$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft File: 03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft (raw, json) Hash identifier: kALNWp6UpZjAtm9OT3hBgA8nBgCsv+qAO5qS3Hfd1QY= Subject key identifier: 2E:DC:31:DA:83:A6:3A:3B:1C:2B:34:1A:94:50:B5:97:6C:69:AC:E6 Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53 Certificate issuer: /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253 Certificate serial: 76116FBB83AF9F94B506215093D02A4F69FA8853 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft Manifest number: 012E Signing time: Tue 04 Nov 2025 16:36:56 +0000 Manifest this update: Tue 04 Nov 2025 16:31:56 +0000 Manifest next update: Mon 10 Nov 2025 06:04:56 +0000 Files and hashes: 1: 3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa (hash: MvedPI8wPX0DLSbpSEQnJQeBsGh+GfB3rH7mbTvmdEE=) 2: 03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl (hash: R1hpTPHax3C72GDcm5pNXOhvJNyWKsDVhVNl7XGsJ04=) 3: 323830333a623832303a3a2f33322d3332203d3e20323635383135.roa (hash: BgiZVEBkCsQBpduxD2lkBm4tWZPrSE7ZdRvsOKcVcyw=) 4: 3230312e3138322e3135302e302f32332d3234203d3e203532343638.roa (hash: WSMOqdyoE1ic1M/wXhWBvVgxHsF2CSe6rHQv+9gKKQI=) 5: 3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa (hash: kUx7ZC/Avh4F/D6K24kJ0nu91aTs1NFQuO+O+sND8Wc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:11:6f:bb:83:af:9f:94:b5:06:21:50:93:d0:2a:4f:69:fa:88:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253 Validity Not Before: Nov 4 16:31:56 2025 GMT Not After : Nov 10 06:04:56 2025 GMT Subject: CN=2EDC31DA83A63A3B1C2B341A9450B5976C69ACE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:cd:a9:02:34:00:77:57:7c:59:2a:fa:f2: cd:73:f3:6a:fb:a8:2d:71:e9:41:32:fa:10:2b:49: 4a:61:06:3a:e8:29:1c:21:b8:c8:5b:d1:6f:ac:96: d3:49:8b:dc:03:1a:4e:d9:e2:3e:47:eb:29:6b:22: c4:04:03:81:1c:44:d5:94:ca:40:89:19:30:db:6f: a0:62:1e:0c:97:99:ee:f0:b9:2f:e7:c4:71:40:83: 68:a6:6e:02:7e:36:60:5e:82:04:ba:8a:45:40:8f: 1c:ec:40:d8:66:d2:54:de:05:92:19:93:f9:14:30: 72:e3:01:78:17:1e:5c:b7:e1:41:02:e2:71:9d:d3: d8:ea:ab:1b:19:70:0c:25:64:69:01:33:8a:12:9f: f5:ba:6d:55:3d:6e:1e:2a:65:31:37:c8:b8:0f:62: a3:79:da:27:27:c9:e3:f4:25:b6:c1:ac:ab:c7:b6: 61:0e:19:78:af:d3:ee:af:2d:5b:fd:91:73:35:a0: 92:7f:be:52:d3:06:87:86:57:0e:5b:75:39:26:64: f1:51:30:0e:17:ef:ff:f5:16:bf:bc:72:a7:38:e3: 37:a9:7a:c7:37:8d:92:d8:c9:55:65:f0:9f:c2:53: d8:a2:49:31:6e:16:33:66:24:f3:8b:32:23:00:12: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DC:31:DA:83:A6:3A:3B:1C:2B:34:1A:94:50:B5:97:6C:69:AC:E6 X509v3 Authority Key Identifier: keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:32:63:93:3d:21:94:52:d9:a5:39:7e:10:3b:c8:be:c8:98: 21:ec:d2:78:f6:6a:33:8c:76:c8:68:a0:78:66:04:15:13:76: 79:4d:00:ae:34:0e:47:f1:48:04:c0:e3:09:c9:90:72:c5:19: d0:4d:7e:1d:54:b3:99:55:53:c2:38:6b:1f:f0:0f:6d:c4:0a: 7d:15:77:f8:dc:be:95:50:a6:66:61:fb:36:10:82:21:1e:61: e7:d5:26:e4:0b:7d:66:87:1b:91:80:24:af:95:7d:bc:d8:1b: 37:6a:64:a3:43:99:78:53:e3:4a:00:2b:5c:55:07:cc:5e:99: 27:80:b1:b4:bd:d6:0b:71:ab:77:d8:2b:e4:51:59:bf:99:2b: 5d:3a:89:46:c7:27:9f:7d:80:53:3d:aa:7a:05:90:9a:56:c2: a2:00:f1:cb:bb:6a:8c:33:65:d6:18:27:3a:2e:25:02:e3:b4: f1:ce:09:a0:60:51:fa:1f:d9:40:e7:ec:12:f3:ed:b1:90:55: 55:e3:70:98:5b:57:72:99:13:24:04:63:20:3c:0a:4c:f4:92: 2f:df:63:9d:59:7c:70:33:ed:b4:ac:32:73:25:2e:11:25:da: 1c:f8:cc:54:60:6c:c8:3d:cd:af:84:37:4f:c3:3b:7e:0f:be: 55:35:ab:0f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdhFvu4Ovn5S1BiFQk9AqT2n6iFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4NjJBOUJGQ0I5N0VFNkI2MkNFMURCMDc3RTNCNkVB RDVGRTI1MzAeFw0yNTExMDQxNjMxNTZaFw0yNTExMTAwNjA0NTZaMDMxMTAvBgNV BAMTKDJFREMzMURBODNBNjNBM0IxQzJCMzQxQTk0NTBCNTk3NkM2OUFDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ns2pAjQAd1d8WSr68s1z82r7 qC1x6UEy+hArSUphBjroKRwhuMhb0W+sltNJi9wDGk7Z4j5H6ylrIsQEA4EcRNWU ykCJGTDbb6BiHgyXme7wuS/nxHFAg2imbgJ+NmBeggS6ikVAjxzsQNhm0lTeBZIZ k/kUMHLjAXgXHly34UEC4nGd09jqqxsZcAwlZGkBM4oSn/W6bVU9bh4qZTE3yLgP YqN52icnyeP0JbbBrKvHtmEOGXiv0+6vLVv9kXM1oJJ/vlLTBoeGVw5bdTkmZPFR MA4X7//1Fr+8cqc44zepesc3jZLYyVVl8J/CU9iiSTFuFjNmJPOLMiMAEkhvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULtwx2oOmOjscKzQalFC1l2xprOYwHwYDVR0j BBgwFoAUA4Yqm/y5fua2LOHbB347bq1f4lMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNEM4OUQ0MzE2OTY2NEI5QjBGNDI3Nzk3NDlCOEUyNzE4 NEJFMTA3OUQ1N0M3QTc2QTc2RDVEODgxMDhGODBDLzAvMDM4NjJBOUJGQ0I5N0VF NkI2MkNFMURCMDc3RTNCNkVBRDVGRTI1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMzg2MkE5QkZDQjk3RUU2QjYy Q0UxREIwNzdFM0I2RUFENUZFMjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTRDODlENDMxNjk2NjRCOUIwRjQyNzc5NzQ5QjhFMjcxODRCRTEwNzlE NTdDN0E3NkE3NkQ1RDg4MTA4RjgwQy8wLzAzODYyQTlCRkNCOTdFRTZCNjJDRTFE QjA3N0UzQjZFQUQ1RkUyNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkMmOTPSGUUtmlOX4QO8i+yJgh 7NJ49mozjHbIaKB4ZgQVE3Z5TQCuNA5H8UgEwOMJyZByxRnQTX4dVLOZVVPCOGsf 8A9txAp9FXf43L6VUKZmYfs2EIIhHmHn1SbkC31mhxuRgCSvlX282Bs3amSjQ5l4 U+NKACtcVQfMXpkngLG0vdYLcat32CvkUVm/mStdOolGxyeffYBTPap6BZCaVsKi APHLu2qMM2XWGCc6LiUC47TxzgmgYFH6H9lA5+wS8+2xkFVV43CYW1dymRMkBGMg PApM9JIv32OdWXxwM+20rDJzJS4RJdoc+MxUYGzIPc2vhDdPwzt+D75VNasP -----END CERTIFICATE-----Generated at Wed Nov 5 21:59:30 2025 by rpki-client