$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft File: 0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft (raw, json) Hash identifier: guQHPzvaRuAdrSAMDvvNKw70D4TOaN3Gms2/K81PXyg= Subject key identifier: 3D:C0:9D:77:10:68:00:9B:9C:51:83:E3:D8:3C:AE:B7:5F:CB:8F:09 Authority key identifier: 0F:FB:8C:67:99:F6:5C:48:77:26:44:EC:CE:80:00:CD:E4:E1:A1:B1 Certificate issuer: /CN=0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1 Certificate serial: 67D0C33D42CB3484A6A21AD8F89C9DED0E51D9D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft Manifest number: 0B Signing time: Mon 20 Oct 2025 04:14:23 +0000 Manifest this update: Mon 20 Oct 2025 04:09:23 +0000 Manifest next update: Sat 25 Oct 2025 07:56:23 +0000 Files and hashes: 1: 0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl (hash: RbqKsrnB3/rAIUhjcjGCdfKIxkviNT0grXxhONPDpt4=) 2: 3136382e3139362e322e302f32342d3234203d3e20323731393937.roa (hash: eViKMYzFbWwcU4GJlxhAgTzLF7e6JgX3P46RBwAHkPk=) 3: 3138312e3233322e3134382e302f32322d3234203d3e20323731393937.roa (hash: Ptt8Q+1ct900Z9LOHQgZeg239Q+jbA4Rn+q8WijezIM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d0:c3:3d:42:cb:34:84:a6:a2:1a:d8:f8:9c:9d:ed:0e:51:d9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1 Validity Not Before: Oct 20 04:09:23 2025 GMT Not After : Oct 25 07:56:23 2025 GMT Subject: CN=3DC09D771068009B9C5183E3D83CAEB75FCB8F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:20:94:4d:6b:fc:b8:ae:58:cd:8f:8e:89: 77:10:4f:cf:e4:82:76:a0:22:71:b6:29:c8:0b:b1: 2e:5b:92:29:cb:10:0a:c8:b0:43:2c:5a:88:8d:48: fc:a0:32:af:f7:15:29:4d:f4:19:4c:2d:67:c0:0f: ec:35:56:26:a1:1b:30:5b:5a:06:a0:b4:17:0c:51: f8:a9:74:6c:04:65:6c:8e:1b:11:f6:de:92:11:c5: b3:87:b6:51:c8:84:94:69:4d:8a:1a:ee:f9:18:f5: a1:2c:bb:33:15:5a:25:9e:96:ae:56:bd:87:f4:c4: e2:5a:8c:2e:d3:e1:39:df:6e:90:8e:b0:cc:db:1c: 6f:e5:92:aa:33:cd:aa:22:62:90:52:0c:b8:23:30: b5:4e:a9:dd:9c:2e:d7:2a:12:d1:d4:0c:b2:5b:1c: be:cc:71:87:ba:f4:94:02:ad:4f:37:68:60:55:61: 54:ab:7e:e7:7a:81:df:d7:be:73:1f:83:74:9b:89: 2c:bd:8a:12:e8:92:bf:ad:fd:90:76:49:bc:4d:96: bf:8f:18:a0:b0:43:27:fb:77:ef:ef:fa:35:c7:5b: d9:2b:66:88:f4:29:a1:86:7f:b8:3e:c1:85:a1:4e: 0a:33:c5:c3:0e:ba:1d:00:62:12:0e:79:4a:a4:bd: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C0:9D:77:10:68:00:9B:9C:51:83:E3:D8:3C:AE:B7:5F:CB:8F:09 X509v3 Authority Key Identifier: keyid:0F:FB:8C:67:99:F6:5C:48:77:26:44:EC:CE:80:00:CD:E4:E1:A1:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:68:42:7b:5d:98:d9:43:86:e4:58:07:e2:de:ec:5c:d5:60: 5c:5c:c8:7c:b4:99:9d:57:07:e2:9b:89:e6:09:d9:eb:55:29: 09:f2:6c:8b:32:24:9b:47:96:38:41:a9:0b:63:46:bf:43:94: d6:13:e1:36:c3:b5:46:65:52:42:77:f0:b5:bf:d6:e5:dc:78: 11:a0:2f:46:08:13:ac:92:bc:52:75:70:5c:6d:25:52:ae:75: 9a:f7:84:71:0c:51:f6:cc:3a:df:54:5a:60:e1:ad:fb:e7:8e: 5d:18:8a:65:50:77:ba:2a:21:36:d1:a2:4a:dd:70:80:9e:ae: 70:7a:e8:9a:68:c1:f0:f4:32:0a:1b:47:75:79:7e:a7:78:52: 05:57:c0:71:be:a8:22:32:19:45:a4:37:81:e2:e1:00:7b:a8: 00:9a:f5:cb:7e:fc:c2:a9:fc:93:09:bd:6a:61:ec:b7:47:a7: dc:b2:0f:7c:4d:47:40:17:c4:00:2d:91:c3:ef:95:99:5f:82: 38:ac:fa:b5:c7:99:e1:71:e0:a6:79:a2:d8:d2:35:f9:af:96: 93:7a:65:65:eb:b1:3f:f2:1a:76:18:4b:8b:2d:2d:30:a5:ed: d7:83:e6:a7:30:8d:7f:6c:d4:d9:1e:39:99:53:b9:3f:84:5b: 6d:5b:e9:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZ9DDPULLNISmohrY+Jyd7Q5R2dQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGQjhDNjc5OUY2NUM0ODc3MjY0NEVDQ0U4MDAwQ0RF NEUxQTFCMTAeFw0yNTEwMjAwNDA5MjNaFw0yNTEwMjUwNzU2MjNaMDMxMTAvBgNV BAMTKDNEQzA5RDc3MTA2ODAwOUI5QzUxODNFM0Q4M0NBRUI3NUZDQjhGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUZyCUTWv8uK5YzY+OiXcQT8/k gnagInG2KcgLsS5bkinLEArIsEMsWoiNSPygMq/3FSlN9BlMLWfAD+w1ViahGzBb WgagtBcMUfipdGwEZWyOGxH23pIRxbOHtlHIhJRpTYoa7vkY9aEsuzMVWiWelq5W vYf0xOJajC7T4TnfbpCOsMzbHG/lkqozzaoiYpBSDLgjMLVOqd2cLtcqEtHUDLJb HL7McYe69JQCrU83aGBVYVSrfud6gd/XvnMfg3SbiSy9ihLokr+t/ZB2SbxNlr+P GKCwQyf7d+/v+jXHW9krZoj0KaGGf7g+wYWhTgozxcMOuh0AYhIOeUqkvX1jAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPcCddxBoAJucUYPj2Dyut1/LjwkwHwYDVR0j BBgwFoAUD/uMZ5n2XEh3JkTszoAAzeThobEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QkM4N0U2NkE5RDMxNDFGOUUwQjkzNUE3NzU3NDU0Q0I3 RENEMzE2NzFCOTY3Njg2QTJENzJFNzhENkUxM0Q0LzAvMEZGQjhDNjc5OUY2NUM0 ODc3MjY0NEVDQ0U4MDAwQ0RFNEUxQTFCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkZCOEM2Nzk5RjY1QzQ4Nzcy NjQ0RUNDRTgwMDBDREU0RTFBMUIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUJDODdFNjZBOUQzMTQxRjlFMEI5MzVBNzc1NzQ1NENCN0RDRDMxNjcx Qjk2NzY4NkEyRDcyRTc4RDZFMTNENC8wLzBGRkI4QzY3OTlGNjVDNDg3NzI2NDRF Q0NFODAwMENERTRFMUExQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCraEJ7XZjZQ4bkWAfi3uxc1WBc XMh8tJmdVwfim4nmCdnrVSkJ8myLMiSbR5Y4QakLY0a/Q5TWE+E2w7VGZVJCd/C1 v9bl3HgRoC9GCBOskrxSdXBcbSVSrnWa94RxDFH2zDrfVFpg4a37545dGIplUHe6 KiE20aJK3XCAnq5weuiaaMHw9DIKG0d1eX6neFIFV8BxvqgiMhlFpDeB4uEAe6gA mvXLfvzCqfyTCb1qYey3R6fcsg98TUdAF8QALZHD75WZX4I4rPq1x5nhceCmeaLY 0jX5r5aTemVl67E/8hp2GEuLLS0wpe3Xg+anMI1/bNTZHjmZU7k/hFttW+mp -----END CERTIFICATE-----Generated at Mon Oct 20 16:29:31 2025 by rpki-client