$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.mft File: 420CEF0BDB83EC830BEBC18D4ED591A33C49328B.mft (raw, json) Hash identifier: c6gfboh0hCoUh++72WQA07fEczhPbGS8sN1gXAG8sh8= Subject key identifier: 45:0C:0D:3D:3E:D1:10:D2:B4:13:08:67:A1:1E:10:55:BE:CB:A9:21 Authority key identifier: 42:0C:EF:0B:DB:83:EC:83:0B:EB:C1:8D:4E:D5:91:A3:3C:49:32:8B Certificate issuer: /CN=420CEF0BDB83EC830BEBC18D4ED591A33C49328B Certificate serial: 38FCDED459AFDD662098819583064AD19AEDDD8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.mft Manifest number: 012F Signing time: Wed 05 Nov 2025 01:31:33 +0000 Manifest this update: Wed 05 Nov 2025 01:26:33 +0000 Manifest next update: Mon 10 Nov 2025 18:48:33 +0000 Files and hashes: 1: 323830333a383865303a3a2f33322d3438203d3e20323639383638.roa (hash: La3RPMVFJbhHzZY4NUn/aqjRmDC3qwgjMspKEESFjEM=) 2: 420CEF0BDB83EC830BEBC18D4ED591A33C49328B.crl (hash: t277xveEL932Nnt7Z+iZw4rLd1mZI6ugcux55xoItpw=) 3: 34352e3139302e3139322e302f32322d3234203d3e20323639383638.roa (hash: e4TupSOVpY4BuicQDOvKWrYx+7E5emR2vo3dZwqX7pc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.crl rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fc:de:d4:59:af:dd:66:20:98:81:95:83:06:4a:d1:9a:ed:dd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420CEF0BDB83EC830BEBC18D4ED591A33C49328B Validity Not Before: Nov 5 01:26:33 2025 GMT Not After : Nov 10 18:48:33 2025 GMT Subject: CN=450C0D3D3ED110D2B4130867A11E1055BECBA921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:14:5b:36:35:0f:fc:37:70:d3:7d:f5:ba: f6:e9:3e:ab:d0:64:0f:0e:d8:29:e5:82:54:06:11: 05:42:cd:67:4f:3b:ae:c0:c9:db:f2:38:26:b0:d0: 72:11:86:b5:8d:10:d6:9d:ff:de:c1:a0:dd:3c:69: 8f:1d:f0:1f:23:6c:1e:26:2a:f1:e9:e0:dd:72:9a: 35:a4:b1:07:5b:9d:2f:0d:68:e4:10:d2:ff:81:4f: 63:b9:ff:42:3a:06:01:0b:09:fd:4a:00:5a:c5:b0: 4a:4a:6e:27:e6:2c:0a:13:5d:83:c3:be:57:87:a2: e5:8c:a7:00:4c:0e:60:26:b5:f4:1f:3e:f5:bb:1c: 19:80:51:5c:59:d6:96:d9:ff:ee:ef:b4:94:90:ac: 62:da:f4:f0:86:66:04:25:42:47:fc:46:5a:87:bb: 86:09:13:50:4c:b4:ea:5a:89:2e:2e:96:d7:71:e8: 99:43:58:9e:1d:8a:db:56:9b:d3:2c:ee:9b:18:ad: cf:3d:9d:b4:35:a3:e1:d3:87:f9:a2:28:5e:fd:b8: ff:d2:8c:e2:cc:2e:8e:74:79:c3:f4:d2:6a:52:a2: ff:f2:7a:63:f7:33:71:c3:f6:a2:32:a4:11:b7:20: e9:68:48:72:66:0d:39:71:85:20:50:03:7e:2c:14: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0C:0D:3D:3E:D1:10:D2:B4:13:08:67:A1:1E:10:55:BE:CB:A9:21 X509v3 Authority Key Identifier: keyid:42:0C:EF:0B:DB:83:EC:83:0B:EB:C1:8D:4E:D5:91:A3:3C:49:32:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b0:8c:f1:09:be:b0:ec:c2:a6:ab:a9:a9:fb:35:33:d6:f1: b8:19:73:8c:6b:ea:92:3e:59:d7:70:f1:00:a8:59:66:fd:9d: 36:e7:2e:3a:0b:ac:24:d5:2a:7b:42:ef:cc:d3:60:d7:8c:53: 93:38:c6:a9:6b:d8:d5:76:a4:bc:99:75:06:5d:eb:fe:62:7c: a1:c8:1f:66:50:49:1a:2d:87:79:1f:36:2f:d8:9a:79:21:ff: 83:dc:d4:0e:fd:50:7e:f4:b7:12:30:96:b7:92:a3:9d:d7:8d: b2:f1:19:a9:7d:a3:91:95:6e:55:fb:8f:23:96:cb:c9:0b:91: 01:6c:b6:8e:08:1f:d3:b5:df:83:81:aa:f1:85:37:f0:7c:23: 5e:21:d6:46:f5:f6:41:20:95:ba:d2:39:64:00:61:6e:a7:2c: a6:25:82:3f:4f:9c:46:f0:c8:c0:7e:4c:7e:aa:ec:bb:35:64: aa:ec:1b:c0:47:a3:4a:aa:e1:cc:3d:10:9d:28:c3:f4:b3:ee: 5c:5a:dc:78:95:db:ef:a9:70:31:94:82:9d:c7:2c:da:6b:5c: de:ad:c9:46:10:b1:75:36:9b:aa:a8:8b:1c:5e:f2:b5:bd:e3: a1:98:53:7f:ec:32:8a:7e:b3:65:53:10:bb:e7:46:3d:07:13: 6b:23:58:c7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOPze1Fmv3WYgmIGVgwZK0Zrt3Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwQ0VGMEJEQjgzRUM4MzBCRUJDMThENEVENTkxQTMz QzQ5MzI4QjAeFw0yNTExMDUwMTI2MzNaFw0yNTExMTAxODQ4MzNaMDMxMTAvBgNV BAMTKDQ1MEMwRDNEM0VEMTEwRDJCNDEzMDg2N0ExMUUxMDU1QkVDQkE5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkfBRbNjUP/Ddw0331uvbpPqvQ ZA8O2CnlglQGEQVCzWdPO67AydvyOCaw0HIRhrWNENad/97BoN08aY8d8B8jbB4m KvHp4N1ymjWksQdbnS8NaOQQ0v+BT2O5/0I6BgELCf1KAFrFsEpKbifmLAoTXYPD vleHouWMpwBMDmAmtfQfPvW7HBmAUVxZ1pbZ/+7vtJSQrGLa9PCGZgQlQkf8RlqH u4YJE1BMtOpaiS4ultdx6JlDWJ4dittWm9Ms7psYrc89nbQ1o+HTh/miKF79uP/S jOLMLo50ecP00mpSov/yemP3M3HD9qIypBG3IOloSHJmDTlxhSBQA34sFO0VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURQwNPT7RENK0EwhnoR4QVb7LqSEwHwYDVR0j BBgwFoAUQgzvC9uD7IML68GNTtWRozxJMoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNjFFMzhBOTkxQjE0QjU2RDYxN0UyQzM0Njc1MTBDQzlC QkZGMTRDNDY1NDA3OUMzRkJGRUM4QzU1RjQ5MDJDLzAvNDIwQ0VGMEJEQjgzRUM4 MzBCRUJDMThENEVENTkxQTMzQzQ5MzI4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBDRUYwQkRCODNFQzgzMEJF QkMxOEQ0RUQ1OTFBMzNDNDkzMjhCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjYxRTM4QTk5MUIxNEI1NkQ2MTdFMkMzNDY3NTEwQ0M5QkJGRjE0QzQ2 NTQwNzlDM0ZCRkVDOEM1NUY0OTAyQy8wLzQyMENFRjBCREI4M0VDODMwQkVCQzE4 RDRFRDU5MUEzM0M0OTMyOEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6sIzxCb6w7MKmq6mp+zUz1vG4 GXOMa+qSPlnXcPEAqFlm/Z025y46C6wk1Sp7Qu/M02DXjFOTOMapa9jVdqS8mXUG Xev+YnyhyB9mUEkaLYd5HzYv2Jp5If+D3NQO/VB+9LcSMJa3kqOd142y8RmpfaOR lW5V+48jlsvJC5EBbLaOCB/Ttd+DgarxhTfwfCNeIdZG9fZBIJW60jlkAGFupyym JYI/T5xG8MjAfkx+quy7NWSq7BvAR6NKquHMPRCdKMP0s+5cWtx4ldvvqXAxlIKd xyzaa1zerclGELF1NpuqqIscXvK1veOhmFN/7DKKfrNlUxC750Y9BxNrI1jH -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:34 2025 by rpki-client