$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft File: 8438E7E6A61CE89232421B53643A3159B330CDFD.mft (raw, json) Hash identifier: cumM2ci2kQCSkXLiRkUyjnYnA7Y+6GYfK2qld9MTOsg= Subject key identifier: 9C:01:A4:81:01:C4:5A:C0:ED:89:DF:0E:D2:B8:2F:5B:E4:CE:66:A5 Authority key identifier: 84:38:E7:E6:A6:1C:E8:92:32:42:1B:53:64:3A:31:59:B3:30:CD:FD Certificate issuer: /CN=8438E7E6A61CE89232421B53643A3159B330CDFD Certificate serial: 12A2A9CD8541D0347D52BD2E1CBD2D6A8EDFC7E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft Manifest number: 012A Signing time: Sat 18 Oct 2025 17:06:02 +0000 Manifest this update: Sat 18 Oct 2025 17:01:02 +0000 Manifest next update: Thu 23 Oct 2025 19:55:02 +0000 Files and hashes: 1: 8438E7E6A61CE89232421B53643A3159B330CDFD.crl (hash: MHHXWW5uyJEQb4ETBKoZh1pA7hR1u+vWzztsOFl5Xuo=) 2: 34352e372e3133362e302f32342d3234203d3e20323635353534.roa (hash: T73m9sG2Ce9KWQ8u31wlYEzqvd56xGAGJdbg8cijLAk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.crl rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 19:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a2:a9:cd:85:41:d0:34:7d:52:bd:2e:1c:bd:2d:6a:8e:df:c7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8438E7E6A61CE89232421B53643A3159B330CDFD Validity Not Before: Oct 18 17:01:02 2025 GMT Not After : Oct 23 19:55:02 2025 GMT Subject: CN=9C01A48101C45AC0ED89DF0ED2B82F5BE4CE66A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:cc:dc:d7:ba:94:28:90:a8:5f:b3:c4:39: ec:b8:3e:59:4f:3e:2f:3b:26:e5:0b:c4:c5:e4:44: b9:f7:bd:03:09:53:ae:4e:8a:28:58:ba:51:e5:46: 00:02:0d:f6:e2:67:fb:f6:be:62:ad:e7:8e:4a:3d: b6:6c:bc:a7:67:cc:41:7f:76:dc:55:a2:37:dd:2a: 86:95:1d:b5:1c:63:2c:53:16:0c:fb:8d:60:b0:83: 59:02:c6:79:2c:b5:19:24:32:f4:65:91:30:b4:1a: 9c:b0:5c:fc:12:11:e6:83:bf:6b:84:3d:94:91:85: ca:1b:5b:02:77:7d:cc:ee:9e:82:27:d6:51:8d:bb: 57:f9:9e:0d:35:3f:64:ef:e5:f1:57:16:4c:1d:be: 69:c8:5c:ab:80:81:3a:a6:68:02:68:52:a1:41:93: ed:27:20:e4:14:bb:7d:76:36:02:6b:14:ab:b8:17: ac:23:34:c5:a9:68:d1:22:25:2b:4d:8e:ef:73:a2: ad:17:16:4b:31:05:ee:8b:97:c9:8a:8c:55:de:d6: 72:13:9a:ad:57:fa:3e:6e:5b:ca:f6:58:ce:67:e5: 45:0c:c2:a1:9c:55:e7:07:19:16:e5:0b:7e:03:85: 80:e6:1f:c9:71:d2:92:d4:44:b1:d7:72:b3:2a:d7: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:A4:81:01:C4:5A:C0:ED:89:DF:0E:D2:B8:2F:5B:E4:CE:66:A5 X509v3 Authority Key Identifier: keyid:84:38:E7:E6:A6:1C:E8:92:32:42:1B:53:64:3A:31:59:B3:30:CD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:60:38:bb:11:ff:d9:d4:3e:24:9a:8c:cb:5d:c0:95:6b:00: 83:df:0b:c5:5e:90:d1:6c:bc:bd:66:11:8f:79:a0:38:c7:ff: 69:db:99:93:d0:a7:4d:01:54:47:ff:89:98:e2:93:c8:f4:da: 12:66:1b:aa:f3:f0:88:7d:38:2c:80:1f:fd:54:04:b8:4c:33: d4:8b:8d:23:46:68:a3:8f:8e:0a:53:e1:f4:e5:da:5e:11:c7: 84:8a:3c:e2:67:e5:dd:26:2f:2c:03:fb:f4:d0:a1:9a:b0:5a: 06:82:26:15:97:f2:f6:c9:67:e2:15:31:6f:e1:b6:b4:9a:a9: bb:dc:81:d9:2e:54:d3:da:cd:3f:24:cd:9f:ed:28:be:bd:81: e9:13:bf:9d:c3:75:57:99:d3:74:9a:5b:0e:37:02:dd:2b:d7: 23:9b:3f:93:dd:3d:3c:fb:a5:c2:1d:2e:93:90:cb:76:35:6c: 21:09:b7:8f:65:6a:24:8d:95:e0:d3:10:96:84:53:a1:d7:bc: 79:a6:ed:b5:a4:c3:41:40:89:4b:c1:8d:cf:11:98:7c:e9:a9: e7:f3:c4:89:eb:c7:7f:35:e8:10:fc:a4:b0:ef:b7:ea:39:87: 3c:4f:d3:cd:c7:36:03:05:9f:4e:67:de:5c:a8:6f:0a:49:f6: 27:cd:9d:55 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEqKpzYVB0DR9Ur0uHL0tao7fx+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzOEU3RTZBNjFDRTg5MjMyNDIxQjUzNjQzQTMxNTlC MzMwQ0RGRDAeFw0yNTEwMTgxNzAxMDJaFw0yNTEwMjMxOTU1MDJaMDMxMTAvBgNV BAMTKDlDMDFBNDgxMDFDNDVBQzBFRDg5REYwRUQyQjgyRjVCRTRDRTY2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Hszc17qUKJCoX7PEOey4PllP Pi87JuULxMXkRLn3vQMJU65OiihYulHlRgACDfbiZ/v2vmKt545KPbZsvKdnzEF/ dtxVojfdKoaVHbUcYyxTFgz7jWCwg1kCxnkstRkkMvRlkTC0GpywXPwSEeaDv2uE PZSRhcobWwJ3fczunoIn1lGNu1f5ng01P2Tv5fFXFkwdvmnIXKuAgTqmaAJoUqFB k+0nIOQUu312NgJrFKu4F6wjNMWpaNEiJStNju9zoq0XFksxBe6Ll8mKjFXe1nIT mq1X+j5uW8r2WM5n5UUMwqGcVecHGRblC34DhYDmH8lx0pLURLHXcrMq13VNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnAGkgQHEWsDtid8O0rgvW+TOZqUwHwYDVR0j BBgwFoAUhDjn5qYc6JIyQhtTZDoxWbMwzf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QjRCOUIzNDA2NTM2QzQyNjhBMzM0MDIzRkIwNEQyQjlD NEVEOEJENTFFQ0NFNTczMERFQ0ZCMDgzMTg1QjQwLzAvODQzOEU3RTZBNjFDRTg5 MjMyNDIxQjUzNjQzQTMxNTlCMzMwQ0RGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDM4RTdFNkE2MUNFODkyMzI0 MjFCNTM2NDNBMzE1OUIzMzBDREZELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEI0QjlCMzQwNjUzNkM0MjY4QTMzNDAyM0ZCMDREMkI5QzRFRDhCRDUx RUNDRTU3MzBERUNGQjA4MzE4NUI0MC8wLzg0MzhFN0U2QTYxQ0U4OTIzMjQyMUI1 MzY0M0EzMTU5QjMzMENERkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQYDi7Ef/Z1D4kmozLXcCVawCD 3wvFXpDRbLy9ZhGPeaA4x/9p25mT0KdNAVRH/4mY4pPI9NoSZhuq8/CIfTgsgB/9 VAS4TDPUi40jRmijj44KU+H05dpeEceEijziZ+XdJi8sA/v00KGasFoGgiYVl/L2 yWfiFTFv4ba0mqm73IHZLlTT2s0/JM2f7Si+vYHpE7+dw3VXmdN0mlsONwLdK9cj mz+T3T08+6XCHS6TkMt2NWwhCbePZWokjZXg0xCWhFOh17x5pu21pMNBQIlLwY3P EZh86ann88SJ68d/NegQ/KSw77fqOYc8T9PNxzYDBZ9OZ95cqG8KSfYnzZ1V -----END CERTIFICATE-----Generated at Mon Oct 20 00:36:04 2025 by rpki-client