$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft File: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json) Hash identifier: wbCjkiO/RJ9xJS/VDt7Zv2il+KXTXTYajQdfC9C7LYo= Subject key identifier: 75:3C:3F:4C:B8:2E:92:5B:D5:59:4B:D9:AB:73:3A:75:99:DB:E9:57 Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 Certificate issuer: /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Certificate serial: 3AF5A442830376C26485BC5976A48D1993B4F9DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft Manifest number: 5D Signing time: Sat 18 Oct 2025 22:09:16 +0000 Manifest this update: Sat 18 Oct 2025 22:04:16 +0000 Manifest next update: Fri 24 Oct 2025 17:35:16 +0000 Files and hashes: 1: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: Z1oxcMTp96LyPL04AHRNpWek4BKKp5gqHFXhVgThJbE=) 2: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: xT9XwSauYoSUnu1hhUiyvbXy1q8NqQprbVYTgbnc4vM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f5:a4:42:83:03:76:c2:64:85:bc:59:76:a4:8d:19:93:b4:f9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Validity Not Before: Oct 18 22:04:16 2025 GMT Not After : Oct 24 17:35:16 2025 GMT Subject: CN=753C3F4CB82E925BD5594BD9AB733A7599DBE957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:12:13:1c:18:be:bd:99:08:64:ab:c5:dc: 3f:54:28:e8:49:a9:7d:1c:f9:73:b6:79:41:08:75: 45:4e:8d:35:e9:f7:a6:50:f4:66:0d:27:71:b8:27: 57:0d:de:03:4f:d1:38:d0:b8:82:10:b4:e7:56:e2: 4b:82:71:ca:61:de:92:69:8b:a7:87:ee:a6:39:55: 95:d4:58:af:f3:bb:61:19:d1:7b:ae:5a:26:4d:8e: 5e:1f:bc:9c:b5:60:31:a0:f3:bc:ba:c2:ea:fc:2d: 62:96:0b:29:8f:71:37:d5:5d:42:d8:f1:b0:3d:5b: fb:5b:a3:fb:71:2a:4d:eb:2e:91:de:ac:48:8c:ab: 4c:30:5f:71:70:0b:d3:85:01:21:c4:fe:38:38:2d: 46:49:2c:53:b1:45:91:45:4b:d1:48:c4:1e:f7:90: b7:51:83:fb:c3:9e:69:7a:99:15:a7:26:ce:95:f7: fd:ba:58:04:31:06:da:f4:7f:d0:9c:3b:f3:c2:5e: 42:29:0d:bc:53:bd:93:06:a1:6d:84:a2:9d:c5:55: dc:43:f4:c4:0f:a6:b9:f9:08:7c:b7:c4:73:71:6b: 9e:d7:6f:2b:17:7f:bf:16:bf:cb:c1:aa:d5:9a:fe: db:8b:ee:1e:b5:b2:8f:80:1d:69:fd:3b:94:ee:b6: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3C:3F:4C:B8:2E:92:5B:D5:59:4B:D9:AB:73:3A:75:99:DB:E9:57 X509v3 Authority Key Identifier: keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:1b:04:02:27:70:9b:b4:50:20:94:12:f9:8c:61:79:91:e4: 8a:26:26:d7:5c:fe:45:d6:64:a8:82:99:48:37:d5:ff:75:11: ae:e1:cf:d7:dc:e7:0a:3a:a2:66:e9:73:90:1f:78:55:78:97: 49:d8:1f:e4:b5:d8:f9:c8:ab:23:15:20:6f:58:14:37:1c:f9: 90:b8:37:3e:50:a6:95:76:3a:5c:c8:b7:34:e9:65:26:ff:1b: ec:1a:81:08:56:13:e5:a9:6e:4b:8b:23:6d:0f:e6:43:14:fa: b9:83:bd:1f:ac:51:75:e4:d8:91:79:e5:ac:db:60:95:48:ef: ff:7a:e2:9b:ec:34:d9:01:43:46:ae:21:79:d7:9e:b2:9c:05: 9b:51:a3:e6:36:67:d5:23:67:1e:1d:80:c2:14:9a:58:4e:e1: 61:72:9a:0f:55:3c:49:32:f4:7a:06:e1:6c:70:7f:0b:fb:a2: 20:85:d8:96:ba:0e:83:57:92:46:1f:46:cb:97:9c:06:db:88: 25:75:1a:c8:6d:6b:17:5d:95:c6:08:5e:90:95:d2:85:69:08: cc:c6:73:41:1d:8b:c9:57:96:85:dc:4d:61:0b:b3:2f:1e:ac: 63:01:ee:54:45:bf:41:1f:e5:fc:02:28:a5:d0:10:7b:96:39: 9b:d3:23:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOvWkQoMDdsJkhbxZdqSNGZO0+dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2 NzFCMEE3MjAeFw0yNTEwMTgyMjA0MTZaFw0yNTEwMjQxNzM1MTZaMDMxMTAvBgNV BAMTKDc1M0MzRjRDQjgyRTkyNUJENTU5NEJEOUFCNzMzQTc1OTlEQkU5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwhITHBi+vZkIZKvF3D9UKOhJ qX0c+XO2eUEIdUVOjTXp96ZQ9GYNJ3G4J1cN3gNP0TjQuIIQtOdW4kuCccph3pJp i6eH7qY5VZXUWK/zu2EZ0XuuWiZNjl4fvJy1YDGg87y6wur8LWKWCymPcTfVXULY 8bA9W/tbo/txKk3rLpHerEiMq0wwX3FwC9OFASHE/jg4LUZJLFOxRZFFS9FIxB73 kLdRg/vDnml6mRWnJs6V9/26WAQxBtr0f9CcO/PCXkIpDbxTvZMGoW2Eop3FVdxD 9MQPprn5CHy3xHNxa57XbysXf78Wv8vBqtWa/tuL7h61so+AHWn9O5TutoI1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdTw/TLguklvVWUvZq3M6dZnb6VcwHwYDVR0j BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzg4NDJCQkVFRkE4NUZFMzcxQkRFQkM0 REJCMTcwOUVCNjcxQjBBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8GwQCJ3CbtFAglBL5jGF5keSK JibXXP5F1mSogplIN9X/dRGu4c/X3OcKOqJm6XOQH3hVeJdJ2B/ktdj5yKsjFSBv WBQ3HPmQuDc+UKaVdjpcyLc06WUm/xvsGoEIVhPlqW5LiyNtD+ZDFPq5g70frFF1 5NiReeWs22CVSO//euKb7DTZAUNGriF5156ynAWbUaPmNmfVI2ceHYDCFJpYTuFh cpoPVTxJMvR6BuFscH8L+6IghdiWug6DV5JGH0bLl5wG24gldRrIbWsXXZXGCF6Q ldKFaQjMxnNBHYvJV5aF3E1hC7MvHqxjAe5URb9BH+X8Aiil0BB7ljmb0yOg -----END CERTIFICATE-----Generated at Mon Oct 20 20:23:32 2025 by rpki-client