manifest number: 0138 Signing time: Wed 05 Nov 2025 00:00:49 +0000 Manifest this update: Tue 04 Nov 2025 23:55:49 +0000 Manifest next update: Mon 10 Nov 2025 08:59:49 +0000 Files and hashes: 1: 39DA2872E102D36A2456FA542BEBDF503603A4A9.crl (hash: 2HpZuhhId4mW8odspe91qeQv7kMhJ1KQoIig5x7GIAs=) 2: 323830333a323832303a3a2f33322d3332203d3e20323635383035.roa (hash: VxaS2Hv3orOtd1l6prdyrzlyQ2XtCU6i3ovitwENnQQ=) 3: 3230312e3138322e3138382e302f32322d3234203d3e20323635383035.roa (hash: gvvrQIfi3slhubZCwJZtvzvFVWXL94P9wAFlEeuundo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5f:90:c6:1d:13:bb:91:f6:0a:56:e6:e8:c6:8c:17:9f:8f:cc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39DA2872E102D36A2456FA542BEBDF503603A4A9 Validity Not Before: Nov 4 23:55:49 2025 GMT Not After : Nov 10 08:59:49 2025 GMT Subject: CN=48EECDB904CEC683F3E299724A09F815E3C79AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:5e:9f:b4:88:b7:ec:50:21:2e:d2:db:d7: 7f:3c:56:d8:19:c3:8d:32:a8:6c:af:19:58:9c:aa: ca:a2:e8:b2:73:15:2b:cb:dc:a7:53:97:fb:44:85: 49:a0:17:f8:f1:ea:6d:8c:a9:bc:45:c6:4b:5d:64: 5d:e3:f5:a0:e1:e5:26:a4:2d:73:ce:fc:b2:1e:f0: 6b:2b:90:4d:4e:ed:84:0d:c1:cb:17:77:3f:c8:42: b7:ec:f5:db:72:16:95:62:61:ac:7a:52:11:99:c4: e0:71:9c:15:ac:d9:97:ac:b3:46:81:2a:c6:ea:61: 95:de:9c:cd:90:97:46:b8:da:f2:23:ea:d7:b4:41: 8b:f2:81:8b:e1:95:65:72:a2:ba:40:32:0a:41:55: 11:c8:d3:93:73:36:95:a5:42:14:05:61:4f:f5:a4: e7:45:04:e1:dc:82:a6:bb:1f:38:8d:10:9a:8c:89: a7:8a:09:8a:04:51:ce:9a:41:ff:2c:93:50:bb:f1: 8e:cc:c0:6b:d6:4a:6f:66:44:8f:c2:75:34:e2:18: c9:24:04:9c:8c:86:5f:1d:13:a8:53:5b:85:96:41: b3:97:26:92:b0:d7:ba:cc:b6:4c:f4:00:50:6d:41: c0:2a:d5:d9:93:64:42:50:05:d6:35:f7:2c:05:5c: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EE:CD:B9:04:CE:C6:83:F3:E2:99:72:4A:09:F8:15:E3:C7:9A:B0 X509v3 Authority Key Identifier: keyid:39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e3:86:60:c1:09:fc:b2:8e:3e:f1:1a:db:92:9f:3b:77:36: b4:d0:dd:ee:00:0e:75:f7:3a:b2:69:a8:6e:d3:35:e4:b3:93: 7f:0f:f7:1f:75:63:4c:86:01:64:ac:e3:91:fb:37:51:1f:42: 0a:92:92:75:b6:39:dd:aa:cb:46:eb:2a:6d:23:ca:47:c7:f4: 24:54:85:16:18:37:ab:b7:01:ba:c0:98:55:9f:f7:e9:28:8d: 72:cf:3b:62:39:fd:f6:3e:64:f8:86:fb:48:01:46:c3:0b:83: 57:58:9d:23:fa:71:38:e6:96:1e:48:8b:1f:d3:9e:e1:3c:e8: 50:7a:b8:4a:df:0f:a8:b5:80:32:8e:bc:d4:6e:30:61:a1:b5: fb:80:a3:fe:58:98:bb:f9:3c:80:8b:b8:46:ac:b6:9c:56:1e: 7b:26:3a:51:d8:b2:01:4d:53:f3:1e:b0:eb:36:79:0d:a4:45: ef:a7:89:aa:06:1b:f2:37:81:b3:ff:5a:f7:62:12:0d:ca:ac: 62:ef:31:e8:dc:8f:61:c7:bf:92:4c:6c:d6:60:2d:5f:79:e9: f0:2d:13:49:16:ba:8a:be:ea:34:b4:39:b2:33:1a:36:44:6d: f4:29:ba:f6:71:4d:18:98:13:df:0d:fe:e5:9f:19:4a:d3:86: e1:5f:58:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVF+Qxh0Tu5H2Clbm6MaMF5+PzMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlEQTI4NzJFMTAyRDM2QTI0NTZGQTU0MkJFQkRGNTAz NjAzQTRBOTAeFw0yNTExMDQyMzU1NDlaFw0yNTExMTAwODU5NDlaMDMxMTAvBgNV BAMTKDQ4RUVDREI5MDRDRUM2ODNGM0UyOTk3MjRBMDlGODE1RTNDNzlBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXh16ftIi37FAhLtLb1388VtgZ w40yqGyvGVicqsqi6LJzFSvL3KdTl/tEhUmgF/jx6m2MqbxFxktdZF3j9aDh5Sak LXPO/LIe8GsrkE1O7YQNwcsXdz/IQrfs9dtyFpViYax6UhGZxOBxnBWs2Zess0aB KsbqYZXenM2Ql0a42vIj6te0QYvygYvhlWVyorpAMgpBVRHI05NzNpWlQhQFYU/1 pOdFBOHcgqa7HziNEJqMiaeKCYoEUc6aQf8sk1C78Y7MwGvWSm9mRI/CdTTiGMkk BJyMhl8dE6hTW4WWQbOXJpKw17rMtkz0AFBtQcAq1dmTZEJQBdY19ywFXH+dAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSO7NuQTOxoPz4plySgn4FePHmrAwHwYDVR0j BBgwFoAUOdoocuEC02okVvpUK+vfUDYDpKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMEI0NTg2NjdDOTY2NTRGMzExNjUyOTdFRTZDRDgwQUJE ODc1NzQ2NEQ1MTI3QjBBRTM0QUZBQjhBNEI1RjhDLzAvMzlEQTI4NzJFMTAyRDM2 QTI0NTZGQTU0MkJFQkRGNTAzNjAzQTRBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOURBMjg3MkUxMDJEMzZBMjQ1 NkZBNTQyQkVCREY1MDM2MDNBNEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjBCNDU4NjY3Qzk2NjU0RjMxMTY1Mjk3RUU2Q0Q4MEFCRDg3NTc0NjRE NTEyN0IwQUUzNEFGQUI4QTRCNUY4Qy8wLzM5REEyODcyRTEwMkQzNkEyNDU2RkE1 NDJCRUJERjUwMzYwM0E0QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAN44ZgwQn8so4+8Rrbkp87dza0 0N3uAA519zqyaahu0zXks5N/D/cfdWNMhgFkrOOR+zdRH0IKkpJ1tjndqstG6ypt I8pHx/QkVIUWGDertwG6wJhVn/fpKI1yzztiOf32PmT4hvtIAUbDC4NXWJ0j+nE4 5pYeSIsf057hPOhQerhK3w+otYAyjrzUbjBhobX7gKP+WJi7+TyAi7hGrLacVh57 JjpR2LIBTVPzHrDrNnkNpEXvp4mqBhvyN4Gz/1r3YhINyqxi7zHo3I9hx7+STGzW YC1feenwLRNJFrqKvuo0tDmyMxo2RG30Kbr2cU0YmBPfDf7lnxlK04bhX1jx -----END CERTIFICATE-----Generated at Wed Nov 5 23:09:00 2025 by rpki-client