$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft File: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft (raw, json) Hash identifier: hYua2PYngL8s7Rn7VOGxxOIvWasCXEZIT9phOt1lKZc= Subject key identifier: 1C:84:38:AD:D3:12:CB:FC:95:78:6C:67:33:D9:80:0C:8C:D2:C8:F2 Authority key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 Certificate issuer: /CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Certificate serial: 5468A6096572D61656000C89F7973D0CDB2E752A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft Manifest number: 0127 Signing time: Sun 19 Oct 2025 22:40:33 +0000 Manifest this update: Sun 19 Oct 2025 22:35:33 +0000 Manifest next update: Fri 24 Oct 2025 11:40:33 +0000 Files and hashes: 1: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl (hash: skHgptB3a7GzLXCl3snFpumnMFOj3+fmOP3GB3lcZQ8=) 2: 34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa (hash: 00QHCnhmXQ1VG4RphdiKc9rqhCyv5e4wyawaUJTCyfw=) 3: 323830333a623836303a3a2f33322d3332203d3e20323637383238.roa (hash: eJmlT26CwZyxaelOUPoLLiMMd4BSp8QyR8CJ1X/hKcM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:68:a6:09:65:72:d6:16:56:00:0c:89:f7:97:3d:0c:db:2e:75:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Validity Not Before: Oct 19 22:35:33 2025 GMT Not After : Oct 24 11:40:33 2025 GMT Subject: CN=1C8438ADD312CBFC95786C6733D9800C8CD2C8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:35:58:38:68:d1:0c:c2:19:dc:14:5a:56: c6:d2:5f:49:9c:65:62:09:d8:27:f8:71:a6:0d:f6: 6b:78:29:f7:0f:a2:af:00:22:d0:ce:32:6b:5f:af: f0:66:9d:2e:0c:11:c4:a3:d1:c9:ec:c1:55:2b:94: 1f:1d:bf:a2:f6:a3:8d:d8:3e:ad:25:ae:f1:20:6f: bb:39:31:f9:7a:ac:bf:39:00:59:32:0d:4f:e9:f7: f3:fd:4b:c6:82:63:b6:c4:b7:c1:50:bd:a9:dd:b7: b8:67:16:c9:83:42:bf:41:7e:3b:8c:97:87:31:94: 43:2a:25:8b:06:f2:3b:38:8b:df:57:1c:2b:be:6a: 04:fe:69:89:1d:94:1f:05:e9:a2:7a:a0:9f:1a:e1: 3f:c7:38:9f:e2:00:57:55:64:32:65:52:59:23:be: a8:66:82:70:fb:e8:68:24:52:55:aa:01:7b:69:72: 82:2d:98:bc:90:44:45:4c:86:77:f2:23:8e:58:fb: d9:27:ad:3d:85:4d:43:3f:b8:77:f8:17:71:01:09: 8b:74:28:f7:e4:e2:9e:2c:1c:e1:71:bd:62:61:61: 91:e3:3b:2e:c7:91:ec:2e:83:52:aa:50:00:3a:d5: 63:8a:f8:83:2e:0b:0d:13:53:36:3e:bd:5a:d5:2c: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:84:38:AD:D3:12:CB:FC:95:78:6C:67:33:D9:80:0C:8C:D2:C8:F2 X509v3 Authority Key Identifier: keyid:29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:dc:5f:3f:e2:b2:d8:57:33:29:c7:0c:cf:51:79:29:ed:42: bd:e7:f0:23:98:e8:23:7d:91:62:18:95:c5:fe:ce:79:f5:e0: 47:eb:47:c5:01:f1:1b:0a:19:b6:26:86:0a:ae:f8:1b:79:43: c1:9f:46:36:66:ed:8a:b0:11:68:f7:64:3e:ca:b9:e0:e5:df: 60:a3:58:aa:96:7c:55:4c:6a:5b:1d:d5:25:95:cd:83:5c:9c: c1:41:4e:31:f8:04:1a:ff:a2:07:ec:92:90:5c:f4:c5:b9:e6: c7:18:3a:32:33:0d:fb:d8:f9:12:81:92:8f:45:5d:83:81:e9: 48:60:22:34:89:b0:02:9b:0a:bc:94:4f:86:2a:26:4b:f3:bf: 86:42:47:66:da:50:52:9c:c1:0f:fb:3c:eb:0b:03:36:16:d4: 57:e6:79:5e:b2:9c:e6:1a:7b:be:68:71:95:c3:7d:35:7c:bb: bb:3a:8f:9e:20:c7:9f:0f:f2:78:41:a4:6a:4e:ea:95:7b:55: 3f:01:71:13:f3:50:c8:c4:83:3f:60:a2:21:fb:c7:e5:3a:ed: cf:76:a1:92:f9:f8:3e:f9:23:e0:11:dd:b8:f9:ee:6e:44:8e: bd:73:5d:97:18:e3:8a:2f:2d:4c:1a:1b:d4:1d:4b:d2:ba:5b: ca:5f:5f:04 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVGimCWVy1hZWAAyJ95c9DNsudSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4OTM1QzlBNDNDNUM5QkRDOUFFMUY4MTg1QkZEOThG RjFBN0IzOTAeFw0yNTEwMTkyMjM1MzNaFw0yNTEwMjQxMTQwMzNaMDMxMTAvBgNV BAMTKDFDODQzOEFERDMxMkNCRkM5NTc4NkM2NzMzRDk4MDBDOENEMkM4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroDVYOGjRDMIZ3BRaVsbSX0mc ZWIJ2Cf4caYN9mt4KfcPoq8AItDOMmtfr/BmnS4MEcSj0cnswVUrlB8dv6L2o43Y Pq0lrvEgb7s5Mfl6rL85AFkyDU/p9/P9S8aCY7bEt8FQvandt7hnFsmDQr9BfjuM l4cxlEMqJYsG8js4i99XHCu+agT+aYkdlB8F6aJ6oJ8a4T/HOJ/iAFdVZDJlUlkj vqhmgnD76GgkUlWqAXtpcoItmLyQREVMhnfyI45Y+9knrT2FTUM/uHf4F3EBCYt0 KPfk4p4sHOFxvWJhYZHjOy7Hkewug1KqUAA61WOK+IMuCw0TUzY+vVrVLBIPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHIQ4rdMSy/yVeGxnM9mADIzSyPIwHwYDVR0j BBgwFoAUKYk1yaQ8XJvcmuH4GFv9mP8aezkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRTY5OUE0QUM1RTdFMzNFQTQ2MzE4NTlGOTcyNTI1NDMw MkQxQzE5NURFODQ1NzMyNTE4Mjk1ODdBM0JCNDY2LzAvMjk4OTM1QzlBNDNDNUM5 QkRDOUFFMUY4MTg1QkZEOThGRjFBN0IzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTg5MzVDOUE0M0M1QzlCREM5 QUUxRjgxODVCRkQ5OEZGMUE3QjM5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEU2OTlBNEFDNUU3RTMzRUE0NjMxODU5Rjk3MjUyNTQzMDJEMUMxOTVE RTg0NTczMjUxODI5NTg3QTNCQjQ2Ni8wLzI5ODkzNUM5QTQzQzVDOUJEQzlBRTFG ODE4NUJGRDk4RkYxQTdCMzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz3F8/4rLYVzMpxwzPUXkp7UK9 5/AjmOgjfZFiGJXF/s559eBH60fFAfEbChm2JoYKrvgbeUPBn0Y2Zu2KsBFo92Q+ yrng5d9go1iqlnxVTGpbHdUllc2DXJzBQU4x+AQa/6IH7JKQXPTFuebHGDoyMw37 2PkSgZKPRV2DgelIYCI0ibACmwq8lE+GKiZL87+GQkdm2lBSnMEP+zzrCwM2FtRX 5nlespzmGnu+aHGVw301fLu7Oo+eIMefD/J4QaRqTuqVe1U/AXET81DIxIM/YKIh +8flOu3PdqGS+fg++SPgEd24+e5uRI69c12XGOOKLy1MGhvUHUvSulvKX18E -----END CERTIFICATE-----Generated at Mon Oct 20 14:10:17 2025 by rpki-client