$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft File: 44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft (raw, json) Hash identifier: aLGfcnbdcdl7KHS6NBPtndBMGN8RetXMqMaHYOzze1w= Subject key identifier: 38:7E:B9:AC:30:2D:A7:18:A0:84:F6:26:2C:98:3E:C3:02:B6:04:61 Authority key identifier: 44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8 Certificate issuer: /CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8 Certificate serial: 090E0629B91472CAFBC749866C45F73677A1F70B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft Manifest number: 012D Signing time: Fri 17 Oct 2025 16:20:02 +0000 Manifest this update: Fri 17 Oct 2025 16:15:02 +0000 Manifest next update: Thu 23 Oct 2025 12:13:02 +0000 Files and hashes: 1: 44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl (hash: pdZM5SJP/yrzuFHqOYlCoYsnCCTLWbyDF7LiPU+QS/M=) 2: 34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa (hash: 53AyMqM+GS8x1cxec9ie+iyYuriaZDo+N+LRQfaj/GA=) 3: 323830333a363636303a3a2f33322d3438203d3e20323637383935.roa (hash: RzytoS9Xp46fn8KLqIZBg/NVastTuM4j+g77WIYwgcc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 12:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0e:06:29:b9:14:72:ca:fb:c7:49:86:6c:45:f7:36:77:a1:f7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8 Validity Not Before: Oct 17 16:15:02 2025 GMT Not After : Oct 23 12:13:02 2025 GMT Subject: CN=387EB9AC302DA718A084F6262C983EC302B60461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:1d:50:d4:5a:17:77:a0:d5:a3:d2:1f:cb: 3d:d0:cf:d7:81:bc:55:f8:46:c2:44:e3:69:51:86: ad:ba:f1:f0:81:bf:5e:0b:98:bf:7e:32:3f:61:36: 43:a5:00:18:84:49:7a:c2:cd:ec:68:ba:88:32:9b: 02:be:2a:a0:30:38:d1:7c:e0:46:09:29:a1:54:05: e3:e4:2e:96:69:e0:13:3e:db:25:bb:49:37:dc:06: b1:dd:81:7c:23:78:77:e6:76:e0:b7:f7:47:d3:d2: e0:0f:c3:90:e2:14:87:a0:1f:a8:f2:a4:74:5f:9d: 79:2a:03:45:fe:5a:32:77:79:70:07:a9:31:14:22: 01:43:37:c3:51:5c:77:45:dc:8b:47:91:f5:8f:c0: da:f6:64:b2:58:b9:f3:08:0a:26:ec:08:bd:05:43: 11:b3:a7:16:51:97:89:fd:d0:13:cd:e3:2c:63:f8: f0:05:8b:86:e6:88:dc:aa:83:3f:55:29:b2:58:cd: 9e:86:fa:62:c5:c5:f8:b7:9f:52:66:6e:a6:50:af: b7:a7:98:09:86:26:b8:fc:39:1d:12:ba:4f:0f:31: f6:6d:01:ce:f7:2e:45:f7:7a:70:87:86:60:e6:77: 9b:bb:d1:28:cc:41:f9:0d:f3:63:d4:ea:56:a1:f4: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7E:B9:AC:30:2D:A7:18:A0:84:F6:26:2C:98:3E:C3:02:B6:04:61 X509v3 Authority Key Identifier: keyid:44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:2a:85:5f:35:40:f7:4c:38:2d:ab:c3:d9:75:be:64:4e:11: 8d:2e:f3:6c:9f:5d:7b:58:a1:f1:ec:05:e0:37:1c:83:a7:99: 0d:82:01:d8:94:1a:75:12:49:45:a4:8f:a3:41:9a:3b:e0:90: a3:33:f8:5b:0d:42:ee:8b:30:23:04:00:58:59:41:36:38:49: 58:1c:ce:76:93:4f:ea:c0:d9:1d:97:33:03:0a:6b:28:8b:1b: 41:ee:ac:2c:2f:76:2b:4b:6c:d1:fd:d5:4d:4e:9f:0f:31:b3: 75:1f:c1:ca:95:55:7b:22:3e:8b:04:cc:9f:a6:50:3a:a3:bb: 27:23:93:a7:e7:d6:94:21:c8:1c:f6:15:d3:2e:64:da:f3:62: 1b:75:47:58:5e:fd:cc:31:08:41:d7:01:69:75:93:54:d5:91: 6f:a6:18:19:65:41:66:3e:0c:c6:6b:96:72:15:ac:63:90:21: c8:37:68:a8:32:a5:1c:05:f2:45:9b:c2:25:58:73:75:33:41: c5:f7:2b:3b:fa:a4:9b:5b:aa:d0:9c:d4:a7:c5:78:b2:0e:5f: f9:c4:fe:0b:7d:8f:38:ac:bd:4e:1f:8c:42:65:97:15:6c:98: b7:59:df:b9:ab:a9:01:33:29:bb:7d:a7:83:71:a5:4d:68:92: 5d:45:19:da -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCQ4GKbkUcsr7x0mGbEX3Nneh9wswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NjhEQUU1RUNEQzQzMUJDQUE3QjJBQjQyQTIwMkM2 QjI0NTREODAeFw0yNTEwMTcxNjE1MDJaFw0yNTEwMjMxMjEzMDJaMDMxMTAvBgNV BAMTKDM4N0VCOUFDMzAyREE3MThBMDg0RjYyNjJDOTgzRUMzMDJCNjA0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0R1Q1FoXd6DVo9Ifyz3Qz9eB vFX4RsJE42lRhq268fCBv14LmL9+Mj9hNkOlABiESXrCzexouogymwK+KqAwONF8 4EYJKaFUBePkLpZp4BM+2yW7STfcBrHdgXwjeHfmduC390fT0uAPw5DiFIegH6jy pHRfnXkqA0X+WjJ3eXAHqTEUIgFDN8NRXHdF3ItHkfWPwNr2ZLJYufMICibsCL0F QxGzpxZRl4n90BPN4yxj+PAFi4bmiNyqgz9VKbJYzZ6G+mLFxfi3n1JmbqZQr7en mAmGJrj8OR0Suk8PMfZtAc73LkX3enCHhmDmd5u70SjMQfkN82PU6lah9NAJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOH65rDAtpxighPYmLJg+wwK2BGEwHwYDVR0j BBgwFoAURJaNrl7NxDG8qnsqtCogLGskVNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84Q0RFNTBCMkEyOEFFNDFBQzUwMTA1RjA3QTJBNUE0NTgx REZEMkEzODA0RDQ5RThFQTUxQTI5RDBCMDFFQjhFLzAvNDQ5NjhEQUU1RUNEQzQz MUJDQUE3QjJBQjQyQTIwMkM2QjI0NTREOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk2OERBRTVFQ0RDNDMxQkNB QTdCMkFCNDJBMjAyQzZCMjQ1NEQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOENERTUwQjJBMjhBRTQxQUM1MDEwNUYwN0EyQTVBNDU4MURGRDJBMzgw NEQ0OUU4RUE1MUEyOUQwQjAxRUI4RS8wLzQ0OTY4REFFNUVDREM0MzFCQ0FBN0Iy QUI0MkEyMDJDNkIyNDU0RDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5KoVfNUD3TDgtq8PZdb5kThGN LvNsn117WKHx7AXgNxyDp5kNggHYlBp1EklFpI+jQZo74JCjM/hbDULuizAjBABY WUE2OElYHM52k0/qwNkdlzMDCmsoixtB7qwsL3YrS2zR/dVNTp8PMbN1H8HKlVV7 Ij6LBMyfplA6o7snI5On59aUIcgc9hXTLmTa82IbdUdYXv3MMQhB1wFpdZNU1ZFv phgZZUFmPgzGa5ZyFaxjkCHIN2ioMqUcBfJFm8IlWHN1M0HF9ys7+qSbW6rQnNSn xXiyDl/5xP4LfY84rL1OH4xCZZcVbJi3Wd+5q6kBMym7faeDcaVNaJJdRRna -----END CERTIFICATE-----Generated at Mon Oct 20 00:36:11 2025 by rpki-client