$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft File: 399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft (raw, json) Hash identifier: l0xyVN/HQ9ZBvPYg2dkbr5hDUEP80UdihM0mwAsPV40= Subject key identifier: 76:AA:9D:72:82:C3:44:FC:3B:10:74:AF:BF:E8:74:07:85:F6:06:C8 Authority key identifier: 39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5 Certificate issuer: /CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5 Certificate serial: 3E0E5D51BE102394A9DA3FA4F04D869CA602380A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft Manifest number: 0128 Signing time: Sat 18 Oct 2025 19:07:20 +0000 Manifest this update: Sat 18 Oct 2025 19:02:20 +0000 Manifest next update: Fri 24 Oct 2025 03:29:20 +0000 Files and hashes: 1: 323830333a623435303a3a2f33322d3438203d3e20323733313337.roa (hash: UfNtSpYp4tNAhUPUqhv+Y7/jySzcV6H3F8/k4eIBeUM=) 2: 399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl (hash: WDxpDJBap5WnKURR/S3rc8FD+HbAJVdwie5zT5HFWqc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0e:5d:51:be:10:23:94:a9:da:3f:a4:f0:4d:86:9c:a6:02:38:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5 Validity Not Before: Oct 18 19:02:20 2025 GMT Not After : Oct 24 03:29:20 2025 GMT Subject: CN=76AA9D7282C344FC3B1074AFBFE8740785F606C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:0a:a0:0d:1a:eb:95:7b:8b:3c:7e:e5:94: 2d:36:44:63:bf:47:fd:34:a5:2d:98:61:52:4b:38: c4:b7:62:d8:0d:af:7c:a8:df:d2:b4:07:16:40:0f: 2f:0f:f3:6d:f3:b2:61:81:a6:01:0d:15:8f:36:50: af:3c:ba:be:36:b7:8e:6f:c5:ff:e5:bf:8d:06:1d: f3:c8:25:f3:ac:10:05:9e:c5:4b:7a:23:01:c9:ee: 31:16:94:63:51:b6:99:d0:2e:25:fa:10:8b:2d:87: 8d:76:4a:7b:fe:f0:0c:62:a0:eb:72:a3:b6:f9:eb: 08:b9:66:e2:ba:74:eb:52:b6:04:de:7c:c7:58:73: f5:0f:ad:ad:67:07:f4:85:26:25:4f:d3:1e:63:6e: df:bf:49:24:04:2e:df:97:1b:81:25:09:cf:5b:86: 08:83:f5:1d:78:fc:ca:e3:93:c6:e7:53:ae:30:c2: a3:c7:d6:69:4a:93:84:52:af:e0:7b:71:f8:76:ef: 82:2f:01:c8:a5:e5:24:05:5b:4c:b9:a6:5c:40:e4: 9b:42:32:67:e8:4d:ef:c1:3a:69:62:f1:fa:0f:39: ec:06:c8:e7:68:b0:67:04:ce:8e:cf:9b:96:13:96: ee:b7:21:25:6a:7d:41:ae:81:60:74:70:f9:4e:5a: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AA:9D:72:82:C3:44:FC:3B:10:74:AF:BF:E8:74:07:85:F6:06:C8 X509v3 Authority Key Identifier: keyid:39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:72:ce:f4:f7:97:a8:e0:fd:b7:11:89:fc:a5:ec:0a:59:28: 98:76:16:99:3c:27:f4:e1:f3:8e:9c:68:92:5d:e4:a1:5f:1c: 77:0c:9f:f6:b9:69:1c:4d:25:4f:b9:93:ba:16:07:43:18:89: ae:f5:03:0c:3c:3a:89:5f:6a:ac:a0:da:92:c1:7e:52:06:b0: 16:ed:de:6e:5c:09:1a:8a:1a:ce:35:a1:ee:90:84:15:e9:a3: 52:82:bb:44:d3:ae:88:eb:58:24:ae:c1:3c:bb:c1:5e:3b:ab: 5b:a9:37:a9:2e:ae:ff:8d:64:7a:36:86:a5:87:dc:64:68:be: a1:1c:50:88:28:c0:ba:3d:a9:b3:ec:f4:ac:52:98:b5:56:f3: 42:22:04:39:00:37:ab:87:ba:b5:2c:00:09:72:2d:b4:e8:97: 14:e1:34:64:82:61:08:5b:e5:92:f3:56:d3:8e:1a:31:f8:43: 42:c0:1a:71:2a:cc:2f:1a:82:c2:aa:74:fd:a8:e0:42:dc:72: 33:a5:ec:32:86:4c:a0:79:49:ce:71:ad:06:0b:bb:f7:16:4e: 40:3a:06:9f:b1:5a:d1:8e:62:41:28:b1:18:f8:d2:da:27:28: 43:d9:7d:e8:d4:b7:e4:2a:e7:6f:17:39:3b:10:bb:92:62:0b: de:7a:83:33 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPg5dUb4QI5Sp2j+k8E2GnKYCOAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5OTc0MTM4QUYwRkNFNEJDOTMyOEY3MEVFNkMwRDNF RkVBNDZDNTAeFw0yNTEwMTgxOTAyMjBaFw0yNTEwMjQwMzI5MjBaMDMxMTAvBgNV BAMTKDc2QUE5RDcyODJDMzQ0RkMzQjEwNzRBRkJGRTg3NDA3ODVGNjA2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjQqgDRrrlXuLPH7llC02RGO/ R/00pS2YYVJLOMS3YtgNr3yo39K0BxZADy8P823zsmGBpgENFY82UK88ur42t45v xf/lv40GHfPIJfOsEAWexUt6IwHJ7jEWlGNRtpnQLiX6EIsth412Snv+8AxioOty o7b56wi5ZuK6dOtStgTefMdYc/UPra1nB/SFJiVP0x5jbt+/SSQELt+XG4ElCc9b hgiD9R14/Mrjk8bnU64wwqPH1mlKk4RSr+B7cfh274IvAcil5SQFW0y5plxA5JtC MmfoTe/BOmli8foPOewGyOdosGcEzo7Pm5YTlu63ISVqfUGugWB0cPlOWr/PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdqqdcoLDRPw7EHSvv+h0B4X2BsgwHwYDVR0j BBgwFoAUOZl0E4rw/OS8kyj3DubA0+/qRsUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDNBMjE5OTczMUE1RDU4ODFCNUY4ODUyMzI1Mjc4QUND OEFGNTJGQzcxN0YxNUQ0MDY2MjM3RjcyRDc2QkNBLzAvMzk5OTc0MTM4QUYwRkNF NEJDOTMyOEY3MEVFNkMwRDNFRkVBNDZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTk5NzQxMzhBRjBGQ0U0QkM5 MzI4RjcwRUU2QzBEM0VGRUE0NkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzAzQTIxOTk3MzFBNUQ1ODgxQjVGODg1MjMyNTI3OEFDQzhBRjUyRkM3 MTdGMTVENDA2NjIzN0Y3MkQ3NkJDQS8wLzM5OTk3NDEzOEFGMEZDRTRCQzkzMjhG NzBFRTZDMEQzRUZFQTQ2QzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgcs7095eo4P23EYn8pewKWSiY dhaZPCf04fOOnGiSXeShXxx3DJ/2uWkcTSVPuZO6FgdDGImu9QMMPDqJX2qsoNqS wX5SBrAW7d5uXAkaihrONaHukIQV6aNSgrtE066I61gkrsE8u8FeO6tbqTepLq7/ jWR6Noalh9xkaL6hHFCIKMC6Pamz7PSsUpi1VvNCIgQ5ADerh7q1LAAJci206JcU 4TRkgmEIW+WS81bTjhox+ENCwBpxKswvGoLCqnT9qOBC3HIzpewyhkygeUnOca0G C7v3Fk5AOgafsVrRjmJBKLEY+NLaJyhD2X3o1LfkKudvFzk7ELuSYgveeoMz -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:56 2025 by rpki-client