$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft File: 3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft (raw, json) Hash identifier: zRQ81P17YOwHUfR6kfxtj6LeylNuHEFkjBxxB3U8qFY= Subject key identifier: 66:3F:E2:CF:D9:8A:74:C1:AE:A9:99:6F:4F:A2:FA:9A:AF:C7:73:0F Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27 Certificate issuer: /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27 Certificate serial: 52177A6A9BF9D7A564349A528D86DBF900CB0930 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft Manifest number: FC Signing time: Mon 03 Nov 2025 23:57:27 +0000 Manifest this update: Mon 03 Nov 2025 23:52:27 +0000 Manifest next update: Sat 08 Nov 2025 11:25:27 +0000 Files and hashes: 1: 3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl (hash: lYaLk+mCcaS43aChbdcHMprLYzfbDMuk4/mDOYf0eVI=) 2: 323830363a3362373a3a2f33322d3332203d3e20323730313135.roa (hash: ApUEMcIFcj7OmyMwoOymjdorssjQseVK3/CqqZnrHys=) 3: 3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa (hash: a0k+CwYndo/yJVuwlwMwgfTqpZBa1L3iIsbKzuB2Ssk=) 4: 3138372e3130322e3232392e302f32342d3234203d3e20323733323830.roa (hash: UjH8uRWjG8Ut49YxqXvAmJPaNA3fGdCfKDBGUGrCSiI=) 5: 3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa (hash: T5qcA5Hg+4yxfH7EqrPAjjz2OExW8ImItq8qjroLAnQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 11:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:17:7a:6a:9b:f9:d7:a5:64:34:9a:52:8d:86:db:f9:00:cb:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27 Validity Not Before: Nov 3 23:52:27 2025 GMT Not After : Nov 8 11:25:27 2025 GMT Subject: CN=663FE2CFD98A74C1AEA9996F4FA2FA9AAFC7730F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:24:87:0c:83:af:03:c7:eb:8c:04:fd:9f:c2: 20:d7:8b:3b:f6:6d:a1:2f:bf:a3:5d:7d:4f:ed:74: 03:72:dc:54:0a:c4:23:22:53:6d:f3:dc:bc:aa:c8: 25:37:2a:2b:2b:82:d4:54:af:4d:24:a1:1c:76:d2: 29:35:ba:4d:cc:3f:76:38:3a:95:9e:e5:70:18:ef: 32:cd:2a:31:cf:ad:eb:ca:9a:74:08:2f:9d:43:0c: 00:5e:e3:c5:bd:4e:b3:e0:1b:25:c9:53:f0:8f:70: b8:24:ad:37:f3:d3:4c:ed:c0:94:5e:26:53:da:2d: e6:bf:49:de:92:49:44:49:a4:03:8e:72:6a:69:37: ad:3f:22:d1:de:b8:75:b2:20:64:f7:76:d5:73:7a: f1:71:a6:eb:3d:15:e7:ec:87:e8:0a:fa:19:bb:fc: 8e:27:b9:d4:f5:b8:b4:1f:39:b9:57:35:d2:40:fa: e9:2c:de:1f:2b:29:e1:24:c8:1a:3b:2d:06:84:06: d7:a3:04:8e:29:c4:f1:59:19:07:aa:a3:d6:27:2d: 51:aa:1f:90:f8:c3:50:46:1d:7b:e0:06:5d:43:48: f4:02:61:0a:ed:03:c8:24:05:31:1f:39:64:9a:c6: fe:0b:c5:43:8b:95:60:86:2a:a0:17:bb:93:79:ed: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3F:E2:CF:D9:8A:74:C1:AE:A9:99:6F:4F:A2:FA:9A:AF:C7:73:0F X509v3 Authority Key Identifier: keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:27:7c:7a:c8:90:84:61:58:bb:64:8f:89:57:ed:49:f3:a0: cb:28:e3:00:c0:9c:d8:f7:8e:8f:5d:e7:e5:30:6c:ee:74:68: 6f:56:a5:05:d1:04:03:47:90:0c:0b:7d:5e:34:5f:59:63:de: 10:23:57:a1:de:8c:36:fe:03:85:8e:dd:ac:0d:5c:c2:e0:cb: a9:7e:93:2c:38:01:43:12:65:f6:a0:60:1b:db:cc:a9:3e:88: bd:0c:99:7c:be:98:ba:4e:05:86:ed:c9:0e:41:11:36:34:03: aa:f5:e5:32:2d:82:be:83:86:d6:0c:6f:19:10:71:86:1a:ca: b4:31:7d:57:38:68:df:1c:89:ef:2c:a0:d8:44:7e:a9:7f:65: 42:f4:ec:e1:9d:27:ce:93:e9:f1:8e:04:65:70:57:e3:f0:f7: 7f:01:f9:11:4f:6b:35:03:77:55:29:36:39:9b:4f:3e:7f:6b: 78:cb:44:c8:ed:17:d7:25:33:d2:8e:1d:d0:0e:b6:8d:60:54: 73:70:e6:6b:1a:64:97:dc:85:94:56:36:6c:fa:7c:ed:80:b9: 5b:61:27:75:6a:8f:87:31:13:d5:5c:37:e2:c5:50:28:9a:20: d3:3d:30:c6:57:67:9b:dc:88:3c:5c:95:59:b4:1b:e8:e3:05: f9:35:9c:71 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUhd6apv516VkNJpSjYbb+QDLCTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E0QTI5REVCRDU5QzdBMDRFNjE5M0E0MkE1RUZDM0My NDRCMkQyNzAeFw0yNTExMDMyMzUyMjdaFw0yNTExMDgxMTI1MjdaMDMxMTAvBgNV BAMTKDY2M0ZFMkNGRDk4QTc0QzFBRUE5OTk2RjRGQTJGQTlBQUZDNzczMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJIcMg68Dx+uMBP2fwiDXizv2 baEvv6NdfU/tdANy3FQKxCMiU23z3LyqyCU3KisrgtRUr00koRx20ik1uk3MP3Y4 OpWe5XAY7zLNKjHPrevKmnQIL51DDABe48W9TrPgGyXJU/CPcLgkrTfz00ztwJRe JlPaLea/Sd6SSURJpAOOcmppN60/ItHeuHWyIGT3dtVzevFxpus9Fefsh+gK+hm7 /I4nudT1uLQfOblXNdJA+uks3h8rKeEkyBo7LQaEBtejBI4pxPFZGQeqo9YnLVGq H5D4w1BGHXvgBl1DSPQCYQrtA8gkBTEfOWSaxv4LxUOLlWCGKqAXu5N57fChAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZj/iz9mKdMGuqZlvT6L6mq/Hcw8wHwYDVR0j BBgwFoAUOkop3r1Zx6BOYZOkKl78PCRLLScwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQ0FBQ0RCQzIyMkQ2NEQ0OUU1QzJFQkJCN0YyN0Y4NjEw ODU4OTBFMjY1QjhDNjUxQ0FGNTlDNzI1QUE3RDFFLzAvM0E0QTI5REVCRDU5QzdB MDRFNjE5M0E0MkE1RUZDM0MyNDRCMkQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTRBMjlERUJENTlDN0EwNEU2 MTkzQTQyQTVFRkMzQzI0NEIyRDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0NBQUNEQkMyMjJENjRENDlFNUMyRUJCQjdGMjdGODYxMDg1ODkwRTI2 NUI4QzY1MUNBRjU5QzcyNUFBN0QxRS8wLzNBNEEyOURFQkQ1OUM3QTA0RTYxOTNB NDJBNUVGQzNDMjQ0QjJEMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4J3x6yJCEYVi7ZI+JV+1J86DL KOMAwJzY946PXeflMGzudGhvVqUF0QQDR5AMC31eNF9ZY94QI1eh3ow2/gOFjt2s DVzC4MupfpMsOAFDEmX2oGAb28ypPoi9DJl8vpi6TgWG7ckOQRE2NAOq9eUyLYK+ g4bWDG8ZEHGGGsq0MX1XOGjfHInvLKDYRH6pf2VC9OzhnSfOk+nxjgRlcFfj8Pd/ AfkRT2s1A3dVKTY5m08+f2t4y0TI7RfXJTPSjh3QDraNYFRzcOZrGmSX3IWUVjZs +nztgLlbYSd1ao+HMRPVXDfixVAomiDTPTDGV2eb3Ig8XJVZtBvo4wX5NZxx -----END CERTIFICATE-----Generated at Wed Nov 5 00:26:03 2025 by rpki-client