$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft File: 3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft (raw, json) Hash identifier: L3YKL5HrmOq4q7uxT66Xv9vTi2g2NBTYmxX3wr+GJG0= Subject key identifier: EF:21:B9:C6:DD:16:4C:3C:2D:AA:65:E9:88:D7:DC:A9:C2:09:58:DE Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44 Certificate issuer: /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844 Certificate serial: 1E2B8171EA55C556E2850242B40AFAC9F3E9DC80 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft Manifest number: 0132 Signing time: Mon 03 Nov 2025 06:02:45 +0000 Manifest this update: Mon 03 Nov 2025 05:57:45 +0000 Manifest next update: Sun 09 Nov 2025 05:37:45 +0000 Files and hashes: 1: 323830333a646234303a3a2f33322d3438203d3e203634313030.roa (hash: IvK/tzZWY20X84VR+1N23+el+EZZLoH3kHNGtQwQW20=) 2: 3137302e38342e3233322e302f32322d3234203d3e203634313030.roa (hash: 8616LCUlLpSCU/FHkGg6mNE4uqtlKqB9JxBLiJmBxtA=) 3: 3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl (hash: qX66BH0HU+nFEJagNIr0AWmlF4KSlOsSFuNKwN4PnQA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2b:81:71:ea:55:c5:56:e2:85:02:42:b4:0a:fa:c9:f3:e9:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844 Validity Not Before: Nov 3 05:57:45 2025 GMT Not After : Nov 9 05:37:45 2025 GMT Subject: CN=EF21B9C6DD164C3C2DAA65E988D7DCA9C20958DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:c3:b8:b7:22:ab:a2:19:51:51:7a:7f:36: 2d:97:97:14:fe:88:ff:13:ce:d7:91:d9:83:bf:9a: 95:ed:52:a3:0d:e8:b0:1b:16:d5:bd:0b:1a:a9:b1: c9:20:b3:c6:76:a7:e3:28:bf:7b:09:38:c6:aa:0b: 95:17:80:9c:1d:d2:93:77:f5:d6:0d:59:50:39:19: ac:7b:60:d6:9a:98:d5:b3:b0:bf:c7:a0:ae:59:b3: 2a:e6:a9:e8:bd:7b:84:c7:d6:ea:b0:17:a2:8e:98: 0d:a1:c5:52:a0:d3:1c:ef:5b:a8:fe:da:45:73:38: ae:c5:a7:78:5d:36:ba:e4:9c:b9:5c:62:b0:b9:8d: ff:ff:57:0a:37:91:24:9f:66:c4:72:3d:c2:3d:63: 83:f6:27:c0:a3:6e:5c:95:8a:db:44:a3:31:8e:29: 07:c7:a9:41:ba:67:f6:a3:73:7a:e5:27:9b:27:05: dc:6d:56:39:0a:74:3c:b0:3a:7e:62:61:09:7a:0b: 5a:95:57:ba:68:4e:d3:0e:fc:13:8c:fc:10:81:e6: 51:7b:1e:83:8d:e1:cc:a7:a6:57:0c:e4:71:00:82: db:1a:9a:c2:74:60:ff:3d:83:59:b3:ea:df:67:1e: f7:10:52:2d:6d:e7:f9:a2:f8:fa:ac:4b:5f:e0:05: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:21:B9:C6:DD:16:4C:3C:2D:AA:65:E9:88:D7:DC:A9:C2:09:58:DE X509v3 Authority Key Identifier: keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7f:8d:45:85:64:14:d0:cf:00:89:8d:d1:9f:1e:1d:83:73: b9:1e:27:32:96:d4:85:7f:d1:e2:e0:d6:c3:4b:50:ae:af:17: 64:be:bd:b8:ca:f5:04:4e:de:4c:ac:c3:12:9b:6a:34:67:14: 61:61:e7:1a:a1:20:f2:b0:06:2f:cc:dd:9d:c3:71:26:e6:85: 43:05:ea:7b:93:05:68:ca:41:82:15:35:f4:c1:36:12:35:7f: 44:0e:a4:c4:b2:62:05:99:b4:36:3b:6b:7e:14:74:32:22:9a: 01:70:f2:23:80:59:b3:4f:24:f4:e7:e2:59:bf:c2:f7:df:a3: 78:b1:af:c2:c1:86:23:9e:b1:ea:80:a2:c4:eb:b4:72:ee:18: a0:2e:2b:3e:11:63:02:6e:c3:cd:91:bf:cf:ba:29:7b:f6:1e: 47:f5:52:0e:ad:a4:95:61:14:df:cc:b3:66:38:e2:0c:aa:33: e3:85:c2:52:ef:5b:60:ae:d5:ab:3f:c0:1b:7e:48:21:0c:ec: 7a:b7:7a:b3:9f:a9:b3:42:fc:4f:c0:39:af:f8:fe:40:73:c9: 40:9a:7b:d9:bf:32:ce:ac:17:12:64:05:11:a3:34:19:a0:c1: cc:6c:27:31:26:a7:a5:0e:2b:4b:4d:c9:0c:86:e2:57:48:08: 18:be:e0:e6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHiuBcepVxVbihQJCtAr6yfPp3IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCMjNFNkZCQzFCNTY4RkQ0NzhGODIyMThBMkI1QTlB OTBFQzg0NDAeFw0yNTExMDMwNTU3NDVaFw0yNTExMDkwNTM3NDVaMDMxMTAvBgNV BAMTKEVGMjFCOUM2REQxNjRDM0MyREFBNjVFOTg4RDdEQ0E5QzIwOTU4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkd8O4tyKrohlRUXp/Ni2XlxT+ iP8TzteR2YO/mpXtUqMN6LAbFtW9Cxqpsckgs8Z2p+Mov3sJOMaqC5UXgJwd0pN3 9dYNWVA5Gax7YNaamNWzsL/HoK5Zsyrmqei9e4TH1uqwF6KOmA2hxVKg0xzvW6j+ 2kVzOK7Fp3hdNrrknLlcYrC5jf//Vwo3kSSfZsRyPcI9Y4P2J8CjblyVittEozGO KQfHqUG6Z/ajc3rlJ5snBdxtVjkKdDywOn5iYQl6C1qVV7poTtMO/BOM/BCB5lF7 HoON4cynplcM5HEAgtsamsJ0YP89g1mz6t9nHvcQUi1t5/mi+PqsS1/gBZXfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7yG5xt0WTDwtqmXpiNfcqcIJWN4wHwYDVR0j BBgwFoAUPLI+b7wbVo/UePgiGKK1qakOyEQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85Q0ZFQUYyQzkxQUIxQzM0OTkzQzMxMTI5MUNFNTBBM0Y5 QjhGRjZGRTRBRUUzRTlEQ0U0RDQzQjQ4MTk3MDJBLzAvM0NCMjNFNkZCQzFCNTY4 RkQ0NzhGODIyMThBMkI1QTlBOTBFQzg0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0IyM0U2RkJDMUI1NjhGRDQ3 OEY4MjIxOEEyQjVBOUE5MEVDODQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUNGRUFGMkM5MUFCMUMzNDk5M0MzMTEyOTFDRTUwQTNGOUI4RkY2RkU0 QUVFM0U5RENFNEQ0M0I0ODE5NzAyQS8wLzNDQjIzRTZGQkMxQjU2OEZENDc4Rjgy MjE4QTJCNUE5QTkwRUM4NDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLf41FhWQU0M8AiY3Rnx4dg3O5 HicyltSFf9Hi4NbDS1Curxdkvr24yvUETt5MrMMSm2o0ZxRhYecaoSDysAYvzN2d w3Em5oVDBep7kwVoykGCFTX0wTYSNX9EDqTEsmIFmbQ2O2t+FHQyIpoBcPIjgFmz TyT05+JZv8L336N4sa/CwYYjnrHqgKLE67Ry7higLis+EWMCbsPNkb/Puil79h5H 9VIOraSVYRTfzLNmOOIMqjPjhcJS71tgrtWrP8AbfkghDOx6t3qzn6mzQvxPwDmv +P5Ac8lAmnvZvzLOrBcSZAURozQZoMHMbCcxJqelDitLTckMhuJXSAgYvuDm -----END CERTIFICATE-----Generated at Wed Nov 5 15:41:54 2025 by rpki-client