$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.mft File: 3995180FA9FF9A6C4E022983421515BB8415A6D5.mft (raw, json) Hash identifier: 589QCBWdHcRtvlJs/K8evwXOwSHSzBzL/D3notxcaFY= Subject key identifier: F1:98:4C:57:05:A4:F9:2C:06:E7:72:9D:A7:B9:00:80:A3:9C:E8:67 Authority key identifier: 39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5 Certificate issuer: /CN=3995180FA9FF9A6C4E022983421515BB8415A6D5 Certificate serial: 5421E29CC93E2F14DF6F1D9A45CA10B81A4E39A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.mft Manifest number: 0132 Signing time: Sun 19 Oct 2025 18:32:58 +0000 Manifest this update: Sun 19 Oct 2025 18:27:58 +0000 Manifest next update: Fri 24 Oct 2025 04:41:58 +0000 Files and hashes: 1: 34352e3232342e3131362e302f32322d3234203d3e20323635383338.roa (hash: y0hR06Jgwa2S6Vcj2LkNr6+vn61rPbkevQPSrBlEfUU=) 2: 3995180FA9FF9A6C4E022983421515BB8415A6D5.crl (hash: nFyvqs5EehTpFYTnAUBL6oM9GYAz5y41B15SQ/VHU88=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.crl rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:21:e2:9c:c9:3e:2f:14:df:6f:1d:9a:45:ca:10:b8:1a:4e:39:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3995180FA9FF9A6C4E022983421515BB8415A6D5 Validity Not Before: Oct 19 18:27:58 2025 GMT Not After : Oct 24 04:41:58 2025 GMT Subject: CN=F1984C5705A4F92C06E7729DA7B90080A39CE867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:91:87:f7:f6:31:70:c1:c4:89:0f:65:4c: 68:84:63:01:f8:44:dd:12:76:df:4c:64:dc:ca:99: 00:e2:78:4b:8e:87:08:a4:8e:64:bd:72:b2:ea:04: 74:db:35:3c:61:94:ba:8c:48:80:6e:cd:84:a4:42: 4d:1e:fb:9b:91:17:fc:e6:69:d2:12:4a:8e:4a:eb: cc:c6:06:42:bb:3f:80:1c:55:6c:01:b1:cb:60:66: 5b:ce:dc:29:d6:c2:a7:2b:89:6f:b6:36:3d:5e:4e: f7:6f:c6:29:9b:58:f0:f7:14:15:15:d2:b1:81:13: 62:0e:72:3c:88:36:6f:97:38:d3:73:ed:52:0a:ff: 12:df:a1:50:ca:cb:19:95:f9:5c:c9:1b:24:80:d6: 2b:e3:64:ce:74:f8:25:a2:9c:7e:2b:7e:09:19:bb: 2d:40:ed:b7:d9:4c:ae:b5:a7:5a:d6:48:24:57:bb: d8:fe:5b:31:83:67:cd:71:23:da:4e:e1:52:c2:2e: 01:29:30:27:ca:4f:f5:82:10:b8:70:7c:bc:90:73: 5b:69:d4:9e:8e:ef:e8:ad:f2:1a:df:af:54:82:5a: cf:30:5b:56:ae:97:4e:2a:0f:f6:0f:26:2b:ca:57: 7d:e1:6f:f0:eb:c6:26:15:7b:03:ca:53:6b:2e:43: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:98:4C:57:05:A4:F9:2C:06:E7:72:9D:A7:B9:00:80:A3:9C:E8:67 X509v3 Authority Key Identifier: keyid:39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:33:60:21:19:56:d5:15:28:1a:fb:f5:8f:26:82:4b:97:15: db:b5:b4:64:f0:94:de:01:e8:93:e5:5e:4a:87:93:32:fe:eb: f6:8e:93:dd:1e:e5:56:92:9b:b3:51:49:98:ec:16:c8:fe:44: 96:e0:e9:0c:86:2c:55:3f:11:df:2c:9a:3e:90:2f:5c:cc:1a: 76:7c:ad:17:bd:ec:81:8c:0f:4d:84:18:10:c9:83:e8:1e:06: ab:29:fa:d4:a1:5d:42:c8:7b:32:8e:9a:d0:67:b1:ce:6d:95: 04:7c:c4:56:71:25:7f:6f:30:3a:9d:61:44:dd:0e:54:e0:e0: af:77:98:27:20:02:d0:ae:0e:30:6c:6c:dc:d1:e2:d6:93:5a: 1f:d6:91:ff:27:3d:dd:20:41:b6:c4:9f:03:ba:5a:09:de:48: fd:02:a5:18:66:09:0d:a8:71:e1:cc:65:50:21:69:bc:35:36: 78:f8:bf:b6:50:1a:7a:54:98:50:75:76:89:99:93:d3:6c:3f: ba:11:4c:69:e2:37:98:39:c3:84:66:52:af:55:62:76:ee:65: a9:84:a9:23:1c:e7:30:2b:63:88:3f:76:61:bf:66:82:cb:73: 15:b4:c7:f7:e8:65:1e:b9:d7:53:77:19:b5:55:c6:0b:e3:6b: cc:20:58:24 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVCHinMk+LxTfbx2aRcoQuBpOOaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5NTE4MEZBOUZGOUE2QzRFMDIyOTgzNDIxNTE1QkI4 NDE1QTZENTAeFw0yNTEwMTkxODI3NThaFw0yNTEwMjQwNDQxNThaMDMxMTAvBgNV BAMTKEYxOTg0QzU3MDVBNEY5MkMwNkU3NzI5REE3QjkwMDgwQTM5Q0U4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2JGH9/YxcMHEiQ9lTGiEYwH4 RN0Sdt9MZNzKmQDieEuOhwikjmS9crLqBHTbNTxhlLqMSIBuzYSkQk0e+5uRF/zm adISSo5K68zGBkK7P4AcVWwBsctgZlvO3CnWwqcriW+2Nj1eTvdvximbWPD3FBUV 0rGBE2IOcjyINm+XONNz7VIK/xLfoVDKyxmV+VzJGySA1ivjZM50+CWinH4rfgkZ uy1A7bfZTK61p1rWSCRXu9j+WzGDZ81xI9pO4VLCLgEpMCfKT/WCELhwfLyQc1tp 1J6O7+it8hrfr1SCWs8wW1aul04qD/YPJivKV33hb/DrxiYVewPKU2suQ4p7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8ZhMVwWk+SwG53Kdp7kAgKOc6GcwHwYDVR0j BBgwFoAUOZUYD6n/mmxOAimDQhUVu4QVptUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EODY0QkYzOUJEMjBEMjVCNUE4MjFEMjgzNjBDN0M0OTVE QkZCMTc1NjdFQTJDRDU5RkY2OENERDAwN0NBRjQwLzAvMzk5NTE4MEZBOUZGOUE2 QzRFMDIyOTgzNDIxNTE1QkI4NDE1QTZENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTk1MTgwRkE5RkY5QTZDNEUw MjI5ODM0MjE1MTVCQjg0MTVBNkQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDg2NEJGMzlCRDIwRDI1QjVBODIxRDI4MzYwQzdDNDk1REJGQjE3NTY3 RUEyQ0Q1OUZGNjhDREQwMDdDQUY0MC8wLzM5OTUxODBGQTlGRjlBNkM0RTAyMjk4 MzQyMTUxNUJCODQxNUE2RDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcM2AhGVbVFSga+/WPJoJLlxXb tbRk8JTeAeiT5V5Kh5My/uv2jpPdHuVWkpuzUUmY7BbI/kSW4OkMhixVPxHfLJo+ kC9czBp2fK0XveyBjA9NhBgQyYPoHgarKfrUoV1CyHsyjprQZ7HObZUEfMRWcSV/ bzA6nWFE3Q5U4OCvd5gnIALQrg4wbGzc0eLWk1of1pH/Jz3dIEG2xJ8DuloJ3kj9 AqUYZgkNqHHhzGVQIWm8NTZ4+L+2UBp6VJhQdXaJmZPTbD+6EUxp4jeYOcOEZlKv VWJ27mWphKkjHOcwK2OIP3Zhv2aCy3MVtMf36GUeuddTdxm1VcYL42vMIFgk -----END CERTIFICATE-----Generated at Mon Oct 20 17:37:55 2025 by rpki-client