$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft File: 1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft (raw, json) Hash identifier: 4dNWcdEK2PQQEbSAjMQ5mmCd6g+7MQP62ZuI7B26Stw= Subject key identifier: EC:E2:54:77:CF:9C:31:E8:15:BC:92:31:7F:15:10:26:1A:C9:58:B0 Authority key identifier: 16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0 Certificate issuer: /CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0 Certificate serial: 0CBAFEC57177883E9262D045100D638E3DC710C2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft Manifest number: 0132 Signing time: Mon 03 Nov 2025 23:52:24 +0000 Manifest this update: Mon 03 Nov 2025 23:47:24 +0000 Manifest next update: Sat 08 Nov 2025 14:11:24 +0000 Files and hashes: 1: 1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl (hash: ntXCoVQ1+aJJDG1XLDoQyc4O/dtcnh5GlInL3UmZ1iM=) 2: 3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa (hash: y4uUtlG6SSFTuREpjmiP/C8qOweZgXnKYC/hxC7piOQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 14:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ba:fe:c5:71:77:88:3e:92:62:d0:45:10:0d:63:8e:3d:c7:10:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0 Validity Not Before: Nov 3 23:47:24 2025 GMT Not After : Nov 8 14:11:24 2025 GMT Subject: CN=ECE25477CF9C31E815BC92317F1510261AC958B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:f6:b9:49:58:df:c0:92:f7:3b:8b:5d:51: cd:96:7e:66:00:55:7f:f2:ea:a6:61:e1:14:bc:e7: b5:2a:25:e8:dc:79:06:68:cf:75:56:cf:59:82:78: cb:a8:79:24:be:c3:f1:08:04:7f:07:92:5e:70:3e: bd:c2:f8:fd:49:01:00:ac:54:14:5a:7d:ba:00:9d: 72:dc:1e:3d:6c:ba:0e:54:c3:2d:0e:95:7f:6a:61: 11:da:e9:99:7b:d3:37:fd:aa:8a:22:94:82:25:63: d5:51:e9:e3:d2:28:ca:29:12:fa:cb:4a:fa:71:ae: 56:e3:11:bc:c7:22:6d:9b:cb:10:d5:8d:52:a3:b5: e1:f2:d5:92:cd:62:49:42:59:24:69:e4:69:d1:7b: 97:45:32:5f:e5:87:4f:6e:38:0d:e8:aa:ba:17:0d: 07:f5:7a:fc:88:e3:0e:5c:08:d1:e0:f0:c5:a1:06: 14:83:05:47:b2:b9:5f:12:50:06:a7:92:49:05:5c: a7:af:b0:6e:d1:b2:19:e2:99:3e:70:00:3c:b9:8c: 79:fe:60:bd:d4:4b:29:eb:28:ec:db:51:5f:ef:ad: d3:7f:e4:a1:9e:38:c1:0e:23:dc:7c:25:86:02:6c: 01:71:62:f2:cb:02:a1:e5:5a:a6:95:56:06:2c:8d: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:54:77:CF:9C:31:E8:15:BC:92:31:7F:15:10:26:1A:C9:58:B0 X509v3 Authority Key Identifier: keyid:16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2f:4a:83:a9:6b:10:ee:62:72:9c:dd:06:dc:89:ed:7c:ab: 30:72:7d:61:d9:eb:9b:d8:7e:24:b4:79:4d:00:34:0b:58:f4: 81:2e:f4:49:d9:d6:0e:8b:01:29:dc:85:e1:89:57:a3:32:6f: 96:42:74:a1:85:c6:7e:dd:9d:81:0b:e6:c0:f6:ff:84:95:f2: 7b:d1:97:78:72:cc:a6:5e:25:88:e1:c8:34:44:a3:a5:2d:b4: 29:83:53:bc:bc:bd:b1:0f:3f:d1:9d:51:48:da:05:31:7f:ad: f6:9c:36:15:1c:89:2a:91:40:34:4c:bf:eb:45:bb:3e:3f:8a: db:68:e5:c8:79:63:36:40:e4:94:c4:89:8a:9b:05:c0:a1:ec: bd:85:77:68:8d:88:6b:e9:a7:74:5f:0c:25:f9:9c:16:1f:c5: b2:ca:2c:bf:2e:95:5b:83:49:84:a4:1c:3b:15:52:f4:c4:a1: 2a:ab:cd:f5:af:a5:51:5d:45:52:6e:54:7c:ab:fc:96:30:be: b9:76:7a:19:3b:3f:17:fc:42:5c:64:5c:bb:a5:4d:5b:06:b4: c3:91:f7:e7:39:07:62:eb:37:dc:71:c7:65:38:e3:0d:98:4a: 39:47:0c:8b:7b:56:1d:22:5e:05:bc:ec:a2:99:b1:4e:58:70: be:7e:68:b8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDLr+xXF3iD6SYtBFEA1jjj3HEMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NTAxNUQwQ0ZGQzAwQjg4Qzc2QTk5QjQ2REM1QTU2 N0YwQTBCMDAeFw0yNTExMDMyMzQ3MjRaFw0yNTExMDgxNDExMjRaMDMxMTAvBgNV BAMTKEVDRTI1NDc3Q0Y5QzMxRTgxNUJDOTIzMTdGMTUxMDI2MUFDOTU4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqva5SVjfwJL3O4tdUc2WfmYA VX/y6qZh4RS857UqJejceQZoz3VWz1mCeMuoeSS+w/EIBH8Hkl5wPr3C+P1JAQCs VBRafboAnXLcHj1sug5Uwy0OlX9qYRHa6Zl70zf9qooilIIlY9VR6ePSKMopEvrL SvpxrlbjEbzHIm2byxDVjVKjteHy1ZLNYklCWSRp5GnRe5dFMl/lh09uOA3oqroX DQf1evyI4w5cCNHg8MWhBhSDBUeyuV8SUAankkkFXKevsG7RshnimT5wADy5jHn+ YL3USynrKOzbUV/vrdN/5KGeOMEOI9x8JYYCbAFxYvLLAqHlWqaVVgYsjY3HAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7OJUd8+cMegVvJIxfxUQJhrJWLAwHwYDVR0j BBgwFoAUFlUBXQz/wAuIx2qZtG3FpWfwoLAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQzI0REU0NkFDRTdDNzFERTI3OEIwNzE2MEE1RkI3QzEx QzQ4RUZBQjgwM0FCNTg1NzUxOEZCRTc5QzczOTVDLzAvMTY1NTAxNUQwQ0ZGQzAw Qjg4Qzc2QTk5QjQ2REM1QTU2N0YwQTBCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjU1MDE1RDBDRkZDMDBCODhD NzZBOTlCNDZEQzVBNTY3RjBBMEIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0MyNERFNDZBQ0U3QzcxREUyNzhCMDcxNjBBNUZCN0MxMUM0OEVGQUI4 MDNBQjU4NTc1MThGQkU3OUM3Mzk1Qy8wLzE2NTUwMTVEMENGRkMwMEI4OEM3NkE5 OUI0NkRDNUE1NjdGMEEwQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaL0qDqWsQ7mJynN0G3IntfKsw cn1h2eub2H4ktHlNADQLWPSBLvRJ2dYOiwEp3IXhiVejMm+WQnShhcZ+3Z2BC+bA 9v+ElfJ70Zd4csymXiWI4cg0RKOlLbQpg1O8vL2xDz/RnVFI2gUxf632nDYVHIkq kUA0TL/rRbs+P4rbaOXIeWM2QOSUxImKmwXAoey9hXdojYhr6ad0Xwwl+ZwWH8Wy yiy/LpVbg0mEpBw7FVL0xKEqq831r6VRXUVSblR8q/yWML65dnoZOz8X/EJcZFy7 pU1bBrTDkffnOQdi6zfcccdlOOMNmEo5RwyLe1YdIl4FvOyimbFOWHC+fmi4 -----END CERTIFICATE-----Generated at Wed Nov 5 14:34:42 2025 by rpki-client