$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: eeZxTRyE8cvNUPT40vnMwiufK5TCDEZxVdopmW7XaI4= Subject key identifier: 75:70:0A:53:AC:98:1E:93:FB:2D:2B:37:B2:B9:3F:1B:A0:30:63:E3 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 4ADC7EC8956A897E2F60D57BCC36C680A3A89525 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0130 Signing time: Sat 01 Nov 2025 12:13:21 +0000 Manifest this update: Sat 01 Nov 2025 12:08:21 +0000 Manifest next update: Thu 06 Nov 2025 21:31:21 +0000 Files and hashes: 1: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) 2: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: D5D6rF6IWDAKaZ8WnHXI9CnPxRPfgHcPmD6G50PHURA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:dc:7e:c8:95:6a:89:7e:2f:60:d5:7b:cc:36:c6:80:a3:a8:95:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Nov 1 12:08:21 2025 GMT Not After : Nov 6 21:31:21 2025 GMT Subject: CN=75700A53AC981E93FB2D2B37B2B93F1BA03063E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:39:52:04:06:45:8d:6c:f3:2b:05:e9:1f: 3c:39:1c:32:d9:13:72:ad:04:fd:0a:9e:3e:03:7f: 67:51:55:64:f6:b9:2f:41:1e:3a:5a:9f:3e:65:6d: dd:72:d4:c7:8b:40:c1:35:9b:c4:e0:48:21:1d:92: 0b:31:88:15:0a:f9:6a:c8:59:06:6a:37:e7:6c:21: 4b:60:67:3b:f4:27:1e:ed:eb:b7:79:14:95:f1:df: 14:0c:a9:12:f1:be:f9:00:4f:fa:89:cf:8f:b0:2e: 58:4c:44:36:68:aa:f5:9d:d7:89:75:86:ee:f1:16: 16:e7:06:41:d7:15:4d:7a:7f:d2:c2:8d:6c:3b:ea: 78:c4:89:46:5a:cf:b1:30:aa:9c:b4:76:3c:6f:c1: 1f:35:ee:e4:bf:91:ff:20:bf:01:b0:ec:a2:6c:96: a0:2d:45:3a:ef:09:ef:a4:f6:9c:b2:4b:03:a8:72: 20:d3:82:27:9d:e7:73:40:b6:5c:02:cc:0c:d2:34: 97:7c:c3:a9:f1:fd:de:3b:2c:5c:7a:34:b6:b6:ca: bc:d8:82:70:37:37:88:25:35:6d:e4:c6:e2:a7:c2: 35:42:b5:e4:d6:75:d6:c5:56:a7:ab:0e:3e:11:f1: 09:a2:a1:b1:de:1c:0d:f8:77:91:c3:ad:a8:12:8f: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:0A:53:AC:98:1E:93:FB:2D:2B:37:B2:B9:3F:1B:A0:30:63:E3 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ff:83:c6:fd:3a:d6:7c:a2:45:9f:40:50:e2:3e:29:d4:e1: 0e:0e:fb:08:8d:e4:b4:91:e8:28:39:45:26:6b:2b:2e:73:48: b1:08:66:a9:86:61:2f:51:2f:e1:16:47:49:4c:53:e5:e0:80: aa:78:e0:9c:46:2a:9b:9f:31:f1:9f:21:0b:04:d6:5d:eb:50: d3:3e:91:44:b3:88:26:2d:bd:a2:73:cb:d6:5c:76:98:5d:87: 8c:27:88:6f:ca:fb:c4:b1:4f:75:d1:b3:b4:09:a9:19:de:24: 0f:e6:32:26:5f:f8:67:21:f6:a4:ca:92:a2:ff:57:a6:1d:8e: e3:73:a5:c8:db:b0:e4:0d:8d:f6:14:c8:dc:84:ca:91:49:93: a0:c3:5d:09:fe:28:26:2d:32:18:6f:29:c0:b1:f2:8d:1f:32: dc:93:63:dc:be:89:d8:8e:c8:50:a6:6a:ba:e1:48:20:16:0d: 3f:d6:4b:71:41:30:19:33:91:1a:49:2a:45:46:3c:6c:04:b0: be:49:ed:aa:7d:91:07:34:8e:d4:b3:bb:ef:c2:a6:dd:22:ec: 70:14:5e:d2:cf:b3:da:1c:3c:d8:c7:a0:f3:e3:09:1e:f2:d1: 66:05:be:b5:2d:18:be:f3:3a:5d:dc:f5:bf:ab:cc:6c:48:33: da:69:8b:78 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUStx+yJVqiX4vYNV7zDbGgKOolSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTExMDExMjA4MjFaFw0yNTExMDYyMTMxMjFaMDMxMTAvBgNV BAMTKDc1NzAwQTUzQUM5ODFFOTNGQjJEMkIzN0IyQjkzRjFCQTAzMDYzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9DlSBAZFjWzzKwXpHzw5HDLZ E3KtBP0Knj4Df2dRVWT2uS9BHjpanz5lbd1y1MeLQME1m8TgSCEdkgsxiBUK+WrI WQZqN+dsIUtgZzv0Jx7t67d5FJXx3xQMqRLxvvkAT/qJz4+wLlhMRDZoqvWd14l1 hu7xFhbnBkHXFU16f9LCjWw76njEiUZaz7Ewqpy0djxvwR817uS/kf8gvwGw7KJs lqAtRTrvCe+k9pyySwOociDTgied53NAtlwCzAzSNJd8w6nx/d47LFx6NLa2yrzY gnA3N4glNW3kxuKnwjVCteTWddbFVqerDj4R8QmiobHeHA34d5HDragSj/wlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdXAKU6yYHpP7LSs3srk/G6AwY+MwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+/4PG/TrWfKJFn0BQ4j4p1OEO DvsIjeS0kegoOUUmaysuc0ixCGaphmEvUS/hFkdJTFPl4ICqeOCcRiqbnzHxnyEL BNZd61DTPpFEs4gmLb2ic8vWXHaYXYeMJ4hvyvvEsU910bO0CakZ3iQP5jImX/hn IfakypKi/1emHY7jc6XI27DkDY32FMjchMqRSZOgw10J/igmLTIYbynAsfKNHzLc k2PcvonYjshQpmq64UggFg0/1ktxQTAZM5EaSSpFRjxsBLC+Se2qfZEHNI7Us7vv wqbdIuxwFF7Sz7PaHDzYx6Dz4wke8tFmBb61LRi+8zpd3PW/q8xsSDPaaYt4 -----END CERTIFICATE-----Generated at Sat Nov 1 22:43:12 2025 by rpki-client