$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft File: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft (raw, json) Hash identifier: UWu+f3kogYbIErT+EP+ZdWnjCp7H2sUNx7ooKnOU5eY= Subject key identifier: 4A:CF:AD:39:04:71:51:07:6E:01:E8:CD:53:5A:9F:0E:57:C7:70:6F Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D Certificate issuer: /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D Certificate serial: 35F0F4EF19815607F6F7F2BB74F777F5B49D06B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft Manifest number: 0128 Signing time: Mon 20 Oct 2025 04:04:10 +0000 Manifest this update: Mon 20 Oct 2025 03:59:10 +0000 Manifest next update: Fri 24 Oct 2025 09:22:10 +0000 Files and hashes: 1: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl (hash: bnfBAnijyiXyYJ0W/I8X/oCExVEW+c8xmqifa/Lu3eo=) 2: 3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (hash: AHFicsh51xc7duqTOrlmoLWuP5aU+OV95Mt4Zf+cn9c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f0:f4:ef:19:81:56:07:f6:f7:f2:bb:74:f7:77:f5:b4:9d:06:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D Validity Not Before: Oct 20 03:59:10 2025 GMT Not After : Oct 24 09:22:10 2025 GMT Subject: CN=4ACFAD39047151076E01E8CD535A9F0E57C7706F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:fa:4e:7c:91:b1:e2:d2:45:56:22:b2:3d: d9:22:46:ec:7d:da:58:89:d6:50:99:21:c4:8a:d8: 9c:fb:94:fb:fe:23:7f:a8:f7:28:0a:89:98:71:3d: 32:ca:8d:36:03:04:02:9d:ab:f1:d9:a1:c3:1d:f7: cc:a1:e5:50:d7:c3:e2:63:89:1c:70:3a:70:12:c0: 38:b7:d2:84:51:a8:18:8e:2b:0b:3f:c8:e4:85:b0: 22:5b:d1:77:bc:0e:34:17:32:0b:65:38:5d:ce:3e: 16:8f:5a:68:d7:86:ca:7b:3e:c5:a8:72:97:63:e0: 1c:94:d8:0d:de:54:f7:45:38:91:be:2d:5f:30:23: 92:a7:b9:d7:75:73:23:de:5a:24:45:22:26:09:7e: 6a:9c:5a:57:16:6a:c2:57:6a:6e:e2:94:a8:ca:03: 02:7b:27:0f:0d:03:93:07:ad:0d:25:0f:c1:db:76: 47:cb:20:86:05:ce:c5:9a:ef:7f:17:bc:79:05:ae: 5e:23:24:2c:77:d5:7f:5f:84:a8:32:a2:eb:fe:0d: c1:bb:e2:8c:e9:a0:72:59:82:c1:e3:14:da:3e:f7: 81:0b:30:c9:29:41:28:a7:c9:1b:23:86:6c:1a:2b: fd:f6:1d:04:fb:fa:04:9b:53:fa:7c:7a:26:23:dd: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:AD:39:04:71:51:07:6E:01:E8:CD:53:5A:9F:0E:57:C7:70:6F X509v3 Authority Key Identifier: keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e7:da:a6:f6:a0:02:79:36:29:26:bb:79:2b:9b:80:4b:7c: 1f:5c:4f:35:c6:ab:a1:24:9d:a6:8a:34:13:94:db:88:ea:f5: bc:bf:ce:d1:30:c0:32:a6:7d:1e:28:df:7d:2a:cb:fb:2f:aa: 78:43:a0:3d:1a:1f:0b:35:72:c1:f3:27:d8:ea:24:58:3e:e4: 22:0d:fb:bd:34:40:1c:d3:21:95:cc:3a:77:1b:35:20:08:b4: a0:2d:1a:5d:45:fe:86:3d:ec:39:38:0f:02:b7:c0:10:7a:df: ea:3f:14:64:ae:ca:eb:51:1c:7a:b2:c4:5e:7a:7e:9b:34:05: 04:9f:00:84:d6:7e:34:de:a7:73:39:2e:7e:56:5f:78:4d:cd: b9:c2:1c:9d:a8:22:ba:70:b6:77:c3:8d:39:f0:f7:6d:d8:27: 74:f8:5f:4c:b1:7d:bb:fd:38:5c:b3:57:79:bf:e6:e4:40:63: 96:e2:9b:6a:f6:7f:e5:e2:18:8c:52:7d:41:b5:45:e6:3b:4f: 32:b7:72:43:f5:cf:de:1f:76:c5:03:41:a0:6b:5d:f6:03:f2: 63:13:6b:4c:c4:b9:d9:6a:2c:0d:dc:53:39:c3:ad:4a:b8:6a: 28:55:f5:28:62:74:b6:17:3b:2c:bf:f9:10:cd:b8:48:cd:f0: b8:29:63:9a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNfD07xmBVgf29/K7dPd39bSdBrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRkE2MTU1RUUwQjg2MjdBNTVFRThFRUJDNzg0M0JG MDg3RDA4RDAeFw0yNTEwMjAwMzU5MTBaFw0yNTEwMjQwOTIyMTBaMDMxMTAvBgNV BAMTKDRBQ0ZBRDM5MDQ3MTUxMDc2RTAxRThDRDUzNUE5RjBFNTdDNzcwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0PpOfJGx4tJFViKyPdkiRux9 2liJ1lCZIcSK2Jz7lPv+I3+o9ygKiZhxPTLKjTYDBAKdq/HZocMd98yh5VDXw+Jj iRxwOnASwDi30oRRqBiOKws/yOSFsCJb0Xe8DjQXMgtlOF3OPhaPWmjXhsp7PsWo cpdj4ByU2A3eVPdFOJG+LV8wI5Knudd1cyPeWiRFIiYJfmqcWlcWasJXam7ilKjK AwJ7Jw8NA5MHrQ0lD8HbdkfLIIYFzsWa738XvHkFrl4jJCx31X9fhKgyouv+DcG7 4ozpoHJZgsHjFNo+94ELMMkpQSinyRsjhmwaK/32HQT7+gSbU/p8eiYj3YgbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSs+tOQRxUQduAejNU1qfDlfHcG8wHwYDVR0j BBgwFoAUOv+mFV7guGJ6Ve6O68eEO/CH0I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQjBGQzRGMUY2MkUyREYwNzA5QTc1NjZEMEJFNUU5QzA4 Mjg0NUM2QTMxMUMwNzgwNzlENDU4MTEzQjgyQzc4LzAvM0FGRkE2MTU1RUUwQjg2 MjdBNTVFRThFRUJDNzg0M0JGMDg3RDA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUZGQTYxNTVFRTBCODYyN0E1 NUVFOEVFQkM3ODQzQkYwODdEMDhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0IwRkM0RjFGNjJFMkRGMDcwOUE3NTY2RDBCRTVFOUMwODI4NDVDNkEz MTFDMDc4MDc5RDQ1ODExM0I4MkM3OC8wLzNBRkZBNjE1NUVFMEI4NjI3QTU1RUU4 RUVCQzc4NDNCRjA4N0QwOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy59qm9qACeTYpJrt5K5uAS3wf XE81xquhJJ2mijQTlNuI6vW8v87RMMAypn0eKN99Ksv7L6p4Q6A9Gh8LNXLB8yfY 6iRYPuQiDfu9NEAc0yGVzDp3GzUgCLSgLRpdRf6GPew5OA8Ct8AQet/qPxRkrsrr URx6ssReen6bNAUEnwCE1n403qdzOS5+Vl94Tc25whydqCK6cLZ3w4058Pdt2Cd0 +F9MsX27/Thcs1d5v+bkQGOW4ptq9n/l4hiMUn1BtUXmO08yt3JD9c/eH3bFA0Gg a132A/JjE2tMxLnZaiwN3FM5w61KuGooVfUoYnS2Fzssv/kQzbhIzfC4KWOa -----END CERTIFICATE-----Generated at Mon Oct 20 17:28:39 2025 by rpki-client