$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft File: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft (raw, json) Hash identifier: WOFznuCJnsurJR6TKdYlloLFe6eKSn8r1Jhrpirbvm0= Subject key identifier: 43:28:53:66:6E:D2:B8:08:04:E6:3A:D9:04:19:D2:92:19:76:A4:4C Authority key identifier: 42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1 Certificate issuer: /CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1 Certificate serial: 531F668F5ACFE4758CB2921791B4845EC29A7452 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft Manifest number: 012D Signing time: Mon 20 Oct 2025 05:04:59 +0000 Manifest this update: Mon 20 Oct 2025 04:59:59 +0000 Manifest next update: Sat 25 Oct 2025 05:47:59 +0000 Files and hashes: 1: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl (hash: mwTQsf33rzMEisFROOFiNfyqepwq6Zt2OckgXzfB1I4=) 2: 323830333a333465303a3a2f33322d3438203d3e20323639383938.roa (hash: pdzxVlbeJpazDdydO+ly57EE7M0R0rXYvOb+d52H9BE=) 3: 34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa (hash: /7Fj/4pyOlcPS3m9i/lL+K0SgGpktleabmrsbcuiyBE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1f:66:8f:5a:cf:e4:75:8c:b2:92:17:91:b4:84:5e:c2:9a:74:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1 Validity Not Before: Oct 20 04:59:59 2025 GMT Not After : Oct 25 05:47:59 2025 GMT Subject: CN=432853666ED2B80804E63AD90419D2921976A44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:39:a7:8c:65:6c:fa:b1:74:9e:65:c3:92: 17:98:cb:ed:2f:87:74:33:39:b0:da:b4:4d:ed:d1: a1:2e:7c:2b:ae:80:d5:04:84:3f:ec:29:ce:e5:bd: 85:e2:bb:16:17:d0:1f:14:93:36:6b:7c:9a:11:7b: ad:36:9f:57:b2:c9:6e:9a:c0:a9:f4:19:5d:c6:da: 53:e0:39:d1:b3:3f:32:a5:fb:23:d0:ca:47:85:d4: b4:f0:b2:49:32:57:c9:9a:f8:3a:bb:6e:77:a1:b3: 5a:51:a6:e7:1c:9b:ad:0b:32:9b:4e:18:62:74:94: 06:62:8c:dd:9e:28:b3:06:41:3a:a0:5a:00:81:7c: 9b:3b:aa:25:69:91:d2:96:36:14:8c:52:5b:67:6b: bd:9f:72:57:fb:99:0c:a3:a5:6a:f3:c2:c3:83:e9: 9c:30:2f:5f:cf:18:7b:cd:e6:32:14:74:d1:c8:80: cd:45:f6:1e:52:73:18:c1:12:51:4e:77:ba:1c:d0: cb:22:45:99:4d:df:dc:2e:91:87:69:66:f4:2a:17: c5:18:45:be:b3:87:b1:0d:29:5a:47:7c:87:3f:9b: a8:ed:0c:3a:5e:84:ff:06:9e:56:e4:5b:a0:42:bc: 03:34:a3:84:c2:2c:de:d7:8b:02:2b:bd:6c:3f:a7: db:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:28:53:66:6E:D2:B8:08:04:E6:3A:D9:04:19:D2:92:19:76:A4:4C X509v3 Authority Key Identifier: keyid:42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:a9:87:07:c3:68:27:e7:7b:99:05:99:e8:62:cf:47:ab: 4a:28:ea:aa:d1:c6:bf:54:26:03:43:b2:d1:f5:cf:24:57:d5: fc:62:c2:cf:ed:97:a4:27:47:2c:2a:a0:88:d4:f7:29:4e:fb: d8:da:bd:94:5d:be:78:de:ea:28:30:ae:8b:04:34:4c:bc:f8: 9e:79:cf:a1:cd:73:1a:37:09:38:6f:59:88:0c:2d:a3:9c:0f: b9:df:2e:ce:0b:61:b7:fb:40:5a:06:3d:3f:66:1c:9f:c9:70: 52:c3:01:74:4d:bb:f4:d6:0e:d5:27:80:ae:79:4b:28:67:af: 66:e6:ad:b7:64:7d:c7:bd:30:2a:d4:89:da:e9:f2:ca:74:7b: 13:b9:3a:37:59:38:ba:2f:95:63:07:9a:9c:c8:b2:97:e2:e3: 10:46:74:0e:fa:dc:ab:5b:9d:7e:19:fc:7d:43:3e:6d:d4:f2: 1e:0b:13:65:ad:ef:b0:53:44:d2:8d:7c:cd:c2:9a:61:61:2b: 82:d9:04:5a:66:ab:f9:24:e3:65:60:4c:47:57:27:1f:91:40: 72:98:7c:79:36:63:b4:eb:9e:ed:8b:51:e3:bf:f0:47:7b:05: d9:6d:78:16:3f:a4:1d:83:f2:b3:bd:a2:1c:62:e3:36:76:50: b9:bb:5f:da -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUx9mj1rP5HWMspIXkbSEXsKadFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDVEOEZGNThGMUE2Q0ZDRDEwNDJDODg0NzYyOTZD QjFDOUJFMTAeFw0yNTEwMjAwNDU5NTlaFw0yNTEwMjUwNTQ3NTlaMDMxMTAvBgNV BAMTKDQzMjg1MzY2NkVEMkI4MDgwNEU2M0FEOTA0MTlEMjkyMTk3NkE0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bTmnjGVs+rF0nmXDkheYy+0v h3QzObDatE3t0aEufCuugNUEhD/sKc7lvYXiuxYX0B8UkzZrfJoRe602n1eyyW6a wKn0GV3G2lPgOdGzPzKl+yPQykeF1LTwskkyV8ma+Dq7bnehs1pRpuccm60LMptO GGJ0lAZijN2eKLMGQTqgWgCBfJs7qiVpkdKWNhSMUltna72fclf7mQyjpWrzwsOD 6ZwwL1/PGHvN5jIUdNHIgM1F9h5ScxjBElFOd7oc0MsiRZlN39wukYdpZvQqF8UY Rb6zh7ENKVpHfIc/m6jtDDpehP8GnlbkW6BCvAM0o4TCLN7XiwIrvWw/p9upAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQyhTZm7SuAgE5jrZBBnSkhl2pEwwHwYDVR0j BBgwFoAUQs1dj/WPGmz80QQsiEdilsscm+EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTEwRjA1QjE1RURBRkUzNzBBODVDOTk0NThEMzk5RDFB NUVBM0YzMTlCMjMxOTI2MjBEQjNEM0U2NkNFOTU5LzAvNDJDRDVEOEZGNThGMUE2 Q0ZDRDEwNDJDODg0NzYyOTZDQjFDOUJFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNENUQ4RkY1OEYxQTZDRkNE MTA0MkM4ODQ3NjI5NkNCMUM5QkUxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDExMEYwNUIxNUVEQUZFMzcwQTg1Qzk5NDU4RDM5OUQxQTVFQTNGMzE5 QjIzMTkyNjIwREIzRDNFNjZDRTk1OS8wLzQyQ0Q1RDhGRjU4RjFBNkNGQ0QxMDQy Qzg4NDc2Mjk2Q0IxQzlCRTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmHqmHB8NoJ+d7mQWZ6GLPR6tK KOqq0ca/VCYDQ7LR9c8kV9X8YsLP7ZekJ0csKqCI1PcpTvvY2r2UXb543uooMK6L BDRMvPieec+hzXMaNwk4b1mIDC2jnA+53y7OC2G3+0BaBj0/ZhyfyXBSwwF0Tbv0 1g7VJ4CueUsoZ69m5q23ZH3HvTAq1Ina6fLKdHsTuTo3WTi6L5VjB5qcyLKX4uMQ RnQO+tyrW51+Gfx9Qz5t1PIeCxNlre+wU0TSjXzNwpphYSuC2QRaZqv5JONlYExH VycfkUBymHx5NmO0657ti1Hjv/BHewXZbXgWP6Qdg/KzvaIcYuM2dlC5u1/a -----END CERTIFICATE-----Generated at Tue Oct 21 05:04:14 2025 by rpki-client