$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft File: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json) Hash identifier: MK4PCM8U/2/5tdx88YQvtvBx4fYDrPj6ty4SGf6H/hg= Subject key identifier: 57:6B:E5:05:93:B8:7D:F1:44:73:03:E6:7A:4B:63:2B:EF:EA:67:DC Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF Certificate issuer: /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF Certificate serial: 043C9335BB6BF64BA5B1EB8F4C667B80A5DEB185 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft Manifest number: 0121 Signing time: Sun 19 Oct 2025 21:04:33 +0000 Manifest this update: Sun 19 Oct 2025 20:59:33 +0000 Manifest next update: Fri 24 Oct 2025 09:37:33 +0000 Files and hashes: 1: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: qFQcyt6mjuuWxr31xcmCwMXo3qzlGX+FFhSurKpopCQ=) 2: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: EyQQoUAUyjDhauOO1Hh+QX7AwhAZH3g14l919b/67XY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3c:93:35:bb:6b:f6:4b:a5:b1:eb:8f:4c:66:7b:80:a5:de:b1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF Validity Not Before: Oct 19 20:59:33 2025 GMT Not After : Oct 24 09:37:33 2025 GMT Subject: CN=576BE50593B87DF1447303E67A4B632BEFEA67DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:91:81:26:bf:98:61:9c:c9:f3:2d:b4:1c: d9:f1:2f:ef:61:4c:1d:1e:04:e3:94:89:3c:86:04: cc:40:19:ae:65:9c:bf:16:6c:d6:d1:a0:3e:91:60: 4b:db:0c:e1:c3:33:16:7c:cd:33:6e:6b:0c:1c:46: f0:58:09:cb:3a:4a:55:62:99:07:de:7c:61:e4:3e: 56:4d:b3:25:00:3d:36:29:a0:4a:0e:07:a9:f7:a4: ef:90:36:ad:15:1f:80:b9:f6:c6:6a:90:e3:58:2d: 3d:b2:47:9d:75:b2:84:8b:29:9c:d7:bc:0c:1e:74: 66:99:aa:c9:69:85:1e:35:b7:45:7f:e9:be:a5:85: 8a:a1:b9:f7:c0:69:70:72:0b:c1:f5:e6:87:a0:45: 21:ee:8a:87:cd:a2:73:d7:49:e8:31:4f:2f:2f:b7: 1d:7e:03:e3:0d:45:48:f5:c8:59:23:08:ec:4c:c5: e9:50:23:63:0a:f9:b6:1f:44:ac:f6:25:9c:af:e1: da:ff:e8:85:9e:8d:c7:5c:ec:f0:f4:09:81:96:48: d1:22:d2:6e:67:4a:ed:db:f5:b7:9b:2c:22:2f:7b: 48:c4:18:9d:03:eb:46:25:99:f4:00:f4:68:07:6d: f3:9d:55:d9:54:79:d6:eb:b1:7d:b9:a5:3b:40:da: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6B:E5:05:93:B8:7D:F1:44:73:03:E6:7A:4B:63:2B:EF:EA:67:DC X509v3 Authority Key Identifier: keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:91:4b:e5:ad:37:94:00:10:44:0b:32:a1:0b:65:ed:83:64: 4e:43:a7:8b:82:f9:76:2e:05:ae:9e:42:a6:53:9d:78:b0:1b: 65:a9:0a:39:57:b4:f8:ee:14:e1:22:33:ee:ac:3d:f8:84:79: 0c:e4:86:1e:2c:50:19:6a:e9:8e:e6:cd:a3:d2:c9:49:1c:ea: b2:59:e7:fd:c6:8e:7c:3b:7d:58:37:f7:57:1b:b5:a8:fc:80: cd:b6:b1:9c:e2:17:76:01:ff:b0:42:b0:a8:37:41:4c:6b:ac: a9:b2:2d:41:0a:13:aa:66:e2:40:a8:57:ab:b8:08:cb:c8:36: ae:bb:00:24:ea:49:af:8b:e6:4c:91:1e:d7:45:06:6f:5c:b3: d5:16:09:0a:46:4c:06:30:42:7c:e0:df:4b:16:80:ca:6b:43: da:1b:88:0d:b3:41:ca:43:f1:e4:3b:1c:ab:25:e5:d9:79:5a: f9:ac:03:95:1c:83:5f:0f:05:c1:70:a9:ff:77:0c:cb:f9:1f: 55:6d:39:3a:a2:f0:c2:5d:a7:ae:b1:0c:e2:ed:74:e9:90:f2: 47:c3:09:eb:83:6b:86:cd:39:eb:47:c4:a1:bf:38:a2:72:ee: e2:2d:07:3b:f8:3f:47:08:02:ff:38:e1:af:cc:0a:3d:db:0b: 37:02:6b:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBDyTNbtr9kulseuPTGZ7gKXesYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURDM0M5QjIwQkU2NzE0MTBBNDZFRTdCMTQ5MUQxRURG Q0Y4RDNGRjAeFw0yNTEwMTkyMDU5MzNaFw0yNTEwMjQwOTM3MzNaMDMxMTAvBgNV BAMTKDU3NkJFNTA1OTNCODdERjE0NDczMDNFNjdBNEI2MzJCRUZFQTY3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36ZGBJr+YYZzJ8y20HNnxL+9h TB0eBOOUiTyGBMxAGa5lnL8WbNbRoD6RYEvbDOHDMxZ8zTNuawwcRvBYCcs6SlVi mQfefGHkPlZNsyUAPTYpoEoOB6n3pO+QNq0VH4C59sZqkONYLT2yR511soSLKZzX vAwedGaZqslphR41t0V/6b6lhYqhuffAaXByC8H15oegRSHuiofNonPXSegxTy8v tx1+A+MNRUj1yFkjCOxMxelQI2MK+bYfRKz2JZyv4dr/6IWejcdc7PD0CYGWSNEi 0m5nSu3b9bebLCIve0jEGJ0D60YlmfQA9GgHbfOdVdlUedbrsX25pTtA2ihVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUV2vlBZO4ffFEcwPmektjK+/qZ9wwHwYDVR0j BBgwFoAUncPJsgvmcUEKRu57FJHR7fz40/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTI1NjY2RkIzQkQ2NzY4QTJEODg1MDhCOUJFMTdENjQz NTAzRjBGQkRCRjc2NTMwNjY1QjIyMkIxNEMxNUY1LzAvOURDM0M5QjIwQkU2NzE0 MTBBNDZFRTdCMTQ5MUQxRURGQ0Y4RDNGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REMzQzlCMjBCRTY3MTQxMEE0 NkVFN0IxNDkxRDFFREZDRjhEM0ZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0UyNTY2NkZCM0JENjc2OEEyRDg4NTA4QjlCRTE3RDY0MzUwM0YwRkJE QkY3NjUzMDY2NUIyMjJCMTRDMTVGNS8wLzlEQzNDOUIyMEJFNjcxNDEwQTQ2RUU3 QjE0OTFEMUVERkNGOEQzRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6kUvlrTeUABBECzKhC2Xtg2RO Q6eLgvl2LgWunkKmU514sBtlqQo5V7T47hThIjPurD34hHkM5IYeLFAZaumO5s2j 0slJHOqyWef9xo58O31YN/dXG7Wo/IDNtrGc4hd2Af+wQrCoN0FMa6ypsi1BChOq ZuJAqFeruAjLyDauuwAk6kmvi+ZMkR7XRQZvXLPVFgkKRkwGMEJ84N9LFoDKa0Pa G4gNs0HKQ/HkOxyrJeXZeVr5rAOVHINfDwXBcKn/dwzL+R9VbTk6ovDCXaeusQzi 7XTpkPJHwwnrg2uGzTnrR8Shvziicu7iLQc7+D9HCAL/OOGvzAo92ws3AmuK -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:13 2025 by rpki-client