$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft File: 0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft (raw, json) Hash identifier: ygFkKROF7ug5zEOJ1bbDwZJdRi9bl4HNFnAGFiBJxpw= Subject key identifier: 53:98:5D:AC:A5:E3:7F:B7:DF:67:E0:66:5D:35:76:1B:ED:A1:C5:E1 Authority key identifier: 0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8 Certificate issuer: /CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8 Certificate serial: 6C5A2C760FE8923CB5E064112C09577942A46B34 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft Manifest number: 012D Signing time: Sat 18 Oct 2025 23:04:48 +0000 Manifest this update: Sat 18 Oct 2025 22:59:48 +0000 Manifest next update: Fri 24 Oct 2025 09:39:48 +0000 Files and hashes: 1: 323830333a363231303a3a2f33322d3332203d3e20323731393034.roa (hash: AaBThXXwsB45XFFB6nd/l2AQJxXABhJixlwmGWy1uBY=) 2: 3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa (hash: ZdsG86b+FcM+UBOt0dFPWgI/HfenH2ijjMngzZLnxgM=) 3: 0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl (hash: KyRbKKD+v+K4uXWfpksD2s5ck5oKAFRqpfkKuwWxzJ0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5a:2c:76:0f:e8:92:3c:b5:e0:64:11:2c:09:57:79:42:a4:6b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8 Validity Not Before: Oct 18 22:59:48 2025 GMT Not After : Oct 24 09:39:48 2025 GMT Subject: CN=53985DACA5E37FB7DF67E0665D35761BEDA1C5E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:b9:7b:9a:54:2c:37:14:f7:c2:f3:e9:8f: 5d:6b:74:88:f9:27:d0:64:8d:84:f3:58:ed:bb:9c: 31:4b:e2:e7:5d:01:b8:4a:e0:64:b1:18:7b:23:91: 75:ee:63:39:28:19:36:5e:4d:3e:27:19:26:d8:ef: 21:3f:46:48:bc:0a:87:13:44:11:4a:62:0e:af:1c: a7:47:e4:d4:38:d3:7c:52:87:e0:34:10:19:7f:a7: 43:ed:8e:3b:a2:d1:5b:3c:0f:ac:e7:a3:76:bf:79: 1c:a1:0d:cf:c9:c4:d7:a5:07:af:48:6a:1b:96:d1: 1f:98:02:03:30:e6:cb:db:11:3d:59:c0:cd:15:be: db:30:dd:36:d6:68:c2:ff:ab:15:1c:a2:71:6c:dc: 24:be:c1:5b:86:25:d0:eb:13:04:f2:3c:d4:ed:b4: 07:77:dc:55:7b:9e:48:85:79:65:e6:20:29:27:ea: e6:ee:c5:49:ca:79:51:01:74:07:1b:37:94:5c:a7: e0:db:da:8c:7a:36:19:46:38:bb:3c:d5:ce:82:5d: 24:e9:78:0d:b7:d8:97:f8:9f:45:f3:8d:94:d2:50: 5e:10:49:ee:43:51:57:17:a5:52:17:ab:b3:66:88: b8:bb:e7:68:01:59:d7:f7:66:34:87:a7:57:0e:e6: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:98:5D:AC:A5:E3:7F:B7:DF:67:E0:66:5D:35:76:1B:ED:A1:C5:E1 X509v3 Authority Key Identifier: keyid:0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:71:25:0a:c2:a3:a6:68:5c:9d:d0:eb:ac:5f:da:ba:74:ad: 0d:bd:b4:52:57:08:1d:c4:fa:0d:10:50:9a:5c:46:c3:b0:41: 50:9c:03:6e:e0:b1:e0:fe:0e:56:08:67:f8:6d:a2:ab:7a:27: db:3a:14:f2:62:0c:ab:e0:89:40:79:29:46:e5:ae:59:a5:50: 8b:7d:8d:df:b6:b7:54:7b:d9:83:37:61:6e:11:c7:c7:e1:30: 65:91:dd:d2:c8:18:8b:7b:70:5a:b3:38:1d:49:65:97:ed:ef: 74:b8:4b:45:72:72:e6:c4:7b:89:1d:09:d8:c1:c6:4c:da:69: cc:86:c0:f3:b1:40:74:26:3e:23:88:b2:30:98:e2:5b:23:6a: 3a:1a:e1:99:06:83:7f:2c:49:d2:d6:ac:1b:59:bd:63:98:99: 7c:c3:1c:ed:27:f2:7b:a6:82:b8:69:8c:9d:82:0d:b7:ff:22: cd:3c:e1:5d:b0:4e:08:b7:5d:a4:f4:13:79:2e:a8:d6:3f:66: 00:6d:1f:ae:ee:cc:8a:66:56:2b:23:21:cc:24:60:cd:8b:8e: 3f:d6:5d:1e:20:72:13:f9:7e:2a:60:c5:f9:82:1c:e9:07:ea: 4a:6b:fb:39:f9:11:4e:7c:50:ed:af:87:40:ae:a1:16:81:5b: c0:0c:5b:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbFosdg/okjy14GQRLAlXeUKkazQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyQTI0QkU1REM3QUZGOUY1RDkwQTYxOTFGNDlEMkYy QzhFQTNBODAeFw0yNTEwMTgyMjU5NDhaFw0yNTEwMjQwOTM5NDhaMDMxMTAvBgNV BAMTKDUzOTg1REFDQTVFMzdGQjdERjY3RTA2NjVEMzU3NjFCRURBMUM1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZtrl7mlQsNxT3wvPpj11rdIj5 J9BkjYTzWO27nDFL4uddAbhK4GSxGHsjkXXuYzkoGTZeTT4nGSbY7yE/Rki8CocT RBFKYg6vHKdH5NQ403xSh+A0EBl/p0Ptjjui0Vs8D6zno3a/eRyhDc/JxNelB69I ahuW0R+YAgMw5svbET1ZwM0Vvtsw3TbWaML/qxUconFs3CS+wVuGJdDrEwTyPNTt tAd33FV7nkiFeWXmICkn6ubuxUnKeVEBdAcbN5Rcp+Db2ox6NhlGOLs81c6CXSTp eA232Jf4n0XzjZTSUF4QSe5DUVcXpVIXq7NmiLi752gBWdf3ZjSHp1cO5pYfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUU5hdrKXjf7ffZ+BmXTV2G+2hxeEwHwYDVR0j BBgwFoAUDCokvl3Hr/n12QphkfSdLyyOo6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUMzQjFCMTk4RkFFNDA2RDM1Nzk5MzJGM0MxMTBFREU2 OENCQzlENzE0RUM5MTA1RUYzQ0UzQ0JEREVBNzMxLzAvMEMyQTI0QkU1REM3QUZG OUY1RDkwQTYxOTFGNDlEMkYyQzhFQTNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzJBMjRCRTVEQzdBRkY5RjVE OTBBNjE5MUY0OUQyRjJDOEVBM0E4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFDM0IxQjE5OEZBRTQwNkQzNTc5OTMyRjNDMTEwRURFNjhDQkM5RDcx NEVDOTEwNUVGM0NFM0NCRERFQTczMS8wLzBDMkEyNEJFNURDN0FGRjlGNUQ5MEE2 MTkxRjQ5RDJGMkM4RUEzQTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKcSUKwqOmaFyd0OusX9q6dK0N vbRSVwgdxPoNEFCaXEbDsEFQnANu4LHg/g5WCGf4baKreifbOhTyYgyr4IlAeSlG 5a5ZpVCLfY3ftrdUe9mDN2FuEcfH4TBlkd3SyBiLe3BaszgdSWWX7e90uEtFcnLm xHuJHQnYwcZM2mnMhsDzsUB0Jj4jiLIwmOJbI2o6GuGZBoN/LEnS1qwbWb1jmJl8 wxztJ/J7poK4aYydgg23/yLNPOFdsE4It12k9BN5LqjWP2YAbR+u7syKZlYrIyHM JGDNi44/1l0eIHIT+X4qYMX5ghzpB+pKa/s5+RFOfFDtr4dArqEWgVvADFuR -----END CERTIFICATE-----Generated at Mon Oct 20 05:44:37 2025 by rpki-client