$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft File: B3AA883DF802251B99A42D7F578AD8768A729025.mft (raw, json) Hash identifier: kji7dIEDW2j2VwONu5FZa2TXruem1fXESGqC7RPQZpg= Subject key identifier: 4D:91:86:38:98:6A:7D:6C:CE:F9:2E:9C:9A:E6:22:C8:20:15:10:AB Authority key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25 Certificate issuer: /CN=B3AA883DF802251B99A42D7F578AD8768A729025 Certificate serial: 2A66A03517F1E0C2898802B098A03DB319E77C02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft Manifest number: 0130 Signing time: Tue 04 Nov 2025 07:32:00 +0000 Manifest this update: Tue 04 Nov 2025 07:27:00 +0000 Manifest next update: Sun 09 Nov 2025 05:02:00 +0000 Files and hashes: 1: 34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa (hash: Ed+TINyonQnupa0zUhcJ76o7sv/DoNLs4QOtK5r729M=) 2: B3AA883DF802251B99A42D7F578AD8768A729025.crl (hash: fc0vOwhDqKoAmDAEx8zFb0Mivb3AZl4g43RQaIaVVs4=) 3: 323830333a653036303a3a2f33322d3332203d3e20323632313931.roa (hash: EWub1SRff2IJH3KVefIE4z3IZH5UpnMFkvS4QpcUCyg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:66:a0:35:17:f1:e0:c2:89:88:02:b0:98:a0:3d:b3:19:e7:7c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3AA883DF802251B99A42D7F578AD8768A729025 Validity Not Before: Nov 4 07:27:00 2025 GMT Not After : Nov 9 05:02:00 2025 GMT Subject: CN=4D918638986A7D6CCEF92E9C9AE622C8201510AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:54:ea:99:04:5d:c7:68:70:8d:65:ee:90: de:05:72:6b:3c:77:78:a9:09:95:1c:fa:1a:e2:7a: 07:5c:13:0f:97:63:4b:0e:99:9c:58:63:26:58:36: 76:29:8b:49:d6:ed:ff:67:72:cd:56:a9:d5:63:8c: 73:bd:22:6f:a3:62:c0:b7:4f:2a:1e:7c:26:ff:29: 33:84:7a:5c:40:8b:4f:50:66:5a:19:cb:ba:a8:d8: 15:de:ec:d3:f7:93:cd:f9:d1:55:e2:cf:3f:8f:91: 1b:d8:52:1b:25:12:24:2b:74:91:67:eb:4f:87:46: eb:32:3e:f0:00:81:91:cf:46:4f:33:63:fa:90:1c: 44:24:9f:81:db:f9:12:4a:63:e5:c1:3c:fa:49:d5: 5f:9c:ef:55:13:16:e4:06:cd:9b:f5:2f:5f:73:51: 52:94:36:12:d0:45:bb:72:eb:db:97:25:75:b0:e3: 38:d3:c2:9d:14:96:ac:b9:1d:80:6a:f9:9d:a1:4e: df:b0:6b:01:8a:d6:95:72:82:44:81:df:49:4e:f0: 9e:09:51:1b:6d:21:7b:dd:d3:24:dc:3b:a4:3c:47: 8f:40:4e:f0:fb:0b:a6:25:1a:46:72:1a:c2:41:e1: 1c:bd:76:4c:b8:ca:a9:6e:07:cd:2b:81:1c:2f:c7: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:91:86:38:98:6A:7D:6C:CE:F9:2E:9C:9A:E6:22:C8:20:15:10:AB X509v3 Authority Key Identifier: keyid:B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:68:6f:39:84:27:58:09:f5:f8:79:4b:1f:f5:32:25:ee:13: e6:81:15:ce:dd:c3:f6:eb:5b:d6:c8:9e:e8:f0:88:07:bb:a3: 82:81:1c:25:3c:89:a4:be:ac:c0:a0:96:54:ae:e5:91:c8:59: d7:54:3a:1d:c1:4a:f8:aa:3c:90:8e:6a:70:d9:91:27:7c:f1: 5b:91:25:9a:cd:da:9c:b1:36:2b:c5:f9:f7:75:8a:ad:1d:15: c4:cd:99:eb:11:ad:34:8e:6d:72:6c:96:e8:40:30:21:a1:44: 78:66:a4:78:28:2c:5d:e8:bc:5e:d4:4f:96:55:e3:21:80:1a: 4f:6a:95:a9:03:91:49:c2:de:26:66:13:d0:40:1b:41:6e:6d: 63:b0:55:12:ae:b8:c1:e5:fb:ef:80:e7:95:bc:73:7c:15:93: bf:34:21:29:4f:b3:f2:84:7e:b8:ec:09:be:58:4d:8a:5c:82: 1b:7f:99:fc:84:85:1d:a8:4b:9e:26:f9:d5:4b:bb:92:35:14: 88:eb:28:39:11:c5:92:ae:13:5e:a6:86:1b:13:a8:32:c4:60: 42:82:32:4e:af:8e:cc:86:2c:78:a2:fc:71:c3:d7:d5:55:4b: 06:1a:6a:f9:0e:8e:7f:d3:d0:19:13:24:21:98:55:67:d4:43: 1a:bf:89:77 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKmagNRfx4MKJiAKwmKA9sxnnfAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBQTg4M0RGODAyMjUxQjk5QTQyRDdGNTc4QUQ4NzY4 QTcyOTAyNTAeFw0yNTExMDQwNzI3MDBaFw0yNTExMDkwNTAyMDBaMDMxMTAvBgNV BAMTKDREOTE4NjM4OTg2QTdENkNDRUY5MkU5QzlBRTYyMkM4MjAxNTEwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcVTqmQRdx2hwjWXukN4Fcms8 d3ipCZUc+hriegdcEw+XY0sOmZxYYyZYNnYpi0nW7f9ncs1WqdVjjHO9Im+jYsC3 TyoefCb/KTOEelxAi09QZloZy7qo2BXe7NP3k8350VXizz+PkRvYUhslEiQrdJFn 60+HRusyPvAAgZHPRk8zY/qQHEQkn4Hb+RJKY+XBPPpJ1V+c71UTFuQGzZv1L19z UVKUNhLQRbty69uXJXWw4zjTwp0Ulqy5HYBq+Z2hTt+wawGK1pVygkSB30lO8J4J URttIXvd0yTcO6Q8R49ATvD7C6YlGkZyGsJB4Ry9dky4yqluB80rgRwvxyg/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTZGGOJhqfWzO+S6cmuYiyCAVEKswHwYDVR0j BBgwFoAUs6qIPfgCJRuZpC1/V4rYdopykCUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUFEMzgxRDU2QkIxMjQ2RjlBMDgyMTBCMDJDN0QwNDE0 QkM5OEM4Q0Q3RjlBNjI2ODdERjdCRkNDQTVGNEFFLzAvQjNBQTg4M0RGODAyMjUx Qjk5QTQyRDdGNTc4QUQ4NzY4QTcyOTAyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CM0FBODgzREY4MDIyNTFCOTlB NDJEN0Y1NzhBRDg3NjhBNzI5MDI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFBRDM4MUQ1NkJCMTI0NkY5QTA4MjEwQjAyQzdEMDQxNEJDOThDOENE N0Y5QTYyNjg3REY3QkZDQ0E1RjRBRS8wL0IzQUE4ODNERjgwMjI1MUI5OUE0MkQ3 RjU3OEFEODc2OEE3MjkwMjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2aG85hCdYCfX4eUsf9TIl7hPm gRXO3cP261vWyJ7o8IgHu6OCgRwlPImkvqzAoJZUruWRyFnXVDodwUr4qjyQjmpw 2ZEnfPFbkSWazdqcsTYrxfn3dYqtHRXEzZnrEa00jm1ybJboQDAhoUR4ZqR4KCxd 6Lxe1E+WVeMhgBpPapWpA5FJwt4mZhPQQBtBbm1jsFUSrrjB5fvvgOeVvHN8FZO/ NCEpT7PyhH647Am+WE2KXIIbf5n8hIUdqEueJvnVS7uSNRSI6yg5EcWSrhNepoYb E6gyxGBCgjJOr47Mhix4ovxxw9fVVUsGGmr5Do5/09AZEyQhmFVn1EMav4l3 -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:15 2025 by rpki-client