$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft File: 0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft (raw, json) Hash identifier: 5Te7tiQ/IQmRF0mSTSVR5CyraxjfJEzPeKR5nIyepWY= Subject key identifier: 9C:EE:D2:E9:1C:DB:75:F6:0E:FE:51:BC:D2:EC:5D:DE:0A:A8:E9:B9 Authority key identifier: 00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D Certificate issuer: /CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D Certificate serial: 43F46C65ECFCDB9ED9E7BEC24D216C12B4A23A7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft Manifest number: 39 Signing time: Tue 04 Nov 2025 02:33:54 +0000 Manifest this update: Tue 04 Nov 2025 02:28:54 +0000 Manifest next update: Sat 08 Nov 2025 22:34:54 +0000 Files and hashes: 1: 3138362e3134382e3232332e302f32342d3234203d3e203237373438.roa (hash: VQMJI5dlDzF1RZ0pYeglznBF6cl4hyeV1GlSzatpOww=) 2: 3138362e3134382e3232302e302f32342d3234203d3e203237373438.roa (hash: 5NCnB5VtnRx/wEALc8fiGw+UiyCIRWJCruzO8iUScbE=) 3: 3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa (hash: XzHVtYwkq0N1wVnZmmRiyqpzHD6iTnDEd/0pd/xTM8w=) 4: 3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa (hash: xiWQBX2JlnQm6CvyKMdi/vuCeUsP0mU95ZwDsm4HauQ=) 5: 0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl (hash: lkqZK1xXhCTFAgsM7FhjK4V1sk00ceGIJvYh7qmQvw0=) 6: 3138362e3134382e3232322e302f32342d3234203d3e203237373438.roa (hash: QnRNn+t15RLD7t2Xsy4gaYh2HZlt3NsjXiRTvSqgJ5w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 22:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f4:6c:65:ec:fc:db:9e:d9:e7:be:c2:4d:21:6c:12:b4:a2:3a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D Validity Not Before: Nov 4 02:28:54 2025 GMT Not After : Nov 8 22:34:54 2025 GMT Subject: CN=9CEED2E91CDB75F60EFE51BCD2EC5DDE0AA8E9B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:8e:05:47:66:32:e9:d9:7c:95:5b:4b:c6: 3b:76:47:cb:ca:41:9f:55:c8:ce:07:62:2b:86:c9: 8c:c3:e9:3a:0c:19:6b:a7:de:c7:72:6f:c8:c6:89: ba:53:f1:5d:33:4d:b8:25:58:39:40:4e:86:58:9d: 3b:72:f1:47:a4:70:69:1d:cd:0b:48:31:51:eb:cd: 90:de:5c:1c:b1:47:f5:87:53:70:16:90:49:6c:24: 82:6f:53:bc:ca:48:ae:fb:b7:c7:dc:1f:f6:6d:ad: 4d:9c:95:17:d1:6f:72:5e:5a:c5:8a:f8:0d:87:07: 0d:26:d4:38:cd:47:7b:e0:b0:28:89:a0:b3:28:e6: 6a:82:73:0d:64:42:7e:2f:65:19:07:02:a0:75:c9: 84:77:dd:b2:14:f9:16:f3:0c:9f:34:33:a5:d9:e3: ce:b6:9d:ea:71:68:bb:8c:02:6d:d4:6c:d1:f5:20: 2f:06:47:85:44:4b:e0:c1:a8:9d:9e:be:e4:01:06: 98:ef:63:e6:7d:f8:64:c4:4c:1a:be:f0:e9:14:37: be:0e:3f:07:8b:d7:3b:3f:81:2d:29:55:fe:ec:d1: 93:e9:2a:55:14:53:b3:a0:41:5b:83:79:8e:b0:e1: c6:5e:56:f3:48:25:b2:4f:e8:e3:ed:12:b2:13:2d: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EE:D2:E9:1C:DB:75:F6:0E:FE:51:BC:D2:EC:5D:DE:0A:A8:E9:B9 X509v3 Authority Key Identifier: keyid:00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4b:71:11:d0:f8:f0:43:6d:72:2b:42:d8:ac:03:20:df:ec: 5f:30:74:20:ef:71:11:20:36:39:3e:3e:78:aa:3e:a2:4a:e9: 31:e2:85:fb:14:f9:18:23:75:20:4d:4d:82:d5:84:4f:8c:2e: 7b:36:0a:c7:bf:bb:e3:12:48:4d:a5:de:b1:76:93:ae:24:86: 41:4d:9a:8c:85:89:81:56:b7:ef:14:44:09:9e:12:96:e2:44: 34:61:b8:1d:9e:1c:83:6c:b3:5b:a6:fc:24:64:a6:90:59:40: aa:ec:ea:14:c6:8c:9b:30:34:27:2f:cc:07:1b:de:97:8a:6f: 4d:6e:75:ec:68:78:69:8b:79:27:c5:27:71:4f:58:45:98:5c: fb:24:ff:3c:2a:e2:ea:1c:86:0e:da:42:b9:af:27:d4:f5:f9: 88:33:a0:6d:c2:15:1e:50:ac:fa:08:0f:9b:14:8f:2d:c7:02: be:f5:4f:1c:4c:57:5e:77:b4:1e:0a:69:d4:bd:43:cd:d5:a8: 7e:36:8c:bd:41:6a:dc:d0:bd:59:2a:aa:59:da:8c:b9:56:f0: 13:12:51:a5:9e:e4:f6:ac:b0:64:e1:ae:b8:cd:0b:cd:3e:34: 56:86:44:64:6b:1b:87:96:5a:ef:1d:9b:a5:5b:f6:53:0d:f8: 4f:f0:21:98 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQ/RsZez8257Z577CTSFsErSiOnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwM0NCQkVGQTdBM0M0Q0RENjgwQzEzQkFFMkRFMTk1 NTFFOEMwRDAeFw0yNTExMDQwMjI4NTRaFw0yNTExMDgyMjM0NTRaMDMxMTAvBgNV BAMTKDlDRUVEMkU5MUNEQjc1RjYwRUZFNTFCQ0QyRUM1RERFMEFBOEU5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57I4FR2Yy6dl8lVtLxjt2R8vK QZ9VyM4HYiuGyYzD6ToMGWun3sdyb8jGibpT8V0zTbglWDlAToZYnTty8UekcGkd zQtIMVHrzZDeXByxR/WHU3AWkElsJIJvU7zKSK77t8fcH/ZtrU2clRfRb3JeWsWK +A2HBw0m1DjNR3vgsCiJoLMo5mqCcw1kQn4vZRkHAqB1yYR33bIU+RbzDJ80M6XZ 4862nepxaLuMAm3UbNH1IC8GR4VES+DBqJ2evuQBBpjvY+Z9+GTETBq+8OkUN74O PweL1zs/gS0pVf7s0ZPpKlUUU7OgQVuDeY6w4cZeVvNIJbJP6OPtErITLYvjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnO7S6RzbdfYO/lG80uxd3gqo6bkwHwYDVR0j BBgwFoAUAAPLvvp6PEzdaAwTuuLeGVUejA0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MTVGRjMxMjJDQTBBNDQ3OTU0NjAyMEExQzBDQjlDQ0FF RkI5QjM3NTc3NTUzRTY3Mjc3NzFFMzYwN0E2OEY1LzAvMDAwM0NCQkVGQTdBM0M0 Q0RENjgwQzEzQkFFMkRFMTk1NTFFOEMwRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDAzQ0JCRUZBN0EzQzRDREQ2 ODBDMTNCQUUyREUxOTU1MUU4QzBELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTE1RkYzMTIyQ0EwQTQ0Nzk1NDYwMjBBMUMwQ0I5Q0NBRUZCOUIzNzU3 NzU1M0U2NzI3NzcxRTM2MDdBNjhGNS8wLzAwMDNDQkJFRkE3QTNDNENERDY4MEMx M0JBRTJERTE5NTUxRThDMEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnS3ER0PjwQ21yK0LYrAMg3+xf MHQg73ERIDY5Pj54qj6iSukx4oX7FPkYI3UgTU2C1YRPjC57NgrHv7vjEkhNpd6x dpOuJIZBTZqMhYmBVrfvFEQJnhKW4kQ0YbgdnhyDbLNbpvwkZKaQWUCq7OoUxoyb MDQnL8wHG96Xim9NbnXsaHhpi3knxSdxT1hFmFz7JP88KuLqHIYO2kK5ryfU9fmI M6BtwhUeUKz6CA+bFI8txwK+9U8cTFded7QeCmnUvUPN1ah+Noy9QWrc0L1ZKqpZ 2oy5VvATElGlnuT2rLBk4a64zQvNPjRWhkRkaxuHllrvHZulW/ZTDfhP8CGY -----END CERTIFICATE-----Generated at Wed Nov 5 18:53:35 2025 by rpki-client