$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft File: 37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft (raw, json) Hash identifier: PFC+ThhkfhbEW9a1TFLgGpQiV5mAV344xTuLuF2gKdY= Subject key identifier: A9:B9:19:4E:2D:9E:A0:F4:F9:86:D7:18:CD:42:F8:56:78:DB:20:3F Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E Certificate issuer: /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E Certificate serial: 4B9C9871D7A06AF4EBD9BE756D016CA55AD7DA35 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft Manifest number: 0129 Signing time: Sat 01 Nov 2025 11:38:04 +0000 Manifest this update: Sat 01 Nov 2025 11:33:04 +0000 Manifest next update: Wed 05 Nov 2025 15:50:04 +0000 Files and hashes: 1: 37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl (hash: C+HTpdXjorOMymPd/RDEtjcSw4whjlI5E5xoFcbLcJc=) 2: 323830333a383330303a3a2f33322d3438203d3e203139353832.roa (hash: G46ge1inQ+2DaFD3fWsegIrJ6pID2mRIgNq/nP14+D0=) 3: 3230302e3131352e33322e302f32302d3234203d3e203139353832.roa (hash: xsAQRSBKUlYN4m2Glv4+4wdfbKQuExeBWibSJx81qXQ=) 4: 3230302e3131352e34322e302f32332d3234203d3e203237373834.roa (hash: pxyWasIKdszGadocvsBttqBLBVHoxeSWVtaJq1+oE90=) 5: 3230302e3131352e34312e302f32342d3234203d3e203532333435.roa (hash: hSVdINcDcPVuQRdItapxty5I0JYdEQQi1+Pa5ucavJU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9c:98:71:d7:a0:6a:f4:eb:d9:be:75:6d:01:6c:a5:5a:d7:da:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E Validity Not Before: Nov 1 11:33:04 2025 GMT Not After : Nov 5 15:50:04 2025 GMT Subject: CN=A9B9194E2D9EA0F4F986D718CD42F85678DB203F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:7d:3f:c9:ca:8a:36:99:25:77:79:6b:cf: 85:0f:94:56:d1:80:24:8e:ce:5c:05:20:2d:80:bc: 75:ea:5d:c2:d2:db:fb:a8:46:ea:c0:53:62:4f:a3: c6:ea:5c:85:c2:93:ad:c4:77:60:75:52:ee:6c:80: 70:0e:75:e1:f3:0b:7a:ac:70:1c:30:1e:b9:90:ef: 74:88:df:f2:8c:65:59:82:17:02:99:99:92:bd:34: 9a:74:30:9c:ef:f6:18:07:9f:26:0b:10:77:05:c6: a2:b9:b4:ff:ac:29:44:c6:8f:dd:fd:3c:30:a5:49: 54:be:b1:2e:6a:46:96:80:63:d9:dd:d3:46:05:45: 63:20:ee:ca:7a:f0:8d:aa:92:67:ad:54:f9:8e:2c: 23:4c:62:79:15:df:ab:e0:2c:86:7c:96:4e:fb:4c: 0d:a6:3b:d4:88:18:30:17:ec:57:0f:a2:44:5b:88: ed:9a:ad:a4:8e:44:95:85:cf:ab:2b:c7:31:94:f1: a9:d4:54:98:8e:08:b0:51:53:4d:a0:a6:51:ae:e7: eb:4b:22:b0:a9:1e:d8:83:ce:d9:c3:46:21:d6:59: d7:06:73:8f:c0:c3:d5:19:b9:25:c7:9f:c7:36:7b: b8:d5:86:4f:cc:a6:7e:a5:b7:7c:93:19:87:bc:41: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B9:19:4E:2D:9E:A0:F4:F9:86:D7:18:CD:42:F8:56:78:DB:20:3F X509v3 Authority Key Identifier: keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:73:50:ff:2e:d3:40:c9:6a:91:c4:41:97:7f:1f:78:c7:a7: fb:a2:96:25:5c:05:54:e2:ae:a0:09:c0:59:3c:20:f1:f4:cb: 72:d0:d6:3f:13:43:3e:ec:61:6b:87:32:76:79:49:07:d2:2c: 4a:5b:e2:0b:f9:d7:3a:b4:6e:70:c3:ae:90:e4:7f:9d:4f:0f: 0f:95:34:4d:09:76:e7:c5:f5:93:29:7a:87:01:0b:92:8e:0b: b3:17:d8:63:fb:9e:9b:3f:1d:12:19:84:cd:ab:f5:d5:43:45: b2:53:bb:a7:20:e9:29:9e:7a:cd:f3:df:2f:2f:bd:ad:a7:94: 05:78:13:8c:e9:0d:8d:7d:48:19:9f:37:00:25:28:a7:87:75: 9d:36:5f:80:61:8a:fd:53:0e:7e:84:de:a3:27:ec:89:40:b4: 58:3b:a8:1b:45:3a:29:41:38:1d:ae:b4:26:09:9a:bb:65:8d: a9:0c:91:e8:fb:2d:01:f7:90:ff:16:66:af:64:66:23:a5:07: 08:96:6d:5d:af:e6:eb:61:9d:04:d5:78:59:ad:1b:1c:fd:68: 69:70:97:f5:2e:33:6a:28:eb:c2:98:37:56:be:09:ea:d6:6c: 9c:3c:2a:3f:22:f0:38:df:0a:69:fa:2e:24:87:1b:ed:a0:f3: 69:b8:29:11 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUS5yYcdegavTr2b51bQFspVrX2jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdEMkM2QzZCNkZERkE0MDAzRkQzRUZERDJBRUY0MEJG QTkzQ0I5RTAeFw0yNTExMDExMTMzMDRaFw0yNTExMDUxNTUwMDRaMDMxMTAvBgNV BAMTKEE5QjkxOTRFMkQ5RUEwRjRGOTg2RDcxOENENDJGODU2NzhEQjIwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopX0/ycqKNpkld3lrz4UPlFbR gCSOzlwFIC2AvHXqXcLS2/uoRurAU2JPo8bqXIXCk63Ed2B1Uu5sgHAOdeHzC3qs cBwwHrmQ73SI3/KMZVmCFwKZmZK9NJp0MJzv9hgHnyYLEHcFxqK5tP+sKUTGj939 PDClSVS+sS5qRpaAY9nd00YFRWMg7sp68I2qkmetVPmOLCNMYnkV36vgLIZ8lk77 TA2mO9SIGDAX7FcPokRbiO2araSORJWFz6srxzGU8anUVJiOCLBRU02gplGu5+tL IrCpHtiDztnDRiHWWdcGc4/Aw9UZuSXHn8c2e7jVhk/Mpn6lt3yTGYe8QYehAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqbkZTi2eoPT5htcYzUL4VnjbID8wHwYDVR0j BBgwFoAUN9LGxrb9+kAD/T790q70C/qTy54wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQkUzRTBBRDMwRTY1OEMyOTFCMkI0QUZFQUMzRUFDM0Ey MjJGMUJGOURDQTg2NDE0NTdDQjhEODFBMzRCNjY5LzAvMzdEMkM2QzZCNkZERkE0 MDAzRkQzRUZERDJBRUY0MEJGQTkzQ0I5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zN0QyQzZDNkI2RkRGQTQwMDNG RDNFRkREMkFFRjQwQkZBOTNDQjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0JFM0UwQUQzMEU2NThDMjkxQjJCNEFGRUFDM0VBQzNBMjIyRjFCRjlE Q0E4NjQxNDU3Q0I4RDgxQTM0QjY2OS8wLzM3RDJDNkM2QjZGREZBNDAwM0ZEM0VG REQyQUVGNDBCRkE5M0NCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGc1D/LtNAyWqRxEGXfx94x6f7 opYlXAVU4q6gCcBZPCDx9Mty0NY/E0M+7GFrhzJ2eUkH0ixKW+IL+dc6tG5ww66Q 5H+dTw8PlTRNCXbnxfWTKXqHAQuSjguzF9hj+56bPx0SGYTNq/XVQ0WyU7unIOkp nnrN898vL72tp5QFeBOM6Q2NfUgZnzcAJSinh3WdNl+AYYr9Uw5+hN6jJ+yJQLRY O6gbRTopQTgdrrQmCZq7ZY2pDJHo+y0B95D/FmavZGYjpQcIlm1dr+brYZ0E1XhZ rRsc/WhpcJf1LjNqKOvCmDdWvgnq1mycPCo/IvA43wpp+i4khxvtoPNpuCkR -----END CERTIFICATE-----Generated at Sat Nov 1 22:47:15 2025 by rpki-client