$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft File: 00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft (raw, json) Hash identifier: 9wbUDTZULaksnOVbqKg/HwPiSGkMFlrCrqyZqanas9s= Subject key identifier: 47:D5:5D:73:F9:08:51:77:85:79:5D:1D:47:E0:15:41:01:7F:F4:7D Authority key identifier: 00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5 Certificate issuer: /CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5 Certificate serial: 28B6BECF5932EDE4393A887E24A7BC57F66176AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft Manifest number: 0140 Signing time: Tue 04 Nov 2025 00:22:43 +0000 Manifest this update: Tue 04 Nov 2025 00:17:43 +0000 Manifest next update: Sun 09 Nov 2025 21:36:43 +0000 Files and hashes: 1: 00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl (hash: jmElL4WeQu7UltpghM+kjNTebwR1vxMHdNPWZn10vVA=) 2: 34352e352e35322e302f32322d3234203d3e20323635353330.roa (hash: 12SZKM9Tc45V3wT42xOjA7g6amNPvNSH/2twfURRle4=) 3: 323830363a3238653a3a2f33322d3332203d3e20323635353330.roa (hash: M4lYfMwxi3LRDhmunYDA0TtGyJI5WZl72NNAQMExhuk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b6:be:cf:59:32:ed:e4:39:3a:88:7e:24:a7:bc:57:f6:61:76:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5 Validity Not Before: Nov 4 00:17:43 2025 GMT Not After : Nov 9 21:36:43 2025 GMT Subject: CN=47D55D73F908517785795D1D47E01541017FF47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:5d:3d:d3:25:9a:51:0c:9e:4b:af:69:77: 86:56:ef:cb:f8:ed:8c:a6:2e:0a:fa:0d:46:8c:f5: ed:02:51:c1:c4:a6:9e:90:97:32:ba:67:4e:7f:b0: 0f:f2:30:4a:5f:03:49:21:96:9e:9c:ed:fb:1c:45: c8:57:21:4b:ce:3d:4e:41:50:3d:bb:85:8d:bc:29: a1:8d:bb:5a:76:07:65:54:ba:19:3c:f2:fd:1c:e8: c7:2b:e9:8a:70:ff:55:1b:0e:25:c7:e3:60:f9:e7: 56:3f:66:7e:ef:3f:62:88:1b:c6:dc:5a:59:d8:a4: de:3c:6a:06:90:7f:f6:2f:48:87:54:9f:18:0a:32: 48:92:97:14:de:8b:30:66:93:ed:1f:14:55:f1:11: 68:e5:34:d5:f0:8f:05:17:45:83:f4:a2:38:c9:94: db:3a:88:cc:0f:3d:1a:c2:cb:74:2b:50:cd:70:37: 7c:b4:c0:7d:5e:48:49:3e:e2:55:24:d8:bc:8c:12: 87:99:2b:e1:2e:94:9a:c4:d7:00:9f:01:61:c5:fb: 15:65:e1:e3:9e:ad:05:a9:a4:37:3b:a0:ca:9e:95: 52:a0:36:5d:a1:16:71:73:6f:b4:21:f6:68:2d:49: ff:47:1a:67:e7:ca:4f:22:08:34:2f:ac:55:07:f4: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D5:5D:73:F9:08:51:77:85:79:5D:1D:47:E0:15:41:01:7F:F4:7D X509v3 Authority Key Identifier: keyid:00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e6:37:cd:8d:1d:3f:50:d6:77:76:cb:81:4d:4c:10:c7:3c: b7:a5:7e:08:c0:69:a6:83:cc:31:3c:1d:50:3e:2a:3b:0a:12: a8:fa:ea:13:19:c8:0c:3d:2f:0b:34:cb:0c:51:ad:0e:e5:78: 24:ca:a2:fb:20:83:5b:33:10:25:ca:4e:5c:d2:ee:cb:6d:38: 80:32:0d:f0:d5:e5:55:b7:9a:5f:58:22:34:42:78:29:5b:30: c1:a6:b5:79:2e:0f:66:cf:f3:ee:ad:50:7a:19:50:ea:6f:9a: 4b:7c:33:42:92:c6:54:f9:7b:72:1c:c5:1a:b9:5f:f7:ef:b5: ee:1c:ba:0f:2d:7a:91:ad:13:d1:65:7a:91:30:48:58:37:07: 78:e3:89:bb:40:00:70:5f:8f:8c:30:25:31:84:6a:bc:4e:24: 5e:6a:67:06:b1:af:b7:87:20:27:75:94:66:3d:c6:26:40:95: 70:e6:f5:ec:b6:71:19:07:a4:67:dc:7b:40:dd:04:23:34:9c: f2:31:4f:66:e5:08:ce:5a:d8:1c:fb:6a:73:64:0a:f8:65:03: 38:93:93:e6:b3:da:fd:03:25:a4:21:61:1c:98:32:7f:f7:c6: b0:6b:52:59:fb:57:15:d7:b2:5b:29:c0:04:64:3d:e5:ff:30: b1:f0:1c:28 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKLa+z1ky7eQ5Ooh+JKe8V/ZhdqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDREMwRUYzM0M2MEQ4QzAzNUNBNjlGMTg2RkQ2QzNE REVFRjVGNTAeFw0yNTExMDQwMDE3NDNaFw0yNTExMDkyMTM2NDNaMDMxMTAvBgNV BAMTKDQ3RDU1RDczRjkwODUxNzc4NTc5NUQxRDQ3RTAxNTQxMDE3RkY0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUl090yWaUQyeS69pd4ZW78v4 7YymLgr6DUaM9e0CUcHEpp6QlzK6Z05/sA/yMEpfA0khlp6c7fscRchXIUvOPU5B UD27hY28KaGNu1p2B2VUuhk88v0c6Mcr6Ypw/1UbDiXH42D551Y/Zn7vP2KIG8bc WlnYpN48agaQf/YvSIdUnxgKMkiSlxTeizBmk+0fFFXxEWjlNNXwjwUXRYP0ojjJ lNs6iMwPPRrCy3QrUM1wN3y0wH1eSEk+4lUk2LyMEoeZK+EulJrE1wCfAWHF+xVl 4eOerQWppDc7oMqelVKgNl2hFnFzb7Qh9mgtSf9HGmfnyk8iCDQvrFUH9BVnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUR9Vdc/kIUXeFeV0dR+AVQQF/9H0wHwYDVR0j BBgwFoAUAM3A7zPGDYwDXKafGG/Ww93u9fUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQzJCMzRCQkM3NzQyNEUyQzY3NTlERDIyRjgxODNBNzI4 NzhERTUwMUE2RTU1MjNFMEE1NUY1NUYyMkM5MUU3LzAvMDBDREMwRUYzM0M2MEQ4 QzAzNUNBNjlGMTg2RkQ2QzNEREVFRjVGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMENEQzBFRjMzQzYwRDhDMDM1 Q0E2OUYxODZGRDZDM0RERUVGNUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0MyQjM0QkJDNzc0MjRFMkM2NzU5REQyMkY4MTgzQTcyODc4REU1MDFB NkU1NTIzRTBBNTVGNTVGMjJDOTFFNy8wLzAwQ0RDMEVGMzNDNjBEOEMwMzVDQTY5 RjE4NkZENkMzRERFRUY1RjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ5jfNjR0/UNZ3dsuBTUwQxzy3 pX4IwGmmg8wxPB1QPio7ChKo+uoTGcgMPS8LNMsMUa0O5XgkyqL7IINbMxAlyk5c 0u7LbTiAMg3w1eVVt5pfWCI0QngpWzDBprV5Lg9mz/PurVB6GVDqb5pLfDNCksZU +XtyHMUauV/377XuHLoPLXqRrRPRZXqRMEhYNwd444m7QABwX4+MMCUxhGq8TiRe amcGsa+3hyAndZRmPcYmQJVw5vXstnEZB6Rn3HtA3QQjNJzyMU9m5QjOWtgc+2pz ZAr4ZQM4k5Pms9r9AyWkIWEcmDJ/98awa1JZ+1cV17JbKcAEZD3l/zCx8Bwo -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:49 2025 by rpki-client