$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft File: 7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft (raw, json) Hash identifier: 42geZn1LqaO3N58HF7VK1a1pd1llXEdrtJ2L32OG9wc= Subject key identifier: 2C:2E:F5:B5:13:68:0B:D2:CF:A5:8F:D2:9F:CE:65:80:26:8D:8A:38 Authority key identifier: 78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC Certificate issuer: /CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC Certificate serial: 1E1FB4C740146084BAB0BE9B6EC09AD3810567BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft Manifest number: AA Signing time: Mon 20 Oct 2025 05:10:02 +0000 Manifest this update: Mon 20 Oct 2025 05:05:02 +0000 Manifest next update: Sat 25 Oct 2025 11:32:02 +0000 Files and hashes: 1: 34352e3137372e3139362e302f32332d3234203d3e20323633313839.roa (hash: U+6jc7onojOSUPvtsM8GdL8dY2yUK0M9W8PbnbPQ65k=) 2: 7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl (hash: /CZcmaK+YUzF5DYxrRdXiqx5RgRnFaU748vKtTxqq3w=) 3: 323830333a336136303a3a2f33322d3438203d3e20323633313839.roa (hash: 38tDmsQ7m1ItWEtJAkgvTgi5PF90kNUivpP6wMmaL9M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1f:b4:c7:40:14:60:84:ba:b0:be:9b:6e:c0:9a:d3:81:05:67:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC Validity Not Before: Oct 20 05:05:02 2025 GMT Not After : Oct 25 11:32:02 2025 GMT Subject: CN=2C2EF5B513680BD2CFA58FD29FCE6580268D8A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:9e:4b:70:47:24:8f:1a:5b:69:98:fa:24: fb:e4:02:23:22:cc:ad:71:f4:34:72:ff:10:63:85: 80:45:97:d8:0d:33:45:5a:81:42:b1:63:07:60:7c: 5b:05:0a:bb:f2:73:0e:65:3b:6c:4d:25:20:15:42: e2:24:4a:e0:70:b5:ba:de:f0:37:20:9a:80:de:11: 49:1a:f5:4c:bb:ea:ad:5e:8b:eb:28:2b:0a:bc:1e: 2f:46:e5:38:f9:c7:30:96:87:bc:ee:15:46:75:b2: ee:2f:3d:4c:9e:92:e3:f8:de:52:6a:4d:67:d6:34: b8:00:dd:88:e4:1f:b7:6e:0b:96:88:b8:54:56:5e: 80:4b:26:fc:8e:67:a8:d4:ce:d8:e9:e3:29:6c:0d: 3d:ea:59:ea:f8:ab:c7:dd:6c:1d:18:a3:31:e9:79: e7:54:0a:d0:60:08:83:44:a4:4e:b0:12:d2:cf:b9: 12:df:9d:35:8c:6a:40:1f:9d:d5:36:62:da:77:10: 8c:0a:1a:c5:05:7c:a8:34:e9:53:28:97:8b:95:3b: b8:8d:7c:04:7d:ad:3b:da:3d:c5:bb:5a:e2:2b:03: d2:94:4d:f8:3c:ca:0d:26:49:15:2e:ea:e7:da:f0: 9c:52:50:32:57:47:59:8f:19:55:46:f6:2c:00:ee: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:F5:B5:13:68:0B:D2:CF:A5:8F:D2:9F:CE:65:80:26:8D:8A:38 X509v3 Authority Key Identifier: keyid:78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8f:55:a7:6f:cc:e6:10:af:78:bf:b0:63:1f:0e:93:54:c3: d2:03:41:a0:fd:5f:71:d8:1a:8e:7b:a6:ec:da:c1:7b:09:f3: b5:ee:37:ff:6d:13:6a:fa:12:03:b0:4c:64:f3:2a:de:ef:80: a1:e8:49:c1:38:4d:9b:b1:10:a6:34:69:67:f4:a9:6f:d9:3c: 6e:85:c7:d5:53:96:62:4b:f8:2b:88:c9:16:63:3c:3b:48:4e: b2:0a:f0:80:d6:f5:6c:87:ef:22:be:08:c0:08:05:43:89:c9: 1f:8f:fa:c7:8f:9d:29:b9:8b:3d:02:1a:27:8a:cc:a4:47:7c: 0a:78:de:36:4d:2c:b8:9d:84:67:d3:9c:05:c9:23:d5:12:26: 6c:60:8c:7d:1e:89:f2:54:43:cd:38:de:78:2e:e6:df:ac:52: 18:2a:07:77:99:fa:80:4b:a6:3f:72:ed:f7:12:67:ed:29:7a: 14:b9:41:a9:1d:35:31:26:a5:31:fd:dd:e2:bd:9f:65:6f:f9: b4:03:aa:de:b7:6b:5a:a6:f1:57:47:79:92:f1:36:6f:4c:6c: 8d:1f:2a:09:ca:30:f3:e2:47:27:f9:89:d9:1b:99:31:17:51: 3d:37:e8:ad:86:20:8f:a9:7a:6d:12:5c:da:ce:3f:17:e5:78: 48:b5:e7:ed -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHh+0x0AUYIS6sL6bbsCa04EFZ70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3OEQ5RTkwOEQwNTBFOEQ5OUU1NENERkRCODJFNkZG NDVGNkJCQzAeFw0yNTEwMjAwNTA1MDJaFw0yNTEwMjUxMTMyMDJaMDMxMTAvBgNV BAMTKDJDMkVGNUI1MTM2ODBCRDJDRkE1OEZEMjlGQ0U2NTgwMjY4RDhBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcA55LcEckjxpbaZj6JPvkAiMi zK1x9DRy/xBjhYBFl9gNM0VagUKxYwdgfFsFCrvycw5lO2xNJSAVQuIkSuBwtbre 8DcgmoDeEUka9Uy76q1ei+soKwq8Hi9G5Tj5xzCWh7zuFUZ1su4vPUyekuP43lJq TWfWNLgA3YjkH7duC5aIuFRWXoBLJvyOZ6jUztjp4ylsDT3qWer4q8fdbB0YozHp eedUCtBgCINEpE6wEtLPuRLfnTWMakAfndU2Ytp3EIwKGsUFfKg06VMol4uVO7iN fAR9rTvaPcW7WuIrA9KUTfg8yg0mSRUu6ufa8JxSUDJXR1mPGVVG9iwA7lGbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULC71tRNoC9LPpY/Sn85lgCaNijgwHwYDVR0j BBgwFoAUeHjZ6QjQUOjZnlTN/bgub/Rfa7wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9COTFERThEMTc2Q0M3OUUxQzcyNDg1MjY0Njk4NTU1MTFE QzRFN0U3M0E0QTVCNDBERkY4RTRCNDBGOTIxMDA0LzAvNzg3OEQ5RTkwOEQwNTBF OEQ5OUU1NENERkRCODJFNkZGNDVGNkJCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODc4RDlFOTA4RDA1MEU4RDk5 RTU0Q0RGREI4MkU2RkY0NUY2QkJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjkxREU4RDE3NkNDNzlFMUM3MjQ4NTI2NDY5ODU1NTExREM0RTdFNzNB NEE1QjQwREZGOEU0QjQwRjkyMTAwNC8wLzc4NzhEOUU5MDhEMDUwRThEOTlFNTRD REZEQjgyRTZGRjQ1RjZCQkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEj1Wnb8zmEK94v7BjHw6TVMPS A0Gg/V9x2BqOe6bs2sF7CfO17jf/bRNq+hIDsExk8yre74Ch6EnBOE2bsRCmNGln 9Klv2TxuhcfVU5ZiS/griMkWYzw7SE6yCvCA1vVsh+8ivgjACAVDickfj/rHj50p uYs9AhonisykR3wKeN42TSy4nYRn05wFySPVEiZsYIx9HonyVEPNON54LubfrFIY Kgd3mfqAS6Y/cu33EmftKXoUuUGpHTUxJqUx/d3ivZ9lb/m0A6ret2tapvFXR3mS 8TZvTGyNHyoJyjDz4kcn+YnZG5kxF1E9N+ithiCPqXptElzazj8X5XhIteft -----END CERTIFICATE-----Generated at Mon Oct 20 14:10:59 2025 by rpki-client