$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft File: B3AA883DF802251B99A42D7F578AD8768A729025.mft (raw, json) Hash identifier: CIJAdNOcLAFsBUEuGXfuXk9xPVx7/o3TKWDurQL7/HM= Subject key identifier: E9:C1:E4:DF:B2:CB:D3:54:6E:36:A1:39:C5:00:CC:F4:C0:16:80:0B Authority key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25 Certificate issuer: /CN=B3AA883DF802251B99A42D7F578AD8768A729025 Certificate serial: 6B4DC369CA5C38F6D0C99DB4BE001368F8159A29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft Manifest number: 0128 Signing time: Sat 18 Oct 2025 18:57:16 +0000 Manifest this update: Sat 18 Oct 2025 18:52:16 +0000 Manifest next update: Fri 24 Oct 2025 01:01:16 +0000 Files and hashes: 1: 34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa (hash: Ed+TINyonQnupa0zUhcJ76o7sv/DoNLs4QOtK5r729M=) 2: B3AA883DF802251B99A42D7F578AD8768A729025.crl (hash: WRDVtncK0mJ+sD3A4U2A/KPY8wnfWCut95LNsg8FigU=) 3: 323830333a653036303a3a2f33322d3332203d3e20323632313931.roa (hash: EWub1SRff2IJH3KVefIE4z3IZH5UpnMFkvS4QpcUCyg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:c3:69:ca:5c:38:f6:d0:c9:9d:b4:be:00:13:68:f8:15:9a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3AA883DF802251B99A42D7F578AD8768A729025 Validity Not Before: Oct 18 18:52:16 2025 GMT Not After : Oct 24 01:01:16 2025 GMT Subject: CN=E9C1E4DFB2CBD3546E36A139C500CCF4C016800B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:a2:c6:03:77:ed:a0:75:55:f7:52:da:98: 79:80:71:be:f8:77:9d:f0:bf:a4:0b:e9:2a:91:92: 9d:03:c2:bb:44:2c:f7:12:e1:4e:2b:2c:5d:89:34: 89:27:43:38:1d:18:3e:a0:73:47:74:e2:c2:f4:79: 23:a1:21:5d:3d:b7:0a:94:a5:83:fd:17:e6:d0:a8: c1:ec:92:3a:8c:de:7a:10:ac:17:e6:8a:cd:a7:25: e4:2a:3e:50:96:32:55:70:b6:f4:d5:29:91:d3:14: 80:6e:e6:50:3c:d0:e9:e9:84:10:be:bb:ec:80:6e: 55:72:b2:18:f5:3e:aa:08:fc:8a:3c:45:fa:67:46: ae:e3:b4:a1:39:5e:67:53:48:0b:a8:c9:cc:39:25: f6:b5:bc:f5:ab:8f:6c:03:dc:b8:63:6c:06:28:d5: b6:75:4f:d7:ae:44:e1:74:f2:0a:20:70:bb:30:5e: 7a:8b:6c:01:73:f0:d9:fb:68:ee:7e:db:b8:cb:f4: 8f:83:03:10:98:e4:25:3d:17:24:24:8d:2b:02:d0: b5:f3:9e:1d:35:0f:e7:69:c9:66:95:7f:23:c7:8a: 02:48:86:b1:ed:13:15:2d:92:b1:48:06:88:5f:24: 1f:f3:ff:b4:65:0a:d7:e3:d7:0b:e9:87:3e:e0:6f: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C1:E4:DF:B2:CB:D3:54:6E:36:A1:39:C5:00:CC:F4:C0:16:80:0B X509v3 Authority Key Identifier: keyid:B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e6:b5:f7:84:d6:3c:8f:64:67:11:e7:c4:2e:7e:1b:c6:e8: 82:5c:49:12:01:4b:84:8b:05:02:06:61:d8:27:28:88:06:4d: 6d:e2:c6:7d:a6:4f:5a:f8:43:86:f8:d6:91:5f:c6:56:8c:7f: ae:59:20:c4:44:18:6d:b3:15:db:57:d6:b0:09:ca:78:47:02: e9:8b:ba:ca:a9:9a:ca:3a:6a:c7:9d:4f:fb:c0:f4:ff:1a:94: d5:d1:b1:99:d6:e2:5c:ba:1a:c3:bd:94:ed:13:ab:5e:f4:3f: c6:27:92:06:47:bb:9a:48:16:a0:75:31:2a:69:a2:08:6d:25: b0:2a:f5:21:3e:ff:9a:78:37:6b:66:14:2d:39:70:53:5a:e1: 04:fd:bc:3b:de:2b:72:0d:e7:e9:03:07:1d:79:5d:c3:26:78: 40:ed:70:05:7c:8e:d6:eb:fb:1a:ea:81:f1:2e:16:2d:46:60: c1:6a:82:2a:c9:03:50:5a:93:68:a2:c7:c4:a5:14:bd:bb:6d: ea:23:23:d5:46:c9:fe:aa:de:2a:21:06:9c:91:33:09:08:fc: b7:9b:d5:5e:24:b0:c6:19:9e:16:79:6f:c5:cf:dd:9b:da:d4: 9d:eb:96:14:a7:81:d6:68:4f:44:5e:1f:6b:19:db:11:86:91: 7a:fa:f4:0c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa03DacpcOPbQyZ20vgATaPgVmikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBQTg4M0RGODAyMjUxQjk5QTQyRDdGNTc4QUQ4NzY4 QTcyOTAyNTAeFw0yNTEwMTgxODUyMTZaFw0yNTEwMjQwMTAxMTZaMDMxMTAvBgNV BAMTKEU5QzFFNERGQjJDQkQzNTQ2RTM2QTEzOUM1MDBDQ0Y0QzAxNjgwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfaLGA3ftoHVV91LamHmAcb74 d53wv6QL6SqRkp0DwrtELPcS4U4rLF2JNIknQzgdGD6gc0d04sL0eSOhIV09twqU pYP9F+bQqMHskjqM3noQrBfmis2nJeQqPlCWMlVwtvTVKZHTFIBu5lA80OnphBC+ u+yAblVyshj1PqoI/Io8RfpnRq7jtKE5XmdTSAuoycw5Jfa1vPWrj2wD3LhjbAYo 1bZ1T9euROF08gogcLswXnqLbAFz8Nn7aO5+27jL9I+DAxCY5CU9FyQkjSsC0LXz nh01D+dpyWaVfyPHigJIhrHtExUtkrFIBohfJB/z/7RlCtfj1wvphz7gb1WpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6cHk37LL01RuNqE5xQDM9MAWgAswHwYDVR0j BBgwFoAUs6qIPfgCJRuZpC1/V4rYdopykCUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUFEMzgxRDU2QkIxMjQ2RjlBMDgyMTBCMDJDN0QwNDE0 QkM5OEM4Q0Q3RjlBNjI2ODdERjdCRkNDQTVGNEFFLzAvQjNBQTg4M0RGODAyMjUx Qjk5QTQyRDdGNTc4QUQ4NzY4QTcyOTAyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CM0FBODgzREY4MDIyNTFCOTlB NDJEN0Y1NzhBRDg3NjhBNzI5MDI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFBRDM4MUQ1NkJCMTI0NkY5QTA4MjEwQjAyQzdEMDQxNEJDOThDOENE N0Y5QTYyNjg3REY3QkZDQ0E1RjRBRS8wL0IzQUE4ODNERjgwMjI1MUI5OUE0MkQ3 RjU3OEFEODc2OEE3MjkwMjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAu5rX3hNY8j2RnEefELn4bxuiC XEkSAUuEiwUCBmHYJyiIBk1t4sZ9pk9a+EOG+NaRX8ZWjH+uWSDERBhtsxXbV9aw Ccp4RwLpi7rKqZrKOmrHnU/7wPT/GpTV0bGZ1uJcuhrDvZTtE6te9D/GJ5IGR7ua SBagdTEqaaIIbSWwKvUhPv+aeDdrZhQtOXBTWuEE/bw73ityDefpAwcdeV3DJnhA 7XAFfI7W6/sa6oHxLhYtRmDBaoIqyQNQWpNoosfEpRS9u23qIyPVRsn+qt4qIQac kTMJCPy3m9VeJLDGGZ4WeW/Fz92b2tSd65YUp4HWaE9EXh9rGdsRhpF6+vQM -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:28 2025 by rpki-client