$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft File: CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft (raw, json) Hash identifier: oc0wD8cFE3SMo0BXo+e5lAAn3MZDT55L5XwuNiglH3A= Subject key identifier: F8:FA:9F:D2:DA:6F:6C:BB:45:37:77:92:A1:10:E2:16:0F:6F:9F:81 Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC Certificate issuer: /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC Certificate serial: 655FD07754594507FD1C7F82FEBF58463157548E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft Manifest number: 012E Signing time: Wed 05 Nov 2025 06:24:25 +0000 Manifest this update: Wed 05 Nov 2025 06:19:25 +0000 Manifest next update: Mon 10 Nov 2025 01:06:25 +0000 Files and hashes: 1: 34352e3136322e38392e302f32342d3234203d3e20323633323434.roa (hash: qLKgn92Pyz7kDri8smsoul5kq00cZGFJqKwuYPi8cxs=) 2: 34352e3136322e39312e302f32342d3234203d3e20323633323434.roa (hash: 03mX5v3MX2e6J6dQF7uHPGxH6VtKTluYipMmrR59FcY=) 3: 34352e3136322e39302e302f32342d3234203d3e20323633323434.roa (hash: Q4cKad9QGPlMLuod8irBnRQ23Ij1FG6fmlLA2b5ejtE=) 4: CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl (hash: H/+EJIv4UaaIh6omnLEb/Y7ciGKwO8nOaVEqYdbS72k=) 5: 34352e3136322e38382e302f32342d3234203d3e20323731383932.roa (hash: Hz9/vHLG1cNfo19Iu2PJF0VUWd2uW+O0Ukul+4U4WMk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5f:d0:77:54:59:45:07:fd:1c:7f:82:fe:bf:58:46:31:57:54:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC Validity Not Before: Nov 5 06:19:25 2025 GMT Not After : Nov 10 01:06:25 2025 GMT Subject: CN=F8FA9FD2DA6F6CBB45377792A110E2160F6F9F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:8b:8d:2c:41:a3:03:a4:73:7c:7c:3f:9d: b4:03:ae:18:27:1c:4b:ec:69:13:bc:16:cd:74:bc: de:1b:bc:8c:c9:1b:7a:2b:4b:72:5c:16:6e:be:e2: d0:32:82:47:8a:31:13:a7:6a:fc:13:de:a7:e6:e1: 5e:55:2b:57:0e:71:fd:e2:6e:9f:52:d4:1b:07:ef: 4c:ca:9d:5a:09:6e:62:cb:bf:5d:a7:15:cc:4e:bf: 56:2a:21:12:bc:15:2d:5a:e3:ea:25:dc:74:e4:4d: e7:47:c8:cf:17:ab:e9:2b:af:89:1d:92:0c:3e:4c: b5:bd:8e:1a:e2:1c:f0:44:0b:31:ce:2b:f5:c4:20: 79:32:b4:0d:ae:2d:cb:2b:b6:90:34:96:67:4c:30: f0:49:9f:a3:52:f0:b1:e8:53:6d:b7:d0:f4:f7:c9: ef:23:9b:d2:92:94:35:30:0f:30:bb:1d:88:45:af: 32:3a:44:c6:15:b6:d2:81:b9:21:54:35:fa:62:00: 6b:de:82:15:21:2c:9b:44:7f:1f:db:a4:75:f3:f9: e2:74:85:3b:ab:d5:23:75:54:30:73:f2:70:62:ec: 01:93:3c:81:02:18:b9:da:cf:85:8f:c4:67:0b:6d: 62:01:d7:5c:9a:7a:75:1b:65:77:f5:74:22:fd:25: f7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:9F:D2:DA:6F:6C:BB:45:37:77:92:A1:10:E2:16:0F:6F:9F:81 X509v3 Authority Key Identifier: keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:89:62:8c:b3:38:ae:b1:ab:11:74:4c:86:ab:b1:86:36:08: b1:8d:e5:fd:7f:44:44:61:b2:c3:00:4c:13:8a:6c:4d:43:1d: 19:55:04:cf:f6:65:20:75:fb:dd:13:fc:03:0f:a9:3d:4f:bb: 7d:68:88:c2:64:4a:a0:c9:09:0a:9f:c1:8b:e5:72:99:66:7c: cd:dc:4e:a7:83:5d:48:8c:b7:74:de:dd:8d:35:65:28:06:d7: 5b:37:09:7e:de:d5:8b:66:09:1b:a1:87:96:05:dc:48:79:80: b0:62:9b:37:24:33:6c:d7:62:5a:af:15:d8:59:7e:38:51:9a: 5f:de:93:01:d3:94:37:b4:40:f7:c7:f6:fa:fd:68:36:23:d3: 1b:63:aa:e4:7a:51:e5:89:05:98:b6:89:cb:02:a5:38:08:01: 4a:81:39:0f:f8:3a:50:05:12:2f:39:cc:0e:23:a9:a3:cf:eb: c1:93:43:15:9b:3d:59:21:a7:11:eb:c2:fd:40:e2:38:0e:3d: 43:ae:38:d4:a2:91:de:f4:30:71:24:fe:3e:41:f3:e4:6d:ce: 95:c6:03:da:3a:3d:fe:f0:a9:13:f9:47:0d:dc:5b:fe:2d:27: a9:af:57:64:10:4c:26:97:d8:55:ea:e4:ed:04:fc:65:0b:f3: 73:66:b0:57 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZV/Qd1RZRQf9HH+C/r9YRjFXVI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzRkFGQzJFNTVCREZEMzNBMjYwM0Y2ODM5RDA1RUNG NTJBMkNFQzAeFw0yNTExMDUwNjE5MjVaFw0yNTExMTAwMTA2MjVaMDMxMTAvBgNV BAMTKEY4RkE5RkQyREE2RjZDQkI0NTM3Nzc5MkExMTBFMjE2MEY2RjlGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQk4uNLEGjA6RzfHw/nbQDrhgn HEvsaRO8Fs10vN4bvIzJG3orS3JcFm6+4tAygkeKMROnavwT3qfm4V5VK1cOcf3i bp9S1BsH70zKnVoJbmLLv12nFcxOv1YqIRK8FS1a4+ol3HTkTedHyM8Xq+krr4kd kgw+TLW9jhriHPBECzHOK/XEIHkytA2uLcsrtpA0lmdMMPBJn6NS8LHoU2230PT3 ye8jm9KSlDUwDzC7HYhFrzI6RMYVttKBuSFUNfpiAGveghUhLJtEfx/bpHXz+eJ0 hTur1SN1VDBz8nBi7AGTPIECGLnaz4WPxGcLbWIB11yaenUbZXf1dCL9JfeXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+Pqf0tpvbLtFN3eSoRDiFg9vn4EwHwYDVR0j BBgwFoAUyj+vwuVb39M6JgP2g50F7PUqLOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85OEJGNUIzMEM4MzRBQkE1NkE2ODlBRUM2NjMxRjdDMkQ4 RTI1N0Q0QUQxOEE0MUZEQ0RDMDhDMTUxQUMyNkNDLzAvQ0EzRkFGQzJFNTVCREZE MzNBMjYwM0Y2ODM5RDA1RUNGNTJBMkNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTNGQUZDMkU1NUJERkQzM0Ey NjAzRjY4MzlEMDVFQ0Y1MkEyQ0VDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOThCRjVCMzBDODM0QUJBNTZBNjg5QUVDNjYzMUY3QzJEOEUyNTdENEFE MThBNDFGRENEQzA4QzE1MUFDMjZDQy8wL0NBM0ZBRkMyRTU1QkRGRDMzQTI2MDNG NjgzOUQwNUVDRjUyQTJDRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtiWKMsziusasRdEyGq7GGNgix jeX9f0REYbLDAEwTimxNQx0ZVQTP9mUgdfvdE/wDD6k9T7t9aIjCZEqgyQkKn8GL 5XKZZnzN3E6ng11IjLd03t2NNWUoBtdbNwl+3tWLZgkboYeWBdxIeYCwYps3JDNs 12JarxXYWX44UZpf3pMB05Q3tED3x/b6/Wg2I9MbY6rkelHliQWYtonLAqU4CAFK gTkP+DpQBRIvOcwOI6mjz+vBk0MVmz1ZIacR68L9QOI4Dj1DrjjUopHe9DBxJP4+ QfPkbc6VxgPaOj3+8KkT+UcN3Fv+LSepr1dkEEwml9hV6uTtBPxlC/NzZrBX -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:19 2025 by rpki-client