$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft File: 3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft (raw, json) Hash identifier: 2SRjk3wDMmMpdXntu4sArq/tBBSSmyBGYZzsu+M8UVM= Subject key identifier: 39:6E:7B:47:8F:C8:85:8D:61:24:4E:2C:18:04:15:F2:5C:2C:02:D2 Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92 Certificate issuer: /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292 Certificate serial: 0B50A09E90C5BBC50DC965B1B66C28D874408140 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft Manifest number: 0133 Signing time: Mon 03 Nov 2025 03:05:12 +0000 Manifest this update: Mon 03 Nov 2025 03:00:12 +0000 Manifest next update: Sat 08 Nov 2025 21:48:12 +0000 Files and hashes: 1: 323830333a363239303a3a2f33322d3438203d3e20323732383539.roa (hash: klNw1nZqutim71aOsjj3ACTiBo4bV6Nn0Rj4yTdFrV0=) 2: 323830333a363239303a3a2f33322d3438203d3e203532343638.roa (hash: NyQpJ6JuIl0kmA6+iXTMZlYH09vbNzRGL+GZD/knMCs=) 3: 3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl (hash: CsdLBY7h+uOyO6CcjyUp4vDe5azfyBNag6vPyb+lAws=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 21:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:50:a0:9e:90:c5:bb:c5:0d:c9:65:b1:b6:6c:28:d8:74:40:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292 Validity Not Before: Nov 3 03:00:12 2025 GMT Not After : Nov 8 21:48:12 2025 GMT Subject: CN=396E7B478FC8858D61244E2C180415F25C2C02D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:ce:7f:35:e1:4f:49:3b:58:06:cb:7b:c3: 69:6b:34:74:0a:fa:cf:ac:29:04:53:0c:88:57:80: b9:8c:d4:6e:f0:3d:9f:f3:68:05:3f:56:c3:46:4e: 38:6e:85:ce:7b:7a:0b:da:58:bf:15:06:7b:38:bb: 3d:e4:83:ca:82:3f:98:1d:7a:81:48:b7:9a:64:94: 2c:57:5e:51:5b:ed:44:74:a0:f5:32:3f:2f:80:d6: fc:9e:24:13:f2:eb:8f:75:24:96:56:5d:e0:27:31: 03:cc:bc:89:22:8e:06:2a:0b:a6:76:9d:c8:ad:3a: 77:c1:9e:ab:ae:6c:f4:c6:21:11:15:13:38:b6:bf: 87:21:1c:29:1b:04:ce:98:7e:56:4c:57:6d:d3:c4: 77:8f:38:b5:5b:93:c6:49:82:44:2f:56:46:7b:04: 77:d5:36:29:5a:03:92:b6:ff:11:23:63:62:3d:36: 3f:57:ff:61:27:63:2c:c1:9b:48:70:a4:ea:2b:ab: f3:0d:25:d8:9c:ba:8f:80:20:95:6c:95:75:78:a6: 6c:48:0d:cb:f6:f1:a6:9f:e0:55:26:ff:76:09:1f: 64:e4:bc:20:49:15:fa:c5:a6:98:77:00:86:a0:51: 99:0a:94:36:f2:f1:97:45:c6:a1:9b:42:a2:15:68: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:7B:47:8F:C8:85:8D:61:24:4E:2C:18:04:15:F2:5C:2C:02:D2 X509v3 Authority Key Identifier: keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:da:3b:95:63:3a:0d:fd:cb:7e:df:24:64:78:93:da:4a:0e: 0d:d5:fa:b4:1c:08:90:cb:0a:b5:99:60:ad:39:10:25:ea:60: 37:b8:27:e0:7a:e1:df:69:23:eb:5f:8e:90:a8:54:25:32:2a: 58:3c:b1:29:68:f6:d5:a5:c6:32:09:7a:32:61:62:94:16:93: fe:db:ec:d5:76:92:7a:5d:18:2f:78:5e:5f:70:8d:42:af:0a: 7d:ce:d7:20:bc:61:6c:c5:f4:a7:5c:f6:27:60:a5:12:dc:84: 7b:97:2f:e0:ba:c7:1c:10:ec:74:05:ed:e5:c0:cd:d0:65:29: 3e:e7:ca:6f:05:c3:d3:69:b8:a0:1c:16:d4:9f:29:0b:da:94: fd:c4:53:57:0f:ec:38:89:9b:9c:ae:08:d6:34:fe:3e:d9:4c: 57:a9:54:5d:5f:11:2d:8c:f8:98:fd:f0:60:ba:97:03:3d:9f: ae:68:33:74:06:85:84:02:fe:5e:9a:06:d8:c1:57:75:fc:1f: 63:09:52:bf:57:7f:c7:33:6e:ca:1c:68:dc:a8:22:2c:5a:73: c2:66:05:03:69:1d:68:ad:83:f6:ff:25:19:94:e6:6c:fc:b3: 7a:79:d7:7c:7e:1e:93:e3:95:e9:0f:11:45:b9:f0:2e:ac:73: 5c:aa:96:7f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC1CgnpDFu8UNyWWxtmwo2HRAgUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y0MEQ5NkE0RkJCQkVGNThCREMxQThBMDJBQjBEODlC MkIxNjI5MjAeFw0yNTExMDMwMzAwMTJaFw0yNTExMDgyMTQ4MTJaMDMxMTAvBgNV BAMTKDM5NkU3QjQ3OEZDODg1OEQ2MTI0NEUyQzE4MDQxNUYyNUMyQzAyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTT85/NeFPSTtYBst7w2lrNHQK +s+sKQRTDIhXgLmM1G7wPZ/zaAU/VsNGTjhuhc57egvaWL8VBns4uz3kg8qCP5gd eoFIt5pklCxXXlFb7UR0oPUyPy+A1vyeJBPy6491JJZWXeAnMQPMvIkijgYqC6Z2 ncitOnfBnquubPTGIREVEzi2v4chHCkbBM6YflZMV23TxHePOLVbk8ZJgkQvVkZ7 BHfVNilaA5K2/xEjY2I9Nj9X/2EnYyzBm0hwpOorq/MNJdicuo+AIJVslXV4pmxI Dcv28aaf4FUm/3YJH2TkvCBJFfrFpph3AIagUZkKlDby8ZdFxqGbQqIVaMr5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOW57R4/IhY1hJE4sGAQV8lwsAtIwHwYDVR0j BBgwFoAUP0DZak+7vvWL3BqKAqsNibKxYpIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRjFBOTAzNTQ1MjQ4ODU1RkYyMTg1RjI0QTMxRjFGQjlG RUIyNUFGRUUzQURCMENCODJEQzk3NTg0NkU4Nzg1LzAvM0Y0MEQ5NkE0RkJCQkVG NThCREMxQThBMDJBQjBEODlCMkIxNjI5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQwRDk2QTRGQkJCRUY1OEJE QzFBOEEwMkFCMEQ4OUIyQjE2MjkyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0YxQTkwMzU0NTI0ODg1NUZGMjE4NUYyNEEzMUYxRkI5RkVCMjVBRkVF M0FEQjBDQjgyREM5NzU4NDZFODc4NS8wLzNGNDBEOTZBNEZCQkJFRjU4QkRDMUE4 QTAyQUIwRDg5QjJCMTYyOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAu2juVYzoN/ct+3yRkeJPaSg4N 1fq0HAiQywq1mWCtORAl6mA3uCfgeuHfaSPrX46QqFQlMipYPLEpaPbVpcYyCXoy YWKUFpP+2+zVdpJ6XRgveF5fcI1Crwp9ztcgvGFsxfSnXPYnYKUS3IR7ly/guscc EOx0Be3lwM3QZSk+58pvBcPTabigHBbUnykL2pT9xFNXD+w4iZucrgjWNP4+2UxX qVRdXxEtjPiY/fBgupcDPZ+uaDN0BoWEAv5emgbYwVd1/B9jCVK/V3/HM27KHGjc qCIsWnPCZgUDaR1orYP2/yUZlOZs/LN6edd8fh6T45XpDxFFufAurHNcqpZ/ -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:49 2025 by rpki-client