$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft File: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft (raw, json) Hash identifier: /JrYkeOEdPd0hL5/IpkgRQECUAe949qf+FC91yhfC1I= Subject key identifier: D8:CF:5A:00:85:1A:BA:DA:95:44:29:27:9E:88:4B:17:A1:03:88:03 Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Certificate serial: 08D53D98519A5DD308B11A8A8D4AB10F61ABE39D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft Manifest number: 0126 Signing time: Mon 20 Oct 2025 05:50:32 +0000 Manifest this update: Mon 20 Oct 2025 05:45:32 +0000 Manifest next update: Sat 25 Oct 2025 04:51:32 +0000 Files and hashes: 1: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (hash: yZWkzdnI2yE2GWAW0fR8ozyK+67wGcmDL/+BxkZFYOM=) 2: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl (hash: xKhrGmCyFHsd1b/cVkLNTtX+JLm83QyGQt4SsROoy5w=) 3: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (hash: Ndho+BhViPHLNULz7C2z55/V4iRAPugD06lZUvZ4mIY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d5:3d:98:51:9a:5d:d3:08:b1:1a:8a:8d:4a:b1:0f:61:ab:e3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Validity Not Before: Oct 20 05:45:32 2025 GMT Not After : Oct 25 04:51:32 2025 GMT Subject: CN=D8CF5A00851ABADA954429279E884B17A1038803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:71:fe:9e:40:19:81:d0:28:24:f4:ce:b5:e6: 16:7a:a3:f9:50:ad:9e:35:4e:79:6f:31:5d:ab:d8: 08:66:b0:27:b3:a3:9c:ac:11:cb:d7:55:e7:70:fd: 67:20:00:87:ad:3b:95:b8:7d:d9:5c:df:f3:30:be: 96:26:9e:e9:87:64:71:30:93:98:52:46:7c:75:bf: 05:fa:24:92:29:a0:35:79:6b:0a:d1:50:96:08:34: a7:d3:c5:33:6f:b5:d8:b9:11:7b:e8:41:e1:51:8f: f6:d7:6e:b7:b9:85:55:56:ea:68:95:d3:d4:69:03: 02:46:7f:06:fb:8b:c8:ed:e3:72:91:42:21:90:99: be:d2:38:a7:26:77:21:b6:37:74:17:fe:a8:98:85: 48:2c:92:da:19:3b:7a:2c:0d:8a:8e:83:66:dc:19: 1e:78:6a:6e:a1:8a:fe:0c:c4:ef:f9:b4:02:d7:2b: 98:20:54:27:cb:3a:19:a0:cf:a7:3e:67:64:72:18: f9:c0:c1:f7:c9:dd:49:b2:8e:45:99:65:09:af:f3: 3b:04:ec:e1:1d:d1:54:a1:ff:4f:fc:39:c4:a7:37: fe:08:1e:93:ed:9c:91:32:89:0e:84:37:a9:20:31: ec:a1:78:2d:58:86:b0:e7:c7:98:02:c0:60:9d:dd: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CF:5A:00:85:1A:BA:DA:95:44:29:27:9E:88:4B:17:A1:03:88:03 X509v3 Authority Key Identifier: keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ef:ff:80:b5:04:d2:c9:d1:07:f4:0f:03:52:7f:74:12:e1: 1a:0e:fa:0f:7a:27:89:4e:c2:d0:09:0e:af:4b:21:40:06:1a: 58:de:bd:0a:83:48:61:74:e3:20:83:71:73:91:88:18:40:09: 2c:01:6a:98:aa:a8:f7:99:a2:ef:3d:b7:90:28:30:d4:62:4d: d0:34:80:46:58:ba:ba:f7:a9:74:a1:d2:52:9a:9e:62:a2:ba: e5:56:40:17:4b:e2:44:c8:f0:1f:d0:fb:ae:84:34:1b:b2:12: e4:55:99:4c:96:a6:8a:bd:19:aa:c6:bb:ae:ef:5e:83:35:76: 5b:fc:c0:02:7d:72:87:70:e8:f1:fa:82:7e:0a:26:28:0b:ac: f3:82:a2:62:1d:7c:30:de:00:49:c6:8b:85:f4:51:f4:17:44: 1b:96:8b:3a:55:9f:75:a8:00:f4:af:32:dc:cb:85:3a:1f:da: 8c:b4:5a:4c:b3:72:de:e9:db:0e:1a:09:54:fb:ff:da:09:38: f5:98:9a:23:86:3d:87:4c:8c:67:29:c5:9d:b2:30:24:51:b7: cc:a9:3a:b4:c0:33:fa:15:b4:2f:10:97:c8:27:44:87:e3:5e: 29:44:c2:7a:f3:44:fa:d2:6a:a0:f9:52:98:30:2b:b2:bc:15: 22:55:57:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCNU9mFGaXdMIsRqKjUqxD2Gr450wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1 QzU2QTMzNjAeFw0yNTEwMjAwNTQ1MzJaFw0yNTEwMjUwNDUxMzJaMDMxMTAvBgNV BAMTKEQ4Q0Y1QTAwODUxQUJBREE5NTQ0MjkyNzlFODg0QjE3QTEwMzg4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDscf6eQBmB0Cgk9M615hZ6o/lQ rZ41TnlvMV2r2AhmsCezo5ysEcvXVedw/WcgAIetO5W4fdlc3/MwvpYmnumHZHEw k5hSRnx1vwX6JJIpoDV5awrRUJYINKfTxTNvtdi5EXvoQeFRj/bXbre5hVVW6miV 09RpAwJGfwb7i8jt43KRQiGQmb7SOKcmdyG2N3QX/qiYhUgsktoZO3osDYqOg2bc GR54am6hiv4MxO/5tALXK5ggVCfLOhmgz6c+Z2RyGPnAwffJ3UmyjkWZZQmv8zsE 7OEd0VSh/0/8OcSnN/4IHpPtnJEyiQ6EN6kgMeyheC1YhrDnx5gCwGCd3XtBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2M9aAIUautqVRCknnohLF6EDiAMwHwYDVR0j BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3 OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1 NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzAwRkYyOTVCOTM5QUQ3MjU4OUNFMjRC N0U0RUQ0MUZDNUM1NkEzMzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBB7/+AtQTSydEH9A8DUn90EuEa DvoPeieJTsLQCQ6vSyFABhpY3r0Kg0hhdOMgg3FzkYgYQAksAWqYqqj3maLvPbeQ KDDUYk3QNIBGWLq696l0odJSmp5iorrlVkAXS+JEyPAf0PuuhDQbshLkVZlMlqaK vRmqxruu716DNXZb/MACfXKHcOjx+oJ+CiYoC6zzgqJiHXww3gBJxouF9FH0F0Qb los6VZ91qAD0rzLcy4U6H9qMtFpMs3Le6dsOGglU+//aCTj1mJojhj2HTIxnKcWd sjAkUbfMqTq0wDP6FbQvEJfIJ0SH414pRMJ680T60mqg+VKYMCuyvBUiVVfx -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:20 2025 by rpki-client