$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft File: FF458BCF6CF40DFE3E43BC054BF5206905966427.mft (raw, json) Hash identifier: +9SbgDBMVgaQ6kTlTg4KYrxUSfr+0EncdQAUZA7Vu9s= Subject key identifier: 3E:94:09:BD:BD:41:22:91:4C:CD:9A:AF:DD:6E:1C:1A:E4:8C:76:55 Authority key identifier: FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27 Certificate issuer: /CN=FF458BCF6CF40DFE3E43BC054BF5206905966427 Certificate serial: 2F5872C566C76CC2FF85EA448364D62ADC917AE6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 12:17:36 +0000 Manifest this update: Wed 05 Nov 2025 12:12:36 +0000 Manifest next update: Mon 10 Nov 2025 13:49:36 +0000 Files and hashes: 1: 34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa (hash: 1JJ3pZlMzlne65pq6TH0fedLcDY01lclCwgdZhZKQiQ=) 2: FF458BCF6CF40DFE3E43BC054BF5206905966427.crl (hash: m5/fVPuR/aA9eA4BpPq6+0lsx8zN2xNy/NtCeOSS10Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:58:72:c5:66:c7:6c:c2:ff:85:ea:44:83:64:d6:2a:dc:91:7a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF458BCF6CF40DFE3E43BC054BF5206905966427 Validity Not Before: Nov 5 12:12:36 2025 GMT Not After : Nov 10 13:49:36 2025 GMT Subject: CN=3E9409BDBD4122914CCD9AAFDD6E1C1AE48C7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:6b:00:12:48:17:35:01:c9:e6:10:79:7c: 6c:4f:0f:fb:ae:0a:c8:c2:01:af:72:07:30:a1:63: 30:a6:5d:28:a9:97:d9:ea:69:4e:ca:48:8d:36:6e: 26:4f:e5:57:9d:17:6f:ef:7e:6d:09:25:a8:79:36: 46:b4:b5:9a:be:fa:f4:5c:95:07:74:4b:5f:6f:d4: 19:58:71:6e:b5:3b:ba:13:99:c0:b1:ef:81:a2:16: b3:35:eb:7e:4b:5f:be:0f:ae:dd:13:49:06:0b:68: df:62:00:89:ed:7e:53:4c:7f:69:5c:b4:5f:0c:5b: 27:ca:74:91:bd:5f:ce:bb:58:35:70:46:03:b2:9e: c8:79:09:b3:68:93:e6:fe:de:9b:0e:c9:23:ee:42: bd:de:15:7d:80:76:45:19:bf:e1:ba:2e:73:47:75: 19:c4:c6:4e:31:66:62:31:bd:e2:8c:c2:7f:11:67: 0f:97:8e:36:4b:cb:ef:fc:54:0c:a5:a4:c6:08:b8: 06:6a:9e:27:84:6b:83:46:c4:f9:38:9f:75:fb:b3: 8c:2f:fd:ca:d3:2f:8c:96:39:69:80:da:6c:10:31: 7b:5f:e4:6a:56:55:57:40:66:9f:21:85:8a:6d:9a: 20:fd:4a:9d:50:b7:83:33:ec:94:a5:ce:59:5b:b0: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:94:09:BD:BD:41:22:91:4C:CD:9A:AF:DD:6E:1C:1A:E4:8C:76:55 X509v3 Authority Key Identifier: keyid:FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ad:78:f2:3a:bc:68:fb:a1:bf:e5:b9:53:2a:0d:68:18:5a: 43:b9:01:5a:a6:14:c3:ae:48:f4:02:c3:2e:a6:fb:0a:d1:c0: 07:3f:3c:c9:82:0a:ed:22:f2:28:e0:98:dd:2d:12:8c:9d:5c: e7:33:21:0d:02:2c:26:6b:80:ff:8f:6e:e4:59:1f:72:c4:9e: d2:ee:29:39:72:1e:a1:54:93:a9:e1:2b:8b:76:cc:a6:62:60: ed:67:69:18:47:62:e3:f0:b6:a3:aa:9d:5f:c9:5f:f2:cd:39: 0c:98:50:f7:df:2c:82:94:9e:ef:33:b8:0d:20:51:9c:a7:bd: c7:9f:38:38:c6:01:c0:10:e7:c8:1c:10:ba:85:fc:c0:09:1d: 5b:c5:f6:73:35:55:3c:02:9d:08:bf:81:2f:36:af:93:ea:1e: 16:cb:76:8c:8f:54:3d:73:47:51:a2:85:6a:3e:8f:a8:ba:0b: 37:69:bc:e2:52:0e:52:7f:7d:5c:e4:39:dc:55:0c:60:c6:8d: 39:19:59:23:f7:11:b3:03:4b:17:1b:2e:91:65:29:0e:ce:f5: 9d:7f:04:bc:69:47:c7:54:7b:e4:10:11:6e:b4:48:44:8d:1d: 0d:83:6a:32:66:15:bf:9d:79:97:6a:4d:ac:c4:ec:f8:3a:2c: b5:48:49:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL1hyxWbHbML/hepEg2TWKtyReuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NThCQ0Y2Q0Y0MERGRTNFNDNCQzA1NEJGNTIwNjkw NTk2NjQyNzAeFw0yNTExMDUxMjEyMzZaFw0yNTExMTAxMzQ5MzZaMDMxMTAvBgNV BAMTKDNFOTQwOUJEQkQ0MTIyOTE0Q0NEOUFBRkRENkUxQzFBRTQ4Qzc2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbGsAEkgXNQHJ5hB5fGxPD/uu CsjCAa9yBzChYzCmXSipl9nqaU7KSI02biZP5VedF2/vfm0JJah5Nka0tZq++vRc lQd0S19v1BlYcW61O7oTmcCx74GiFrM1635LX74Prt0TSQYLaN9iAIntflNMf2lc tF8MWyfKdJG9X867WDVwRgOynsh5CbNok+b+3psOySPuQr3eFX2AdkUZv+G6LnNH dRnExk4xZmIxveKMwn8RZw+XjjZLy+/8VAylpMYIuAZqnieEa4NGxPk4n3X7s4wv /crTL4yWOWmA2mwQMXtf5GpWVVdAZp8hhYptmiD9Sp1Qt4Mz7JSlzllbsGnzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPpQJvb1BIpFMzZqv3W4cGuSMdlUwHwYDVR0j BBgwFoAU/0WLz2z0Df4+Q7wFS/UgaQWWZCcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNzcxNjAzQjI2ODY5QTAwRjY2MTc1NEQxMDM3MjgzQUE4 Qjk2NTI0MUU4RkRFMjlDMUM4NTk0MkExMjNFRkE0LzAvRkY0NThCQ0Y2Q0Y0MERG RTNFNDNCQzA1NEJGNTIwNjkwNTk2NjQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjQ1OEJDRjZDRjQwREZFM0U0 M0JDMDU0QkY1MjA2OTA1OTY2NDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzc3MTYwM0IyNjg2OUEwMEY2NjE3NTREMTAzNzI4M0FBOEI5NjUyNDFF OEZERTI5QzFDODU5NDJBMTIzRUZBNC8wL0ZGNDU4QkNGNkNGNDBERkUzRTQzQkMw NTRCRjUyMDY5MDU5NjY0MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACrXjyOrxo+6G/5blTKg1oGFpD uQFaphTDrkj0AsMupvsK0cAHPzzJggrtIvIo4JjdLRKMnVznMyENAiwma4D/j27k WR9yxJ7S7ik5ch6hVJOp4SuLdsymYmDtZ2kYR2Lj8Lajqp1fyV/yzTkMmFD33yyC lJ7vM7gNIFGcp73Hnzg4xgHAEOfIHBC6hfzACR1bxfZzNVU8Ap0Iv4EvNq+T6h4W y3aMj1Q9c0dRooVqPo+ougs3abziUg5Sf31c5DncVQxgxo05GVkj9xGzA0sXGy6R ZSkOzvWdfwS8aUfHVHvkEBFutEhEjR0Ng2oyZhW/nXmXak2sxOz4Oiy1SElc -----END CERTIFICATE-----Generated at Wed Nov 5 21:43:56 2025 by rpki-client