$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft File: 2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft (raw, json) Hash identifier: N+2/FOeQmchFjrIargeGzvO8k+2cydYcQuR8sxmDjO4= Subject key identifier: 5B:00:52:2C:2C:81:0C:F3:59:0B:7A:6A:03:7E:D7:29:4B:23:28:2A Authority key identifier: 2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC Certificate issuer: /CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC Certificate serial: 3C4F03DC5CDCBE6D417FE718C86A0FDA9A558734 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft Manifest number: 0128 Signing time: Mon 20 Oct 2025 17:27:56 +0000 Manifest this update: Mon 20 Oct 2025 17:22:56 +0000 Manifest next update: Sun 26 Oct 2025 01:13:56 +0000 Files and hashes: 1: 2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl (hash: tIEmOCD3VyYfQXy8JEG/5pr9XuGzpd4+sjrKyDI5glk=) 2: 3138312e3233332e39362e302f32322d3234203d3e20323635353334.roa (hash: WEpOMXiyjoF7bVGl426fHyDTN09Uraed9f1UlsO+rFo=) 3: 323830363a3365323a3a2f33322d3332203d3e20323635353334.roa (hash: ihNtpcOhZ3Lm2+NQFvPdSfbE9tiETpSWGpPB+raqqn4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4f:03:dc:5c:dc:be:6d:41:7f:e7:18:c8:6a:0f:da:9a:55:87:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC Validity Not Before: Oct 20 17:22:56 2025 GMT Not After : Oct 26 01:13:56 2025 GMT Subject: CN=5B00522C2C810CF3590B7A6A037ED7294B23282A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:da:71:04:e0:0b:de:96:38:db:d6:90:bc: 99:a5:5f:49:ff:f5:ad:94:6d:4a:c6:61:94:1d:99: 1c:eb:62:a7:e8:da:37:fd:5d:43:26:61:54:e2:c3: 57:d5:55:a5:69:f9:0e:cf:cc:77:a6:d6:6a:7a:6a: 7d:33:1c:46:15:93:17:05:50:1d:df:aa:7f:1e:03: 2a:82:a4:46:73:f5:10:89:00:77:f9:0c:d1:75:ab: 28:e8:02:e9:80:68:30:fe:f9:f7:aa:33:04:1f:71: 4f:d5:0d:5c:88:ab:d6:2a:6d:f9:6f:e1:02:89:d1: 2d:73:c0:4f:f8:cb:d9:2e:d3:54:9e:4e:96:fc:b0: 2f:56:94:54:de:2a:52:4b:88:ee:b6:9f:9b:c9:7c: 81:c2:7d:c3:ee:11:7f:18:0c:2e:ac:d8:43:36:ba: e9:2f:1a:31:b8:01:e6:d1:30:01:3a:2f:ec:ce:0e: e9:59:06:ba:e8:a8:05:59:ad:dd:60:58:b4:35:d2: 4d:72:09:d2:5a:2e:99:71:ac:10:4b:52:c3:3c:3d: d0:15:fb:bd:aa:6a:d2:9a:62:ce:6e:4b:60:35:4e: 04:f9:3a:75:79:03:d3:f1:15:25:d7:c2:fe:7e:de: c7:c3:73:e9:d5:76:3e:f9:a5:7b:79:c4:25:45:64: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:00:52:2C:2C:81:0C:F3:59:0B:7A:6A:03:7E:D7:29:4B:23:28:2A X509v3 Authority Key Identifier: keyid:2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6d:03:a9:76:0b:c8:69:4c:71:58:b9:43:ee:d1:22:ff:f6: 93:79:8b:a4:b5:3e:42:41:8f:ea:43:c4:cf:4f:1c:32:23:24: 17:90:6e:1d:ad:e6:76:51:d3:e3:0f:2e:a6:76:df:43:23:bf: da:d1:00:20:1c:ad:ff:55:8b:63:4e:89:9f:e7:33:17:52:47: 5d:db:af:73:e9:2e:e9:d6:cd:94:2e:59:da:cb:5d:21:7a:48: 59:5d:24:60:28:4a:32:75:7e:9c:42:6e:cc:45:68:f1:c3:6f: e3:fc:72:e5:22:a4:cc:ef:7d:cf:5d:f5:97:9e:20:82:c3:da: 20:0f:16:61:9d:c6:b1:6a:dd:94:b9:24:79:0f:e4:45:15:75: 21:fd:a8:34:22:f9:3f:a0:56:74:da:02:ad:0c:2b:f2:9e:8e: bb:1a:b6:5b:3b:de:7a:1f:51:cf:8a:77:1f:c9:ba:c9:03:0b: eb:23:3b:6a:22:27:ed:a4:37:a2:e1:52:10:83:b7:86:5c:fe: 20:cb:05:30:93:35:cc:4a:8b:0a:8a:a7:7e:06:7f:44:f6:ce: 8f:e3:af:46:38:68:6a:36:8f:6e:04:5b:40:db:ed:7e:ce:f4: 92:55:5f:a4:49:38:f5:d7:9f:31:00:fd:25:f3:97:25:bb:2a: c4:a6:3e:92 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPE8D3Fzcvm1Bf+cYyGoP2ppVhzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzRTE4QzhEMDQwREQxQzI5RTQyMjM5OUNGMjcxOEM0 RDkxNDdBQzAeFw0yNTEwMjAxNzIyNTZaFw0yNTEwMjYwMTEzNTZaMDMxMTAvBgNV BAMTKDVCMDA1MjJDMkM4MTBDRjM1OTBCN0E2QTAzN0VENzI5NEIyMzI4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGNpxBOAL3pY429aQvJmlX0n/ 9a2UbUrGYZQdmRzrYqfo2jf9XUMmYVTiw1fVVaVp+Q7PzHem1mp6an0zHEYVkxcF UB3fqn8eAyqCpEZz9RCJAHf5DNF1qyjoAumAaDD++feqMwQfcU/VDVyIq9Yqbflv 4QKJ0S1zwE/4y9ku01SeTpb8sC9WlFTeKlJLiO62n5vJfIHCfcPuEX8YDC6s2EM2 uukvGjG4AebRMAE6L+zODulZBrroqAVZrd1gWLQ10k1yCdJaLplxrBBLUsM8PdAV +72qatKaYs5uS2A1TgT5OnV5A9PxFSXXwv5+3sfDc+nVdj75pXt5xCVFZIpDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWwBSLCyBDPNZC3pqA37XKUsjKCowHwYDVR0j BBgwFoAUKj4YyNBA3Rwp5CI5nPJxjE2RR6wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNEI5QjVGMEM0NUY5NEFCNEE0RUUyRjNCRTdEOTgyQ0U0 NEJEQTc3QTk2QTEwRUQ2Q0UwMDFFQUQ3QkQ3MTMzLzAvMkEzRTE4QzhEMDQwREQx QzI5RTQyMjM5OUNGMjcxOEM0RDkxNDdBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQTNFMThDOEQwNDBERDFDMjlF NDIyMzk5Q0YyNzE4QzREOTE0N0FDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTRCOUI1RjBDNDVGOTRBQjRBNEVFMkYzQkU3RDk4MkNFNDRCREE3N0E5 NkExMEVENkNFMDAxRUFEN0JENzEzMy8wLzJBM0UxOEM4RDA0MEREMUMyOUU0MjIz OTlDRjI3MThDNEQ5MTQ3QUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAbQOpdgvIaUxxWLlD7tEi//aT eYuktT5CQY/qQ8TPTxwyIyQXkG4dreZ2UdPjDy6mdt9DI7/a0QAgHK3/VYtjTomf 5zMXUkdd269z6S7p1s2ULlnay10hekhZXSRgKEoydX6cQm7MRWjxw2/j/HLlIqTM 733PXfWXniCCw9ogDxZhncaxat2UuSR5D+RFFXUh/ag0Ivk/oFZ02gKtDCvyno67 GrZbO956H1HPincfybrJAwvrIztqIiftpDei4VIQg7eGXP4gywUwkzXMSosKiqd+ Bn9E9s6P469GOGhqNo9uBFtA2+1+zvSSVV+kSTj1158xAP0l85cluyrEpj6S -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:11 2025 by rpki-client