$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: OylDoqmLKf4GRLNud4re3qJ3jB2BUR8kKlwX2tvPoOk= Subject key identifier: 24:92:2A:F9:1E:48:AE:39:F1:F0:A7:A2:21:47:13:E0:98:86:21:32 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 608A56449282EFA3B52384A76A125FF404F2CE60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0129 Signing time: Sat 18 Oct 2025 22:54:41 +0000 Manifest this update: Sat 18 Oct 2025 22:49:41 +0000 Manifest next update: Fri 24 Oct 2025 14:03:41 +0000 Files and hashes: 1: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) 2: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: TeO1eo71me9COGYjh4IOHYXZDjX6Iab9w+d8eZpNX1s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8a:56:44:92:82:ef:a3:b5:23:84:a7:6a:12:5f:f4:04:f2:ce:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Oct 18 22:49:41 2025 GMT Not After : Oct 24 14:03:41 2025 GMT Subject: CN=24922AF91E48AE39F1F0A7A2214713E098862132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:74:69:f3:82:f6:ce:85:45:8e:66:5f:a9: 52:b6:9f:d6:3d:fd:80:4d:51:62:22:ba:c1:f8:82: e1:e7:c6:b3:05:40:c4:d5:00:06:47:c2:7a:3c:87: 9d:dc:7d:78:1e:80:d7:e7:47:2c:c5:54:62:6b:b2: 0c:ae:ba:05:17:2b:13:1e:17:ac:ce:0f:10:77:5e: 3d:ea:b4:3a:44:17:64:16:57:de:73:6d:d0:6c:c3: 8f:ef:88:9b:7b:da:74:82:54:ab:83:53:ab:3c:29: 0d:95:81:64:a9:99:22:dc:db:6b:3c:ae:36:ec:f7: d4:f5:06:84:c3:e5:b1:ea:db:4e:ed:de:2f:b2:0f: a8:05:88:c6:54:d0:fc:84:f4:fc:f7:df:c7:04:eb: 49:a2:0c:76:67:6b:e8:80:a1:fb:30:eb:19:67:f9: 37:9b:90:c6:b3:a0:87:7c:61:9b:ce:8c:3e:2a:ca: ba:90:3e:13:4b:e5:45:66:5d:e4:34:c0:ab:c4:cf: e3:fb:cd:f3:b1:d4:35:2e:4a:7c:8c:72:be:d4:3f: 67:03:d1:50:e4:43:6f:8d:55:ae:cd:fe:71:f0:48: 81:75:b9:c3:43:7d:f2:56:bf:35:e9:85:37:ad:8b: 47:b4:45:e7:76:a9:b5:cf:1e:03:60:a3:f2:60:e4: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:2A:F9:1E:48:AE:39:F1:F0:A7:A2:21:47:13:E0:98:86:21:32 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:17:dc:7f:79:ca:73:33:b9:cd:34:bd:4d:07:52:9a:22:d6: b2:53:b8:a5:2a:12:07:2b:60:da:66:73:92:2f:a8:20:2b:a0: df:70:c2:98:ff:4a:3a:af:3d:e5:68:2f:55:b9:0e:50:64:94: d0:7d:74:21:67:fd:55:e9:c4:5b:18:23:5b:84:6f:77:13:0e: b2:a5:00:ff:fa:44:a6:82:9c:e7:14:35:f9:e0:ac:6f:0a:10: d9:12:e2:41:83:ce:2a:a0:52:93:1a:4c:df:b8:c7:71:0c:fa: 55:1a:a2:59:27:63:b1:f6:a5:28:cd:a2:99:3a:5f:03:61:cd: 21:4a:ed:43:17:f3:19:0b:f2:f9:1d:08:d7:79:29:d0:ef:19: 0e:7f:b7:14:f7:6b:5e:3d:fb:c3:5f:d8:19:2e:e1:0e:98:73: ab:03:65:85:3e:00:1f:fd:fb:0c:e8:1f:e3:4e:91:f0:c8:74: 4a:13:ee:29:92:b2:3b:0d:7c:0e:23:4c:c7:c4:40:d4:32:49: 16:72:d1:ba:eb:e8:11:0c:59:ff:6d:d0:b9:ec:eb:7f:1f:0e: ec:59:44:6e:b7:6f:90:f1:93:f2:b1:f3:ef:a7:9e:af:a7:18: 88:f1:fe:1b:07:4f:aa:ff:97:8b:23:e3:a9:0d:b0:2e:8a:d2: 4c:4f:b7:9f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYIpWRJKC76O1I4SnahJf9ATyzmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTEwMTgyMjQ5NDFaFw0yNTEwMjQxNDAzNDFaMDMxMTAvBgNV BAMTKDI0OTIyQUY5MUU0OEFFMzlGMUYwQTdBMjIxNDcxM0UwOTg4NjIxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyXRp84L2zoVFjmZfqVK2n9Y9 /YBNUWIiusH4guHnxrMFQMTVAAZHwno8h53cfXgegNfnRyzFVGJrsgyuugUXKxMe F6zODxB3Xj3qtDpEF2QWV95zbdBsw4/viJt72nSCVKuDU6s8KQ2VgWSpmSLc22s8 rjbs99T1BoTD5bHq207t3i+yD6gFiMZU0PyE9Pz338cE60miDHZna+iAofsw6xln +TebkMazoId8YZvOjD4qyrqQPhNL5UVmXeQ0wKvEz+P7zfOx1DUuSnyMcr7UP2cD 0VDkQ2+NVa7N/nHwSIF1ucNDffJWvzXphTeti0e0Red2qbXPHgNgo/Jg5Ce3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJJIq+R5Irjnx8KeiIUcT4JiGITIwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQF9x/ecpzM7nNNL1NB1KaItay U7ilKhIHK2DaZnOSL6ggK6DfcMKY/0o6rz3laC9VuQ5QZJTQfXQhZ/1V6cRbGCNb hG93Ew6ypQD/+kSmgpznFDX54KxvChDZEuJBg84qoFKTGkzfuMdxDPpVGqJZJ2Ox 9qUozaKZOl8DYc0hSu1DF/MZC/L5HQjXeSnQ7xkOf7cU92tePfvDX9gZLuEOmHOr A2WFPgAf/fsM6B/jTpHwyHRKE+4pkrI7DXwOI0zHxEDUMkkWctG66+gRDFn/bdC5 7Ot/Hw7sWURut2+Q8ZPysfPvp56vpxiI8f4bB0+q/5eLI+OpDbAuitJMT7ef -----END CERTIFICATE-----Generated at Mon Oct 20 00:32:23 2025 by rpki-client