$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft File: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft (raw, json) Hash identifier: dQ1/C6ZvcuLvVtI3b/3EwCtQtpyruxGqTAAcMeb7ipo= Subject key identifier: 3E:E2:C6:28:2A:76:FB:6C:3E:C3:B2:A6:8E:A7:29:61:79:8C:0F:B2 Authority key identifier: 3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 Certificate issuer: /CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3 Certificate serial: 46747F327FD8E31787B6FAF014865F297B3BC307 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft Manifest number: 23 Signing time: Mon 03 Nov 2025 09:29:40 +0000 Manifest this update: Mon 03 Nov 2025 09:24:40 +0000 Manifest next update: Sun 09 Nov 2025 03:32:40 +0000 Files and hashes: 1: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl (hash: /h8Rnqi4RLw4rvp8B4fI/9FQEY/njdDQwMFDUUjy2i4=) 2: 323830333a366464303a3a2f33322d3438203d3e20323734313930.roa (hash: ngugspegyt4RHmTCpqVQx/FbbfeCWLgUEwqECaAoFsw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:74:7f:32:7f:d8:e3:17:87:b6:fa:f0:14:86:5f:29:7b:3b:c3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3 Validity Not Before: Nov 3 09:24:40 2025 GMT Not After : Nov 9 03:32:40 2025 GMT Subject: CN=3EE2C6282A76FB6C3EC3B2A68EA72961798C0FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:f3:15:fc:c5:cd:92:aa:aa:8d:f7:5b:05: 0b:ed:de:fd:ed:3c:65:0a:cb:59:b6:3d:a2:03:23: 76:40:97:f6:58:78:f2:6e:0e:3f:29:fa:c0:ad:24: 7d:59:93:d9:ed:bf:54:20:b8:ea:32:b5:cd:fc:ab: 33:43:fe:c4:d5:44:a3:95:82:c1:2e:96:ab:3e:64: 8b:e1:f4:95:de:ff:11:fa:81:f9:92:ff:8f:e9:ab: 63:1f:47:9e:85:c6:46:15:03:03:6f:e4:21:1b:93: 2e:5a:dd:60:bc:b9:91:3b:a7:91:2d:78:7a:3d:2f: 6e:74:8f:ff:d9:f0:07:3c:bc:80:fe:6f:15:08:24: 0a:89:0d:94:b3:89:9c:06:7d:fa:24:6c:d4:d0:b3: a5:ee:88:5e:f9:ea:76:c5:4f:c5:f7:7a:83:77:4d: e3:8f:97:01:e7:54:1e:48:a1:48:54:95:c5:f5:9d: 81:d6:8d:47:be:03:20:93:b8:26:45:5f:54:f4:f4: 39:39:21:36:f1:43:b5:62:87:34:73:04:34:b0:fb: 03:82:d6:8b:87:7e:22:fd:d2:56:12:a9:d9:31:e7: 59:1d:d6:d2:18:10:39:49:54:bb:9d:28:64:a6:ce: 4f:b5:61:6d:d9:7c:23:80:dc:83:00:75:89:dd:a8: 60:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E2:C6:28:2A:76:FB:6C:3E:C3:B2:A6:8E:A7:29:61:79:8C:0F:B2 X509v3 Authority Key Identifier: keyid:3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b8:f1:14:5b:0d:38:49:a7:6c:b0:f9:e2:15:99:7f:63:12: fd:0d:11:b6:25:37:9c:02:ff:e2:39:8c:39:ae:52:30:58:ee: 88:cc:cf:cd:a2:ca:42:87:be:fa:8c:6b:f1:6f:ce:69:29:70: 50:dd:1c:a7:f5:e3:85:36:59:1d:8c:c7:44:dd:b0:30:90:ea: 24:64:73:12:6a:dd:1d:3e:04:49:8c:02:95:55:69:34:24:eb: 96:d7:d1:4e:82:bb:a5:cd:0d:63:e1:58:2d:e3:f1:f4:4c:29: ab:27:27:93:0f:9e:6e:ed:c3:e8:19:f5:dc:00:9f:ed:0e:e3: 29:e9:3d:b4:b4:f5:85:82:27:80:2d:53:ab:07:1d:ef:c3:0d: c2:7a:e7:aa:66:6a:8b:88:4b:8a:80:c1:fa:01:a2:cf:68:cf: ba:60:6a:f5:d0:92:ed:fb:13:5b:d7:d3:e2:b6:ac:bb:14:23: a7:8e:62:f1:86:ea:83:f3:78:93:0d:46:2d:39:1b:aa:c1:e1: 57:f3:48:04:16:2d:c9:66:68:ad:cd:7d:43:0e:fb:15:fa:9c: b1:4b:55:ad:1b:0e:bc:8c:52:c5:bb:6b:8c:43:59:cb:f9:ad: 42:7d:ab:d9:fa:20:c0:c0:b1:52:1f:fe:83:ff:ee:d7:c9:a7: 18:b9:94:84 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURnR/Mn/Y4xeHtvrwFIZfKXs7wwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGNDIwRTYwQURGQzBGNzFGMkYyRERENTRGQTdGNDFE RkQyNDRGMzAeFw0yNTExMDMwOTI0NDBaFw0yNTExMDkwMzMyNDBaMDMxMTAvBgNV BAMTKDNFRTJDNjI4MkE3NkZCNkMzRUMzQjJBNjhFQTcyOTYxNzk4QzBGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnB/MV/MXNkqqqjfdbBQvt3v3t PGUKy1m2PaIDI3ZAl/ZYePJuDj8p+sCtJH1Zk9ntv1QguOoytc38qzND/sTVRKOV gsEulqs+ZIvh9JXe/xH6gfmS/4/pq2MfR56FxkYVAwNv5CEbky5a3WC8uZE7p5Et eHo9L250j//Z8Ac8vID+bxUIJAqJDZSziZwGffokbNTQs6XuiF756nbFT8X3eoN3 TeOPlwHnVB5IoUhUlcX1nYHWjUe+AyCTuCZFX1T09Dk5ITbxQ7VihzRzBDSw+wOC 1ouHfiL90lYSqdkx51kd1tIYEDlJVLudKGSmzk+1YW3ZfCOA3IMAdYndqGDNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPuLGKCp2+2w+w7KmjqcpYXmMD7IwHwYDVR0j BBgwFoAUOvQg5grfwPcfLy3dVPp/Qd/SRPMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNUMxQjJCMTU0MTk4Q0Y4QTk1MEQyREQxNDczNzYxM0RE Q0RGRTIxQ0QwQTBFOUFERjg3QzlBMTU2RDlFODM2LzAvM0FGNDIwRTYwQURGQzBG NzFGMkYyRERENTRGQTdGNDFERkQyNDRGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUY0MjBFNjBBREZDMEY3MUYy RjJEREQ1NEZBN0Y0MURGRDI0NEYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjVDMUIyQjE1NDE5OENGOEE5NTBEMkREMTQ3Mzc2MTNERENERkUyMUNE MEEwRTlBREY4N0M5QTE1NkQ5RTgzNi8wLzNBRjQyMEU2MEFERkMwRjcxRjJGMkRE RDU0RkE3RjQxREZEMjQ0RjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9uPEUWw04SadssPniFZl/YxL9 DRG2JTecAv/iOYw5rlIwWO6IzM/NospCh776jGvxb85pKXBQ3Ryn9eOFNlkdjMdE 3bAwkOokZHMSat0dPgRJjAKVVWk0JOuW19FOgrulzQ1j4Vgt4/H0TCmrJyeTD55u 7cPoGfXcAJ/tDuMp6T20tPWFgieALVOrBx3vww3CeueqZmqLiEuKgMH6AaLPaM+6 YGr10JLt+xNb19Pitqy7FCOnjmLxhuqD83iTDUYtORuqweFX80gEFi3JZmitzX1D DvsV+pyxS1WtGw68jFLFu2uMQ1nL+a1CfavZ+iDAwLFSH/6D/+7XyacYuZSE -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:58 2025 by rpki-client