$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json) Hash identifier: /dqE/QdL1TXo8AI1m7/lNZfFB2TfX196/gwZTv/C5UA= Subject key identifier: 06:69:59:E3:F9:34:85:43:97:35:48:95:BA:9F:18:10:D9:AD:F0:33 Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 7346D4C596A123B5505659ED63106DD2DCBD499B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft Manifest number: 0125 Signing time: Sat 18 Oct 2025 03:12:05 +0000 Manifest this update: Sat 18 Oct 2025 03:07:05 +0000 Manifest next update: Thu 23 Oct 2025 21:19:05 +0000 Files and hashes: 1: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=) 2: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: tgwfKmwI6iMrCnHrHhKXxaqXvBFxlsC+B26SFhAU36Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 21:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:46:d4:c5:96:a1:23:b5:50:56:59:ed:63:10:6d:d2:dc:bd:49:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: Oct 18 03:07:05 2025 GMT Not After : Oct 23 21:19:05 2025 GMT Subject: CN=066959E3F934854397354895BA9F1810D9ADF033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:a8:ba:22:83:96:69:95:5e:ff:1e:06:69: fa:b0:ba:c1:db:3c:59:ff:af:1d:c2:a6:07:79:3c: 96:a6:08:a5:4b:35:10:78:5e:dd:5c:4f:5f:77:b8: d3:14:7e:29:8b:db:4e:59:29:53:23:3b:14:70:77: 54:6f:0e:67:c0:2d:40:b3:ef:54:62:07:a8:eb:f8: 90:27:bb:48:1b:8e:e1:3d:93:73:b6:97:3f:c1:c8: 5e:17:cd:f0:c5:98:15:cc:e3:69:ab:32:0b:45:15: 2c:f7:01:4c:4e:0e:de:3f:2b:57:18:a3:b2:da:01: b8:0e:1f:78:91:3d:2b:c7:9c:a9:88:85:ee:ac:fd: 02:d1:96:9c:8c:44:e1:f8:8a:e3:60:16:b3:95:0f: f1:89:68:78:12:78:7b:72:8c:15:4f:6a:53:1d:36: 34:2a:7d:76:b8:1c:14:76:69:53:86:e4:a1:9f:19: fe:ae:8f:94:08:40:c5:9c:7f:28:d4:65:d3:96:a0: e2:6d:48:60:f6:7a:f6:1c:50:78:57:d7:2c:8f:03: 79:1a:6a:f1:b7:85:37:81:da:45:e1:27:4b:1d:6e: 87:de:e9:10:dd:4c:62:79:26:ad:41:0f:4a:3f:11: c5:30:b1:54:22:85:50:bb:ca:77:da:59:c2:28:87: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:69:59:E3:F9:34:85:43:97:35:48:95:BA:9F:18:10:D9:AD:F0:33 X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3c:39:95:37:1d:d8:8d:e9:a7:0f:68:a0:45:9c:00:57:4d: 3f:ae:fa:63:66:50:07:d6:95:7f:3d:17:4d:d1:b9:f8:bc:24: 42:85:d3:bd:32:37:fc:31:65:c8:0e:7e:78:5f:6e:f6:81:78: d3:14:06:6a:9f:ab:5e:9b:77:21:e1:02:36:13:3c:79:3e:7f: e3:85:f9:0b:bc:29:84:74:cb:ff:21:20:b8:1c:9d:83:0c:f1: d0:b7:71:3e:d6:06:d2:0c:14:01:b1:91:83:d2:9e:88:d7:0d: 9d:26:d1:02:04:f0:51:de:e8:96:c0:a5:fc:60:b0:20:93:1b: 51:53:03:7e:40:71:71:15:db:0c:a3:38:a0:5e:c3:7e:79:56: f1:cc:0a:02:0e:48:9c:c5:59:c9:44:02:f4:3d:28:42:60:cb: ca:93:c7:0f:41:55:67:e3:17:0b:64:8c:db:96:1c:00:e5:d6: be:5f:76:e2:91:cc:bd:b1:1e:e0:d3:81:20:56:ed:23:2c:48: 94:47:1d:cb:b2:42:ab:61:0d:35:c3:54:ea:11:02:1c:71:0f: db:90:72:d6:f7:d8:fe:58:55:f8:e5:35:d8:db:4b:6f:e4:73: b2:bc:5f:7a:21:47:f0:aa:85:cc:b3:1f:6f:aa:ad:60:87:e0: 53:88:04:d0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUc0bUxZahI7VQVlntYxBt0ty9SZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNTEwMTgwMzA3MDVaFw0yNTEwMjMyMTE5MDVaMDMxMTAvBgNV BAMTKDA2Njk1OUUzRjkzNDg1NDM5NzM1NDg5NUJBOUYxODEwRDlBREYwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4Ki6IoOWaZVe/x4GafqwusHb PFn/rx3Cpgd5PJamCKVLNRB4Xt1cT193uNMUfimL205ZKVMjOxRwd1RvDmfALUCz 71RiB6jr+JAnu0gbjuE9k3O2lz/ByF4XzfDFmBXM42mrMgtFFSz3AUxODt4/K1cY o7LaAbgOH3iRPSvHnKmIhe6s/QLRlpyMROH4iuNgFrOVD/GJaHgSeHtyjBVPalMd NjQqfXa4HBR2aVOG5KGfGf6uj5QIQMWcfyjUZdOWoOJtSGD2evYcUHhX1yyPA3ka avG3hTeB2kXhJ0sdbofe6RDdTGJ5Jq1BD0o/EcUwsVQihVC7ynfaWcIoh1T9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUBmlZ4/k0hUOXNUiVup8YENmt8DMwHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wL0ZGQjRCRjNENjBCNEZGMkZBQThBMzY0 NDY1MkMyRTJBQkY4MzZBQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIPDmVNx3YjemnD2igRZwAV00/ rvpjZlAH1pV/PRdN0bn4vCRChdO9Mjf8MWXIDn54X272gXjTFAZqn6tem3ch4QI2 Ezx5Pn/jhfkLvCmEdMv/ISC4HJ2DDPHQt3E+1gbSDBQBsZGD0p6I1w2dJtECBPBR 3uiWwKX8YLAgkxtRUwN+QHFxFdsMozigXsN+eVbxzAoCDkicxVnJRAL0PShCYMvK k8cPQVVn4xcLZIzblhwA5da+X3bikcy9sR7g04EgVu0jLEiURx3LskKrYQ01w1Tq EQIccQ/bkHLW99j+WFX45TXY20tv5HOyvF96IUfwqoXMsx9vqq1gh+BTiATQ -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:04 2025 by rpki-client