$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: ak+xj5hpbUkLDs3PoObKVsLMUNBhGWpvYMo6/CB1bg8= Subject key identifier: 4A:2F:33:6B:EC:55:E6:9D:7C:A3:D6:3A:2A:77:5C:A1:16:FA:1A:34 Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 2615D2BA59CCA37B027DCE852086B473BEEDCB6F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: 0127 Signing time: Sun 19 Oct 2025 14:10:15 +0000 Manifest this update: Sun 19 Oct 2025 14:05:15 +0000 Manifest next update: Fri 24 Oct 2025 03:24:15 +0000 Files and hashes: 1: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=) 2: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=) 3: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=) 4: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=) 5: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=) 6: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: PJ/e/ixGcFhfijQHHeMaT/swb2NBsmUE2ouzPyre6hc=) 7: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:15:d2:ba:59:cc:a3:7b:02:7d:ce:85:20:86:b4:73:be:ed:cb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Oct 19 14:05:15 2025 GMT Not After : Oct 24 03:24:15 2025 GMT Subject: CN=4A2F336BEC55E69D7CA3D63A2A775CA116FA1A34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:26:8a:4b:79:61:13:f7:e7:5f:12:0a:77:89: f8:76:df:a9:91:df:43:c7:cc:e5:00:d1:b4:7b:f3: 1d:1b:74:de:ba:e6:cd:c1:a3:3d:ba:96:7c:af:26: 4f:11:b6:63:5f:4b:23:b4:c0:73:34:79:14:59:43: 78:25:c1:34:8d:8e:a0:64:64:f6:eb:88:ee:f3:03: 5a:6d:cd:d6:63:b0:3e:3b:33:84:ff:01:15:65:36: 06:3d:59:ef:63:a6:2d:9c:de:86:43:8b:ba:6c:40: 3d:3c:13:1d:b6:1f:87:1d:e5:c5:f4:7c:f3:29:25: 3c:ad:41:a5:f3:2f:40:52:60:48:c1:d5:9f:9c:e4: d8:e4:f5:9b:21:9f:e5:66:48:ea:0e:8b:9e:72:25: 00:cc:ef:70:ca:4c:77:70:eb:00:f4:ba:b4:98:64: 6f:d8:ae:e6:22:34:42:a2:8a:d8:a9:93:96:c0:3f: 04:0c:3d:ea:8c:af:59:53:3d:ba:5d:02:f8:fd:ef: 50:c3:99:f9:78:8d:34:94:60:22:b1:93:ea:71:51: 46:93:86:f5:06:27:08:c1:83:f7:d6:fc:e0:81:aa: 13:60:e9:3e:46:6a:59:bd:46:e0:5a:86:45:50:4d: c8:fc:e9:13:c8:fb:0c:0f:16:40:20:71:11:44:54: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:33:6B:EC:55:E6:9D:7C:A3:D6:3A:2A:77:5C:A1:16:FA:1A:34 X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f1:4a:bb:d0:23:23:a0:77:00:68:38:54:df:a0:45:8b:49: d6:6e:73:26:6b:b6:17:39:c9:8a:47:d2:e6:44:8b:b9:eb:0b: 34:2c:b2:d4:44:65:86:5d:fa:fe:2b:b5:16:e9:82:ca:54:65: 8a:80:16:8d:d2:ab:dc:c5:c7:65:07:3d:bd:65:0e:b8:1e:e4: 74:e8:1c:95:a2:10:ba:91:b2:c4:a4:c5:6f:d9:97:2f:8d:11: 74:40:c0:72:23:b4:1c:1f:0b:28:fc:5d:4b:8a:77:de:66:09: 2b:63:ef:94:3b:d9:25:75:50:2a:d5:a6:4c:d5:34:05:c7:83: 78:23:22:d4:3b:22:7f:05:b3:4e:a6:c0:3e:92:0a:9a:d1:e1: 38:7a:a9:ab:98:dc:1b:f5:ea:38:76:47:a9:41:16:11:a2:75: 3b:ea:49:1d:ba:12:9c:83:c2:8e:dd:39:85:d6:81:2b:06:9d: a9:d7:2e:31:59:e6:8c:53:f3:54:d6:df:55:26:08:8f:57:1b: 9d:3a:e9:83:d3:42:5a:d6:b2:db:08:28:e7:0b:6a:b0:01:42: 83:83:1c:cd:f5:2f:ad:bd:90:7d:db:80:19:bc:d4:76:b2:35: 6d:82:73:b4:16:a6:42:62:da:80:74:6a:6a:f1:7e:20:e0:77: 35:16:7d:32 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJhXSulnMo3sCfc6FIIa0c77ty28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNTEwMTkxNDA1MTVaFw0yNTEwMjQwMzI0MTVaMDMxMTAvBgNV BAMTKDRBMkYzMzZCRUM1NUU2OUQ3Q0EzRDYzQTJBNzc1Q0ExMTZGQTFBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkJopLeWET9+dfEgp3ifh236mR 30PHzOUA0bR78x0bdN665s3Boz26lnyvJk8RtmNfSyO0wHM0eRRZQ3glwTSNjqBk ZPbriO7zA1ptzdZjsD47M4T/ARVlNgY9We9jpi2c3oZDi7psQD08Ex22H4cd5cX0 fPMpJTytQaXzL0BSYEjB1Z+c5Njk9Zshn+VmSOoOi55yJQDM73DKTHdw6wD0urSY ZG/YruYiNEKiitipk5bAPwQMPeqMr1lTPbpdAvj971DDmfl4jTSUYCKxk+pxUUaT hvUGJwjBg/fW/OCBqhNg6T5Galm9RuBahkVQTcj86RPI+wwPFkAgcRFEVDTjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSi8za+xV5p18o9Y6KndcoRb6GjQwHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBl8Uq70CMjoHcAaDhU36BFi0nW bnMma7YXOcmKR9LmRIu56ws0LLLURGWGXfr+K7UW6YLKVGWKgBaN0qvcxcdlBz29 ZQ64HuR06ByVohC6kbLEpMVv2ZcvjRF0QMByI7QcHwso/F1LinfeZgkrY++UO9kl dVAq1aZM1TQFx4N4IyLUOyJ/BbNOpsA+kgqa0eE4eqmrmNwb9eo4dkepQRYRonU7 6kkduhKcg8KO3TmF1oErBp2p1y4xWeaMU/NU1t9VJgiPVxudOumD00Ja1rLbCCjn C2qwAUKDgxzN9S+tvZB924AZvNR2sjVtgnO0FqZCYtqAdGpq8X4g4Hc1Fn0y -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:40 2025 by rpki-client