$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft File: 3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft (raw, json) Hash identifier: TH0mD2Fa5cMrv53nwWVy9nZN5r/Fqsz/59GKvFxISNw= Subject key identifier: AB:23:10:F2:6A:F7:20:CB:56:8D:95:AE:74:4D:1F:B2:D7:88:87:53 Authority key identifier: 3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A Certificate issuer: /CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A Certificate serial: 1A859302CD77149FCF9E0FA0086F9C23B41E4642 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft Manifest number: 0128 Signing time: Fri 17 Oct 2025 17:00:28 +0000 Manifest this update: Fri 17 Oct 2025 16:55:28 +0000 Manifest next update: Thu 23 Oct 2025 16:04:28 +0000 Files and hashes: 1: 3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl (hash: 19c0PgQ8cJuv6/ce3ciPs4LTJxJk9maQYR4AzK7uw7E=) 2: 323830333a623731303a3a2f33322d3332203d3e20323732313039.roa (hash: FUZLQmLiKcSjfUSah4b3pLHxc9EuqpV1j4HMvKlaZ04=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 16:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:85:93:02:cd:77:14:9f:cf:9e:0f:a0:08:6f:9c:23:b4:1e:46:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A Validity Not Before: Oct 17 16:55:28 2025 GMT Not After : Oct 23 16:04:28 2025 GMT Subject: CN=AB2310F26AF720CB568D95AE744D1FB2D7888753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:db:fe:2e:39:57:4b:9f:82:1e:0b:13:91: 02:1f:75:09:cc:5d:0b:d9:eb:da:71:bb:67:77:e1: 4b:f9:77:1f:12:e2:f1:99:eb:78:67:8c:74:ff:0a: 97:f5:76:96:a0:e8:91:18:e4:84:7e:09:43:0f:d8: 9b:48:2e:21:cb:a1:43:bd:4e:08:45:93:8c:a3:5e: 6d:4e:a6:76:e0:95:da:e3:dc:d1:f8:d7:d5:05:41: 94:b6:74:5c:55:e5:93:25:42:49:ed:b2:60:06:63: d8:23:b0:86:29:a5:2a:99:46:48:57:9e:43:d0:0a: 3d:5f:73:b5:7a:06:eb:ba:77:42:ba:b5:8f:4a:39: c9:ca:02:83:28:51:a1:28:8a:b0:91:63:db:40:24: c8:ba:fa:b9:74:c2:d4:3c:86:b4:5d:f7:4a:ba:6d: 01:cd:25:22:c2:a9:43:30:cb:23:47:5f:38:5b:ce: 5d:82:b9:31:d4:14:36:84:2a:cc:e8:2e:9b:6c:57: 37:ff:a3:c6:7d:ab:2e:7f:3c:49:6a:db:35:08:fe: 35:7a:b1:9a:79:10:c3:66:5b:4c:6b:13:25:33:64: 29:ce:bf:95:87:91:ad:83:0a:fc:54:1a:47:52:21: 30:0c:a0:8f:b0:3b:7a:98:04:a8:f6:db:8f:8d:7a: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:23:10:F2:6A:F7:20:CB:56:8D:95:AE:74:4D:1F:B2:D7:88:87:53 X509v3 Authority Key Identifier: keyid:3F:67:CA:9F:0E:1F:E0:F0:38:3E:BF:EB:01:3E:DC:08:08:61:E9:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC67CAEC9CDECF49D684D2A10B699CF84558AE2AB4137391E5CCB10A67E77496/0/3F67CA9F0E1FE0F0383EBFEB013EDC080861E94A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a5:d1:6b:8e:cb:f8:f3:f3:5f:72:95:e9:43:65:0e:22:12: d0:9e:75:dd:62:09:c0:cd:97:75:2b:46:79:58:6b:6e:df:7a: c1:fc:d8:c1:3f:ab:ee:37:d0:99:e5:f8:ef:2f:a6:c2:26:ce: 17:bc:54:05:ab:ea:30:a4:be:40:63:78:f6:95:47:0d:4c:67: 8c:c1:43:85:21:e5:74:32:86:45:7c:20:22:87:20:a5:6d:37: aa:59:ab:c7:63:f7:f0:e9:9e:47:4e:d6:e4:01:d8:7a:12:3f: 78:21:d8:fc:e3:6d:c4:df:25:24:ee:5a:ce:aa:60:c3:79:6f: 0f:55:f5:4c:60:05:9b:51:23:70:d7:4a:6e:a2:53:44:32:7e: 97:ba:8e:f6:f7:d7:bf:9a:db:4e:c2:4e:f8:a4:85:c9:bc:cf: bb:ee:86:f9:0a:42:95:a2:69:e6:9d:42:8e:f4:eb:46:23:45: 24:07:fc:85:e4:3b:d7:69:11:61:f9:13:52:83:cc:7e:49:bb: c7:f3:3f:c7:33:c9:a3:90:e3:22:9a:cb:66:02:55:fe:50:db: 1f:e1:bd:56:5f:4f:06:cb:11:7b:8e:d2:5b:02:c5:68:bc:c2: 5a:60:ff:95:23:23:72:3d:2a:84:34:f5:c5:7e:d6:ec:e9:0d: 02:f0:2e:b1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGoWTAs13FJ/Png+gCG+cI7QeRkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2N0NBOUYwRTFGRTBGMDM4M0VCRkVCMDEzRURDMDgw ODYxRTk0QTAeFw0yNTEwMTcxNjU1MjhaFw0yNTEwMjMxNjA0MjhaMDMxMTAvBgNV BAMTKEFCMjMxMEYyNkFGNzIwQ0I1NjhEOTVBRTc0NEQxRkIyRDc4ODg3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Stv+LjlXS5+CHgsTkQIfdQnM XQvZ69pxu2d34Uv5dx8S4vGZ63hnjHT/Cpf1dpag6JEY5IR+CUMP2JtILiHLoUO9 TghFk4yjXm1Opnbgldrj3NH419UFQZS2dFxV5ZMlQkntsmAGY9gjsIYppSqZRkhX nkPQCj1fc7V6Buu6d0K6tY9KOcnKAoMoUaEoirCRY9tAJMi6+rl0wtQ8hrRd90q6 bQHNJSLCqUMwyyNHXzhbzl2CuTHUFDaEKszoLptsVzf/o8Z9qy5/PElq2zUI/jV6 sZp5EMNmW0xrEyUzZCnOv5WHka2DCvxUGkdSITAMoI+wO3qYBKj224+NeoHXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqyMQ8mr3IMtWjZWudE0fsteIh1MwHwYDVR0j BBgwFoAUP2fKnw4f4PA4Pr/rAT7cCAhh6UowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQzY3Q0FFQzlDREVDRjQ5RDY4NEQyQTEwQjY5OUNGODQ1 NThBRTJBQjQxMzczOTFFNUNDQjEwQTY3RTc3NDk2LzAvM0Y2N0NBOUYwRTFGRTBG MDM4M0VCRkVCMDEzRURDMDgwODYxRTk0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjY3Q0E5RjBFMUZFMEYwMzgz RUJGRUIwMTNFREMwODA4NjFFOTRBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0M2N0NBRUM5Q0RFQ0Y0OUQ2ODREMkExMEI2OTlDRjg0NTU4QUUyQUI0 MTM3MzkxRTVDQ0IxMEE2N0U3NzQ5Ni8wLzNGNjdDQTlGMEUxRkUwRjAzODNFQkZF QjAxM0VEQzA4MDg2MUU5NEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqpdFrjsv48/NfcpXpQ2UOIhLQ nnXdYgnAzZd1K0Z5WGtu33rB/NjBP6vuN9CZ5fjvL6bCJs4XvFQFq+owpL5AY3j2 lUcNTGeMwUOFIeV0MoZFfCAihyClbTeqWavHY/fw6Z5HTtbkAdh6Ej94Idj8423E 3yUk7lrOqmDDeW8PVfVMYAWbUSNw10puolNEMn6Xuo7299e/mttOwk74pIXJvM+7 7ob5CkKVomnmnUKO9OtGI0UkB/yF5DvXaRFh+RNSg8x+SbvH8z/HM8mjkOMimstm AlX+UNsf4b1WX08GyxF7jtJbAsVovMJaYP+VIyNyPSqENPXFftbs6Q0C8C6x -----END CERTIFICATE-----Generated at Mon Oct 20 16:32:45 2025 by rpki-client