$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft File: 3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft (raw, json) Hash identifier: Y+iM5nol75283vcipAGWa0nZkLYECB7ZvUXi7LKBIhY= Subject key identifier: 25:3E:4F:7C:D0:9A:64:22:82:87:FC:EF:F2:8F:F7:40:2B:45:F0:BE Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B Certificate issuer: /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B Certificate serial: 72D1826824726111AEE5A71AFFB0165570DF58E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft Manifest number: 0139 Signing time: Tue 04 Nov 2025 17:07:16 +0000 Manifest this update: Tue 04 Nov 2025 17:02:16 +0000 Manifest next update: Mon 10 Nov 2025 01:26:16 +0000 Files and hashes: 1: 34352e3233382e31322e302f32342d3234203d3e20323636383337.roa (hash: 55y8w5nGfteYDiB9xn3/+qJUqCZI0qRnGOKq7worFws=) 2: 3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl (hash: CvXvifQBs71AT6yE7oS+LKKTmyuR+PpZpjHpk0NZ87E=) 3: 34352e3233382e31342e302f32342d3234203d3e20323636383337.roa (hash: CFq5dJ5b6iMTiEmGm39PVxnX/fhYWyK/rAly20OIpOI=) 4: 34352e3233382e31352e302f32342d3234203d3e20323636383337.roa (hash: VKHd2QI67Urln+Z5S1rpU4WP8wB49u86isCystO0iMs=) 5: 34352e3233382e31322e302f32322d3232203d3e20323636383337.roa (hash: z6ZNfxPF9Bx8FjrSZCOvspvzZheEDC89pqHuq8MSxr0=) 6: 34352e3233382e31332e302f32342d3234203d3e20323636383337.roa (hash: T2hd+7l6ymAZs0ExpiGtu8k0b3XkiE3vmQEQiUUViL0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d1:82:68:24:72:61:11:ae:e5:a7:1a:ff:b0:16:55:70:df:58:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B Validity Not Before: Nov 4 17:02:16 2025 GMT Not After : Nov 10 01:26:16 2025 GMT Subject: CN=253E4F7CD09A64228287FCEFF28FF7402B45F0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:a8:22:93:f9:c2:e6:a5:48:5e:31:9b:cb: a0:28:fc:8f:eb:13:2b:d8:97:83:6c:ec:83:80:99: 97:ec:7f:91:f2:1a:a9:81:15:a2:e3:46:d7:28:16: d5:85:49:aa:9e:0f:ad:92:a6:65:84:7a:e8:4a:85: 2f:c5:72:3d:af:47:a8:81:71:f3:8f:d5:b7:1d:65: d5:79:0c:75:58:ee:68:35:4a:9b:0e:54:db:47:1f: 9d:e0:e1:f3:68:90:1b:e0:b4:66:bb:83:bb:a6:cd: fd:7b:4b:3e:6d:77:fb:17:77:25:3e:f4:26:0b:04: f4:24:bc:6e:70:98:38:98:55:ab:27:96:b7:0c:64: 6a:27:55:1c:48:da:47:7a:e5:95:35:4c:99:c3:ab: e2:db:68:2a:bf:6d:4e:d8:b2:1c:bc:1c:79:3e:4f: ef:3d:2d:94:93:c7:dc:7d:54:85:f7:d5:df:81:a3: ad:8a:2a:0c:1c:dd:cd:34:39:b2:eb:95:04:79:e3: 45:a8:c3:d3:90:d0:bc:c6:49:be:34:e8:33:49:8b: 1e:db:67:b1:f8:4c:c3:c5:33:87:17:a4:9f:e8:8f: 5e:74:22:f5:67:01:bf:b1:4a:99:bb:67:7c:9b:f3: 67:1c:ac:81:0c:83:7f:e5:29:72:a8:35:4b:e1:4b: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:4F:7C:D0:9A:64:22:82:87:FC:EF:F2:8F:F7:40:2B:45:F0:BE X509v3 Authority Key Identifier: keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2c:2d:ab:c0:35:30:cf:55:2c:63:79:c3:3f:75:c7:91:72: 71:1f:81:03:af:8d:e0:d7:f6:2c:47:6b:cc:0a:da:a7:46:04: 15:38:aa:ce:c7:88:d9:fa:d5:b9:cb:06:7c:9a:f8:22:11:f7: 35:c0:04:87:da:8c:99:d0:64:7d:f4:c8:31:48:eb:2f:5b:f7: 89:e4:e2:77:eb:4d:2b:4c:00:b4:a5:b3:95:fd:ad:4c:66:db: ea:6c:b9:2e:f6:b6:97:47:66:80:b7:8f:c3:e6:9a:c6:22:d6: 49:f7:0c:d7:f5:40:fb:4f:6a:a2:05:4f:26:5b:90:d4:a6:ce: e4:f8:e0:51:08:cd:30:b9:cf:6e:db:ee:9b:5b:6a:fc:3c:6c: 75:46:67:14:64:99:18:f7:7d:b4:bb:b0:c9:58:28:70:6e:91: 78:5c:6d:40:8c:7e:55:c9:a5:ca:37:a6:fb:4b:e7:f9:5d:97: 81:c3:57:d8:58:41:95:64:b0:2c:6b:51:cd:04:b2:bf:73:c8: 2c:52:7f:c1:1a:21:84:75:4a:c3:59:7b:82:5e:3e:64:b6:f4: 19:12:c4:dc:54:c9:98:dd:e5:15:95:ab:88:15:9c:1c:ec:41: da:95:fc:9b:46:9b:9f:f5:57:dc:ec:b3:1a:af:71:5d:50:e1: ce:4c:f1:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUctGCaCRyYRGu5aca/7AWVXDfWOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EyQzNERTM5REVEQkE1MjI1RUE3RkVCQzI4OTMzMTIw QUI5MzYxQjAeFw0yNTExMDQxNzAyMTZaFw0yNTExMTAwMTI2MTZaMDMxMTAvBgNV BAMTKDI1M0U0RjdDRDA5QTY0MjI4Mjg3RkNFRkYyOEZGNzQwMkI0NUYwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcW6gik/nC5qVIXjGby6Ao/I/r EyvYl4Ns7IOAmZfsf5HyGqmBFaLjRtcoFtWFSaqeD62SpmWEeuhKhS/Fcj2vR6iB cfOP1bcdZdV5DHVY7mg1SpsOVNtHH53g4fNokBvgtGa7g7umzf17Sz5td/sXdyU+ 9CYLBPQkvG5wmDiYVasnlrcMZGonVRxI2kd65ZU1TJnDq+LbaCq/bU7Yshy8HHk+ T+89LZSTx9x9VIX31d+Bo62KKgwc3c00ObLrlQR540Wow9OQ0LzGSb406DNJix7b Z7H4TMPFM4cXpJ/oj150IvVnAb+xSpm7Z3yb82ccrIEMg3/lKXKoNUvhSzVBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJT5PfNCaZCKCh/zv8o/3QCtF8L4wHwYDVR0j BBgwFoAUOiw9453tulIl6n/rwokzEgq5NhswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yM0YwODIzMkJGNTAyMTk0RTNBMkU0MDExREI0ODNERDdC RjQ4Qzg0NjU3NDE4MEY0RUVCNTE3RUE5MTgzRjMwLzAvM0EyQzNERTM5REVEQkE1 MjI1RUE3RkVCQzI4OTMzMTIwQUI5MzYxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTJDM0RFMzlERURCQTUyMjVF QTdGRUJDMjg5MzMxMjBBQjkzNjFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjNGMDgyMzJCRjUwMjE5NEUzQTJFNDAxMURCNDgzREQ3QkY0OEM4NDY1 NzQxODBGNEVFQjUxN0VBOTE4M0YzMC8wLzNBMkMzREUzOURFREJBNTIyNUVBN0ZF QkMyODkzMzEyMEFCOTM2MUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbLC2rwDUwz1UsY3nDP3XHkXJx H4EDr43g1/YsR2vMCtqnRgQVOKrOx4jZ+tW5ywZ8mvgiEfc1wASH2oyZ0GR99Mgx SOsvW/eJ5OJ3600rTAC0pbOV/a1MZtvqbLku9raXR2aAt4/D5prGItZJ9wzX9UD7 T2qiBU8mW5DUps7k+OBRCM0wuc9u2+6bW2r8PGx1RmcUZJkY9320u7DJWChwbpF4 XG1AjH5VyaXKN6b7S+f5XZeBw1fYWEGVZLAsa1HNBLK/c8gsUn/BGiGEdUrDWXuC Xj5ktvQZEsTcVMmY3eUVlauIFZwc7EHalfybRpuf9Vfc7LMar3FdUOHOTPEC -----END CERTIFICATE-----Generated at Wed Nov 5 15:52:46 2025 by rpki-client