$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.mft File: 7240E3F32D08F233B6A11CDF0B1A245738B622B1.mft (raw, json) Hash identifier: JGzEdFXW0HF/U3WPEVmBMgvRXnkrtuOH69ykHyJ2RQs= Subject key identifier: 5E:5F:7C:C9:FB:90:67:C5:04:DE:33:EB:FF:9D:BE:E8:DB:21:FE:73 Authority key identifier: 72:40:E3:F3:2D:08:F2:33:B6:A1:1C:DF:0B:1A:24:57:38:B6:22:B1 Certificate issuer: /CN=7240E3F32D08F233B6A11CDF0B1A245738B622B1 Certificate serial: 5A3E6B81C197DB2BB8B2CFAB7DFF13D532CEC4D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.mft Manifest number: 012C Signing time: Sun 19 Oct 2025 04:53:42 +0000 Manifest this update: Sun 19 Oct 2025 04:48:42 +0000 Manifest next update: Fri 24 Oct 2025 07:31:42 +0000 Files and hashes: 1: 323830333a623461303a3a2f33322d3332203d3e20323636383239.roa (hash: 1/IRhoiEzT3OWCVxQ8BPGFBfaxFbtfKRYiznky80Msg=) 2: 7240E3F32D08F233B6A11CDF0B1A245738B622B1.crl (hash: uv4WE9nNCnTfPeFNh1xXwfwMj1V/aFC5SdDg8Wh6cvM=) 3: 34352e3233382e35322e302f32322d3234203d3e20323636383239.roa (hash: n55WVPOzLyrv02VIAjaGLZL53d6XX06Ifhvo75Bgf1I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.crl rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3e:6b:81:c1:97:db:2b:b8:b2:cf:ab:7d:ff:13:d5:32:ce:c4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7240E3F32D08F233B6A11CDF0B1A245738B622B1 Validity Not Before: Oct 19 04:48:42 2025 GMT Not After : Oct 24 07:31:42 2025 GMT Subject: CN=5E5F7CC9FB9067C504DE33EBFF9DBEE8DB21FE73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c9:0c:34:d2:6c:bc:1e:b0:ca:2a:40:16:16: ef:ef:03:2a:5f:ec:7d:ee:7c:b1:4f:0e:64:d1:86: b3:c7:15:fb:84:17:07:29:8a:f3:b6:dd:7c:5c:85: 83:86:00:33:03:69:4d:84:56:6f:48:82:94:2e:ac: 46:14:ff:d1:b4:1d:5d:de:66:3b:ed:30:c0:82:e4: 75:5c:92:34:4c:e4:d9:e0:2a:20:3f:9c:26:f5:4a: 5c:11:d0:62:cd:33:e3:8e:b5:f9:b8:09:bb:fa:e7: d8:c2:b4:9d:b8:29:3a:aa:94:c2:0e:87:ce:fc:78: 4c:14:ef:c7:11:43:a2:da:41:8b:0f:72:84:95:56: 0e:c0:61:cc:54:cd:72:08:03:f1:70:f9:e3:35:d3: 85:97:66:34:6c:68:97:ef:a4:1c:1f:2f:b0:07:67: 23:44:dc:fc:9d:44:a5:ac:35:b8:ae:e5:88:c5:6a: b1:51:05:b3:52:c0:39:8e:96:c8:0f:4f:78:97:99: e8:2f:15:73:9e:f2:4b:2d:a2:e4:a6:70:6c:3f:82: d6:55:89:56:35:53:72:34:36:64:72:d0:0d:f3:71: 0d:55:4d:da:13:19:be:a2:c2:72:6c:da:c1:62:b9: 0d:db:2d:1e:85:10:99:0f:01:4b:85:29:e0:a7:32: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5F:7C:C9:FB:90:67:C5:04:DE:33:EB:FF:9D:BE:E8:DB:21:FE:73 X509v3 Authority Key Identifier: keyid:72:40:E3:F3:2D:08:F2:33:B6:A1:1C:DF:0B:1A:24:57:38:B6:22:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7a:71:16:b2:b2:15:52:54:66:5b:60:fb:37:ee:cc:a2:c5: ae:65:bb:33:c2:f4:27:e4:c4:bc:e8:16:85:47:43:df:b0:d8: 3b:f8:e2:f4:eb:59:ae:dd:6e:64:fa:43:73:e5:70:3f:66:62: af:1b:64:4c:08:c1:ab:be:ed:95:4b:8c:ed:cf:bf:80:62:5d: df:fb:27:e9:0f:90:51:16:86:86:94:c5:ce:89:87:be:9a:82: 5b:0f:ac:94:75:b7:1e:26:30:0c:1c:d0:89:9c:33:73:5f:c1: 87:d4:eb:46:91:4a:f5:b7:7f:13:e7:4d:d6:32:de:d1:54:66: 7b:fb:95:cd:33:f8:ca:4b:d3:7b:e1:29:02:66:9c:d2:79:cc: e8:af:72:37:f0:c5:d5:c4:66:97:52:13:4b:e2:d3:f0:b9:7d: de:f3:63:af:dc:a3:10:aa:eb:49:5f:7e:66:53:da:6b:49:e4: 25:d6:1d:c8:c0:61:57:0d:bd:f1:9f:38:de:00:b1:69:9c:83: 60:b2:f5:7f:a0:fa:9c:53:41:34:f7:98:1d:0b:22:d6:b4:a2: d7:f9:55:f4:e8:90:f1:ad:0f:68:b0:39:96:54:40:ff:8e:35: 59:1c:6a:57:40:03:22:22:68:58:15:e2:31:fe:d5:93:6e:40: cc:9f:e0:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWj5rgcGX2yu4ss+rff8T1TLOxNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0MEUzRjMyRDA4RjIzM0I2QTExQ0RGMEIxQTI0NTcz OEI2MjJCMTAeFw0yNTEwMTkwNDQ4NDJaFw0yNTEwMjQwNzMxNDJaMDMxMTAvBgNV BAMTKDVFNUY3Q0M5RkI5MDY3QzUwNERFMzNFQkZGOURCRUU4REIyMUZFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOyQw00my8HrDKKkAWFu/vAypf 7H3ufLFPDmTRhrPHFfuEFwcpivO23XxchYOGADMDaU2EVm9IgpQurEYU/9G0HV3e ZjvtMMCC5HVckjRM5NngKiA/nCb1SlwR0GLNM+OOtfm4Cbv659jCtJ24KTqqlMIO h878eEwU78cRQ6LaQYsPcoSVVg7AYcxUzXIIA/Fw+eM104WXZjRsaJfvpBwfL7AH ZyNE3PydRKWsNbiu5YjFarFRBbNSwDmOlsgPT3iXmegvFXOe8kstouSmcGw/gtZV iVY1U3I0NmRy0A3zcQ1VTdoTGb6iwnJs2sFiuQ3bLR6FEJkPAUuFKeCnMgS9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXl98yfuQZ8UE3jPr/52+6Nsh/nMwHwYDVR0j BBgwFoAUckDj8y0I8jO2oRzfCxokVzi2IrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NjFFQTVFRUVBN0JDQzY2RjUyNEZDRUVBMzMyQ0I1OERC NjQxODcxRDBGMDQyMzY3QzEyQjA3QzRDQjkxNTMyLzAvNzI0MEUzRjMyRDA4RjIz M0I2QTExQ0RGMEIxQTI0NTczOEI2MjJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjQwRTNGMzJEMDhGMjMzQjZB MTFDREYwQjFBMjQ1NzM4QjYyMkIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTYxRUE1RUVFQTdCQ0M2NkY1MjRGQ0VFQTMzMkNCNThEQjY0MTg3MUQw RjA0MjM2N0MxMkIwN0M0Q0I5MTUzMi8wLzcyNDBFM0YzMkQwOEYyMzNCNkExMUNE RjBCMUEyNDU3MzhCNjIyQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaenEWsrIVUlRmW2D7N+7MosWu ZbszwvQn5MS86BaFR0PfsNg7+OL061mu3W5k+kNz5XA/ZmKvG2RMCMGrvu2VS4zt z7+AYl3f+yfpD5BRFoaGlMXOiYe+moJbD6yUdbceJjAMHNCJnDNzX8GH1OtGkUr1 t38T503WMt7RVGZ7+5XNM/jKS9N74SkCZpzSeczor3I38MXVxGaXUhNL4tPwuX3e 82Ov3KMQqutJX35mU9prSeQl1h3IwGFXDb3xnzjeALFpnINgsvV/oPqcU0E095gd CyLWtKLX+VX06JDxrQ9osDmWVED/jjVZHGpXQAMiImhYFeIx/tWTbkDMn+AA -----END CERTIFICATE-----Generated at Mon Oct 20 14:12:17 2025 by rpki-client