$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft File: 9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft (raw, json) Hash identifier: 9bdl4EOllJmBpW61vALVVdCF3zXs6HKU/e2bQFFrW7Q= Subject key identifier: 72:6E:1E:B6:38:C7:24:7C:01:3B:0F:4B:E2:54:56:70:F8:F8:F5:C4 Authority key identifier: 9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84 Certificate issuer: /CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184 Certificate serial: 49EAC1A475451F3D863B1A95717C24938B0BC799 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft Manifest number: 012C Signing time: Sun 19 Oct 2025 18:58:15 +0000 Manifest this update: Sun 19 Oct 2025 18:53:15 +0000 Manifest next update: Thu 23 Oct 2025 20:33:15 +0000 Files and hashes: 1: 3230302e35392e3138322e302f32332d3234203d3e203237393934.roa (hash: JwpjKR2mH6GJXuXahnMf/5AbJUHlmst8up5WWy2ex0I=) 2: 3230302e35392e3137362e302f32322d3234203d3e203237393934.roa (hash: UAPHi3rz+TIeAlC72Us5kDaZte2WM5h3xNHARbQvCQk=) 3: 3230302e35392e3138302e302f32342d3234203d3e203237393934.roa (hash: vm+wSC/c/onsBWzngN+erAqy8IieiIkQsFD8I4HbEjM=) 4: 9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl (hash: jyshi7HETYy+C3flh3NegRs1IB94k2w3GvWlnEFvrbo=) 5: 3230302e35392e3138312e302f32342d3234203d3e203237393934.roa (hash: g7woRsm4w1nNWHdXyzzdlHbEwbTXPVqsgXhT9PZsZf4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 20:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ea:c1:a4:75:45:1f:3d:86:3b:1a:95:71:7c:24:93:8b:0b:c7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184 Validity Not Before: Oct 19 18:53:15 2025 GMT Not After : Oct 23 20:33:15 2025 GMT Subject: CN=726E1EB638C7247C013B0F4BE2545670F8F8F5C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:d0:68:95:55:11:34:2b:af:98:3c:c4:9b: 74:ab:c2:ff:e5:46:b6:f7:2c:ea:9b:02:25:d9:2e: 4c:1b:b7:b8:b0:b8:f3:04:4a:e7:49:1b:c5:3c:f7: 06:e5:9b:01:c2:b7:a3:c1:48:f6:0d:f8:4d:01:3a: 31:ab:e3:b3:22:8f:ef:e8:73:52:32:84:2b:bd:89: 12:b1:09:2f:ad:c5:d8:53:38:82:54:72:b0:73:23: fc:71:36:b3:5b:7d:e9:1c:66:17:5a:f3:5e:6f:55: c0:cd:70:bc:3b:fd:fe:f9:e4:a1:ee:6d:0a:2f:26: 40:38:45:bf:ff:44:de:f1:d4:94:f9:1f:88:eb:f6: cb:ab:a6:a2:10:6c:cb:e7:39:f7:4e:19:be:7b:17: 91:df:b4:6b:f2:51:fe:6d:9c:29:00:38:7d:ab:ab: e0:3f:86:95:ca:40:ba:9f:6c:86:94:90:8f:cf:f4: 60:7f:e9:49:c7:e6:7c:75:04:a8:af:6c:f6:c5:33: c8:75:9b:52:93:81:46:13:0c:cf:46:cd:aa:d2:d3: bb:86:9e:3e:48:db:e1:04:c1:4b:e3:20:5d:0e:28: 7a:62:ec:aa:aa:6f:bf:e7:ff:91:c8:58:24:0c:e9: 33:7e:a2:9a:00:18:6b:89:73:0e:13:de:a6:c6:59: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6E:1E:B6:38:C7:24:7C:01:3B:0F:4B:E2:54:56:70:F8:F8:F5:C4 X509v3 Authority Key Identifier: keyid:9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:64:f8:00:f7:18:9d:48:2c:79:5c:ab:38:a2:d9:27:66:67: ff:b9:8a:69:af:4d:15:3f:b4:6a:ba:10:36:1a:d8:0a:0a:0e: 1a:c6:e2:fd:bf:1e:27:f1:47:8f:d2:d6:49:8d:93:ac:83:27: 3c:a5:2a:85:fe:92:bd:e1:e4:7a:d9:46:71:58:b1:41:8c:25: 2f:47:70:f9:7f:e5:cc:ce:9b:f8:88:97:b5:1d:7e:65:85:25: 49:6e:11:f7:44:f0:be:9d:4e:14:63:29:28:ef:d0:18:c2:81: 0d:bc:c6:e1:8c:b6:45:71:ac:e8:d5:61:e7:ee:3a:97:08:dd: 1a:d6:11:da:88:f1:c9:bf:ee:fb:47:c0:a4:c4:33:4a:35:26: 0a:44:4d:95:03:0d:b3:b3:5d:36:9b:f0:6c:26:12:f9:a4:d2: 2a:de:a5:0f:58:13:c7:30:42:48:04:81:93:ef:54:74:de:4b: fc:71:da:2e:4f:13:80:d9:83:77:d4:65:f0:38:6c:f9:a1:ff: bb:70:64:5f:6b:2d:30:0a:d2:b0:42:80:c5:46:dd:1b:72:a9: a3:5f:e8:8c:67:c9:16:e6:da:bc:1e:32:00:a1:bb:44:58:71: c5:8b:ab:f8:d1:cb:dd:db:c6:a4:6a:07:4e:35:c0:02:37:03: b2:fd:c0:3b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSerBpHVFHz2GOxqVcXwkk4sLx5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0QUMyMEYzOENDQjdFM0U1RTlDODNFNTU0MEQzRDE3 RkNDMDE4NDAeFw0yNTEwMTkxODUzMTVaFw0yNTEwMjMyMDMzMTVaMDMxMTAvBgNV BAMTKDcyNkUxRUI2MzhDNzI0N0MwMTNCMEY0QkUyNTQ1NjcwRjhGOEY1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPdBolVURNCuvmDzEm3Srwv/l Rrb3LOqbAiXZLkwbt7iwuPMESudJG8U89wblmwHCt6PBSPYN+E0BOjGr47Mij+/o c1IyhCu9iRKxCS+txdhTOIJUcrBzI/xxNrNbfekcZhda815vVcDNcLw7/f755KHu bQovJkA4Rb//RN7x1JT5H4jr9surpqIQbMvnOfdOGb57F5HftGvyUf5tnCkAOH2r q+A/hpXKQLqfbIaUkI/P9GB/6UnH5nx1BKivbPbFM8h1m1KTgUYTDM9GzarS07uG nj5I2+EEwUvjIF0OKHpi7Kqqb7/n/5HIWCQM6TN+opoAGGuJcw4T3qbGWV5nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcm4etjjHJHwBOw9L4lRWcPj49cQwHwYDVR0j BBgwFoAUmkrCDzjMt+Pl6cg+VUDT0X/MAYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQTI0QjQyOTEwMzU2M0JEMEI3RDI3QTI0NzkzNzg1REQ4 RDE4MzNCMEI0QjBBRTQwQjhBNUY4QzE2MUU5NDdFLzAvOUE0QUMyMEYzOENDQjdF M0U1RTlDODNFNTU0MEQzRDE3RkNDMDE4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTRBQzIwRjM4Q0NCN0UzRTVF OUM4M0U1NTQwRDNEMTdGQ0MwMTg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUEyNEI0MjkxMDM1NjNCRDBCN0QyN0EyNDc5Mzc4NUREOEQxODMzQjBC NEIwQUU0MEI4QTVGOEMxNjFFOTQ3RS8wLzlBNEFDMjBGMzhDQ0I3RTNFNUU5Qzgz RTU1NDBEM0QxN0ZDQzAxODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCZPgA9xidSCx5XKs4otknZmf/ uYppr00VP7RquhA2GtgKCg4axuL9vx4n8UeP0tZJjZOsgyc8pSqF/pK94eR62UZx WLFBjCUvR3D5f+XMzpv4iJe1HX5lhSVJbhH3RPC+nU4UYyko79AYwoENvMbhjLZF cazo1WHn7jqXCN0a1hHaiPHJv+77R8CkxDNKNSYKRE2VAw2zs102m/BsJhL5pNIq 3qUPWBPHMEJIBIGT71R03kv8cdouTxOA2YN31GXwOGz5of+7cGRfay0wCtKwQoDF Rt0bcqmjX+iMZ8kW5tq8HjIAobtEWHHFi6v40cvd28akagdONcACNwOy/cA7 -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:12 2025 by rpki-client