$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft File: 2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft (raw, json) Hash identifier: uX67JWbui0Ifw1+GhXf11U7bhY+zGPeegJYa6MPUN4U= Subject key identifier: 1F:72:82:0C:79:81:06:1C:F3:C1:22:B0:8A:9E:CD:85:24:C9:B4:C4 Authority key identifier: 2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8 Certificate issuer: /CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8 Certificate serial: 66A596B9C06F92A8A754F223CD0AF40900DF8377 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft Manifest number: 012A Signing time: Mon 20 Oct 2025 03:59:00 +0000 Manifest this update: Mon 20 Oct 2025 03:54:00 +0000 Manifest next update: Fri 24 Oct 2025 16:52:00 +0000 Files and hashes: 1: 34352e3137322e31312e302f32342d3236203d3e20323637383030.roa (hash: gpvN29o3V2n6zjXz7C3D4xAYZM4ZFmQZmPtoFgCCV7M=) 2: 34352e3137322e382e302f32342d3236203d3e20323637383030.roa (hash: buQeDOjuWZflX/svGb7bwld/4KhEc6l9GQ5TS3xg5g8=) 3: 34352e3137322e392e302f32342d3236203d3e20323635353534.roa (hash: O9X81cqgbQlzGezeSH7CYaXC0FhGuZSky/G1iUrEPNY=) 4: 34352e3137322e31302e302f32342d3236203d3e20323637383030.roa (hash: SoVmeHj928LIj8a6LrBZucd0JCuIuUicywvkFm39lIE=) 5: 2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl (hash: jm0sST+oly45NiP0nYnpdZRFKo39oAMAe4WeQdMHDsU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a5:96:b9:c0:6f:92:a8:a7:54:f2:23:cd:0a:f4:09:00:df:83:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8 Validity Not Before: Oct 20 03:54:00 2025 GMT Not After : Oct 24 16:52:00 2025 GMT Subject: CN=1F72820C7981061CF3C122B08A9ECD8524C9B4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:df:a7:e0:16:73:48:11:eb:ff:0f:76:2d: da:da:75:56:0e:4d:0b:b2:84:1a:da:87:46:4a:6d: b8:13:5b:41:a4:ed:e0:83:93:07:13:df:db:da:e5: 74:86:e9:dc:10:14:60:1f:18:61:c6:2f:3d:a6:4c: 6e:b8:2f:35:c6:6a:1d:0b:d7:d6:42:de:4b:69:a6: fa:2f:9a:33:51:e4:22:c3:88:1d:30:a1:8a:2c:6c: da:50:61:ab:2d:0b:ae:ac:d3:86:38:63:6d:04:e2: dd:d0:a4:e2:57:6c:e1:0d:b0:35:41:06:fb:3f:27: d8:5e:d9:cd:3f:b2:74:81:ff:da:27:6a:59:d8:51: 76:08:78:51:eb:22:03:88:1b:76:85:ed:f1:c9:9a: 9c:c8:fa:4f:e2:cb:d6:28:a0:9d:11:b4:16:e9:89: 6e:69:ff:2c:0c:03:5b:3c:56:94:40:44:89:d4:79: b0:00:4b:2b:1c:f0:39:85:b5:de:3b:f2:5e:df:32: 35:61:42:fa:2a:bb:a0:3b:55:c1:cb:c7:17:e2:47: a4:7b:ab:7d:74:06:49:de:6d:c5:90:cc:44:15:cb: 1d:6e:82:86:02:b3:aa:50:83:80:2f:98:3f:33:ec: 42:89:56:f7:cc:6c:e2:3b:a8:d6:94:d6:1d:d2:a1: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:72:82:0C:79:81:06:1C:F3:C1:22:B0:8A:9E:CD:85:24:C9:B4:C4 X509v3 Authority Key Identifier: keyid:2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2b:66:44:19:64:56:26:f6:04:9b:a3:ce:77:3e:e7:a1:8e: 9c:c4:76:ee:26:c9:d1:8c:92:5b:24:da:2b:68:fc:7a:4a:b9: d0:9e:da:d6:0d:78:df:93:73:75:92:52:1c:3d:46:f0:22:83: 0b:23:0b:4b:1f:3e:f9:30:ec:9b:d6:7b:46:fb:c3:5f:8e:e8: 2e:b1:81:6a:e3:a2:ef:f5:cd:5d:0c:fd:c0:57:92:00:36:9b: 65:95:92:c6:22:56:e8:b0:ef:32:48:8e:96:85:19:97:77:02: da:51:23:40:4f:52:76:aa:78:f3:23:18:17:ea:9a:3e:c5:f4: bd:90:1a:79:62:a9:e5:a5:35:b4:24:7d:0e:5c:71:13:3e:89: 7e:6e:ef:30:2f:71:ae:b8:d9:79:98:09:c0:be:89:b8:a2:e0: 07:e4:d5:d9:fd:40:db:f6:0f:d0:69:47:e3:67:06:f0:cb:cf: 78:0b:aa:b4:b8:38:32:77:d1:86:af:71:91:54:94:32:1a:02: 8b:74:0d:78:c0:a9:5f:34:b7:3d:6f:a1:d6:23:f4:4c:e5:8e: 14:fc:bb:1a:e3:00:d5:82:7d:a2:63:74:d3:48:a9:62:30:cc: 4a:ac:f7:f1:1a:76:80:a7:f6:c6:56:b3:e9:99:c0:03:27:6c: c8:b1:c5:48 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZqWWucBvkqinVPIjzQr0CQDfg3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU0MUZGNEZFOEVCQTYzNjlCQUExQkJDNThCQkQ3MUJG RkQzMUVBODAeFw0yNTEwMjAwMzU0MDBaFw0yNTEwMjQxNjUyMDBaMDMxMTAvBgNV BAMTKDFGNzI4MjBDNzk4MTA2MUNGM0MxMjJCMDhBOUVDRDg1MjRDOUI0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0N+n4BZzSBHr/w92LdradVYO TQuyhBrah0ZKbbgTW0Gk7eCDkwcT39va5XSG6dwQFGAfGGHGLz2mTG64LzXGah0L 19ZC3ktppvovmjNR5CLDiB0woYosbNpQYastC66s04Y4Y20E4t3QpOJXbOENsDVB Bvs/J9he2c0/snSB/9onalnYUXYIeFHrIgOIG3aF7fHJmpzI+k/iy9YooJ0RtBbp iW5p/ywMA1s8VpRARInUebAASysc8DmFtd478l7fMjVhQvoqu6A7VcHLxxfiR6R7 q310BknebcWQzEQVyx1ugoYCs6pQg4AvmD8z7EKJVvfMbOI7qNaU1h3SoRpHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUH3KCDHmBBhzzwSKwip7NhSTJtMQwHwYDVR0j BBgwFoAULkH/T+jrpjabqhu8WLvXG//THqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xOEFFMUNCREFCNzc2QUFENDNEM0E5RkVDQjZCNEU5OEM2 QjUwNzI3NDkxRDVFNTQ0NUI2NjYyMEUzMkQ0Q0E5LzAvMkU0MUZGNEZFOEVCQTYz NjlCQUExQkJDNThCQkQ3MUJGRkQzMUVBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTQxRkY0RkU4RUJBNjM2OUJB QTFCQkM1OEJCRDcxQkZGRDMxRUE4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMThBRTFDQkRBQjc3NkFBRDQzRDNBOUZFQ0I2QjRFOThDNkI1MDcyNzQ5 MUQ1RTU0NDVCNjY2MjBFMzJENENBOS8wLzJFNDFGRjRGRThFQkE2MzY5QkFBMUJC QzU4QkJENzFCRkZEMzFFQTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpK2ZEGWRWJvYEm6POdz7noY6c xHbuJsnRjJJbJNoraPx6SrnQntrWDXjfk3N1klIcPUbwIoMLIwtLHz75MOyb1ntG +8NfjugusYFq46Lv9c1dDP3AV5IANptllZLGIlbosO8ySI6WhRmXdwLaUSNAT1J2 qnjzIxgX6po+xfS9kBp5YqnlpTW0JH0OXHETPol+bu8wL3GuuNl5mAnAvom4ouAH 5NXZ/UDb9g/QaUfjZwbwy894C6q0uDgyd9GGr3GRVJQyGgKLdA14wKlfNLc9b6HW I/RM5Y4U/Lsa4wDVgn2iY3TTSKliMMxKrPfxGnaAp/bGVrPpmcADJ2zIscVI -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:47 2025 by rpki-client