$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft File: 8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft (raw, json) Hash identifier: 8rhSQbVOKrdlTrrGHukFZyAf6CUUZ0o17DfXuENMRJ0= Subject key identifier: 41:C4:F4:D7:94:45:10:5E:81:84:F4:F0:27:8D:BA:3A:BD:23:85:A1 Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72 Certificate issuer: /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72 Certificate serial: 331A9A0EC9C057E22CFAD7794866666446362ECB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft Manifest number: 012B Signing time: Mon 20 Oct 2025 15:11:32 +0000 Manifest this update: Mon 20 Oct 2025 15:06:32 +0000 Manifest next update: Sun 26 Oct 2025 14:09:32 +0000 Files and hashes: 1: 32342e3135322e34302e302f32322d3234203d3e20323639393736.roa (hash: nugiQ0IcwQKTZxJTccpQeNrv7gIfXVcuO1fqP7AbTCw=) 2: 323830333a663665303a3a2f33322d3438203d3e20323639393736.roa (hash: takJjmGC1G1/7xGuybEIuyQDwN9y4okf/jc5QDfFvR4=) 3: 8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl (hash: LqNj0s3/Cmf75EkIUsVtui+SICrvN//w6mAdFvJXr9o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1a:9a:0e:c9:c0:57:e2:2c:fa:d7:79:48:66:66:64:46:36:2e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72 Validity Not Before: Oct 20 15:06:32 2025 GMT Not After : Oct 26 14:09:32 2025 GMT Subject: CN=41C4F4D79445105E8184F4F0278DBA3ABD2385A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:41:3d:48:c7:1b:20:9a:5c:df:9f:8a:2b: cb:5d:7e:a9:63:97:55:28:d5:af:0f:6b:10:7d:28: 9c:d8:5b:fe:e7:3a:d6:ce:5e:44:9b:4c:32:3d:8b: bf:3e:c9:7a:99:cd:bd:fe:58:7b:c4:66:fb:ec:ce: e3:3b:55:87:96:68:f1:9f:b6:5b:95:45:71:2c:08: 60:dd:df:e3:42:63:9c:e2:e3:ca:16:bb:a5:ed:5f: e5:e7:70:bc:e0:ee:1b:e2:8b:a2:3b:91:5e:75:43: bb:ab:ab:3f:99:48:af:58:e5:71:9a:3c:40:9c:a1: 8a:94:87:27:f4:22:65:8a:5b:1b:b3:13:d9:94:8f: 90:32:0e:8b:cb:87:43:1c:6c:00:36:20:f5:9e:35: 6b:98:8b:4c:38:68:89:cb:ec:d7:bb:e6:5f:8a:3f: fe:f7:25:34:ff:41:06:84:7f:96:12:00:6c:90:d9: 19:19:77:69:da:76:81:a9:2d:e7:be:55:a3:6b:d4: 91:f9:d5:b5:ff:51:19:2e:8c:a3:61:74:49:2f:42: 4a:ad:a5:07:52:15:c2:f6:8c:f1:e7:5a:f4:bc:cf: a7:24:71:6e:49:bc:06:6e:31:0e:c8:47:7c:f1:d1: 50:83:fb:12:3f:87:5a:43:38:aa:0d:af:c5:68:7e: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:F4:D7:94:45:10:5E:81:84:F4:F0:27:8D:BA:3A:BD:23:85:A1 X509v3 Authority Key Identifier: keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:73:c4:3b:6c:71:70:0b:3e:b5:d3:e8:b6:10:97:c8:92:73: 99:24:08:e5:64:b4:ad:62:0c:ea:05:c3:f2:0c:1c:d9:f4:cb: 31:fb:c2:2d:5f:b7:0b:12:ec:67:d2:87:8a:2a:eb:14:6e:81: 8e:b8:45:d7:64:e3:68:28:48:d9:e1:27:9a:ed:b7:60:d1:28: 01:ea:6c:d0:84:ea:8c:13:74:da:75:17:c3:3f:d4:39:16:3e: 57:8b:9c:71:82:c4:d8:fc:54:7a:23:d2:78:97:84:9c:9b:6e: 2a:a9:5e:40:6d:c3:89:c0:e2:db:69:c6:d0:e2:43:40:5b:f3: 25:ce:46:da:16:82:a0:eb:3c:f2:ef:ab:67:37:20:93:84:7f: 1d:bc:89:b2:f9:66:35:7a:1b:09:11:18:3f:34:ec:8a:2c:b7: c9:f9:15:69:c7:ad:dd:61:b6:d6:94:0d:34:09:e5:b4:11:e0: 1d:e1:01:cf:81:db:7a:1b:15:da:52:95:5a:84:a0:85:1c:a0: ca:70:4e:83:4b:26:64:ae:6a:b4:4f:50:74:33:1d:b1:f5:0a: 7a:19:c4:68:92:5f:a5:0b:f7:e8:f8:35:65:bb:70:6f:eb:7b: b6:7b:0d:c1:d7:1a:13:30:8b:f3:52:a7:c1:74:a6:c0:03:ac: c0:2b:15:25 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMxqaDsnAV+Is+td5SGZmZEY2LsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM3MERDQ0YyNzVCMTQ3MTdGNkExMjQxNEYxRUUxM0RB RkNFNEU3MjAeFw0yNTEwMjAxNTA2MzJaFw0yNTEwMjYxNDA5MzJaMDMxMTAvBgNV BAMTKDQxQzRGNEQ3OTQ0NTEwNUU4MTg0RjRGMDI3OERCQTNBQkQyMzg1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wUE9SMcbIJpc35+KK8tdfqlj l1Uo1a8PaxB9KJzYW/7nOtbOXkSbTDI9i78+yXqZzb3+WHvEZvvszuM7VYeWaPGf tluVRXEsCGDd3+NCY5zi48oWu6XtX+XncLzg7hvii6I7kV51Q7urqz+ZSK9Y5XGa PECcoYqUhyf0ImWKWxuzE9mUj5AyDovLh0McbAA2IPWeNWuYi0w4aInL7Ne75l+K P/73JTT/QQaEf5YSAGyQ2RkZd2nadoGpLee+VaNr1JH51bX/URkujKNhdEkvQkqt pQdSFcL2jPHnWvS8z6ckcW5JvAZuMQ7IR3zx0VCD+xI/h1pDOKoNr8Vofk2dAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQcT015RFEF6BhPTwJ426Or0jhaEwHwYDVR0j BBgwFoAUjHDczydbFHF/ahJBTx7hPa/OTnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQzBEMjQwQkFGMUQ5QkJBQTZFMjQxMzI2NDdFNTM4RTAx MDdGOEYxNDM2MEFEMTEyNzM4RkU3OUMwOTAwMTEwLzAvOEM3MERDQ0YyNzVCMTQ3 MTdGNkExMjQxNEYxRUUxM0RBRkNFNEU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzcwRENDRjI3NUIxNDcxN0Y2 QTEyNDE0RjFFRTEzREFGQ0U0RTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREMwRDI0MEJBRjFEOUJCQUE2RTI0MTMyNjQ3RTUzOEUwMTA3RjhGMTQz NjBBRDExMjczOEZFNzlDMDkwMDExMC8wLzhDNzBEQ0NGMjc1QjE0NzE3RjZBMTI0 MTRGMUVFMTNEQUZDRTRFNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfc8Q7bHFwCz610+i2EJfIknOZ JAjlZLStYgzqBcPyDBzZ9Msx+8ItX7cLEuxn0oeKKusUboGOuEXXZONoKEjZ4Sea 7bdg0SgB6mzQhOqME3TadRfDP9Q5Fj5Xi5xxgsTY/FR6I9J4l4Scm24qqV5AbcOJ wOLbacbQ4kNAW/MlzkbaFoKg6zzy76tnNyCThH8dvImy+WY1ehsJERg/NOyKLLfJ +RVpx63dYbbWlA00CeW0EeAd4QHPgdt6GxXaUpVahKCFHKDKcE6DSyZkrmq0T1B0 Mx2x9Qp6GcRokl+lC/fo+DVlu3Bv63u2ew3B1xoTMIvzUqfBdKbAA6zAKxUl -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:30 2025 by rpki-client