$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft File: 35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft (raw, json) Hash identifier: 3aDXOyqxfr6gWj8aUp7xH/aZIcqhDpUBPzpS+5gXVvg= Subject key identifier: 40:46:D8:59:B0:4F:E4:17:68:66:65:97:BA:49:C8:B0:A2:69:C8:87 Authority key identifier: 35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2 Certificate issuer: /CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2 Certificate serial: 0ECB607A66CD7451A501C9CD0E97DF73BA30092B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft Manifest number: 012D Signing time: Sat 18 Oct 2025 18:57:12 +0000 Manifest this update: Sat 18 Oct 2025 18:52:12 +0000 Manifest next update: Thu 23 Oct 2025 09:43:12 +0000 Files and hashes: 1: 35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl (hash: ZbNq+TJcBpq2ljgZzZE+ild1jp+u8Q5xlEKrusCcKlw=) 2: 3230302e31322e3139322e302f32342d3234203d3e203532323933.roa (hash: 4rJ90juFtA7jBoYxbipzbuTMwSm9yL5jjp6/EEhtrn0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 09:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cb:60:7a:66:cd:74:51:a5:01:c9:cd:0e:97:df:73:ba:30:09:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2 Validity Not Before: Oct 18 18:52:12 2025 GMT Not After : Oct 23 09:43:12 2025 GMT Subject: CN=4046D859B04FE41768666597BA49C8B0A269C887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:d6:cd:37:aa:70:2c:e4:b7:af:f8:1f:1a: b6:58:78:a4:79:2b:06:6a:7b:c6:0e:7c:e5:f9:1b: b8:a4:bb:e9:21:e5:1c:99:58:57:10:54:cc:c8:d6: a0:51:dc:4b:0b:ad:11:f1:ad:60:38:a6:3b:37:5f: 02:81:0b:ad:78:c5:41:4e:54:75:d7:94:bf:9f:c8: c5:91:50:1d:f3:df:07:61:d7:92:93:de:ba:54:15: 3e:a9:16:2a:9d:7d:84:53:e9:70:bf:59:30:dc:6f: d1:54:b4:f6:6e:8c:02:47:d9:e5:78:d2:01:6e:dc: 49:2c:82:a3:ac:98:d4:eb:c0:50:c8:f1:20:d5:df: 5b:93:af:33:82:39:c0:88:97:c1:b5:c7:47:e9:20: fa:72:c6:fe:8a:45:e4:34:88:db:76:d0:a0:de:a3: 03:1f:44:7c:58:d4:21:6b:25:bf:e5:59:94:09:0d: 5e:5d:f2:06:1d:e2:54:6f:f5:af:fc:79:63:cd:9d: 9c:ea:6c:13:ed:df:05:a7:4d:e1:c6:71:79:be:9f: 4c:59:67:5c:94:e0:aa:e9:1c:52:ea:1a:36:e7:8b: 44:11:cd:e4:6a:b5:87:ab:67:6d:c5:cc:06:9e:4d: 59:58:4e:9c:e1:91:97:55:0f:bf:24:75:1e:bb:35: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:46:D8:59:B0:4F:E4:17:68:66:65:97:BA:49:C8:B0:A2:69:C8:87 X509v3 Authority Key Identifier: keyid:35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e1:e1:31:56:4f:3b:5b:b1:21:37:a1:5f:26:6b:ec:43:3c: 56:91:ec:4e:bc:39:85:64:40:9d:98:62:d7:37:2e:2a:64:ac: 84:04:7c:78:24:b9:3f:3b:1b:7b:06:82:a1:89:f8:68:27:33: a0:16:dc:6d:7d:b7:7a:3c:8a:d0:56:bb:69:a3:45:da:b1:b0: 3d:79:7b:84:0d:c3:72:c3:67:d3:81:63:6a:3e:72:db:5f:c6: f1:46:e6:e0:0a:22:bc:ca:83:a7:3b:6b:de:0e:22:11:b3:c3: 74:5a:78:6c:57:53:75:66:8b:c6:26:13:c1:8d:38:4a:ba:58: 5b:50:74:dd:83:0d:e1:2d:af:47:d0:bd:5b:05:5f:47:34:86: cb:70:ff:78:22:bd:e2:0c:1c:89:a7:b4:46:ae:02:41:1f:ca: d7:0e:c3:57:22:16:a6:41:c9:16:d8:0f:3f:46:a8:66:b4:c7: 10:17:f4:dc:cc:ac:f1:ab:c8:25:8c:1d:b7:fb:73:a9:95:90: 0b:6f:ed:58:e0:50:1e:2e:ad:26:94:d0:7a:9f:8a:cf:0f:9e: 9e:23:aa:6c:1d:e6:64:05:e7:08:c9:a0:09:a2:9b:eb:b8:9b: 6e:56:35:25:d9:3e:f5:2d:3a:f1:1b:6c:12:89:de:26:5a:58: 54:c7:be:94 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDstgembNdFGlAcnNDpffc7owCSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVFNUJCNjBGNDVEQTdBNUVCODM5OEUxMTlCRjNFOUMy RUE1OTRCMjAeFw0yNTEwMTgxODUyMTJaFw0yNTEwMjMwOTQzMTJaMDMxMTAvBgNV BAMTKDQwNDZEODU5QjA0RkU0MTc2ODY2NjU5N0JBNDlDOEIwQTI2OUM4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP5NbNN6pwLOS3r/gfGrZYeKR5 KwZqe8YOfOX5G7iku+kh5RyZWFcQVMzI1qBR3EsLrRHxrWA4pjs3XwKBC614xUFO VHXXlL+fyMWRUB3z3wdh15KT3rpUFT6pFiqdfYRT6XC/WTDcb9FUtPZujAJH2eV4 0gFu3EksgqOsmNTrwFDI8SDV31uTrzOCOcCIl8G1x0fpIPpyxv6KReQ0iNt20KDe owMfRHxY1CFrJb/lWZQJDV5d8gYd4lRv9a/8eWPNnZzqbBPt3wWnTeHGcXm+n0xZ Z1yU4KrpHFLqGjbni0QRzeRqtYerZ23FzAaeTVlYTpzhkZdVD78kdR67NaL1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQEbYWbBP5BdoZmWXuknIsKJpyIcwHwYDVR0j BBgwFoAUNeW7YPRdp6Xrg5jhGb8+nC6llLIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QTg3Nzg5NjIwQUVGMTE3MUM4NUFFQkE0MUZFRkRCMkEz QjY4QTY1QkUyOTAyQ0U5MzNCNEE4MzkxMUM4QTIxLzAvMzVFNUJCNjBGNDVEQTdB NUVCODM5OEUxMTlCRjNFOUMyRUE1OTRCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUU1QkI2MEY0NURBN0E1RUI4 Mzk4RTExOUJGM0U5QzJFQTU5NEIyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0E4Nzc4OTYyMEFFRjExNzFDODVBRUJBNDFGRUZEQjJBM0I2OEE2NUJF MjkwMkNFOTMzQjRBODM5MTFDOEEyMS8wLzM1RTVCQjYwRjQ1REE3QTVFQjgzOThF MTE5QkYzRTlDMkVBNTk0QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAX4eExVk87W7EhN6FfJmvsQzxW kexOvDmFZECdmGLXNy4qZKyEBHx4JLk/Oxt7BoKhifhoJzOgFtxtfbd6PIrQVrtp o0XasbA9eXuEDcNyw2fTgWNqPnLbX8bxRubgCiK8yoOnO2veDiIRs8N0WnhsV1N1 ZovGJhPBjThKulhbUHTdgw3hLa9H0L1bBV9HNIbLcP94Ir3iDByJp7RGrgJBH8rX DsNXIhamQckW2A8/RqhmtMcQF/TczKzxq8gljB23+3OplZALb+1Y4FAeLq0mlNB6 n4rPD56eI6psHeZkBecIyaAJopvruJtuVjUl2T71LTrxG2wSid4mWlhUx76U -----END CERTIFICATE-----Generated at Mon Oct 20 00:32:28 2025 by rpki-client