$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft File: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft (raw, json) Hash identifier: 9WCfS7/rOafl5wzGUalodOrub3GPDG+11RBkwc9YV4g= Subject key identifier: DE:4D:ED:AE:7F:39:B2:F0:98:81:47:76:A0:A8:09:9D:08:39:5B:AF Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70 Certificate issuer: /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70 Certificate serial: 40CD1EC1FEB252FD3457C8DABB8F6EBACA5055CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft Manifest number: 0122 Signing time: Sun 19 Oct 2025 19:18:28 +0000 Manifest this update: Sun 19 Oct 2025 19:13:28 +0000 Manifest next update: Sat 25 Oct 2025 08:26:28 +0000 Files and hashes: 1: 323830333a356439303a3a2f33322d3536203d3e20323733303030.roa (hash: 0OoP3A238IuGlM9478CrBEi+3xgJKgMmBk2U8Rug3mA=) 2: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl (hash: nc4tX23CdB76eRAuYrgjereNgH63NqpwEadnYbS3G7E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cd:1e:c1:fe:b2:52:fd:34:57:c8:da:bb:8f:6e:ba:ca:50:55:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70 Validity Not Before: Oct 19 19:13:28 2025 GMT Not After : Oct 25 08:26:28 2025 GMT Subject: CN=DE4DEDAE7F39B2F098814776A0A8099D08395BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:89:ea:b3:ea:c4:66:56:0d:7d:08:ba:23: 6f:94:f5:a9:2c:0d:a8:10:61:39:b7:b5:3e:31:6d: c5:73:02:cf:eb:58:d2:11:72:1a:f7:23:7d:55:73: e7:cc:23:21:e5:fc:a5:f4:a4:75:5d:5d:d7:61:96: 41:be:f2:4e:a2:da:02:a5:22:7f:6e:52:05:2f:1d: 5a:01:a8:2d:5d:05:3d:5a:4d:90:fc:94:2e:5c:89: ad:04:33:5a:88:26:65:28:a7:7b:24:cd:20:10:12: 3e:24:78:0f:37:63:bf:b5:62:b9:46:10:b9:0b:e1: 88:86:89:46:7c:1d:4b:99:ff:00:2d:fe:d2:fc:9b: a3:d8:86:5d:2e:94:83:84:62:5c:8e:75:ac:36:1c: 2b:37:67:3d:c8:bc:47:3a:4f:a5:dc:00:c6:69:85: dd:8e:15:44:3f:fc:b3:d7:bc:7d:cd:8e:e5:64:4a: 50:c0:27:3c:e8:02:7d:cc:47:22:da:1a:e1:ef:62: 96:c2:1f:c1:ff:39:c5:c3:57:b2:16:0b:38:59:b1: e2:ee:d2:01:43:43:c6:d4:2e:2a:0c:45:88:ff:93: f5:53:3c:76:62:59:5f:03:f0:18:c5:21:bc:43:25: 4b:81:ee:96:cb:9c:74:9a:42:3a:ed:64:84:57:0b: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4D:ED:AE:7F:39:B2:F0:98:81:47:76:A0:A8:09:9D:08:39:5B:AF X509v3 Authority Key Identifier: keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e2:df:39:1c:16:62:3b:05:be:08:11:a2:5e:be:66:39:c1: f0:3f:df:75:60:c1:36:19:f8:0a:e2:35:92:79:3e:17:e0:e0: 92:95:b6:56:c7:af:b1:58:6f:b8:2e:a9:13:9a:6e:1e:5c:02: 31:b3:37:82:51:a3:fb:a2:da:21:5b:d5:4c:95:bf:14:fa:8c: 2b:d8:d7:d3:a1:15:42:00:2f:bb:63:47:26:1c:4d:d6:c0:a0: a8:cb:83:d4:db:40:8f:6d:02:6c:ae:c4:b4:8c:c2:93:b3:66: 71:78:bb:3f:1c:1d:dc:e2:04:e8:7b:cb:dd:4d:b3:c3:8e:c0: 01:b2:75:54:70:0d:fb:8a:ae:bc:34:0b:dd:be:0a:86:ff:9e: b1:4e:10:04:2c:a8:ef:f0:4e:b5:1a:93:bc:1a:3a:04:3c:c6: e8:05:bd:d1:ea:a2:0c:d9:34:03:1e:ea:fa:da:a4:e6:77:25: 02:dc:1f:88:e2:93:66:a7:45:fd:77:48:16:86:fb:a5:ef:11: e8:a7:7e:29:c1:63:33:f7:97:1f:73:ae:a8:7a:86:b8:1d:e6: c0:16:9c:a8:23:b0:12:77:e1:f4:a9:f6:22:4e:a5:a1:ea:67: ae:82:09:9e:6b:64:01:a2:0c:b4:5b:0f:2e:2c:84:a7:05:94: 75:35:af:a2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQM0ewf6yUv00V8jau49uuspQVc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQzMkM1MEZFQkI2RkI1N0Q4QUM0RUQ0QzA1REYyMEM4 OUZFNkQ3MDAeFw0yNTEwMTkxOTEzMjhaFw0yNTEwMjUwODI2MjhaMDMxMTAvBgNV BAMTKERFNERFREFFN0YzOUIyRjA5ODgxNDc3NkEwQTgwOTlEMDgzOTVCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Tonqs+rEZlYNfQi6I2+U9aks DagQYTm3tT4xbcVzAs/rWNIRchr3I31Vc+fMIyHl/KX0pHVdXddhlkG+8k6i2gKl In9uUgUvHVoBqC1dBT1aTZD8lC5cia0EM1qIJmUop3skzSAQEj4keA83Y7+1YrlG ELkL4YiGiUZ8HUuZ/wAt/tL8m6PYhl0ulIOEYlyOdaw2HCs3Zz3IvEc6T6XcAMZp hd2OFUQ//LPXvH3NjuVkSlDAJzzoAn3MRyLaGuHvYpbCH8H/OcXDV7IWCzhZseLu 0gFDQ8bULioMRYj/k/VTPHZiWV8D8BjFIbxDJUuB7pbLnHSaQjrtZIRXC6BlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3k3trn85svCYgUd2oKgJnQg5W68wHwYDVR0j BBgwFoAUNDLFD+u2+1fYrE7UwF3yDIn+bXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDVCRDY2NDkyNEZBNTdENTNDNTIzMEVDRkU0N0ZENDgz RkQyMEI5QjQ4QjcxRkJCN0E3Mzk1MzFFREQ4OEZCLzAvMzQzMkM1MEZFQkI2RkI1 N0Q4QUM0RUQ0QzA1REYyMEM4OUZFNkQ3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDMyQzUwRkVCQjZGQjU3RDhB QzRFRDRDMDVERjIwQzg5RkU2RDcwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ1QkQ2NjQ5MjRGQTU3RDUzQzUyMzBFQ0ZFNDdGRDQ4M0ZEMjBCOUI0 OEI3MUZCQjdBNzM5NTMxRUREODhGQi8wLzM0MzJDNTBGRUJCNkZCNTdEOEFDNEVE NEMwNURGMjBDODlGRTZENzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBa4t85HBZiOwW+CBGiXr5mOcHw P991YME2GfgK4jWSeT4X4OCSlbZWx6+xWG+4LqkTmm4eXAIxszeCUaP7otohW9VM lb8U+owr2NfToRVCAC+7Y0cmHE3WwKCoy4PU20CPbQJsrsS0jMKTs2ZxeLs/HB3c 4gToe8vdTbPDjsABsnVUcA37iq68NAvdvgqG/56xThAELKjv8E61GpO8GjoEPMbo Bb3R6qIM2TQDHur62qTmdyUC3B+I4pNmp0X9d0gWhvul7xHop34pwWMz95cfc66o eoa4HebAFpyoI7ASd+H0qfYiTqWh6meuggmea2QBogy0Ww8uLISnBZR1Na+i -----END CERTIFICATE-----Generated at Mon Oct 20 16:34:24 2025 by rpki-client