$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft File: 34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft (raw, json) Hash identifier: 4LeGJs1h+hkz+A3UczlBUPhpL+OwzYstmZGbOYD17hc= Subject key identifier: CC:B0:B8:8D:6E:1C:07:CB:BB:D8:86:75:07:A0:39:EF:38:11:60:C7 Authority key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F Certificate issuer: /CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F Certificate serial: 33FAE381CB421B5E9EB7F862BBBB198AEBB0E6C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 04:23:24 +0000 Manifest this update: Sun 19 Oct 2025 04:18:24 +0000 Manifest next update: Thu 23 Oct 2025 23:08:24 +0000 Files and hashes: 1: 34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl (hash: C969v7BhkBQWVFirzaAMAP5TCrLB9l3RVJ2QdhUTAQ4=) 2: 34352e3136392e35322e302f32332d3234203d3e20323637373431.roa (hash: qEXkM3i7WGxvYoj6lFwEff6rSjSJEJPyZNfPJNHC/Ps=) 3: 323830333a396461303a3a2f33322d3438203d3e20323637373431.roa (hash: 5hhz7mH4wZxsvbakAIux+mtst4Y1wFSDr73ZBg2ZFlM=) 4: 34352e3136382e38302e302f32342d3234203d3e20323637373431.roa (hash: UbAEkb66nwzNJ3z2NipGB35Z4vefZvUuF7o4gu2ViZc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 23:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fa:e3:81:cb:42:1b:5e:9e:b7:f8:62:bb:bb:19:8a:eb:b0:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F Validity Not Before: Oct 19 04:18:24 2025 GMT Not After : Oct 23 23:08:24 2025 GMT Subject: CN=CCB0B88D6E1C07CBBBD8867507A039EF381160C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:cf:a9:f3:1a:ff:8a:43:e3:90:56:24:af: 15:e4:f4:db:d2:ea:85:13:2c:80:e2:58:da:18:48: 21:97:f2:97:ec:8f:23:70:f3:8c:d2:86:e6:bb:be: 79:d9:b4:58:06:9d:e2:51:ad:bf:3e:22:5c:dd:2b: 51:e6:26:1f:1f:91:41:90:42:4d:0e:79:39:60:b4: 3a:52:4d:c3:be:9c:66:25:57:07:2f:c9:3d:30:02: cb:21:04:e9:ee:c7:04:d3:e3:ec:46:ee:cc:32:f2: 71:90:a6:88:b2:88:c8:34:5a:21:f8:27:8c:13:a2: 3f:2a:74:f9:a4:db:a2:8e:e6:96:e7:21:8d:73:f3: bc:d8:e2:e8:61:32:8f:0c:13:c2:c1:bb:8e:4e:34: 2b:49:ae:52:40:a6:b7:5c:f1:48:5b:e7:69:90:73: 7a:90:70:89:59:ec:3a:d4:91:a0:40:fe:fd:b5:37: 14:87:ce:de:00:4a:3d:cb:04:34:17:4e:42:fd:7c: 41:25:5c:04:fd:0d:35:d7:eb:9a:18:6b:a5:6f:79: 54:34:18:ba:fc:6c:0d:d6:0c:43:92:14:8d:aa:ab: 6a:34:ea:d9:0e:02:89:78:07:bd:e8:ff:c5:b8:af: 86:5c:87:a5:f7:9c:47:43:b8:a1:6a:05:6c:53:6b: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:B8:8D:6E:1C:07:CB:BB:D8:86:75:07:A0:39:EF:38:11:60:C7 X509v3 Authority Key Identifier: keyid:34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7f:8e:27:cc:11:07:dd:0f:e2:33:d0:54:71:b1:3f:87:f7: 3c:43:42:7a:f1:1b:4f:79:50:26:4b:7f:8e:b5:12:8a:f9:4a: b0:da:3d:f8:b3:59:74:dc:ac:a1:b5:7e:19:12:73:e4:58:32: 15:49:69:e3:23:39:22:8d:5f:db:06:e1:2e:5b:31:e5:bb:d1: 9c:e2:03:a3:26:4a:c5:fe:b1:c1:db:91:25:50:a3:43:17:7f: f6:84:a3:44:fe:10:69:d9:2d:ff:ec:5f:f1:ff:a5:0a:fe:15: a1:ff:bc:4a:56:1e:23:60:71:96:56:12:f9:c1:81:b5:2b:14: 52:6f:42:1b:33:d7:7d:71:d6:77:69:04:fa:6e:9f:90:a5:6f: 23:9e:9c:17:2d:12:fc:fb:ef:93:65:eb:bb:e7:af:19:fd:eb: 40:19:10:da:d4:f1:0c:d2:27:3d:f3:57:f9:ca:4d:e8:b8:d2: 66:31:25:4b:5f:9f:e8:cb:e2:31:42:9b:6d:2d:a7:fa:e7:ad: 72:5e:f7:a3:fc:56:7b:f1:9d:3b:a5:29:a7:95:06:8d:8e:6b: 24:72:3c:ea:c4:2b:96:52:f4:cc:7f:9c:d4:2a:bb:b6:95:19: 93:5f:39:40:76:0f:5c:db:f9:f4:f2:b2:ff:d5:76:eb:27:e8: 38:48:78:16 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUM/rjgctCG16et/hiu7sZiuuw5sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBMzVFOEJCQkUxNzZGMzVFQTZGRDBEQkY1NDZFQUY2 RUI4QTM4RjAeFw0yNTEwMTkwNDE4MjRaFw0yNTEwMjMyMzA4MjRaMDMxMTAvBgNV BAMTKENDQjBCODhENkUxQzA3Q0JCQkQ4ODY3NTA3QTAzOUVGMzgxMTYwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cs+p8xr/ikPjkFYkrxXk9NvS 6oUTLIDiWNoYSCGX8pfsjyNw84zShua7vnnZtFgGneJRrb8+IlzdK1HmJh8fkUGQ Qk0OeTlgtDpSTcO+nGYlVwcvyT0wAsshBOnuxwTT4+xG7swy8nGQpoiyiMg0WiH4 J4wToj8qdPmk26KO5pbnIY1z87zY4uhhMo8ME8LBu45ONCtJrlJAprdc8Uhb52mQ c3qQcIlZ7DrUkaBA/v21NxSHzt4ASj3LBDQXTkL9fEElXAT9DTXX65oYa6VveVQ0 GLr8bA3WDEOSFI2qq2o06tkOAol4B73o/8W4r4Zch6X3nEdDuKFqBWxTa/DnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzLC4jW4cB8u72IZ1B6A57zgRYMcwHwYDVR0j BBgwFoAUNKNei7vhdvNepv0Nv1Rur264o48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODRBMTYzMDYxQjhCMzdFMUU1MERDRTlBNzJCMkQ1NDQ3 NTJEOUI2MkU4NjM3NzcyRUJFQzk5MDQ1RTcxNDAzLzAvMzRBMzVFOEJCQkUxNzZG MzVFQTZGRDBEQkY1NDZFQUY2RUI4QTM4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNEEzNUU4QkJCRTE3NkYzNUVB NkZEMERCRjU0NkVBRjZFQjhBMzhGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg0QTE2MzA2MUI4QjM3RTFFNTBEQ0U5QTcyQjJENTQ0NzUyRDlCNjJF ODYzNzc3MkVCRUM5OTA0NUU3MTQwMy8wLzM0QTM1RThCQkJFMTc2RjM1RUE2RkQw REJGNTQ2RUFGNkVCOEEzOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgf44nzBEH3Q/iM9BUcbE/h/c8 Q0J68RtPeVAmS3+OtRKK+Uqw2j34s1l03KyhtX4ZEnPkWDIVSWnjIzkijV/bBuEu WzHlu9Gc4gOjJkrF/rHB25ElUKNDF3/2hKNE/hBp2S3/7F/x/6UK/hWh/7xKVh4j YHGWVhL5wYG1KxRSb0IbM9d9cdZ3aQT6bp+QpW8jnpwXLRL8+++TZeu7568Z/etA GRDa1PEM0ic981f5yk3ouNJmMSVLX5/oy+IxQpttLaf6561yXvej/FZ78Z07pSmn lQaNjmskcjzqxCuWUvTMf5zUKru2lRmTXzlAdg9c2/n08rL/1XbrJ+g4SHgW -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:12 2025 by rpki-client