$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: VcoYZ3X1sgSEEXV/UypxheAlZ9pNORwjk90bVZnsszc= Subject key identifier: 75:AF:04:4E:C0:33:CC:12:AA:42:94:9F:D7:40:9D:18:BD:F5:8E:50 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 38129118AD74527AC7892F84F88B4D9B58F33C2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 012F Signing time: Sat 18 Oct 2025 17:06:03 +0000 Manifest this update: Sat 18 Oct 2025 17:01:03 +0000 Manifest next update: Fri 24 Oct 2025 14:36:03 +0000 Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=) 2: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: rGf/Ot8vpc4bXLZjtJMeJ64W68zetCQCjBNpV60KJLk=) 3: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: a8Us3kI8SkWGmqoxEMJdOuQDpMUk4xinBahinzFU9DU=) 4: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: BhkMCfQ2Mc38fx5TtbrJ6GRvF3yhQbXNcDUmeNXDBGQ=) 5: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: MAJxrDm1ex5gG0+qVfg9yJc6ZorOreLgA5tyBVAPd0o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:12:91:18:ad:74:52:7a:c7:89:2f:84:f8:8b:4d:9b:58:f3:3c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Oct 18 17:01:03 2025 GMT Not After : Oct 24 14:36:03 2025 GMT Subject: CN=75AF044EC033CC12AA42949FD7409D18BDF58E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:92:1f:01:e1:af:cf:19:60:1b:77:54:62: 24:96:65:9c:c5:e5:d2:64:64:99:c5:c7:d2:db:98: e6:6e:a1:00:18:1c:d1:a1:e4:75:0e:93:8e:58:5c: 5d:c4:a4:78:af:3c:ea:5c:bd:a1:b2:1b:00:53:0a: af:4a:15:37:6f:ae:c2:ac:57:97:80:3c:c3:63:9a: c8:5d:19:ca:5f:2b:be:0e:dd:4c:80:0b:d3:8e:af: a3:9c:16:98:d3:97:d6:3b:50:60:c2:0d:d4:5c:01: 9a:f5:8a:47:f3:4f:9b:bc:6b:61:6e:a5:20:06:36: 89:1f:66:4b:7a:b7:2a:7a:e6:5f:a0:28:c5:4e:e3: c8:fc:10:10:86:eb:3f:96:c7:2c:4a:d1:65:e0:c3: 7d:9f:46:5a:92:ce:54:08:0f:fb:93:0b:27:9f:9b: fc:ab:ec:27:13:98:2f:de:f5:b9:40:51:da:93:6a: 47:67:ba:33:1a:1f:c1:a3:17:06:53:78:c6:b7:74: e1:3a:9d:6c:b4:8d:1d:d5:ed:05:0a:4c:c3:61:11: 64:e8:db:a8:39:3b:b1:1a:9f:d6:3d:06:61:e1:b1: 2f:15:9f:e4:0c:aa:e6:6c:11:52:3c:56:7d:8e:b8: 1e:2c:d8:00:86:0f:dd:2d:96:b8:08:68:cd:20:38: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:04:4E:C0:33:CC:12:AA:42:94:9F:D7:40:9D:18:BD:F5:8E:50 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4d:36:c2:26:cd:19:02:90:7a:08:63:4a:a3:51:6e:80:22: 64:51:61:72:8e:60:8f:b2:a2:fb:cc:59:68:99:cb:a3:e9:d2: 27:67:3d:20:44:68:5b:f9:eb:b2:50:9d:98:9c:0d:f1:07:3f: ae:eb:8f:43:01:35:3d:fb:a9:2f:cf:82:18:1e:98:7c:2e:97: ef:a7:80:6e:52:62:1b:6a:e7:7a:b0:ae:0f:bb:2a:ed:f9:f5: 5e:c0:63:d8:58:66:b4:1f:f9:e3:8a:da:08:b5:89:0f:5c:ab: b4:38:24:c6:d5:00:07:ac:b8:8c:07:59:ce:7f:39:eb:93:b3: 5e:b8:5a:6b:76:1b:bc:24:fd:41:71:43:1e:39:52:78:90:dd: 2d:c9:5f:38:a1:20:12:0e:76:26:91:f0:64:e7:f1:f2:67:25: 80:4c:da:20:32:4c:9b:3c:a0:70:ca:7f:6f:f2:d9:fc:06:2c: f3:52:10:6e:0b:00:25:d7:5a:45:64:ff:05:64:c9:af:13:4c: d4:5d:ad:77:0e:0b:01:5a:18:e9:9a:ce:0e:41:f3:19:af:48: 83:05:bc:b8:b6:c7:8b:ba:ea:a1:6f:85:c0:de:7b:a8:0c:6e: 56:5d:00:11:ce:42:92:0a:6b:34:68:cc:75:02:f0:23:52:c1: cb:bc:c8:c7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOBKRGK10UnrHiS+E+ItNm1jzPC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4 RkJFOERBOTAeFw0yNTEwMTgxNzAxMDNaFw0yNTEwMjQxNDM2MDNaMDMxMTAvBgNV BAMTKDc1QUYwNDRFQzAzM0NDMTJBQTQyOTQ5RkQ3NDA5RDE4QkRGNThFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JJIfAeGvzxlgG3dUYiSWZZzF 5dJkZJnFx9LbmOZuoQAYHNGh5HUOk45YXF3EpHivPOpcvaGyGwBTCq9KFTdvrsKs V5eAPMNjmshdGcpfK74O3UyAC9OOr6OcFpjTl9Y7UGDCDdRcAZr1ikfzT5u8a2Fu pSAGNokfZkt6typ65l+gKMVO48j8EBCG6z+WxyxK0WXgw32fRlqSzlQID/uTCyef m/yr7CcTmC/e9blAUdqTakdnujMaH8GjFwZTeMa3dOE6nWy0jR3V7QUKTMNhEWTo 26g5O7Ean9Y9BmHhsS8Vn+QMquZsEVI8Vn2OuB4s2ACGD90tlrgIaM0gOFK1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUda8ETsAzzBKqQpSf10CdGL31jlAwHwYDVR0j BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4 RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1 QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsTTbCJs0ZApB6CGNKo1FugCJk UWFyjmCPsqL7zFlomcuj6dInZz0gRGhb+euyUJ2YnA3xBz+u649DATU9+6kvz4IY Hph8Lpfvp4BuUmIbaud6sK4Puyrt+fVewGPYWGa0H/njitoItYkPXKu0OCTG1QAH rLiMB1nOfznrk7NeuFprdhu8JP1BcUMeOVJ4kN0tyV84oSASDnYmkfBk5/HyZyWA TNogMkybPKBwyn9v8tn8BizzUhBuCwAl11pFZP8FZMmvE0zUXa13DgsBWhjpms4O QfMZr0iDBby4tseLuuqhb4XA3nuoDG5WXQARzkKSCms0aMx1AvAjUsHLvMjH -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:42 2025 by rpki-client