$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft File: 3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft (raw, json) Hash identifier: AYTgs8RLRMmOJ4kea8wQh536tFKgGW5xJ67uz+8oGm0= Subject key identifier: 0A:52:29:79:29:BB:25:84:ED:5E:1A:9F:2E:E5:54:05:72:8E:98:F3 Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91 Certificate issuer: /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091 Certificate serial: 2901036F6E944E35C6C441C1F67B4A83CCC8C239 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft Manifest number: 0127 Signing time: Mon 20 Oct 2025 05:40:23 +0000 Manifest this update: Mon 20 Oct 2025 05:35:23 +0000 Manifest next update: Sat 25 Oct 2025 10:01:23 +0000 Files and hashes: 1: 3139302e39342e3139322e302f31382d3234203d3e2038303533.roa (hash: IPMD8kuynWrsEtizKrAveXdlskajrhnBSRrWB8eHthI=) 2: 323830333a643438303a3a2f33322d3438203d3e2038303533.roa (hash: ZN33/DKBcob7ip4NPfYo8k39EVdnLgI9b6XahKa7I8M=) 3: 3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa (hash: rvgNQ5ONNhdLtU7SWS40g0SKsEdW5wM6fVoV2ObBBs0=) 4: 3138312e3232352e33322e302f31392d3234203d3e2038303533.roa (hash: pMZUsXdyWPdOPzdefsRD6WfFOCqgC6EoQ/mu1vfxILg=) 5: 3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa (hash: FnGRhMtUJTTelWSEDvIqdzAlaGrFnhke6957SVwtVUo=) 6: 3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl (hash: SUQoqzlTzebkm9Mhpvq0k6LOSzxe5tlxfi4RCQZ2E4M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:01:03:6f:6e:94:4e:35:c6:c4:41:c1:f6:7b:4a:83:cc:c8:c2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091 Validity Not Before: Oct 20 05:35:23 2025 GMT Not After : Oct 25 10:01:23 2025 GMT Subject: CN=0A52297929BB2584ED5E1A9F2EE55405728E98F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:08:78:8e:fd:9e:97:c7:8b:92:8a:89:9a:11: 76:c9:92:92:b8:a7:fa:c7:ee:52:66:f7:85:fa:fe: 06:fc:2a:8d:3f:f5:27:a5:19:08:70:ff:aa:94:92: a6:48:ab:b9:e1:78:c8:ba:0f:51:b3:00:c5:f9:d0: d5:03:9e:c5:b2:2d:d1:c2:ff:d4:74:52:86:aa:76: 45:81:84:4a:90:60:64:ee:c7:ce:37:3a:89:c8:60: 79:9f:fb:99:32:75:7c:81:46:b6:e7:56:99:b6:09: f1:3a:ec:30:79:34:92:f2:03:57:c6:4a:cc:fd:47: de:b4:ea:10:f5:86:53:c2:b5:fb:03:e7:af:54:3e: 3f:9e:e4:1b:e1:80:86:c8:b8:bc:71:c0:b4:f2:74: de:52:99:ee:db:2b:d4:b9:4c:8e:1a:5a:0a:4f:bb: 5d:7f:d5:cf:41:c2:0c:7e:b4:dd:8e:4c:88:70:ed: 1e:35:51:bd:a1:8a:29:52:bb:03:11:fd:9f:21:62: 6d:30:8b:a6:60:7a:2d:0e:78:b7:1b:54:14:b6:72: a3:38:0c:83:82:ca:b8:fe:65:59:32:e2:fc:16:bf: 58:e6:9c:dc:00:97:ca:4f:16:85:4d:27:1d:99:92: 0a:6a:96:e8:dd:6c:9d:b9:6b:bf:57:62:29:b6:ef: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:52:29:79:29:BB:25:84:ED:5E:1A:9F:2E:E5:54:05:72:8E:98:F3 X509v3 Authority Key Identifier: keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:35:2d:43:1e:43:b5:7a:e8:40:ab:33:6e:b0:3a:82:24:86: 8a:58:97:ef:50:01:85:73:22:62:54:58:37:16:09:f5:11:2e: 71:51:6f:01:32:50:e5:e6:52:c7:08:94:f3:fe:d3:e2:1e:d4: f6:25:44:13:fb:43:3b:4d:47:d3:b1:31:bb:6e:8c:07:aa:1a: eb:3c:b1:04:63:89:e5:3f:e6:1f:3a:74:33:f3:e1:30:37:8a: fa:e8:a0:4c:05:69:0e:db:b3:93:6d:52:d0:36:fc:b3:f0:3b: 39:a1:a0:cd:f7:2c:b3:eb:72:7d:fe:bb:ca:33:67:d1:4b:8b: 32:83:f8:3e:79:ad:c5:a4:0a:d3:56:eb:6b:bf:ec:16:f3:c1: b4:92:2f:a3:8e:1c:87:55:a8:1d:2a:f4:d6:f4:fb:0e:8f:28: 39:78:16:1e:71:9b:b1:83:39:7f:ac:d2:ea:eb:4d:71:0d:a0: 2e:a6:ef:4d:65:49:6c:c7:07:63:00:97:26:7b:91:5e:c2:51: e7:c4:4f:02:66:1a:7b:0a:d0:eb:28:e2:c8:78:92:94:d9:7a: 83:c7:49:81:76:ed:7c:1c:71:ac:ae:6c:7e:17:93:be:4a:23: 80:37:f8:fb:04:3d:94:50:0c:7a:1c:2e:44:04:71:06:b7:11: 98:d6:33:26 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKQEDb26UTjXGxEHB9ntKg8zIwjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M0OEE1RDM3QjVDMDcxRkYxQTgyNThDQUZDRTRBRENG NUZBNjA5MTAeFw0yNTEwMjAwNTM1MjNaFw0yNTEwMjUxMDAxMjNaMDMxMTAvBgNV BAMTKDBBNTIyOTc5MjlCQjI1ODRFRDVFMUE5RjJFRTU1NDA1NzI4RTk4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFCHiO/Z6Xx4uSiomaEXbJkpK4 p/rH7lJm94X6/gb8Ko0/9SelGQhw/6qUkqZIq7nheMi6D1GzAMX50NUDnsWyLdHC /9R0UoaqdkWBhEqQYGTux843OonIYHmf+5kydXyBRrbnVpm2CfE67DB5NJLyA1fG Ssz9R9606hD1hlPCtfsD569UPj+e5BvhgIbIuLxxwLTydN5Sme7bK9S5TI4aWgpP u11/1c9Bwgx+tN2OTIhw7R41Ub2hiilSuwMR/Z8hYm0wi6Zgei0OeLcbVBS2cqM4 DIOCyrj+ZVky4vwWv1jmnNwAl8pPFoVNJx2ZkgpqlujdbJ25a79XYim271uDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUClIpeSm7JYTtXhqfLuVUBXKOmPMwHwYDVR0j BBgwFoAUPEil03tcBx/xqCWMr85K3PX6YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMDBDM0IzM0ExRDI1MUM2QkMxNTgyNTMzNUZBMjM1MTEw MzEwOUUxRDFCMDhBRTU0RTg0NDg1ODVBRUJGQzhBLzAvM0M0OEE1RDM3QjVDMDcx RkYxQTgyNThDQUZDRTRBRENGNUZBNjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzQ4QTVEMzdCNUMwNzFGRjFB ODI1OENBRkNFNEFEQ0Y1RkE2MDkxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzAwQzNCMzNBMUQyNTFDNkJDMTU4MjUzMzVGQTIzNTExMDMxMDlFMUQx QjA4QUU1NEU4NDQ4NTg1QUVCRkM4QS8wLzNDNDhBNUQzN0I1QzA3MUZGMUE4MjU4 Q0FGQ0U0QURDRjVGQTYwOTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZNS1DHkO1euhAqzNusDqCJIaK WJfvUAGFcyJiVFg3Fgn1ES5xUW8BMlDl5lLHCJTz/tPiHtT2JUQT+0M7TUfTsTG7 bowHqhrrPLEEY4nlP+YfOnQz8+EwN4r66KBMBWkO27OTbVLQNvyz8Ds5oaDN9yyz 63J9/rvKM2fRS4syg/g+ea3FpArTVutrv+wW88G0ki+jjhyHVagdKvTW9PsOjyg5 eBYecZuxgzl/rNLq601xDaAupu9NZUlsxwdjAJcme5FewlHnxE8CZhp7CtDrKOLI eJKU2XqDx0mBdu18HHGsrmx+F5O+SiOAN/j7BD2UUAx6HC5EBHEGtxGY1jMm -----END CERTIFICATE-----Generated at Mon Oct 20 14:17:14 2025 by rpki-client