$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft File: 30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft (raw, json) Hash identifier: znsm0aYOM9oFXrpTnddNQffn3XsSvqVdCzuBpbfOsac= Subject key identifier: DB:00:73:0C:5D:F9:19:52:66:CE:A1:CF:FC:BE:86:9D:90:BB:EE:47 Authority key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5 Certificate issuer: /CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5 Certificate serial: 2259FABE9BAA9124701D7A70537D984A27734FB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft Manifest number: 0129 Signing time: Mon 20 Oct 2025 16:17:08 +0000 Manifest this update: Mon 20 Oct 2025 16:12:08 +0000 Manifest next update: Sat 25 Oct 2025 12:46:08 +0000 Files and hashes: 1: 34352e3233322e39362e302f32322d3234203d3e20323636373533.roa (hash: i4mTcsa9PfB2XUK9ciOX0wuhJDSWT4yXMpK+ildHeHw=) 2: 323830333a376232303a3a2f33322d3634203d3e20323636373533.roa (hash: fIhZthSeXfNTXsDCQE/laHD8KBLvWEsEx+9bwwivXJg=) 3: 30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl (hash: 9wcB8pEfyOxpz72d6pAZoFXkUrXGksNb0sy4KxK8NcA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:59:fa:be:9b:aa:91:24:70:1d:7a:70:53:7d:98:4a:27:73:4f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5 Validity Not Before: Oct 20 16:12:08 2025 GMT Not After : Oct 25 12:46:08 2025 GMT Subject: CN=DB00730C5DF9195266CEA1CFFCBE869D90BBEE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:2e:11:c9:53:42:47:a3:8c:71:d2:aa:06: 2a:03:c5:a6:ad:2d:c9:2b:1d:8d:7a:d5:fe:84:00: 98:ea:06:83:87:81:c2:ca:fd:6c:3a:3b:b5:6c:97: c5:d7:02:17:85:99:5a:5e:23:b9:39:ce:53:7f:ef: 4e:d9:6d:3c:03:ed:8e:02:da:c7:a5:c7:05:ff:7d: e1:4f:29:0c:9e:56:af:fa:18:6a:1f:2c:43:bd:08: 3f:f7:2d:6c:25:45:8e:e7:45:88:ce:59:00:eb:52: 6b:b7:3c:b5:aa:1e:d0:36:88:94:2d:14:6e:3a:2f: 09:30:9b:54:0f:18:6f:81:14:74:6e:26:c8:c1:a7: 77:f8:65:43:e1:74:4e:bf:bc:98:1a:01:d2:28:a1: 15:bf:fd:2d:3f:7a:9c:b5:91:bb:86:26:61:06:12: e3:e4:13:b2:6c:3a:9e:d5:1d:e8:1a:ef:0e:d1:f6: 0a:e2:3c:2f:be:97:50:5b:ee:64:f5:fe:94:dc:48: 8b:37:79:41:55:a6:a4:2c:8a:2f:f2:c8:3c:b5:00: 10:d8:d6:73:44:f5:fa:02:4b:54:9b:e2:b9:20:a8: 75:0d:74:f3:8b:7e:b3:f9:42:82:11:3c:0a:53:c6: b1:ab:f6:c3:67:37:1f:eb:e0:b6:0b:f0:a6:97:11: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:00:73:0C:5D:F9:19:52:66:CE:A1:CF:FC:BE:86:9D:90:BB:EE:47 X509v3 Authority Key Identifier: keyid:30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f3:b9:ea:83:3f:7f:01:a5:0a:b4:5f:03:6e:37:22:3a:4c: a0:c9:18:63:81:d9:83:06:63:e9:bd:9b:c7:89:8e:78:9f:ca: 95:91:43:c7:82:f3:9f:e1:d8:a8:3d:0c:ba:54:bc:f6:cf:ef: 91:db:10:bb:b6:2d:59:3d:b1:f4:e1:fb:b9:8c:bd:a6:d5:fb: 61:6e:e1:77:f7:ee:c1:d9:a8:82:c6:6f:bc:42:f1:67:99:37: d0:f5:78:84:70:77:f4:65:c3:db:13:ad:d6:b0:e6:84:c7:03: 31:19:ba:5e:09:54:9d:6c:36:87:5a:51:ac:2a:f6:64:07:5c: ed:99:84:6f:e1:02:f1:dd:a4:aa:2a:5f:d1:e9:05:ac:2b:04: f8:81:df:59:99:93:65:a4:04:16:75:9f:ea:b7:98:db:07:72: 99:79:d2:46:34:ff:f7:bd:83:27:d3:7a:7a:c5:f3:ed:ed:6e: e9:4e:15:59:5c:5d:f3:b8:c1:88:cb:70:a4:5b:6a:1e:cf:5b: 3b:43:fd:06:0d:7a:b4:6d:f1:2c:85:5e:0c:a6:8f:a4:4f:3c: 91:74:c6:aa:63:0e:46:db:b9:64:8b:02:a5:14:94:52:28:1e: 25:d0:91:2a:79:d5:93:58:7d:b0:63:80:25:0c:1d:c8:a2:50: a0:b4:d2:c0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIln6vpuqkSRwHXpwU32YSidzT7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBCODlDNUFFODVBNDg2RTQ1MUE5QTA0NTQwREJEQTQ1 RDUyQTVENTAeFw0yNTEwMjAxNjEyMDhaFw0yNTEwMjUxMjQ2MDhaMDMxMTAvBgNV BAMTKERCMDA3MzBDNURGOTE5NTI2NkNFQTFDRkZDQkU4NjlEOTBCQkVFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIC4RyVNCR6OMcdKqBioDxaat LckrHY161f6EAJjqBoOHgcLK/Ww6O7Vsl8XXAheFmVpeI7k5zlN/707ZbTwD7Y4C 2selxwX/feFPKQyeVq/6GGofLEO9CD/3LWwlRY7nRYjOWQDrUmu3PLWqHtA2iJQt FG46Lwkwm1QPGG+BFHRuJsjBp3f4ZUPhdE6/vJgaAdIooRW//S0/epy1kbuGJmEG EuPkE7JsOp7VHega7w7R9griPC++l1Bb7mT1/pTcSIs3eUFVpqQsii/yyDy1ABDY 1nNE9foCS1Sb4rkgqHUNdPOLfrP5QoIRPApTxrGr9sNnNx/r4LYL8KaXEWSjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2wBzDF35GVJmzqHP/L6GnZC77kcwHwYDVR0j BBgwFoAUMLicWuhaSG5FGpoEVA29pF1SpdUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQTRCRUQyN0Q0NzQwRTE0RTk3QzI0MUI1QzlEODlDMDQ0 OEI2OTM0N0I0NTY4QTYwM0RGRkQ1QjVGNzJBNjc3LzAvMzBCODlDNUFFODVBNDg2 RTQ1MUE5QTA0NTQwREJEQTQ1RDUyQTVENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEI4OUM1QUU4NUE0ODZFNDUx QTlBMDQ1NDBEQkRBNDVENTJBNUQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUE0QkVEMjdENDc0MEUxNEU5N0MyNDFCNUM5RDg5QzA0NDhCNjkzNDdC NDU2OEE2MDNERkZENUI1RjcyQTY3Ny8wLzMwQjg5QzVBRTg1QTQ4NkU0NTFBOUEw NDU0MERCREE0NUQ1MkE1RDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDL87nqgz9/AaUKtF8DbjciOkyg yRhjgdmDBmPpvZvHiY54n8qVkUPHgvOf4dioPQy6VLz2z++R2xC7ti1ZPbH04fu5 jL2m1fthbuF39+7B2aiCxm+8QvFnmTfQ9XiEcHf0ZcPbE63WsOaExwMxGbpeCVSd bDaHWlGsKvZkB1ztmYRv4QLx3aSqKl/R6QWsKwT4gd9ZmZNlpAQWdZ/qt5jbB3KZ edJGNP/3vYMn03p6xfPt7W7pThVZXF3zuMGIy3CkW2oez1s7Q/0GDXq0bfEshV4M po+kTzyRdMaqYw5G27lkiwKlFJRSKB4l0JEqedWTWH2wY4AlDB3IolCgtNLA -----END CERTIFICATE-----Generated at Mon Oct 20 22:55:37 2025 by rpki-client