$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft File: 3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft (raw, json) Hash identifier: t4Edmb5F4x9mPs5K9WmJgaGGOTlRSGiAip/Uwsk418k= Subject key identifier: B4:72:BD:B8:46:E2:A8:C0:82:56:A0:20:9D:76:8D:76:C6:F4:1E:7D Authority key identifier: 3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25 Certificate issuer: /CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125 Certificate serial: 31C60187699CA685832EC26D1D48E19E1512297C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft Manifest number: 012C Signing time: Wed 05 Nov 2025 07:14:52 +0000 Manifest this update: Wed 05 Nov 2025 07:09:52 +0000 Manifest next update: Sun 09 Nov 2025 20:44:52 +0000 Files and hashes: 1: 3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl (hash: kvvkwU8AIKFI9WXn/Evsa4xCZuFx2eiwOC34ap8tAi4=) 2: 3230302e35392e3138342e302f32312d3234203d3e20323634373738.roa (hash: qpFPLhRvT/6TF+QIX+j3i6nRwbq3qMC5Vv9fZdPq3nA=) 3: 323830333a623530303a3a2f33322d3634203d3e20323634373738.roa (hash: +i698AfVx6DWMMcK5GpNnFiCpIbFYK2iegD/naMoXZ0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c6:01:87:69:9c:a6:85:83:2e:c2:6d:1d:48:e1:9e:15:12:29:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125 Validity Not Before: Nov 5 07:09:52 2025 GMT Not After : Nov 9 20:44:52 2025 GMT Subject: CN=B472BDB846E2A8C08256A0209D768D76C6F41E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:04:6c:f6:58:8c:06:21:33:c4:28:df:00: d0:a5:8c:c6:10:92:18:0c:2d:e6:ae:b2:54:77:52: 53:ec:73:03:98:14:e2:62:c5:31:a0:fd:e3:4d:74: a5:14:ad:cd:d9:7b:e9:ae:6f:1c:64:56:ba:d8:54: 31:b4:d3:45:27:01:83:37:0d:32:45:60:6e:ce:77: 38:5f:4d:15:3c:db:3c:32:51:65:6b:57:4d:3f:93: 56:c0:82:65:e3:a9:13:cd:72:47:bc:f8:62:f8:02: 56:7a:e6:e2:88:01:1f:67:d3:4f:9e:0f:ba:e2:7c: 20:3f:99:81:ec:46:8b:a9:58:f1:84:b8:02:33:5e: f3:73:dd:a2:60:58:8d:03:a4:9e:66:b3:68:03:27: 0d:78:26:50:5d:81:f1:40:60:e8:67:42:d0:2e:6e: f2:ea:95:d5:13:4a:e1:8f:e0:c4:27:5e:66:28:28: b8:15:61:10:b0:90:ed:36:4b:88:e8:13:89:78:27: ff:bd:1a:c4:d8:e8:ef:6c:1a:3f:65:18:79:00:d5: fd:bd:dc:be:f2:5b:df:8b:2c:0a:25:4a:70:eb:ae: 2d:e4:25:da:22:ba:e0:f6:37:e7:13:e7:8c:9c:01: f1:a4:85:93:f5:38:c4:21:67:2f:60:18:35:7d:2b: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:72:BD:B8:46:E2:A8:C0:82:56:A0:20:9D:76:8D:76:C6:F4:1E:7D X509v3 Authority Key Identifier: keyid:3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:06:94:35:3a:07:e1:e6:aa:8e:11:8c:60:c9:75:2c:21:4e: dc:80:07:a6:7d:a3:1b:9c:2b:af:95:a3:5e:36:be:73:42:a5: 8f:9a:d2:25:45:f1:7e:0e:2f:7c:b3:71:f4:e6:87:ab:18:e1: 60:12:fa:87:64:ae:8d:73:e6:66:13:60:a8:16:5a:90:19:ee: 8e:50:9e:0c:21:d5:47:f5:4f:1a:e9:b5:df:71:24:c8:e8:75: 15:94:45:48:ae:45:79:e1:9a:01:64:0e:d4:61:0c:60:93:ee: 43:b9:ca:d5:25:f2:01:bb:2e:23:ef:64:3d:4f:79:88:f4:d3: 92:06:c0:92:8b:04:1b:dd:52:d8:a9:3f:ee:42:05:b9:e5:39: 82:a8:37:d8:be:48:42:a5:eb:45:dd:33:47:b0:86:d4:68:43: 08:0d:78:ac:82:4e:df:fe:b4:c9:02:59:7e:6a:77:32:55:4a: 31:8b:9b:1e:5d:31:ee:15:68:d7:3d:6b:b2:aa:31:e3:1c:f4: e0:31:fc:cc:01:0f:6f:d2:37:f4:2f:96:d2:ae:eb:f3:1a:a7: 6d:b4:1e:40:c8:2f:13:70:f2:46:86:11:58:83:67:6e:c1:e3: 80:db:33:01:5d:1c:47:86:e7:bb:ed:7f:80:4d:86:63:05:17: 6f:0e:e6:dc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMcYBh2mcpoWDLsJtHUjhnhUSKXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDQUI5QkVCMUVBOUVGQkU4MDAwNzgxRjcyQjk1ODlG RkRBMjEyNTAeFw0yNTExMDUwNzA5NTJaFw0yNTExMDkyMDQ0NTJaMDMxMTAvBgNV BAMTKEI0NzJCREI4NDZFMkE4QzA4MjU2QTAyMDlENzY4RDc2QzZGNDFFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpwRs9liMBiEzxCjfANCljMYQ khgMLeauslR3UlPscwOYFOJixTGg/eNNdKUUrc3Ze+mubxxkVrrYVDG000UnAYM3 DTJFYG7OdzhfTRU82zwyUWVrV00/k1bAgmXjqRPNcke8+GL4AlZ65uKIAR9n00+e D7rifCA/mYHsRoupWPGEuAIzXvNz3aJgWI0DpJ5ms2gDJw14JlBdgfFAYOhnQtAu bvLqldUTSuGP4MQnXmYoKLgVYRCwkO02S4joE4l4J/+9GsTY6O9sGj9lGHkA1f29 3L7yW9+LLAolSnDrri3kJdoiuuD2N+cT54ycAfGkhZP1OMQhZy9gGDV9K/sNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUtHK9uEbiqMCCVqAgnXaNdsb0Hn0wHwYDVR0j BBgwFoAUPsq5vrHqnvvoAAeB9yuVif/aISUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GODQzNTdERTIwQzFBMUIzRTZCNkJCRUY1NEQyQUM1RjU1 ODg3NDU2QTk2NDFEM0VGQzUxQUI3QkI4MUE5NjM0LzAvM0VDQUI5QkVCMUVBOUVG QkU4MDAwNzgxRjcyQjk1ODlGRkRBMjEyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRUNBQjlCRUIxRUE5RUZCRTgw MDA3ODFGNzJCOTU4OUZGREEyMTI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjg0MzU3REUyMEMxQTFCM0U2QjZCQkVGNTREMkFDNUY1NTg4NzQ1NkE5 NjQxRDNFRkM1MUFCN0JCODFBOTYzNC8wLzNFQ0FCOUJFQjFFQTlFRkJFODAwMDc4 MUY3MkI5NTg5RkZEQTIxMjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+BpQ1Ogfh5qqOEYxgyXUsIU7c gAemfaMbnCuvlaNeNr5zQqWPmtIlRfF+Di98s3H05oerGOFgEvqHZK6Nc+ZmE2Co FlqQGe6OUJ4MIdVH9U8a6bXfcSTI6HUVlEVIrkV54ZoBZA7UYQxgk+5DucrVJfIB uy4j72Q9T3mI9NOSBsCSiwQb3VLYqT/uQgW55TmCqDfYvkhCpetF3TNHsIbUaEMI DXisgk7f/rTJAll+ancyVUoxi5seXTHuFWjXPWuyqjHjHPTgMfzMAQ9v0jf0L5bS ruvzGqdttB5AyC8TcPJGhhFYg2duweOA2zMBXRxHhue77X+ATYZjBRdvDubc -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:06 2025 by rpki-client