$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: rtqy8tg1Fp3cYYYVZMzdA6VN8dO+4MJmh8FiwUllxaI= Subject key identifier: 69:CC:5C:9B:C7:20:69:99:51:39:19:55:AA:B0:80:49:2E:CE:4A:21 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 0DD07CFE042DCB5DE4325BA02ADDE5AF362C729D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 22:40:07 +0000 Manifest this update: Tue 04 Nov 2025 22:35:07 +0000 Manifest next update: Sun 09 Nov 2025 03:48:07 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: KECBRgpUrtlmvVtZSbPB/w594JZHs/2KfycUCKrC9/E=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d0:7c:fe:04:2d:cb:5d:e4:32:5b:a0:2a:dd:e5:af:36:2c:72:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Nov 4 22:35:07 2025 GMT Not After : Nov 9 03:48:07 2025 GMT Subject: CN=69CC5C9BC720699951391955AAB080492ECE4A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:b8:5e:49:d3:ad:3c:2f:a0:a1:af:34:98: 4f:35:41:b0:32:60:9f:83:11:d7:f5:20:bc:c4:33: 34:09:3c:43:21:ab:1b:c3:85:1e:97:40:66:3c:3d: 32:42:d9:ce:d7:13:0d:b2:2b:fd:4e:0f:db:1c:f8: 54:6c:b4:0c:fd:e7:ed:24:11:0d:7a:8b:d9:e2:9b: 65:ba:04:bc:cc:38:6b:23:7a:e0:7a:51:fb:5b:8a: d3:79:ec:9a:29:46:8e:75:60:b7:b6:be:31:ae:25: e5:ad:80:13:6b:87:ec:d6:75:7c:e8:33:39:36:9e: e8:af:b8:e3:ad:ef:f0:52:e0:8c:c4:7f:72:36:c6: b1:e7:62:80:e5:be:49:c0:17:c4:11:b3:ba:cf:12: 57:55:d0:4b:9e:47:17:e6:09:f4:91:66:d8:92:18: 79:ff:7b:43:00:e1:a2:2a:49:21:fe:bf:4d:0d:7d: e2:5f:cc:fa:2d:94:25:67:d4:d0:6a:df:46:57:c7: 18:27:12:bd:58:68:b4:03:b4:4d:f7:c2:a1:06:64: dd:c4:c3:04:a4:f7:1b:9c:b9:04:e4:10:93:e6:0b: ec:d7:72:d5:39:e7:0c:e4:0f:d6:de:37:7d:d5:5c: b9:f9:39:e6:57:ab:ee:cf:11:78:cf:d2:a8:0d:cb: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CC:5C:9B:C7:20:69:99:51:39:19:55:AA:B0:80:49:2E:CE:4A:21 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3b:e8:93:c3:90:61:31:4f:a4:db:8d:ee:aa:e2:f6:1d:f7: a1:3f:c5:a5:23:04:97:38:a7:d5:b9:0d:69:4d:f4:e3:19:30: bd:c7:79:4f:08:0d:6b:37:1d:90:2c:55:fa:a3:d1:c0:22:90: da:e3:75:39:ea:7e:db:c8:c7:98:35:d1:40:69:e6:4b:49:5b: 8a:39:d1:bc:a0:d3:21:aa:9c:4d:bb:23:7c:f6:5b:20:61:b1: 6c:e6:ba:4f:c2:ee:f0:de:c1:21:a1:fa:7c:b1:96:c3:51:b2: 71:5d:05:3f:8a:71:ee:c0:3c:47:9d:54:80:03:bd:d9:b8:43: 38:ce:e9:23:61:46:ea:2a:eb:c7:cd:99:4d:a3:20:1b:1d:21: 43:9a:90:3d:e6:b4:44:11:4e:df:d0:1d:2e:98:76:4b:bf:76: e9:9d:62:92:5f:ad:64:23:72:87:ed:82:35:19:82:33:78:e2: 37:a5:8d:f2:f8:c2:fc:1f:86:44:64:e4:d5:d9:ef:da:7f:ca: d9:3d:73:fb:33:02:bd:3b:6f:4c:d9:39:7b:b2:bb:4d:52:d1: 4e:00:98:be:3c:e2:09:66:53:d7:c4:cc:9e:bf:c4:6d:bf:0f: 6d:02:be:ad:3d:b1:da:70:81:dd:c0:78:a8:1f:9e:59:5f:98: 66:77:e9:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDdB8/gQty13kMlugKt3lrzYscp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTExMDQyMjM1MDdaFw0yNTExMDkwMzQ4MDdaMDMxMTAvBgNV BAMTKDY5Q0M1QzlCQzcyMDY5OTk1MTM5MTk1NUFBQjA4MDQ5MkVDRTRBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ1LheSdOtPC+goa80mE81QbAy YJ+DEdf1ILzEMzQJPEMhqxvDhR6XQGY8PTJC2c7XEw2yK/1OD9sc+FRstAz95+0k EQ16i9nim2W6BLzMOGsjeuB6UftbitN57JopRo51YLe2vjGuJeWtgBNrh+zWdXzo Mzk2nuivuOOt7/BS4IzEf3I2xrHnYoDlvknAF8QRs7rPEldV0EueRxfmCfSRZtiS GHn/e0MA4aIqSSH+v00NfeJfzPotlCVn1NBq30ZXxxgnEr1YaLQDtE33wqEGZN3E wwSk9xucuQTkEJPmC+zXctU55wzkD9beN33VXLn5OeZXq+7PEXjP0qgNy3MXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUacxcm8cgaZlRORlVqrCASS7OSiEwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrO+iTw5BhMU+k243uquL2Hfeh P8WlIwSXOKfVuQ1pTfTjGTC9x3lPCA1rNx2QLFX6o9HAIpDa43U56n7byMeYNdFA aeZLSVuKOdG8oNMhqpxNuyN89lsgYbFs5rpPwu7w3sEhofp8sZbDUbJxXQU/inHu wDxHnVSAA73ZuEM4zukjYUbqKuvHzZlNoyAbHSFDmpA95rREEU7f0B0umHZLv3bp nWKSX61kI3KH7YI1GYIzeOI3pY3y+ML8H4ZEZOTV2e/af8rZPXP7MwK9O29M2Tl7 srtNUtFOAJi+POIJZlPXxMyev8Rtvw9tAr6tPbHacIHdwHioH55ZX5hmd+nx -----END CERTIFICATE-----Generated at Wed Nov 5 20:08:08 2025 by rpki-client