$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft File: 3214A9089E97D5F53B714A9F9256A933E4595E53.mft (raw, json) Hash identifier: aUFVByPuO6gKA3dqPLYUCuSZCpz9HMa85u1pZdn4vig= Subject key identifier: 66:90:7B:D2:96:0A:5C:65:25:3C:CD:95:14:A2:97:4D:2D:2A:78:BB Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 Certificate issuer: /CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Certificate serial: 7DB7B20118D67312E17872C6D5A76E673FA0F8B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 15:51:37 +0000 Manifest this update: Tue 04 Nov 2025 15:46:37 +0000 Manifest next update: Sat 08 Nov 2025 18:42:37 +0000 Files and hashes: 1: 34352e3137382e33372e302f32342d3234203d3e203232373234.roa (hash: 0HhnYrRRVi7CHJEvS9xN8EZDppFHk6whkimhveshWDc=) 2: 3214A9089E97D5F53B714A9F9256A933E4595E53.crl (hash: msiANZdMRhaqxT82dZlEskgILRxENx3CcLtb8ROV8kk=) 3: 34352e3137382e33392e302f32342d3234203d3e203232373234.roa (hash: AP7UFP0rpGQbityeHpAmDNcuegyejWrJPgbpZy6kEh0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 18:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b7:b2:01:18:d6:73:12:e1:78:72:c6:d5:a7:6e:67:3f:a0:f8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Validity Not Before: Nov 4 15:46:37 2025 GMT Not After : Nov 8 18:42:37 2025 GMT Subject: CN=66907BD2960A5C65253CCD9514A2974D2D2A78BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:f7:7b:92:ad:30:28:e7:0f:c8:f8:bb:df: db:6f:3b:08:b9:d4:aa:c9:9e:4f:bb:de:4d:58:b0: f9:3a:70:64:b5:03:59:b0:df:ea:02:6d:51:71:32: 2b:17:ed:11:4e:f8:c8:0a:6f:f0:21:e8:b3:96:3a: 80:f7:cc:40:42:70:a7:4f:6f:a7:14:e6:43:57:a3: 24:f6:49:ec:07:ff:57:9f:52:d9:58:b6:fe:1a:2c: 56:7f:64:1f:97:2c:1e:ac:3a:d9:6e:4e:b1:10:3e: cb:02:4d:f2:03:9e:61:d4:a4:b3:3f:37:a6:45:14: 81:30:f2:68:b4:71:93:4d:5a:e0:c6:88:81:f0:14: c8:27:53:5b:c7:c3:1a:27:55:3f:57:69:39:64:43: 03:95:6a:a5:cf:2a:5a:b1:04:53:0d:6c:08:ff:03: 53:1b:c4:1f:fb:37:1c:a4:92:87:3a:60:15:b6:38: f6:87:e0:be:94:2e:26:93:ff:9f:3b:cb:66:6f:18: c2:5c:57:ea:d7:0a:2e:08:44:4b:56:71:1c:a5:22: 56:dc:46:5e:67:b9:85:bc:ef:45:d0:58:9f:c9:26: 0b:ca:6d:9e:f1:96:f3:5d:84:9d:aa:d2:e1:08:eb: 22:c1:d2:5e:35:71:7f:82:51:0d:de:16:1e:fe:35: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:90:7B:D2:96:0A:5C:65:25:3C:CD:95:14:A2:97:4D:2D:2A:78:BB X509v3 Authority Key Identifier: keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4d:4b:5d:26:92:16:61:a1:2d:dd:d5:ff:73:06:33:ea:3b: e9:ed:24:e7:b3:fe:34:4d:84:be:c9:4a:f0:03:48:c1:2c:0e: e5:be:61:69:d6:46:57:d1:1a:76:ec:a7:a0:19:5f:74:50:c4: 81:5b:ee:42:2b:ef:57:94:a9:ab:98:e7:5a:b8:74:07:8c:7d: d3:8c:d2:ef:d5:84:a3:1e:46:7b:91:05:0c:e9:03:8b:f4:11: 48:f8:9e:fc:b9:72:2c:a1:49:4b:7d:17:7d:8b:50:37:e7:ba: 91:8d:87:c7:5f:2c:be:0e:18:5b:6f:6e:19:b2:21:7c:2b:34: 67:e1:1f:cf:10:6d:c1:52:10:74:4c:24:46:e7:77:82:a2:ab: ce:8e:b3:65:b7:84:4e:e3:a5:cc:54:c3:66:7d:2a:51:e1:5b: 53:59:20:5b:5a:a6:a4:d3:cc:86:fb:ef:0a:3e:41:32:6c:67: 63:f9:a4:31:13:a6:ce:2f:14:14:71:d6:5c:7c:14:a0:0e:98: cb:20:d7:ae:54:87:c9:ed:9b:de:ae:bc:6d:12:a8:28:48:30: 81:30:dd:8c:b0:8c:c1:e2:e5:c8:63:24:2f:05:99:34:0e:5d: 70:cd:1d:a5:3a:d8:ef:d9:ab:06:86:f3:54:ae:18:76:48:5e: d4:29:2c:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfbeyARjWcxLheHLG1aduZz+g+LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxNEE5MDg5RTk3RDVGNTNCNzE0QTlGOTI1NkE5MzNF NDU5NUU1MzAeFw0yNTExMDQxNTQ2MzdaFw0yNTExMDgxODQyMzdaMDMxMTAvBgNV BAMTKDY2OTA3QkQyOTYwQTVDNjUyNTNDQ0Q5NTE0QTI5NzREMkQyQTc4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/fd7kq0wKOcPyPi739tvOwi5 1KrJnk+73k1YsPk6cGS1A1mw3+oCbVFxMisX7RFO+MgKb/Ah6LOWOoD3zEBCcKdP b6cU5kNXoyT2SewH/1efUtlYtv4aLFZ/ZB+XLB6sOtluTrEQPssCTfIDnmHUpLM/ N6ZFFIEw8mi0cZNNWuDGiIHwFMgnU1vHwxonVT9XaTlkQwOVaqXPKlqxBFMNbAj/ A1MbxB/7Nxykkoc6YBW2OPaH4L6ULiaT/587y2ZvGMJcV+rXCi4IREtWcRylIlbc Rl5nuYW870XQWJ/JJgvKbZ7xlvNdhJ2q0uEI6yLB0l41cX+CUQ3eFh7+NZLRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZpB70pYKXGUlPM2VFKKXTS0qeLswHwYDVR0j BBgwFoAUMhSpCJ6X1fU7cUqfklapM+RZXlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMTI2OTU1Rjg2NzdFODU4MzZENkMwMDNFMzhCRTNDRTcy N0IyQzk3RkQ2MjU1ODFCMDA4ODc5M0NFMTlERUFGLzAvMzIxNEE5MDg5RTk3RDVG NTNCNzE0QTlGOTI1NkE5MzNFNDU5NUU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjE0QTkwODlFOTdENUY1M0I3 MTRBOUY5MjU2QTkzM0U0NTk1RTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzEyNjk1NUY4Njc3RTg1ODM2RDZDMDAzRTM4QkUzQ0U3MjdCMkM5N0ZE NjI1NTgxQjAwODg3OTNDRTE5REVBRi8wLzMyMTRBOTA4OUU5N0Q1RjUzQjcxNEE5 RjkyNTZBOTMzRTQ1OTVFNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjTUtdJpIWYaEt3dX/cwYz6jvp 7STns/40TYS+yUrwA0jBLA7lvmFp1kZX0Rp27KegGV90UMSBW+5CK+9XlKmrmOda uHQHjH3TjNLv1YSjHkZ7kQUM6QOL9BFI+J78uXIsoUlLfRd9i1A357qRjYfHXyy+ Dhhbb24ZsiF8KzRn4R/PEG3BUhB0TCRG53eCoqvOjrNlt4RO46XMVMNmfSpR4VtT WSBbWqak08yG++8KPkEybGdj+aQxE6bOLxQUcdZcfBSgDpjLINeuVIfJ7Zverrxt EqgoSDCBMN2MsIzB4uXIYyQvBZk0Dl1wzR2lOtjv2asGhvNUrhh2SF7UKSyK -----END CERTIFICATE-----Generated at Wed Nov 5 20:17:20 2025 by rpki-client