$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft File: 3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft (raw, json) Hash identifier: 2UB/TA+sJio0BxGkLAdPKtPKWD1+wwjzRWMIH1JBGpY= Subject key identifier: CE:7F:50:4C:B8:5C:81:BB:20:24:64:D8:74:2D:0C:8A:60:34:6A:E5 Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44 Certificate issuer: /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844 Certificate serial: 038E3C9109A34B7A811B3485D4C5BE46CCA2D31F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft Manifest number: 0131 Signing time: Fri 31 Oct 2025 21:24:49 +0000 Manifest this update: Fri 31 Oct 2025 21:19:49 +0000 Manifest next update: Thu 06 Nov 2025 05:59:49 +0000 Files and hashes: 1: 3137302e38342e3233322e302f32322d3234203d3e203634313030.roa (hash: 8616LCUlLpSCU/FHkGg6mNE4uqtlKqB9JxBLiJmBxtA=) 2: 323830333a646234303a3a2f33322d3438203d3e203634313030.roa (hash: IvK/tzZWY20X84VR+1N23+el+EZZLoH3kHNGtQwQW20=) 3: 3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl (hash: WbSLQdGhaDBjy3R5QmsRpUYeLyS2csD11bTuALvefJw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8e:3c:91:09:a3:4b:7a:81:1b:34:85:d4:c5:be:46:cc:a2:d3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844 Validity Not Before: Oct 31 21:19:49 2025 GMT Not After : Nov 6 05:59:49 2025 GMT Subject: CN=CE7F504CB85C81BB202464D8742D0C8A60346AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:91:59:3d:c8:9c:7f:c0:80:81:f2:55:55: 58:94:88:f4:f8:5f:0f:b3:53:d8:72:b0:05:8d:8e: 79:73:73:51:26:c0:c6:d5:5c:47:58:0f:28:bc:f5: 5d:63:46:01:16:64:fa:57:46:65:29:9f:49:d2:37: 22:f4:04:f0:3f:69:4b:d6:e7:7b:28:55:83:46:dc: 77:06:ed:fb:c2:b7:20:3d:fd:72:24:5a:ff:5f:fa: c6:3e:6f:c8:f0:19:dd:fd:b8:64:49:e7:e2:a4:44: bc:54:ee:24:36:92:b9:93:e2:7d:0b:64:ec:23:fc: 14:4a:de:93:55:13:b8:c4:5d:8d:1f:c1:a8:60:df: 57:82:19:39:47:74:ff:e6:13:de:ab:83:96:49:f9: 8e:b0:4d:46:10:e0:e4:9a:14:4a:66:2d:40:ba:6f: 91:00:1b:b9:89:cd:80:f7:52:9e:15:16:9b:7b:98: b9:8c:7b:ad:c0:66:14:c9:f8:55:10:f1:9e:67:95: 70:89:79:37:26:2a:ab:76:40:52:95:c5:b7:80:c4: 0b:04:97:ea:c4:68:e9:8c:74:19:07:68:88:d7:c1: 84:f6:f2:f2:98:94:ef:83:c8:4d:37:84:31:40:87: 13:5d:32:a0:60:5f:e2:d9:38:f1:be:5a:b6:5a:ab: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7F:50:4C:B8:5C:81:BB:20:24:64:D8:74:2D:0C:8A:60:34:6A:E5 X509v3 Authority Key Identifier: keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0e:3f:49:5c:c9:30:e0:67:e8:ea:6d:92:0d:ae:90:a8:a9: 6e:be:7e:1a:81:a7:ce:7b:cd:06:13:37:1e:d6:1e:5c:53:b8: 52:73:27:cb:9a:48:03:44:89:7c:3f:e1:c9:a7:d4:bd:87:de: bd:3f:b6:90:6a:97:d7:86:37:bd:53:ac:c1:18:d7:b3:4f:64: 62:10:4f:d7:8c:b4:12:7f:1d:7e:4e:69:81:6e:c7:86:bf:3b: 9e:55:8d:d7:20:1b:9c:66:3c:d5:3b:80:55:db:d7:fb:cf:42: 48:32:79:5c:8e:b6:18:85:16:ef:f5:a7:2c:45:4f:37:00:f2: 3b:3e:cc:40:4b:3e:ba:88:41:91:d3:38:c0:d0:9e:f0:2a:c4: 98:e8:fb:b8:d2:49:53:5e:3f:c5:d2:f0:35:98:78:66:4b:26: fa:c0:ad:b1:da:8a:a2:53:88:83:d0:ce:48:65:03:88:29:17: 14:27:c9:3a:e6:01:4e:4c:06:67:5a:f7:a8:d8:27:c4:2a:04: 03:6e:ca:a2:36:dd:ef:49:63:79:05:59:0f:00:da:47:7c:b2: 1e:71:29:04:a1:16:fe:1a:64:9a:da:81:e3:8e:68:52:f9:3d: 39:59:ba:a2:ae:98:45:c9:59:54:0c:f2:b5:c7:7f:a9:74:f9: d5:8a:d8:98 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUA448kQmjS3qBGzSF1MW+Rsyi0x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCMjNFNkZCQzFCNTY4RkQ0NzhGODIyMThBMkI1QTlB OTBFQzg0NDAeFw0yNTEwMzEyMTE5NDlaFw0yNTExMDYwNTU5NDlaMDMxMTAvBgNV BAMTKENFN0Y1MDRDQjg1QzgxQkIyMDI0NjREODc0MkQwQzhBNjAzNDZBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfP5FZPcicf8CAgfJVVViUiPT4 Xw+zU9hysAWNjnlzc1EmwMbVXEdYDyi89V1jRgEWZPpXRmUpn0nSNyL0BPA/aUvW 53soVYNG3HcG7fvCtyA9/XIkWv9f+sY+b8jwGd39uGRJ5+KkRLxU7iQ2krmT4n0L ZOwj/BRK3pNVE7jEXY0fwahg31eCGTlHdP/mE96rg5ZJ+Y6wTUYQ4OSaFEpmLUC6 b5EAG7mJzYD3Up4VFpt7mLmMe63AZhTJ+FUQ8Z5nlXCJeTcmKqt2QFKVxbeAxAsE l+rEaOmMdBkHaIjXwYT28vKYlO+DyE03hDFAhxNdMqBgX+LZOPG+WrZaqwdzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzn9QTLhcgbsgJGTYdC0MimA0auUwHwYDVR0j BBgwFoAUPLI+b7wbVo/UePgiGKK1qakOyEQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85Q0ZFQUYyQzkxQUIxQzM0OTkzQzMxMTI5MUNFNTBBM0Y5 QjhGRjZGRTRBRUUzRTlEQ0U0RDQzQjQ4MTk3MDJBLzAvM0NCMjNFNkZCQzFCNTY4 RkQ0NzhGODIyMThBMkI1QTlBOTBFQzg0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0IyM0U2RkJDMUI1NjhGRDQ3 OEY4MjIxOEEyQjVBOUE5MEVDODQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUNGRUFGMkM5MUFCMUMzNDk5M0MzMTEyOTFDRTUwQTNGOUI4RkY2RkU0 QUVFM0U5RENFNEQ0M0I0ODE5NzAyQS8wLzNDQjIzRTZGQkMxQjU2OEZENDc4Rjgy MjE4QTJCNUE5QTkwRUM4NDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2Dj9JXMkw4Gfo6m2SDa6QqKlu vn4agafOe80GEzce1h5cU7hScyfLmkgDRIl8P+HJp9S9h969P7aQapfXhje9U6zB GNezT2RiEE/XjLQSfx1+TmmBbseGvzueVY3XIBucZjzVO4BV29f7z0JIMnlcjrYY hRbv9acsRU83API7PsxASz66iEGR0zjA0J7wKsSY6Pu40klTXj/F0vA1mHhmSyb6 wK2x2oqiU4iD0M5IZQOIKRcUJ8k65gFOTAZnWveo2CfEKgQDbsqiNt3vSWN5BVkP ANpHfLIecSkEoRb+GmSa2oHjjmhS+T05WbqirphFyVlUDPK1x3+pdPnVitiY -----END CERTIFICATE-----Generated at Sun Nov 2 10:26:16 2025 by rpki-client