$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft File: 412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft (raw, json) Hash identifier: HisHFrZnzDPzJY/yQ0JTDOxh05qu0LCWsEWUM69XZQc= Subject key identifier: 3E:AA:D6:C2:F2:FD:0C:26:66:D2:12:D7:3E:5A:54:19:53:3D:80:48 Authority key identifier: 41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9 Certificate issuer: /CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9 Certificate serial: 57107B84F243A59D0068B5888050ABED7BD972B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft Manifest number: 0135 Signing time: Wed 05 Nov 2025 08:45:45 +0000 Manifest this update: Wed 05 Nov 2025 08:40:45 +0000 Manifest next update: Mon 10 Nov 2025 21:57:45 +0000 Files and hashes: 1: 412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl (hash: Y4bdARd+qYV6wyjMc5gzyA+dDcyOPL/8jtr3XQtNR0g=) 2: 3230302e392e342e302f32322d3232203d3e203233323031.roa (hash: FdjamUUJO7fn8FL2YMV0xf91FP0OAJYNugAVbP4IdZs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:10:7b:84:f2:43:a5:9d:00:68:b5:88:80:50:ab:ed:7b:d9:72:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9 Validity Not Before: Nov 5 08:40:45 2025 GMT Not After : Nov 10 21:57:45 2025 GMT Subject: CN=3EAAD6C2F2FD0C2666D212D73E5A5419533D8048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:7d:1d:a9:1b:d8:30:6e:32:d5:bc:7c:0f: a5:80:a9:48:4e:fa:d9:12:01:73:90:4e:84:5a:d4: 5a:80:3b:fd:f6:2c:6b:c8:c2:f4:f2:4e:44:bc:b4: c9:87:76:52:65:fd:fa:62:dd:37:77:b9:52:78:28: e1:95:2e:8c:b1:60:c5:6b:3e:04:da:29:29:23:94: 3f:3a:b4:81:d3:f6:26:9a:32:15:5c:6a:ee:23:01: 7c:32:ba:c8:61:90:92:d9:6c:81:e7:06:c8:1b:8e: 00:23:94:3d:cd:69:e9:3f:2d:c5:0a:dd:a7:a4:f7: 91:5d:72:cf:84:bd:bc:e2:fa:b6:ac:77:96:6c:7d: 0d:f6:43:0f:18:13:e7:18:05:46:be:e6:ef:18:af: 7e:b1:8d:75:78:7d:d5:5a:17:03:d8:7c:b6:24:ee: 6b:4e:af:18:a2:24:77:4f:49:c2:5f:ee:54:db:34: 6f:4f:e1:bc:b8:0e:87:b1:2d:6a:63:91:c1:ec:3d: 83:47:bf:fd:33:aa:dc:1e:df:4e:fc:aa:08:5b:2c: 5f:3b:32:b5:a2:73:62:ad:86:77:4b:25:fb:97:9e: c2:e8:34:25:19:50:80:b6:4b:ab:9b:66:35:81:f1: eb:35:13:d4:01:2f:b7:58:ff:02:5a:1b:b8:71:ad: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AA:D6:C2:F2:FD:0C:26:66:D2:12:D7:3E:5A:54:19:53:3D:80:48 X509v3 Authority Key Identifier: keyid:41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:aa:ab:12:8a:7c:27:50:a9:02:43:c7:27:6d:59:ea:0a:31: d5:9a:98:6c:7d:0c:da:e1:f1:f8:a8:73:92:54:6a:e5:49:d6: ed:be:f1:ff:18:4a:89:b9:ad:33:10:0c:10:ca:b3:62:2c:fb: 80:de:84:c0:3d:2a:aa:11:c5:3a:3c:6e:2a:84:47:ed:8e:d5: 31:7f:40:9a:88:c5:0e:7a:2e:d8:2f:72:6c:36:7d:d6:ec:fa: b3:5a:3e:8e:fb:a5:27:9d:0e:85:ea:b8:5e:a1:82:b1:5e:f8: c9:06:5c:a8:d9:fc:b6:89:55:03:63:28:f1:94:0e:1a:0a:66: b8:29:36:6b:9c:d8:0f:e8:ad:6c:49:53:78:57:27:0f:cc:54: 28:62:d3:16:83:7b:0a:59:3f:0f:c4:67:30:84:f0:e6:dd:ad: 2b:8c:13:11:38:3c:72:54:30:fa:b5:fe:25:ef:08:71:22:be: ad:64:62:18:86:3f:39:08:ab:35:a6:6d:b5:0e:5b:13:86:f1: c8:72:53:9f:c9:99:87:64:53:7f:9e:15:88:6b:95:23:c1:f8: 73:f5:e6:68:b4:92:c8:1e:89:32:8d:a9:61:82:43:df:0f:d7: d3:f5:3a:ed:2b:bb:aa:bd:ab:97:eb:27:50:ed:a1:c6:a2:ed: ce:22:a6:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVxB7hPJDpZ0AaLWIgFCr7XvZcrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyRTNGMkQzQjY0REZERUI1ODI4NUY2NTMzMjdFRUI2 RkY2Q0FFOTAeFw0yNTExMDUwODQwNDVaFw0yNTExMTAyMTU3NDVaMDMxMTAvBgNV BAMTKDNFQUFENkMyRjJGRDBDMjY2NkQyMTJENzNFNUE1NDE5NTMzRDgwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LH0dqRvYMG4y1bx8D6WAqUhO +tkSAXOQToRa1FqAO/32LGvIwvTyTkS8tMmHdlJl/fpi3Td3uVJ4KOGVLoyxYMVr PgTaKSkjlD86tIHT9iaaMhVcau4jAXwyushhkJLZbIHnBsgbjgAjlD3Naek/LcUK 3aek95Fdcs+Evbzi+rasd5ZsfQ32Qw8YE+cYBUa+5u8Yr36xjXV4fdVaFwPYfLYk 7mtOrxiiJHdPScJf7lTbNG9P4by4DoexLWpjkcHsPYNHv/0zqtwe3078qghbLF87 MrWic2KthndLJfuXnsLoNCUZUIC2S6ubZjWB8es1E9QBL7dY/wJaG7hxreZlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPqrWwvL9DCZm0hLXPlpUGVM9gEgwHwYDVR0j BBgwFoAUQS4/LTtk3961goX2UzJ+62/2yukwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80Q0U5OTUyMjdDQjc0MzAyMkExMDFBQTg1REY5ODlBNUZE OEI0MzM5Q0Q2OEIxNzkxMDE2MTAxQzkwQTdCOUE2LzAvNDEyRTNGMkQzQjY0REZE RUI1ODI4NUY2NTMzMjdFRUI2RkY2Q0FFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTJFM0YyRDNCNjRERkRFQjU4 Mjg1RjY1MzMyN0VFQjZGRjZDQUU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNENFOTk1MjI3Q0I3NDMwMjJBMTAxQUE4NURGOTg5QTVGRDhCNDMzOUNE NjhCMTc5MTAxNjEwMUM5MEE3QjlBNi8wLzQxMkUzRjJEM0I2NERGREVCNTgyODVG NjUzMzI3RUVCNkZGNkNBRTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2qqsSinwnUKkCQ8cnbVnqCjHV mphsfQza4fH4qHOSVGrlSdbtvvH/GEqJua0zEAwQyrNiLPuA3oTAPSqqEcU6PG4q hEftjtUxf0CaiMUOei7YL3JsNn3W7PqzWj6O+6UnnQ6F6rheoYKxXvjJBlyo2fy2 iVUDYyjxlA4aCma4KTZrnNgP6K1sSVN4VycPzFQoYtMWg3sKWT8PxGcwhPDm3a0r jBMRODxyVDD6tf4l7whxIr6tZGIYhj85CKs1pm21DlsThvHIclOfyZmHZFN/nhWI a5Ujwfhz9eZotJLIHokyjalhgkPfD9fT9TrtK7uqvauX6ydQ7aHGou3OIqZe -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:23 2025 by rpki-client