$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft File: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft (raw, json) Hash identifier: zWL6NBbEsBDgag7ja+6p3JDCRILWEcc1gKPRIV0e2tk= Subject key identifier: 2A:71:3C:06:15:29:34:42:CD:6A:FD:21:65:48:92:10:1A:5E:B0:C9 Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 Certificate issuer: /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Certificate serial: 51673E84791ABAFC3529348D75FE9F5E9F25CE84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft Manifest number: 012C Signing time: Mon 20 Oct 2025 01:01:58 +0000 Manifest this update: Mon 20 Oct 2025 00:56:58 +0000 Manifest next update: Sat 25 Oct 2025 07:03:58 +0000 Files and hashes: 1: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl (hash: z0sF4JaGmQE7w7+axOoTopLnjXl/eeZPBvCf32IEZiM=) 2: 34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa (hash: 4VUCnUrOTEFJUAMerXLjzJe+4pxzRGbnHxoBswqshlY=) 3: 323830363a3330633a3a2f33322d3332203d3e203238343431.roa (hash: vIOhJjECWzttZKOV+dVCoi9TcFOasaJL+FAuiQqhZoY=) 4: 34352e3136342e3130382e302f32322d3234203d3e203238343431.roa (hash: FZ/ToJSDVA+/z6gj7agzP3+M2/gq86aV54y856+5jAs=) 5: 323830363a3330633a3a2f33322d3438203d3e20323730313733.roa (hash: JRsnL/EF5Mvh3uIexqf/lKD0Frgj2yJLic8Lrr5SfrE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:67:3e:84:79:1a:ba:fc:35:29:34:8d:75:fe:9f:5e:9f:25:ce:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Validity Not Before: Oct 20 00:56:58 2025 GMT Not After : Oct 25 07:03:58 2025 GMT Subject: CN=2A713C0615293442CD6AFD21654892101A5EB0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:de:f5:a8:73:bd:88:f3:3a:52:5e:ec:d8: a8:12:6d:f0:da:73:1a:94:b7:76:e5:66:98:15:ec: 76:ca:11:de:4c:5a:63:2e:ea:83:e1:bc:11:bf:4d: 0f:c2:88:96:aa:fa:a6:f4:40:3b:ee:d5:60:35:4f: c0:26:7b:8e:c6:5f:bd:5a:8c:50:cb:dc:db:39:96: 5c:3d:94:85:e2:f5:91:5b:50:af:bc:27:87:be:d5: 61:ee:a7:a5:a1:17:ab:1a:3a:5f:ef:be:4c:c6:a2: c8:5f:7c:48:86:1a:b3:8d:5f:cb:13:d6:85:f8:d8: 09:53:c5:4a:45:5c:fe:9c:39:c8:b6:3b:6d:cb:ad: 43:23:4a:72:a2:f0:bd:b9:1f:92:4a:07:cf:5c:73: ef:a3:89:ba:b0:a6:f2:47:f9:42:0e:81:42:c6:11: 54:a9:b0:a6:a8:56:87:40:1d:d4:2f:d8:8e:16:e6: d9:a9:83:91:ce:b9:98:33:0a:cf:b6:a3:e1:bb:08: 33:2c:ff:79:dc:61:32:39:6e:9e:ec:41:a1:03:8e: e4:c7:34:d7:64:c4:f6:62:a4:8a:38:de:05:0e:b8: d3:40:14:9b:68:a0:ca:32:69:53:71:79:b3:a1:21: 88:c8:ea:e7:d2:bf:95:3c:37:84:ed:29:53:93:0d: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:71:3C:06:15:29:34:42:CD:6A:FD:21:65:48:92:10:1A:5E:B0:C9 X509v3 Authority Key Identifier: keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fe:b9:3a:51:02:3d:07:01:b4:b8:d9:79:73:56:45:01:76: f9:96:2c:cd:57:7b:98:f5:29:13:42:38:23:86:d1:86:b8:44: 2c:c0:c9:62:7b:09:26:d8:b8:02:47:95:60:ea:e4:74:ae:b1: 84:1c:40:7e:ec:23:02:4e:e9:ce:d1:3b:4b:44:ff:24:16:6e: ac:3c:73:92:eb:27:e9:5b:72:a1:46:01:50:04:51:6e:4c:c2: fc:05:29:a4:bd:d7:8f:54:f1:4e:37:38:66:d4:a7:c0:1c:f6: a1:56:72:1d:a6:7d:40:7b:7f:01:3a:2d:a8:6a:cf:ad:c3:49: ee:98:57:e4:39:55:85:35:88:84:4a:3c:5c:a1:5b:e7:c2:76: 43:f7:f7:4a:39:59:49:c2:79:6a:2b:81:04:bb:e6:f9:31:e7: 1e:ea:58:dd:7b:37:1d:60:e1:b7:42:f6:67:2d:16:f5:1f:14: de:b3:79:2d:f9:87:02:04:85:96:c0:f2:a6:23:82:54:fe:34: 8a:d1:67:10:72:d2:04:47:2d:41:05:63:13:97:a4:ae:64:59: 1f:ab:53:0e:60:83:a9:43:26:6b:53:be:d3:65:4d:85:77:6a: 93:06:9a:e8:f3:17:08:b1:4e:5e:a5:d1:de:90:3e:ab:d8:72: cd:6b:c7:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUWc+hHkauvw1KTSNdf6fXp8lzoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkxQkYyNjRFM0RGQkUyOUE1RDUyQUUyNENFMTI0M0RG NkYzOThDMjAeFw0yNTEwMjAwMDU2NThaFw0yNTEwMjUwNzAzNThaMDMxMTAvBgNV BAMTKDJBNzEzQzA2MTUyOTM0NDJDRDZBRkQyMTY1NDg5MjEwMUE1RUIwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGt71qHO9iPM6Ul7s2KgSbfDa cxqUt3blZpgV7HbKEd5MWmMu6oPhvBG/TQ/CiJaq+qb0QDvu1WA1T8Ame47GX71a jFDL3Ns5llw9lIXi9ZFbUK+8J4e+1WHup6WhF6saOl/vvkzGoshffEiGGrONX8sT 1oX42AlTxUpFXP6cOci2O23LrUMjSnKi8L25H5JKB89cc++jibqwpvJH+UIOgULG EVSpsKaoVodAHdQv2I4W5tmpg5HOuZgzCs+2o+G7CDMs/3ncYTI5bp7sQaEDjuTH NNdkxPZipIo43gUOuNNAFJtooMoyaVNxebOhIYjI6ufSv5U8N4TtKVOTDe8fAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKnE8BhUpNELNav0hZUiSEBpesMkwHwYDVR0j BBgwFoAUKRvyZOPfviml1SriTOEkPfbzmMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkE3NzEzNzdBMzUzMDgxODg4MURDMjIyNjcwNUE1OEIx OTVCRDZFQzAzNTEwMzgyMTE3RTkyRUU5NjFEM0E5LzAvMjkxQkYyNjRFM0RGQkUy OUE1RDUyQUUyNENFMTI0M0RGNkYzOThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTFCRjI2NEUzREZCRTI5QTVE NTJBRTI0Q0UxMjQzREY2RjM5OEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZBNzcxMzc3QTM1MzA4MTg4ODFEQzIyMjY3MDVBNThCMTk1QkQ2RUMw MzUxMDM4MjExN0U5MkVFOTYxRDNBOS8wLzI5MUJGMjY0RTNERkJFMjlBNUQ1MkFF MjRDRTEyNDNERjZGMzk4QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy/rk6UQI9BwG0uNl5c1ZFAXb5 lizNV3uY9SkTQjgjhtGGuEQswMliewkm2LgCR5Vg6uR0rrGEHEB+7CMCTunO0TtL RP8kFm6sPHOS6yfpW3KhRgFQBFFuTML8BSmkvdePVPFONzhm1KfAHPahVnIdpn1A e38BOi2oas+tw0numFfkOVWFNYiESjxcoVvnwnZD9/dKOVlJwnlqK4EEu+b5Mece 6ljdezcdYOG3QvZnLRb1HxTes3kt+YcCBIWWwPKmI4JU/jSK0WcQctIERy1BBWMT l6SuZFkfq1MOYIOpQyZrU77TZU2Fd2qTBpro8xcIsU5epdHekD6r2HLNa8ep -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:50 2025 by rpki-client