$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft File: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft (raw, json) Hash identifier: hpYmFAj3WSByTBIcm87nLEPq7ZNNrVoBDc0SWTk53dQ= Subject key identifier: 44:62:3C:EA:59:C5:12:33:85:CD:23:BE:57:3C:70:A8:FA:A0:EB:19 Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Certificate serial: 2909A95A00C972C1EF61F8359354C5AC6DAE8FED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft Manifest number: 012E Signing time: Tue 04 Nov 2025 03:59:40 +0000 Manifest this update: Tue 04 Nov 2025 03:54:40 +0000 Manifest next update: Sat 08 Nov 2025 18:52:40 +0000 Files and hashes: 1: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl (hash: ug8+MYGt8WJD1jdSAId7a61wt0R5kB3npOcnBsQlllM=) 2: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (hash: yZWkzdnI2yE2GWAW0fR8ozyK+67wGcmDL/+BxkZFYOM=) 3: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (hash: Ndho+BhViPHLNULz7C2z55/V4iRAPugD06lZUvZ4mIY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 18:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:09:a9:5a:00:c9:72:c1:ef:61:f8:35:93:54:c5:ac:6d:ae:8f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Validity Not Before: Nov 4 03:54:40 2025 GMT Not After : Nov 8 18:52:40 2025 GMT Subject: CN=44623CEA59C5123385CD23BE573C70A8FAA0EB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:d8:ef:b0:72:16:07:54:7f:1f:32:0b:f6: de:3b:37:17:1b:9e:21:24:d0:cc:64:6d:71:ac:c9: 15:33:b7:16:be:07:50:aa:e9:0a:15:e3:86:e8:7e: e1:60:98:c7:c3:c9:76:5e:13:22:1f:d9:81:e5:1b: 3f:eb:00:d7:88:9c:94:d5:09:e3:17:09:a9:52:a7: 36:72:c0:8e:17:3c:7e:55:7d:8e:ea:f0:5e:49:7a: de:cb:8e:c2:85:8b:be:07:86:84:0c:a1:7c:58:ca: 7f:bd:62:fc:49:84:d1:42:dd:5a:fb:4a:03:80:fe: 23:29:25:c8:c9:e6:ae:ad:87:de:c0:59:8b:e6:e0: 81:27:2f:a5:37:bf:60:4c:7a:e9:e3:f4:ee:a1:79: 2c:57:96:e3:80:3f:7e:0f:d5:e7:53:8d:e9:9b:e1: 0b:f8:28:ce:08:72:73:9b:92:94:c9:4b:e0:97:08: 1d:05:c6:1c:77:27:e9:13:44:9f:5f:84:ac:1d:d2: 24:07:63:3c:fe:5d:3f:e1:b7:35:76:d6:8b:10:41: 80:1a:12:1b:60:7a:8d:f9:0a:e2:7e:d0:58:c2:5c: 04:ef:29:2d:17:af:70:17:b6:08:53:ad:0c:d0:06: 2a:79:5f:5a:6b:1c:2f:71:94:07:84:20:28:d9:b6: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:62:3C:EA:59:C5:12:33:85:CD:23:BE:57:3C:70:A8:FA:A0:EB:19 X509v3 Authority Key Identifier: keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a9:be:b9:ba:6a:aa:52:8a:ae:19:3e:f8:4a:df:fc:3b:7a: 78:c7:4c:15:ec:e7:6e:ef:f4:aa:0a:e6:a2:20:d3:87:d2:f7: b9:d0:e2:d0:a1:ab:eb:27:78:db:cb:59:24:86:ea:4d:e9:66: 40:f9:67:73:24:49:9b:94:b5:1a:58:0a:7d:29:d4:c5:5e:5e: 11:86:19:07:a0:8e:e3:eb:7d:c6:a8:e9:31:4e:1c:73:e8:33: b7:5b:81:99:d7:e7:0e:33:69:15:3f:91:f3:53:dc:ad:56:9a: 91:b3:44:84:25:63:95:06:ed:0e:04:92:e1:e0:66:b6:eb:e3: e7:24:83:6f:ad:39:26:93:53:42:a3:b1:bc:0f:ac:6e:7b:63: 7b:30:f6:89:74:5a:e1:d7:e1:46:41:71:0a:3f:e2:60:0d:e4: 92:25:32:0f:96:8b:fb:a1:b5:0b:c1:83:36:4a:f0:73:c1:33: f7:f4:2c:5e:20:89:f7:7e:dc:c9:3d:b0:63:fb:dd:f8:35:36: 99:02:d7:a5:b5:04:3d:6e:49:41:9e:87:63:9a:2a:15:98:03: 11:a0:d4:68:ed:3f:1c:0a:ee:e4:30:ec:ef:2f:e1:f2:05:7c: 3f:37:eb:1b:2e:57:d5:a4:5f:e9:57:f6:0c:06:ff:b6:0b:7c: 64:e6:1a:fd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKQmpWgDJcsHvYfg1k1TFrG2uj+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1 QzU2QTMzNjAeFw0yNTExMDQwMzU0NDBaFw0yNTExMDgxODUyNDBaMDMxMTAvBgNV BAMTKDQ0NjIzQ0VBNTlDNTEyMzM4NUNEMjNCRTU3M0M3MEE4RkFBMEVCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnndjvsHIWB1R/HzIL9t47Nxcb niEk0MxkbXGsyRUztxa+B1Cq6QoV44bofuFgmMfDyXZeEyIf2YHlGz/rANeInJTV CeMXCalSpzZywI4XPH5VfY7q8F5Jet7LjsKFi74HhoQMoXxYyn+9YvxJhNFC3Vr7 SgOA/iMpJcjJ5q6th97AWYvm4IEnL6U3v2BMeunj9O6heSxXluOAP34P1edTjemb 4Qv4KM4IcnObkpTJS+CXCB0Fxhx3J+kTRJ9fhKwd0iQHYzz+XT/htzV21osQQYAa Ehtgeo35CuJ+0FjCXATvKS0Xr3AXtghTrQzQBip5X1prHC9xlAeEICjZtiBxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURGI86lnFEjOFzSO+VzxwqPqg6xkwHwYDVR0j BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3 OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1 NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzAwRkYyOTVCOTM5QUQ3MjU4OUNFMjRC N0U0RUQ0MUZDNUM1NkEzMzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhqb65umqqUoquGT74St/8O3p4 x0wV7Odu7/SqCuaiINOH0ve50OLQoavrJ3jby1kkhupN6WZA+WdzJEmblLUaWAp9 KdTFXl4RhhkHoI7j633GqOkxThxz6DO3W4GZ1+cOM2kVP5HzU9ytVpqRs0SEJWOV Bu0OBJLh4Ga26+PnJINvrTkmk1NCo7G8D6xue2N7MPaJdFrh1+FGQXEKP+JgDeSS JTIPlov7obULwYM2SvBzwTP39CxeIIn3ftzJPbBj+934NTaZAteltQQ9bklBnodj mioVmAMRoNRo7T8cCu7kMOzvL+HyBXw/N+sbLlfVpF/pV/YMBv+2C3xk5hr9 -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:21 2025 by rpki-client