$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft File: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft (raw, json) Hash identifier: 8lFmR8cC4ofihMiK8/j/ZXHIJJFliIJRNrIccuDxBnk= Subject key identifier: 84:A8:D1:45:3E:FB:87:80:C9:BC:5E:70:E7:05:E3:52:DC:C5:FD:7E Authority key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 Certificate issuer: /CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0 Certificate serial: 47DA9324E5BDAE8F13B73DDEE366B7E1808290A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 15:11:09 +0000 Manifest this update: Tue 04 Nov 2025 15:06:09 +0000 Manifest next update: Sat 08 Nov 2025 15:38:09 +0000 Files and hashes: 1: 3230312e3133302e31362e302f32322d3232203d3e203237393531.roa (hash: abImvvbFsudfph5qw211U6DBVARt/+FYVfAAbpcdAJc=) 2: 323830313a3163343a3a2f34342d3434203d3e20323632353839.roa (hash: lorZn9/vXoPIp0R8IKOORdaOFAbwOZuk9eFtFCf+UjY=) 3: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl (hash: rCyshGY/lFwfgwaSCz02PTCa0NLjrv5BP6Jl/ifNyds=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:da:93:24:e5:bd:ae:8f:13:b7:3d:de:e3:66:b7:e1:80:82:90:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0 Validity Not Before: Nov 4 15:06:09 2025 GMT Not After : Nov 8 15:38:09 2025 GMT Subject: CN=84A8D1453EFB8780C9BC5E70E705E352DCC5FD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:ab:61:f8:03:77:44:ba:89:cd:07:4f:23: e5:cf:3f:11:38:ab:88:e5:d1:fc:83:3b:89:c0:2d: 65:86:ce:5a:5b:12:d0:04:b0:16:44:08:70:e9:c0: 0a:ea:2e:4a:0c:b5:de:55:ba:eb:1d:15:8e:8f:0c: f3:7e:5f:81:f0:a4:01:30:b9:73:0d:0e:f8:21:1c: cf:3b:ac:f1:b4:3c:6c:6f:6a:51:f7:e1:b7:c6:72: 95:1f:e1:ca:e9:b6:3f:b2:37:af:7a:56:55:41:22: a6:35:d4:8a:70:62:07:a3:14:40:fe:ad:07:c7:40: 84:1d:31:d4:a4:43:fd:2b:c3:fb:a1:ba:37:aa:47: 68:8e:75:a7:65:54:46:0f:61:cc:2a:24:1d:30:03: 58:4a:c2:ef:f7:34:11:52:b3:82:bd:52:0a:b5:60: 3e:fe:43:3d:f0:c5:47:c5:97:b3:d5:2f:79:ee:73: 3f:50:98:f6:c5:b6:b6:b1:88:76:65:1a:a3:5e:15: e9:1a:3e:a8:c7:d6:c3:48:93:9e:7e:70:77:98:a6: 66:9b:6c:12:aa:57:1c:b2:42:84:34:1c:62:d4:bf: 0a:a5:ec:1b:b3:c1:5c:dc:b1:cc:c1:36:c1:bf:cf: 48:46:59:cb:7c:3a:11:bd:97:ef:7b:5a:e5:8b:aa: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A8:D1:45:3E:FB:87:80:C9:BC:5E:70:E7:05:E3:52:DC:C5:FD:7E X509v3 Authority Key Identifier: keyid:3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e2:30:26:a7:5b:3a:39:eb:56:6a:32:6b:87:f4:5a:6b:29: 57:d7:7c:57:e1:20:47:6b:08:55:9b:ec:04:a4:eb:e8:58:8e: 6f:cd:d9:a4:5c:fc:84:9b:51:85:7f:5d:2e:ee:b7:e6:c9:25: 60:92:2f:a2:c2:ce:28:1b:e0:38:5f:c2:8e:27:97:aa:21:89: 9a:fd:2a:1e:56:cc:8b:24:f5:07:9d:3c:b9:dd:af:54:dc:8c: 74:bd:39:17:03:38:0c:d8:a0:62:9a:c7:47:a7:ee:a1:5d:fc: 85:d4:56:f7:20:45:0a:c5:93:7a:f5:1a:78:26:45:d8:26:bd: 56:98:2a:0b:2e:f5:9a:b3:43:7e:a9:3c:79:53:37:5c:dc:44: a2:39:a7:14:eb:bc:1a:4a:6e:d9:e3:fb:81:a4:f7:91:8a:9c: 97:e7:ec:5b:41:21:45:61:d9:29:9f:ac:c4:43:37:e4:fc:50: 76:76:93:33:70:3f:9b:94:c1:dd:20:ad:e0:48:2e:62:34:72: 6b:d5:f7:16:33:61:6e:90:f5:a3:cb:4d:7c:50:6a:17:d3:34: d4:2b:f7:e3:b0:be:e1:9e:6c:10:91:c3:5a:fb:53:cb:75:9d: a2:6f:e9:1b:ad:a2:b8:32:29:62:78:0e:c4:ed:b5:77:84:27: 64:32:1c:1c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUR9qTJOW9ro8Ttz3e42a34YCCkKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5NEFDREM0Mzg2NTlGMjBEMkFDOENEMzk5MzRBMUND MEVGRTNBMDAeFw0yNTExMDQxNTA2MDlaFw0yNTExMDgxNTM4MDlaMDMxMTAvBgNV BAMTKDg0QThEMTQ1M0VGQjg3ODBDOUJDNUU3MEU3MDVFMzUyRENDNUZEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Math+AN3RLqJzQdPI+XPPxE4 q4jl0fyDO4nALWWGzlpbEtAEsBZECHDpwArqLkoMtd5VuusdFY6PDPN+X4HwpAEw uXMNDvghHM87rPG0PGxvalH34bfGcpUf4crptj+yN696VlVBIqY11IpwYgejFED+ rQfHQIQdMdSkQ/0rw/uhujeqR2iOdadlVEYPYcwqJB0wA1hKwu/3NBFSs4K9Ugq1 YD7+Qz3wxUfFl7PVL3nucz9QmPbFtraxiHZlGqNeFekaPqjH1sNIk55+cHeYpmab bBKqVxyyQoQ0HGLUvwql7BuzwVzcsczBNsG/z0hGWct8OhG9l+97WuWLqn+BAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhKjRRT77h4DJvF5w5wXjUtzF/X4wHwYDVR0j BBgwFoAUPJSs3EOGWfINKsjNOZNKHMDv46AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BODIzMUE0N0EyRjA4MkJDNzZCQjlDRUU5RTNGNUVBQjg1 MkZDRTY1QzRGNzQ0N0MyNDgxOUJDMDQwOEU2Qjc2LzAvM0M5NEFDREM0Mzg2NTlG MjBEMkFDOENEMzk5MzRBMUNDMEVGRTNBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzk0QUNEQzQzODY1OUYyMEQy QUM4Q0QzOTkzNEExQ0MwRUZFM0EwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTgyMzFBNDdBMkYwODJCQzc2QkI5Q0VFOUUzRjVFQUI4NTJGQ0U2NUM0 Rjc0NDdDMjQ4MTlCQzA0MDhFNkI3Ni8wLzNDOTRBQ0RDNDM4NjU5RjIwRDJBQzhD RDM5OTM0QTFDQzBFRkUzQTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCg4jAmp1s6OetWajJrh/RaaylX 13xX4SBHawhVm+wEpOvoWI5vzdmkXPyEm1GFf10u7rfmySVgki+iws4oG+A4X8KO J5eqIYma/SoeVsyLJPUHnTy53a9U3Ix0vTkXAzgM2KBimsdHp+6hXfyF1Fb3IEUK xZN69Rp4JkXYJr1WmCoLLvWas0N+qTx5Uzdc3ESiOacU67waSm7Z4/uBpPeRipyX 5+xbQSFFYdkpn6zEQzfk/FB2dpMzcD+blMHdIK3gSC5iNHJr1fcWM2FukPWjy018 UGoX0zTUK/fjsL7hnmwQkcNa+1PLdZ2ib+kbraK4MilieA7E7bV3hCdkMhwc -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:38 2025 by rpki-client