$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft File: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft (raw, json) Hash identifier: 2Y0CYRY2F93VIdm0Atc87pS9MraTqqcFni3NfCYqGLw= Subject key identifier: 6E:5F:C6:D2:FB:5E:AF:0D:3A:28:4C:AF:51:8E:B6:6C:58:10:73:4B Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 Certificate issuer: /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Certificate serial: 47523253364EEFE76C857559F11165AE4DFFF486 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft Manifest number: 0137 Signing time: Wed 05 Nov 2025 03:17:37 +0000 Manifest this update: Wed 05 Nov 2025 03:12:37 +0000 Manifest next update: Sun 09 Nov 2025 07:25:37 +0000 Files and hashes: 1: 323830333a386261303a3a2f33322d3430203d3e203631353132.roa (hash: KfhwmNkUX722XLKGo9HfzZHmGemaga5VvyUW9EoQpLk=) 2: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl (hash: +50Y4TPB0wDE1nHuXFk8JIq0EUASV85OWZOicgit5n0=) 3: 34352e3137302e3132382e302f32322d3234203d3e203631353132.roa (hash: APOmoNKTFye/WKny8Moj2ePsiAP8sSxzy/Nk1SfzBZc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:52:32:53:36:4e:ef:e7:6c:85:75:59:f1:11:65:ae:4d:ff:f4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Validity Not Before: Nov 5 03:12:37 2025 GMT Not After : Nov 9 07:25:37 2025 GMT Subject: CN=6E5FC6D2FB5EAF0D3A284CAF518EB66C5810734B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:19:b7:ba:a1:29:02:3b:31:f0:41:88:e3: 9e:79:15:0d:b1:dc:4e:7a:96:4f:32:0e:db:bc:64: 6b:4a:12:c0:00:98:17:ff:5d:8c:51:72:dd:ce:99: 2c:6a:83:81:2e:44:f6:37:b8:4d:75:ba:9f:f2:9b: 5e:e1:c0:be:43:ba:09:20:2d:2d:7a:19:95:65:2b: d0:6e:59:af:9c:6b:e2:3b:9d:81:bf:0e:66:da:56: b9:0e:07:19:19:0b:b7:f5:49:63:ba:7e:8c:bc:bb: a7:60:3d:8f:ed:d9:63:19:c6:55:be:59:15:d2:a6: 8c:fc:3c:b4:7a:38:88:ca:12:4d:bc:d5:92:6a:a6: 36:90:ba:73:a9:ff:33:e0:a7:5c:a7:74:65:4d:3b: ef:8c:25:05:9e:95:c1:d1:af:fb:b9:d3:89:ee:61: 31:9f:b0:1a:41:56:77:f1:ef:a0:cc:5f:a8:0a:6f: d2:a3:21:cb:31:8a:65:18:59:80:39:24:04:fb:9d: 42:45:ce:00:2c:96:35:f3:02:4d:d2:82:a9:85:c0: f6:2e:b6:03:50:5c:b3:2a:08:8a:47:32:f7:2c:09: a7:47:1a:d8:65:d6:c3:c1:00:99:43:4d:3c:a1:b1: 0b:88:f8:f7:01:0c:b2:89:25:f7:e5:22:06:35:e6: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5F:C6:D2:FB:5E:AF:0D:3A:28:4C:AF:51:8E:B6:6C:58:10:73:4B X509v3 Authority Key Identifier: keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:56:94:95:c6:83:5a:42:a0:e1:bb:db:1a:c2:14:99:57:9d: 00:17:cc:45:4d:76:54:01:78:a0:d8:e1:88:84:46:3a:50:92: 75:ce:d7:11:44:05:7f:33:a2:a2:d1:9d:cb:f0:96:8d:ec:36: ef:40:ea:26:e6:17:2a:21:c7:93:cc:41:cb:26:28:c0:07:bc: 77:a6:14:d6:6f:24:0e:a6:00:8b:de:fa:63:80:5c:84:49:b4: 30:13:79:7b:30:be:a5:51:3f:44:b0:5c:48:ae:fd:56:e8:87: 94:3a:78:91:e3:7e:d1:cb:e3:5f:8e:34:87:56:03:df:6b:cf: 8b:5e:9e:b2:03:81:d4:99:a3:85:fd:17:26:8c:a1:8d:da:01: 2c:6d:f4:f3:d5:91:a3:7f:0b:c9:97:83:0b:f6:6a:9e:8e:bd: 3e:96:86:68:27:b7:98:b0:6f:9a:fb:33:33:6e:7c:f0:94:d9: a9:e4:3e:40:f7:60:47:a6:69:42:dd:8e:ab:1c:c0:36:ba:df: 5e:38:10:14:0f:8e:38:b3:a2:27:39:12:50:c2:f2:32:a0:24: 9f:de:dc:02:6a:15:89:27:e2:25:7d:2c:b9:b6:3a:b7:cb:4a: 5e:07:6e:5b:77:a3:45:6d:7d:b6:c4:ac:fe:36:66:33:b5:e3: d7:fe:ea:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUR1IyUzZO7+dshXVZ8RFlrk3/9IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0OERFQjZCNEYw MkJERkJDNzAeFw0yNTExMDUwMzEyMzdaFw0yNTExMDkwNzI1MzdaMDMxMTAvBgNV BAMTKDZFNUZDNkQyRkI1RUFGMEQzQTI4NENBRjUxOEVCNjZDNTgxMDczNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Whm3uqEpAjsx8EGI4555FQ2x 3E56lk8yDtu8ZGtKEsAAmBf/XYxRct3OmSxqg4EuRPY3uE11up/ym17hwL5Dugkg LS16GZVlK9BuWa+ca+I7nYG/DmbaVrkOBxkZC7f1SWO6foy8u6dgPY/t2WMZxlW+ WRXSpoz8PLR6OIjKEk281ZJqpjaQunOp/zPgp1yndGVNO++MJQWelcHRr/u504nu YTGfsBpBVnfx76DMX6gKb9KjIcsximUYWYA5JAT7nUJFzgAsljXzAk3SgqmFwPYu tgNQXLMqCIpHMvcsCadHGthl1sPBAJlDTTyhsQuI+PcBDLKJJfflIgY15puvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbl/G0vterw06KEyvUY62bFgQc0swHwYDVR0j BBgwFoAUNHLh/xgYlir7na1EjetrTwK9+8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1 MTFBREE2NTBEQzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYy QUZCOURBRDQ0OERFQjZCNEYwMkJERkJDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDcyRTFGRjE4MTg5NjJBRkI5 REFENDQ4REVCNkI0RjAyQkRGQkM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0NTAwRjYzRkU3NTExQURBNjUw REMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzM0NzJFMUZGMTgxODk2MkFGQjlEQUQ0 NDhERUI2QjRGMDJCREZCQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGVpSVxoNaQqDhu9sawhSZV50A F8xFTXZUAXig2OGIhEY6UJJ1ztcRRAV/M6Ki0Z3L8JaN7DbvQOom5hcqIceTzEHL JijAB7x3phTWbyQOpgCL3vpjgFyESbQwE3l7ML6lUT9EsFxIrv1W6IeUOniR437R y+NfjjSHVgPfa8+LXp6yA4HUmaOF/RcmjKGN2gEsbfTz1ZGjfwvJl4ML9mqejr0+ loZoJ7eYsG+a+zMzbnzwlNmp5D5A92BHpmlC3Y6rHMA2ut9eOBAUD444s6InORJQ wvIyoCSf3twCahWJJ+IlfSy5tjq3y0peB25bd6NFbX22xKz+NmYztePX/upc -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:57 2025 by rpki-client