$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft File: C3E7368D35E3633A3376945DE03867D2B31CDD87.mft (raw, json) Hash identifier: sj7+Wa6YytTgroD3SjDxlqrgEtoqdZMXyX7CnliOXxk= Subject key identifier: 7B:A0:4B:CD:A0:24:97:E6:50:61:E6:EE:E4:35:04:BA:EE:31:22:EE Authority key identifier: C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87 Certificate issuer: /CN=C3E7368D35E3633A3376945DE03867D2B31CDD87 Certificate serial: 76998DBB0CAAC99249B3F98B754A58D005E84526 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft Manifest number: 0126 Signing time: Mon 20 Oct 2025 03:53:55 +0000 Manifest this update: Mon 20 Oct 2025 03:48:55 +0000 Manifest next update: Sat 25 Oct 2025 22:33:55 +0000 Files and hashes: 1: 323030313a313332303a3a2f33322d3438203d3e203237373333.roa (hash: JUOxFDO809fHz2UDcdbSGk60DXAGM1owWub4x5h/wmk=) 2: C3E7368D35E3633A3376945DE03867D2B31CDD87.crl (hash: /JhLnBq7EJ430yWXr9mgdwUOu7s+N7Z/Cvc7H0oAJdI=) 3: 3230302e31302e3232382e302f32322d3234203d3e203237373333.roa (hash: eOgJnQGTilVJetJyXOU9BecTvjysBQu1UH/B1713kU8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:99:8d:bb:0c:aa:c9:92:49:b3:f9:8b:75:4a:58:d0:05:e8:45:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3E7368D35E3633A3376945DE03867D2B31CDD87 Validity Not Before: Oct 20 03:48:55 2025 GMT Not After : Oct 25 22:33:55 2025 GMT Subject: CN=7BA04BCDA02497E65061E6EEE43504BAEE3122EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:2a:ff:2e:be:21:02:1e:d8:79:e9:09:72: ef:04:30:ee:5d:c6:aa:13:3f:64:0c:b5:40:4f:dd: 6e:5d:df:d6:31:9d:9f:d0:27:02:0d:06:5e:0f:39: 5a:0d:07:b2:05:e6:4c:5b:14:35:6e:c7:ed:02:7d: 88:89:3c:d6:6b:fa:01:c7:53:76:f7:73:98:aa:7c: a1:f4:3d:26:36:b8:1f:bd:94:0a:01:ef:a5:75:46: c5:72:39:3f:15:e5:d4:c2:95:0b:7f:01:91:cd:1d: 3c:f5:da:cf:ff:24:f4:83:75:32:a9:99:94:f8:fd: 50:34:61:2d:cd:f4:d4:72:6d:64:f3:58:dd:8c:9d: e2:4f:8e:39:21:cd:64:18:4c:5f:bd:83:6c:6c:a3: 64:c0:71:cf:4f:05:ac:c9:82:a7:4a:7c:82:41:95: 72:6d:a0:cd:53:86:d3:a9:59:db:02:fe:b1:f9:8a: f1:8c:6c:77:4d:76:bf:34:db:e7:0a:ea:99:9d:34: 59:87:77:52:34:42:c0:0b:54:bd:0f:0b:ee:0b:55: 9b:2d:dc:70:b9:68:24:38:6f:39:e0:40:f3:cf:58: 3b:af:99:dd:af:6f:c9:fb:f8:2f:0e:5e:a3:5f:b1: b5:25:84:ab:f5:e8:f5:98:79:d6:6f:75:5c:ed:ce: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A0:4B:CD:A0:24:97:E6:50:61:E6:EE:E4:35:04:BA:EE:31:22:EE X509v3 Authority Key Identifier: keyid:C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:4f:8d:f7:43:87:34:bf:2e:ce:99:b2:44:30:24:c2:fe: b9:c3:a0:55:f4:b9:17:45:c4:7e:6d:ba:8e:61:a6:93:0a:ff: 63:7a:96:93:56:18:d4:c4:5a:91:f3:88:da:32:cb:55:1a:ff: b4:2c:e3:a7:bb:a7:7a:b8:5d:8c:e1:63:2a:99:0f:9c:16:aa: c1:c2:cd:67:35:6d:43:c1:c7:68:82:26:fa:97:6a:c5:db:0e: fd:4c:68:c4:20:02:1e:e4:0b:e3:e4:3a:50:9b:89:2a:10:7b: 0a:6f:4c:69:d5:36:d2:cf:9f:b3:ed:e4:d1:ac:c9:27:fe:d2: c4:26:d7:ce:4c:2d:c0:f0:e4:53:3e:d1:e5:ed:1d:52:36:6f: f6:75:55:14:74:21:46:ea:f0:41:16:73:0b:10:a4:f7:2e:71: 14:13:a6:61:75:89:cd:40:52:c3:0c:8c:c6:c7:c2:5c:9b:c4: 35:57:55:b6:2c:cd:f2:60:96:51:2e:c3:a5:12:7b:85:b4:a0: d6:17:ed:49:33:5f:04:14:93:b1:16:2f:5c:98:f1:4a:d8:48: a7:0b:a7:4e:26:45:fc:09:31:e3:19:8f:c1:7c:e8:11:90:23: e8:7a:8a:8e:55:99:de:99:d7:80:d6:d5:8d:ae:dc:f8:57:4d: 4e:f9:b0:72 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdpmNuwyqyZJJs/mLdUpY0AXoRSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNFNzM2OEQzNUUzNjMzQTMzNzY5NDVERTAzODY3RDJC MzFDREQ4NzAeFw0yNTEwMjAwMzQ4NTVaFw0yNTEwMjUyMjMzNTVaMDMxMTAvBgNV BAMTKDdCQTA0QkNEQTAyNDk3RTY1MDYxRTZFRUU0MzUwNEJBRUUzMTIyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxCr/Lr4hAh7YeekJcu8EMO5d xqoTP2QMtUBP3W5d39YxnZ/QJwINBl4POVoNB7IF5kxbFDVux+0CfYiJPNZr+gHH U3b3c5iqfKH0PSY2uB+9lAoB76V1RsVyOT8V5dTClQt/AZHNHTz12s//JPSDdTKp mZT4/VA0YS3N9NRybWTzWN2MneJPjjkhzWQYTF+9g2xso2TAcc9PBazJgqdKfIJB lXJtoM1ThtOpWdsC/rH5ivGMbHdNdr802+cK6pmdNFmHd1I0QsALVL0PC+4LVZst 3HC5aCQ4bzngQPPPWDuvmd2vb8n7+C8OXqNfsbUlhKv16PWYedZvdVztzlDvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUe6BLzaAkl+ZQYebu5DUEuu4xIu4wHwYDVR0j BBgwFoAUw+c2jTXjYzozdpRd4Dhn0rMc3YcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDg5REE1NTFFNzMzMUI1M0I2ODgyMjgxODZEMTREREJB NDk4RkUzNzlCN0QzRUYzNzgxRTZBMzBFM0FERjUwLzAvQzNFNzM2OEQzNUUzNjMz QTMzNzY5NDVERTAzODY3RDJCMzFDREQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0U3MzY4RDM1RTM2MzNBMzM3 Njk0NURFMDM4NjdEMkIzMUNERDg3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0Q4OURBNTUxRTczMzFCNTNCNjg4MjI4MTg2RDE0RERCQTQ5OEZFMzc5 QjdEM0VGMzc4MUU2QTMwRTNBREY1MC8wL0MzRTczNjhEMzVFMzYzM0EzMzc2OTQ1 REUwMzg2N0QyQjMxQ0REODcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDy0+N90OHNL8uzpmyRDAkwv65 w6BV9LkXRcR+bbqOYaaTCv9jepaTVhjUxFqR84jaMstVGv+0LOOnu6d6uF2M4WMq mQ+cFqrBws1nNW1Dwcdogib6l2rF2w79TGjEIAIe5Avj5DpQm4kqEHsKb0xp1TbS z5+z7eTRrMkn/tLEJtfOTC3A8ORTPtHl7R1SNm/2dVUUdCFG6vBBFnMLEKT3LnEU E6ZhdYnNQFLDDIzGx8Jcm8Q1V1W2LM3yYJZRLsOlEnuFtKDWF+1JM18EFJOxFi9c mPFK2EinC6dOJkX8CTHjGY/BfOgRkCPoeoqOVZnemdeA1tWNrtz4V01O+bBy -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:31 2025 by rpki-client