$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft File: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft (raw, json) Hash identifier: F+En0zPuVVVOE3SmGcJH5crOQUsGEMqWLM4FrxyKI5c= Subject key identifier: 00:BA:DA:8E:DE:14:BE:7B:8C:D8:1E:CE:7B:66:FB:70:1F:B1:65:C5 Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09 Certificate issuer: /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09 Certificate serial: 718B3C4200B127CD0B52F4952A279A55DF8A55B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft Manifest number: 012B Signing time: Mon 03 Nov 2025 19:00:02 +0000 Manifest this update: Mon 03 Nov 2025 18:55:02 +0000 Manifest next update: Sat 08 Nov 2025 16:56:02 +0000 Files and hashes: 1: 34352e3233302e33342e302f32332d3234203d3e203634313039.roa (hash: py7SwEogYW7OlG4gh9g/9TmQ8H1L8j3pKcEm/vflPK4=) 2: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl (hash: 85+BTTbpxjkHBM5ffUDD+RWRHdIDoIscaQ3Xs+tOA5w=) 3: 323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa (hash: Hd1AtImOstWgb3cGVVnSBaluoWDIBWPqxaspTcz7mr0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 16:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8b:3c:42:00:b1:27:cd:0b:52:f4:95:2a:27:9a:55:df:8a:55:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09 Validity Not Before: Nov 3 18:55:02 2025 GMT Not After : Nov 8 16:56:02 2025 GMT Subject: CN=00BADA8EDE14BE7B8CD81ECE7B66FB701FB165C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:29:3d:fd:fb:88:ce:d2:49:19:44:6c:38: 2d:8d:52:b1:ae:a9:35:fb:ca:dd:65:87:e2:0d:5b: e5:dd:01:be:c9:52:f4:34:16:89:3b:3f:00:fa:13: 8a:6d:58:08:87:c5:b1:df:49:7c:7b:74:32:fe:56: ed:1b:93:e8:27:3b:ee:a2:2d:75:8d:dd:1b:92:96: c8:93:76:12:4b:99:08:13:26:db:cf:f4:e7:b9:18: 64:91:08:8c:51:67:cd:65:f3:aa:36:ab:e1:cf:3d: 5b:e7:c6:87:23:e6:e6:6f:99:f9:f5:b0:00:0a:0c: 9f:3f:69:a9:4c:12:99:d1:5f:de:0d:25:1c:d3:d7: 68:49:dc:26:30:4d:b9:27:14:7f:29:6a:e9:f6:84: 81:c1:02:4e:76:86:2d:0d:29:97:02:c8:aa:88:40: ac:f2:8d:76:b2:cd:8f:3f:34:93:22:d8:64:d6:1a: 6e:98:aa:9f:b6:e3:96:f6:bd:b5:c8:47:56:71:b9: 40:c1:f6:a2:f9:46:58:c3:fd:86:57:e4:f9:70:08: 1a:c8:8f:74:eb:9a:31:93:d8:a2:e1:fd:8d:af:34: a5:a9:fe:b3:ba:a7:88:e7:89:ef:af:37:d5:5a:29: c7:dd:0b:fd:f3:85:e1:39:04:3b:75:4c:a7:8a:c7: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BA:DA:8E:DE:14:BE:7B:8C:D8:1E:CE:7B:66:FB:70:1F:B1:65:C5 X509v3 Authority Key Identifier: keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:50:9f:84:40:e6:d0:56:f7:e6:08:98:0b:bb:b8:d3:a1:ba: 63:1f:94:d0:3e:3c:db:50:a4:43:8c:00:4f:1f:29:25:7c:da: 5f:f8:24:bb:6b:cb:7f:7f:c3:d3:86:82:eb:de:af:aa:8d:36: 5f:d7:ce:5c:c1:a5:04:41:78:12:dd:05:ba:56:59:f7:b4:47: 5e:8a:63:78:cf:e6:c6:22:a1:64:31:52:9d:9c:92:e4:d8:62: ac:c1:50:bc:2f:ee:bd:fa:12:14:c3:a5:c8:e6:f4:cc:6a:ba: d2:ea:a4:ea:49:2f:4d:03:1a:ae:2d:11:85:e4:43:be:37:ce: d7:3b:b4:90:87:ba:86:c2:1f:a3:66:18:f4:82:99:2e:71:f8: 00:f3:9c:24:0c:48:94:37:0e:fd:70:09:4b:62:4f:ae:5d:53: 88:b9:b4:2d:f4:57:92:44:4f:53:2f:cd:fd:29:a5:87:f6:78: 45:e4:c2:f8:24:8a:d2:f6:ad:8a:f5:50:e7:62:14:61:8a:7a: 1a:f9:4a:c1:c8:41:de:9e:40:93:94:0c:4d:e1:cb:cf:ac:ef: a4:d9:7c:b5:ad:e1:5c:02:1c:c7:31:52:0b:9b:1b:bb:3e:9e: a7:92:29:fe:74:81:e3:e8:7d:6a:eb:8c:1b:89:ec:f6:a4:40: ad:72:eb:9c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcYs8QgCxJ80LUvSVKieaVd+KVbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwQUJDRUY4QjI0OUIzRkQ2MzI3NEMwQjM4MkQ2RjVC RUExMUEwOTAeFw0yNTExMDMxODU1MDJaFw0yNTExMDgxNjU2MDJaMDMxMTAvBgNV BAMTKDAwQkFEQThFREUxNEJFN0I4Q0Q4MUVDRTdCNjZGQjcwMUZCMTY1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHSk9/fuIztJJGURsOC2NUrGu qTX7yt1lh+INW+XdAb7JUvQ0Fok7PwD6E4ptWAiHxbHfSXx7dDL+Vu0bk+gnO+6i LXWN3RuSlsiTdhJLmQgTJtvP9Oe5GGSRCIxRZ81l86o2q+HPPVvnxocj5uZvmfn1 sAAKDJ8/aalMEpnRX94NJRzT12hJ3CYwTbknFH8paun2hIHBAk52hi0NKZcCyKqI QKzyjXayzY8/NJMi2GTWGm6Yqp+245b2vbXIR1ZxuUDB9qL5RljD/YZX5PlwCBrI j3TrmjGT2KLh/Y2vNKWp/rO6p4jnie+vN9VaKcfdC/3zheE5BDt1TKeKx8VLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUALrajt4UvnuM2B7Oe2b7cB+xZcUwHwYDVR0j BBgwFoAUQgq874skmz/WMnTAs4LW9b6hGgkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QzY2NzhFQzBDRERCQ0Q1NkQ4MUZBODhDMjBGMzE5Nzcw QzNDNjE5OUE0N0MxNzgwNThCRjk2NEYzRTM3NTg4LzAvNDIwQUJDRUY4QjI0OUIz RkQ2MzI3NEMwQjM4MkQ2RjVCRUExMUEwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBBQkNFRjhCMjQ5QjNGRDYz Mjc0QzBCMzgyRDZGNUJFQTExQTA5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUM2Njc4RUMwQ0REQkNENTZEODFGQTg4QzIwRjMxOTc3MEMzQzYxOTlB NDdDMTc4MDU4QkY5NjRGM0UzNzU4OC8wLzQyMEFCQ0VGOEIyNDlCM0ZENjMyNzRD MEIzODJENkY1QkVBMTFBMDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIUJ+EQObQVvfmCJgLu7jTobpj H5TQPjzbUKRDjABPHyklfNpf+CS7a8t/f8PThoLr3q+qjTZf185cwaUEQXgS3QW6 Vln3tEdeimN4z+bGIqFkMVKdnJLk2GKswVC8L+69+hIUw6XI5vTMarrS6qTqSS9N AxquLRGF5EO+N87XO7SQh7qGwh+jZhj0gpkucfgA85wkDEiUNw79cAlLYk+uXVOI ubQt9FeSRE9TL839KaWH9nhF5ML4JIrS9q2K9VDnYhRhinoa+UrByEHenkCTlAxN 4cvPrO+k2Xy1reFcAhzHMVILmxu7Pp6nkin+dIHj6H1q64wbiez2pECtcuuc -----END CERTIFICATE-----Generated at Wed Nov 5 05:31:35 2025 by rpki-client