$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft File: C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft (raw, json) Hash identifier: 7BNmOh5zjT8xZQpw8KBT65O8dZ6qxHn4ooex08api+w= Subject key identifier: 64:03:48:2F:36:F7:41:92:1A:64:40:13:7C:61:06:CC:F2:B6:DE:C7 Authority key identifier: C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A Certificate issuer: /CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A Certificate serial: 369E0783DB022C6D2B917C145A957FA4C2BC5940 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft Manifest number: 012A Signing time: Mon 20 Oct 2025 02:22:42 +0000 Manifest this update: Mon 20 Oct 2025 02:17:42 +0000 Manifest next update: Sat 25 Oct 2025 11:02:42 +0000 Files and hashes: 1: 34352e3139312e38302e302f32322d3234203d3e20323639393036.roa (hash: T02lQ4VDReRu1Uq2KE6arFP4lD3kr4makxsuc3i5Cwk=) 2: C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl (hash: 1zRd0wMxNP07CoW/X6C+/1RRO6NpF7YOo++LDdTtBWQ=) 3: 323830333a636365303a3a2f33322d3332203d3e20323639393036.roa (hash: QUfAjxz7+b8K/ppiT3qdxUrkyDTgV5uvDYdDGcx1UyA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9e:07:83:db:02:2c:6d:2b:91:7c:14:5a:95:7f:a4:c2:bc:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A Validity Not Before: Oct 20 02:17:42 2025 GMT Not After : Oct 25 11:02:42 2025 GMT Subject: CN=6403482F36F741921A6440137C6106CCF2B6DEC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:0a:8f:6f:f6:16:48:70:67:90:e5:f6:eb: 04:91:47:4a:91:b1:f7:ae:f6:74:39:3b:20:09:f5: a4:a7:8f:e6:ce:1e:4e:51:21:15:5a:8a:58:80:36: 29:41:64:e3:7f:41:2e:ec:b7:db:83:78:2a:56:44: 71:c3:21:1e:7f:dc:25:51:72:4e:0d:57:fa:93:37: a7:e0:aa:77:b8:a4:42:4a:49:dc:ef:f9:11:95:0b: bc:f1:7d:38:93:5f:f7:d2:99:20:08:da:d3:f4:2f: a1:02:55:6b:c5:d6:f8:56:27:cb:a4:68:cc:59:01: 29:59:5c:b1:ce:cb:15:50:5d:cb:b7:7b:01:2a:ad: 07:eb:77:63:80:2a:93:57:a6:50:f8:e3:3a:c9:bf: 6a:b6:d1:60:42:9c:81:73:9e:ad:e5:aa:54:d7:8c: 82:1c:5d:9e:d1:8b:a2:f4:0a:bb:fd:00:f0:ce:fc: a3:5e:63:34:73:02:d8:79:3e:d5:8c:d2:a2:53:4c: 59:89:d1:89:27:f4:c3:4b:5a:cf:be:3a:9e:31:ec: 92:79:39:53:37:a6:88:c8:fc:75:8e:73:39:ed:56: 37:e2:73:29:8e:1d:f6:13:9a:2c:42:6c:a9:63:b2: ae:de:b8:12:82:95:d1:52:83:7f:0b:1b:08:f7:66: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:03:48:2F:36:F7:41:92:1A:64:40:13:7C:61:06:CC:F2:B6:DE:C7 X509v3 Authority Key Identifier: keyid:C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d8:3c:34:d4:f8:ac:6a:a9:8d:f0:b3:4f:18:58:2b:bd:a1: 79:43:fe:ca:2c:35:ee:fb:0d:9e:23:9b:a8:63:db:4b:60:05: 41:41:95:4a:01:39:05:50:6c:45:37:24:91:48:36:33:98:76: 12:c2:b6:0d:49:10:c3:b9:8e:29:bd:8e:1c:24:65:58:2e:aa: 4b:ba:2e:fe:86:2c:a6:f8:76:74:22:d2:29:e6:d0:1f:73:c4: 50:f1:cd:f8:01:99:34:45:46:f5:c7:2b:0c:a7:87:34:40:75: be:6e:68:bf:ad:2a:46:67:1f:f1:34:42:7c:31:bb:3e:b3:6e: 2b:d7:3e:01:be:44:b0:5b:67:ce:e6:9a:61:b8:58:96:f8:1f: a4:52:4f:a5:89:ad:16:01:90:40:56:46:39:ba:58:90:0b:5e: ee:64:d6:b8:6d:7c:ad:85:65:1d:31:22:c5:25:f3:2d:41:e4: 53:fd:58:16:dd:af:a3:42:3c:03:39:62:34:84:e8:e9:6c:bc: 62:72:92:65:04:d1:da:df:0d:25:32:ac:a2:0c:ad:60:2a:87: 4b:61:c2:f8:bd:97:a2:ba:75:a4:af:ce:ad:10:6f:fa:3d:0a: fa:22:7d:cd:e9:e3:0a:69:c3:b2:43:78:f9:00:98:41:5c:9d: 63:36:ac:e1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNp4Hg9sCLG0rkXwUWpV/pMK8WUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM5QkNFQUNGOUJBNjY4MEUwQUQyNEEzOUIyNjY5NDBG MUFEOTc1QTAeFw0yNTEwMjAwMjE3NDJaFw0yNTEwMjUxMTAyNDJaMDMxMTAvBgNV BAMTKDY0MDM0ODJGMzZGNzQxOTIxQTY0NDAxMzdDNjEwNkNDRjJCNkRFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOHgqPb/YWSHBnkOX26wSRR0qR sfeu9nQ5OyAJ9aSnj+bOHk5RIRVailiANilBZON/QS7st9uDeCpWRHHDIR5/3CVR ck4NV/qTN6fgqne4pEJKSdzv+RGVC7zxfTiTX/fSmSAI2tP0L6ECVWvF1vhWJ8uk aMxZASlZXLHOyxVQXcu3ewEqrQfrd2OAKpNXplD44zrJv2q20WBCnIFznq3lqlTX jIIcXZ7Ri6L0Crv9APDO/KNeYzRzAth5PtWM0qJTTFmJ0Ykn9MNLWs++Op4x7JJ5 OVM3pojI/HWOczntVjficymOHfYTmixCbKljsq7euBKCldFSg38LGwj3Zt17AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZANILzb3QZIaZEATfGEGzPK23scwHwYDVR0j BBgwFoAUw5vOrPm6ZoDgrSSjmyZpQPGtl1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRjA3M0FCNTc4NERERjNFRDA0RDJBNEM3NTUyNThFQzE2 MTE4QTA4RkRBMkVENkU4RjY2MzE1RDI4QTQ0NkJELzAvQzM5QkNFQUNGOUJBNjY4 MEUwQUQyNEEzOUIyNjY5NDBGMUFEOTc1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzlCQ0VBQ0Y5QkE2NjgwRTBB RDI0QTM5QjI2Njk0MEYxQUQ5NzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkYwNzNBQjU3ODREREYzRUQwNEQyQTRDNzU1MjU4RUMxNjExOEEwOEZE QTJFRDZFOEY2NjMxNUQyOEE0NDZCRC8wL0MzOUJDRUFDRjlCQTY2ODBFMEFEMjRB MzlCMjY2OTQwRjFBRDk3NUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB32Dw01PisaqmN8LNPGFgrvaF5 Q/7KLDXu+w2eI5uoY9tLYAVBQZVKATkFUGxFNySRSDYzmHYSwrYNSRDDuY4pvY4c JGVYLqpLui7+hiym+HZ0ItIp5tAfc8RQ8c34AZk0RUb1xysMp4c0QHW+bmi/rSpG Zx/xNEJ8Mbs+s24r1z4BvkSwW2fO5pphuFiW+B+kUk+lia0WAZBAVkY5uliQC17u ZNa4bXythWUdMSLFJfMtQeRT/VgW3a+jQjwDOWI0hOjpbLxicpJlBNHa3w0lMqyi DK1gKodLYcL4vZeiunWkr86tEG/6PQr6In3N6eMKacOyQ3j5AJhBXJ1jNqzh -----END CERTIFICATE-----Generated at Mon Oct 20 22:53:31 2025 by rpki-client