$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.mft File: FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.mft (raw, json) Hash identifier: VJjVHVqAoRwdgErTdA+TH591V2AkB3eE5dONJ69VvNE= Subject key identifier: 5C:73:5A:EC:7F:80:FA:47:6F:4E:E5:9E:52:A7:B6:21:09:51:A5:A7 Authority key identifier: FA:1E:2E:36:DC:AD:6B:ED:1E:F7:07:63:BB:B1:D1:C1:9E:8E:95:77 Certificate issuer: /CN=FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577 Certificate serial: 3FA89ED6F347A1DA91E30DBEABE43CA9C2A10547 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.mft Manifest number: 0126 Signing time: Mon 20 Oct 2025 13:15:16 +0000 Manifest this update: Mon 20 Oct 2025 13:10:16 +0000 Manifest next update: Fri 24 Oct 2025 20:55:16 +0000 Files and hashes: 1: 3230302e31362e39352e302f32342d3234203d3e20323632313736.roa (hash: VgcMBrI8cxjAh4e8pu2WPxQdrhBqmiiPpwZoHmPWSJY=) 2: FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.crl (hash: AM8sh2O0HG/WJvL7WcqB01cp0QTV1XPpgHSSa3ZOkU0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.crl rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a8:9e:d6:f3:47:a1:da:91:e3:0d:be:ab:e4:3c:a9:c2:a1:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577 Validity Not Before: Oct 20 13:10:16 2025 GMT Not After : Oct 24 20:55:16 2025 GMT Subject: CN=5C735AEC7F80FA476F4EE59E52A7B6210951A5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:41:98:c2:30:7c:0c:9d:42:7e:3b:d7:07: ba:91:8e:9c:58:be:80:fd:3a:a4:98:59:8e:8b:2e: 08:b9:43:4a:27:fa:99:61:41:09:02:b5:ac:b4:a8: 2a:83:a4:eb:c9:af:0b:72:b8:80:2e:26:4d:2a:5d: 8e:37:42:7f:0a:b4:1f:e3:33:b1:5e:69:84:70:1c: bb:c4:16:ba:04:0b:e1:81:cd:ec:2b:3b:98:42:53: 83:f0:a3:27:a1:81:63:83:3b:32:1f:89:18:34:0c: 98:28:42:b3:fd:2c:2e:74:25:db:ae:b6:ff:8e:5f: ba:65:5c:18:7d:ff:c9:e5:22:dd:cb:b7:e8:96:d5: 42:5f:75:3b:66:0c:90:d2:de:15:19:82:bc:c4:5f: da:1d:9e:31:9f:df:c4:2b:f6:e4:9f:43:c0:7e:c3: 4a:79:4e:3b:eb:0c:0f:ea:e9:76:32:0f:22:e0:82: d4:01:6a:04:c5:af:50:a2:88:b7:f5:61:4f:d3:df: f9:e0:90:e3:20:2d:29:58:70:5b:6f:c8:0d:a8:a5: 30:ed:6a:a5:f0:e4:30:13:d6:23:91:ef:55:07:71: 28:c4:82:7d:54:23:ce:4d:4b:a2:f8:36:5c:97:e1: c6:d2:11:38:c9:96:d7:a9:92:16:6d:46:9e:c1:05: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:73:5A:EC:7F:80:FA:47:6F:4E:E5:9E:52:A7:B6:21:09:51:A5:A7 X509v3 Authority Key Identifier: keyid:FA:1E:2E:36:DC:AD:6B:ED:1E:F7:07:63:BB:B1:D1:C1:9E:8E:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d1:80:36:89:a1:66:89:07:08:2f:b6:20:fb:1c:b8:99:06: 09:2d:38:5b:d0:96:84:4b:10:61:e7:d6:a9:e6:19:5b:2f:0c: 3d:86:bd:e3:70:7a:4e:98:24:e6:d1:b7:78:82:be:eb:0a:58: 42:16:9f:18:e6:8a:93:71:0d:6c:36:7c:1f:b2:36:f2:c4:48: bf:37:54:9f:09:26:98:c8:aa:f8:b3:5c:a1:9f:93:2d:80:f5: e6:26:b8:77:3b:d6:d2:79:b8:4b:69:0b:6f:a1:3b:1b:c6:b2: 2d:0c:1b:39:7b:55:6a:5b:32:fb:3c:f2:61:dc:a3:ba:1d:24: da:ac:13:2b:fe:c2:9d:e6:f8:9a:76:4c:69:56:55:1f:82:58: d3:22:2c:db:75:ab:3a:5a:75:81:2f:b3:3e:ef:16:91:6a:6e: 8e:07:21:d9:b8:77:77:bd:1e:da:08:ca:6b:6c:17:5a:c0:d5: 1d:9b:e1:ff:87:81:23:65:70:04:01:aa:fa:9d:6b:14:e5:2f: 28:2a:57:ed:9b:07:91:fc:dd:4f:32:df:7c:13:0a:18:bf:81: 1a:6a:48:08:55:81:e2:36:b4:5f:f9:6f:87:38:31:df:4d:4a: b6:f3:cc:dc:b2:b0:3e:15:4e:fd:11:77:19:bc:dd:b3:86:61: fd:89:43:1d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUP6ie1vNHodqR4w2+q+Q8qcKhBUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkExRTJFMzZEQ0FENkJFRDFFRjcwNzYzQkJCMUQxQzE5 RThFOTU3NzAeFw0yNTEwMjAxMzEwMTZaFw0yNTEwMjQyMDU1MTZaMDMxMTAvBgNV BAMTKDVDNzM1QUVDN0Y4MEZBNDc2RjRFRTU5RTUyQTdCNjIxMDk1MUE1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4EGYwjB8DJ1CfjvXB7qRjpxY voD9OqSYWY6LLgi5Q0on+plhQQkCtay0qCqDpOvJrwtyuIAuJk0qXY43Qn8KtB/j M7FeaYRwHLvEFroEC+GBzewrO5hCU4PwoyehgWODOzIfiRg0DJgoQrP9LC50Jduu tv+OX7plXBh9/8nlIt3Lt+iW1UJfdTtmDJDS3hUZgrzEX9odnjGf38Qr9uSfQ8B+ w0p5TjvrDA/q6XYyDyLggtQBagTFr1CiiLf1YU/T3/ngkOMgLSlYcFtvyA2opTDt aqXw5DAT1iOR71UHcSjEgn1UI85NS6L4NlyX4cbSETjJltepkhZtRp7BBQ9DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXHNa7H+A+kdvTuWeUqe2IQlRpacwHwYDVR0j BBgwFoAU+h4uNtyta+0e9wdju7HRwZ6OlXcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NDQ4NTdDNjYyMDQ0RDM4RUIxNTU3RDY0NjhCQzM5MERG ODI4NDBFQ0FGODMxRjY1QUQzM0ZDNUU1RTAzRkE2LzAvRkExRTJFMzZEQ0FENkJF RDFFRjcwNzYzQkJCMUQxQzE5RThFOTU3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQTFFMkUzNkRDQUQ2QkVEMUVG NzA3NjNCQkIxRDFDMTlFOEU5NTc3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjQ0ODU3QzY2MjA0NEQzOEVCMTU1N0Q2NDY4QkMzOTBERjgyODQwRUNB RjgzMUY2NUFEMzNGQzVFNUUwM0ZBNi8wL0ZBMUUyRTM2RENBRDZCRUQxRUY3MDc2 M0JCQjFEMUMxOUU4RTk1NzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBd0YA2iaFmiQcIL7Yg+xy4mQYJ LThb0JaESxBh59ap5hlbLww9hr3jcHpOmCTm0bd4gr7rClhCFp8Y5oqTcQ1sNnwf sjbyxEi/N1SfCSaYyKr4s1yhn5MtgPXmJrh3O9bSebhLaQtvoTsbxrItDBs5e1Vq WzL7PPJh3KO6HSTarBMr/sKd5viadkxpVlUfgljTIizbdas6WnWBL7M+7xaRam6O ByHZuHd3vR7aCMprbBdawNUdm+H/h4EjZXAEAar6nWsU5S8oKlftmweR/N1PMt98 EwoYv4EaakgIVYHiNrRf+W+HODHfTUq288zcsrA+FU79EXcZvN2zhmH9iUMd -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:17 2025 by rpki-client