$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft File: 3214A9089E97D5F53B714A9F9256A933E4595E53.mft (raw, json) Hash identifier: TaPpZJ7bm6g2snbsRnT4dW5jB94pnb0ztYLlE1SnajE= Subject key identifier: 9B:1B:D5:DD:1A:D6:56:A2:F3:B0:95:0F:B9:81:59:E7:01:7E:D4:F0 Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 Certificate issuer: /CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Certificate serial: 30BA0301A19EB6BFF1E71A86D6E94B7B1AEDCB9F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 10:02:36 +0000 Manifest this update: Sun 19 Oct 2025 09:57:36 +0000 Manifest next update: Fri 24 Oct 2025 06:31:36 +0000 Files and hashes: 1: 3214A9089E97D5F53B714A9F9256A933E4595E53.crl (hash: TbLln8hf3J7r6pnckssAkKgNMC6ho5q4F09W/sLtPw0=) 2: 34352e3137382e33392e302f32342d3234203d3e203232373234.roa (hash: 111gob655h+J1ltSdpVz1rHfordidT3DHlpMVoHhsG4=) 3: 34352e3137382e33372e302f32342d3234203d3e203232373234.roa (hash: 0HhnYrRRVi7CHJEvS9xN8EZDppFHk6whkimhveshWDc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ba:03:01:a1:9e:b6:bf:f1:e7:1a:86:d6:e9:4b:7b:1a:ed:cb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Validity Not Before: Oct 19 09:57:36 2025 GMT Not After : Oct 24 06:31:36 2025 GMT Subject: CN=9B1BD5DD1AD656A2F3B0950FB98159E7017ED4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:2d:d0:b5:b1:7f:80:fc:8e:47:f4:a1:78: b6:fb:90:ce:9b:58:e6:3d:e1:00:13:ff:e7:30:33: a4:7a:49:14:e9:58:2c:af:2a:ad:c7:4b:f4:f0:b6: 14:c2:6b:b1:c4:ad:6a:8d:e6:60:5a:8b:56:a0:9a: 28:7a:f6:a0:c9:55:6e:c7:34:fa:63:52:f6:a2:bb: 50:9e:31:70:92:23:f7:9d:8a:eb:8e:8e:4d:29:e5: 46:9c:82:e3:33:f2:67:ef:43:5c:5f:c8:44:97:1d: 0c:9e:30:a9:7b:b5:f6:99:31:74:0c:c6:12:f9:17: bb:0d:30:a4:c5:70:98:6e:11:70:32:97:22:86:4f: 65:d9:d1:09:7f:9d:6f:f2:f8:7e:54:36:86:09:53: 33:3c:07:0f:b9:d3:4b:cd:1d:8f:2b:e5:46:49:5d: 30:9c:91:f7:f0:42:f1:11:3a:26:a3:18:8d:a8:1d: 8a:66:0a:fb:2b:fd:bc:78:f8:3a:e1:37:51:f4:bd: 30:67:d9:cf:79:02:b6:21:13:f5:3c:d9:58:b9:49: d7:36:d3:32:66:b0:b7:16:6b:18:3e:40:b6:06:d9: e3:db:c4:af:44:5c:fd:b9:98:e0:38:dc:e5:8e:c6: eb:de:c8:d5:c9:3e:85:63:5e:b6:ba:18:5d:af:ce: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1B:D5:DD:1A:D6:56:A2:F3:B0:95:0F:B9:81:59:E7:01:7E:D4:F0 X509v3 Authority Key Identifier: keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9c:d4:17:3d:93:7d:5a:04:98:76:1a:47:1b:a8:45:bc:de: e9:f8:81:a0:03:20:08:08:24:39:6a:0a:b7:f6:ba:c9:03:d0: a3:28:d2:8d:26:f5:bc:e1:94:df:2c:ba:7f:9c:17:94:06:e1: 53:55:82:68:02:cb:d1:59:88:8d:0c:9a:25:65:18:38:5d:c6: 63:da:a7:5c:bf:dd:57:57:99:82:64:f7:5f:e9:6c:f7:7c:c2: 1d:57:53:7b:44:16:07:e9:6f:3a:16:c0:5e:85:1c:02:56:c3: 29:be:6d:25:d8:a0:9e:f3:10:2d:5c:d2:ac:60:33:3b:8c:d9: ca:02:ff:74:6d:cf:0f:16:28:98:cd:65:89:48:9b:4e:06:33: 87:d9:a5:62:3c:17:05:15:ae:42:48:ed:9e:55:8b:55:d1:4d: b0:ac:62:4e:70:6f:23:0d:d7:8d:fd:ae:3c:01:9a:69:98:55: a4:ca:47:36:44:ac:66:32:45:cd:1d:da:1e:f0:aa:f1:5f:3e: 51:2e:e4:d4:7a:cb:7c:90:fd:d8:d7:7b:49:19:ed:42:9e:4b: 78:b7:70:a1:ed:cc:02:ea:aa:f6:2f:0a:8e:2c:a2:02:6d:34: 99:c8:fb:13:8f:ec:e1:a8:6d:73:f9:17:05:ff:08:6d:b2:74: 41:1b:c3:c4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMLoDAaGetr/x5xqG1ulLexrty58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxNEE5MDg5RTk3RDVGNTNCNzE0QTlGOTI1NkE5MzNF NDU5NUU1MzAeFw0yNTEwMTkwOTU3MzZaFw0yNTEwMjQwNjMxMzZaMDMxMTAvBgNV BAMTKDlCMUJENUREMUFENjU2QTJGM0IwOTUwRkI5ODE1OUU3MDE3RUQ0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwi3QtbF/gPyOR/SheLb7kM6b WOY94QAT/+cwM6R6SRTpWCyvKq3HS/TwthTCa7HErWqN5mBai1agmih69qDJVW7H NPpjUvaiu1CeMXCSI/ediuuOjk0p5UacguMz8mfvQ1xfyESXHQyeMKl7tfaZMXQM xhL5F7sNMKTFcJhuEXAylyKGT2XZ0Ql/nW/y+H5UNoYJUzM8Bw+500vNHY8r5UZJ XTCckffwQvEROiajGI2oHYpmCvsr/bx4+DrhN1H0vTBn2c95ArYhE/U82Vi5Sdc2 0zJmsLcWaxg+QLYG2ePbxK9EXP25mOA43OWOxuveyNXJPoVjXra6GF2vzsQ3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmxvV3RrWVqLzsJUPuYFZ5wF+1PAwHwYDVR0j BBgwFoAUMhSpCJ6X1fU7cUqfklapM+RZXlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMTI2OTU1Rjg2NzdFODU4MzZENkMwMDNFMzhCRTNDRTcy N0IyQzk3RkQ2MjU1ODFCMDA4ODc5M0NFMTlERUFGLzAvMzIxNEE5MDg5RTk3RDVG NTNCNzE0QTlGOTI1NkE5MzNFNDU5NUU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjE0QTkwODlFOTdENUY1M0I3 MTRBOUY5MjU2QTkzM0U0NTk1RTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzEyNjk1NUY4Njc3RTg1ODM2RDZDMDAzRTM4QkUzQ0U3MjdCMkM5N0ZE NjI1NTgxQjAwODg3OTNDRTE5REVBRi8wLzMyMTRBOTA4OUU5N0Q1RjUzQjcxNEE5 RjkyNTZBOTMzRTQ1OTVFNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBknNQXPZN9WgSYdhpHG6hFvN7p +IGgAyAICCQ5agq39rrJA9CjKNKNJvW84ZTfLLp/nBeUBuFTVYJoAsvRWYiNDJol ZRg4XcZj2qdcv91XV5mCZPdf6Wz3fMIdV1N7RBYH6W86FsBehRwCVsMpvm0l2KCe 8xAtXNKsYDM7jNnKAv90bc8PFiiYzWWJSJtOBjOH2aViPBcFFa5CSO2eVYtV0U2w rGJOcG8jDdeN/a48AZppmFWkykc2RKxmMkXNHdoe8KrxXz5RLuTUest8kP3Y13tJ Ge1Cnkt4t3Ch7cwC6qr2LwqOLKICbTSZyPsTj+zhqG1z+RcF/whtsnRBG8PE -----END CERTIFICATE-----Generated at Mon Oct 20 05:53:01 2025 by rpki-client