$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft File: C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft (raw, json) Hash identifier: PUqzrwVMUbfZEBR2/lTEXpt2KL8EZolEeZJtuDSOB/U= Subject key identifier: 2F:94:8F:AB:B6:F6:D2:B9:BF:1C:9F:1D:99:7B:5B:F6:BD:A0:3B:D1 Authority key identifier: C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C Certificate issuer: /CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C Certificate serial: 21BFC5CD0D1FADAA01B7CBB5B528B1E1EE99DFDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft Manifest number: 0134 Signing time: Sat 01 Nov 2025 09:32:00 +0000 Manifest this update: Sat 01 Nov 2025 09:27:00 +0000 Manifest next update: Fri 07 Nov 2025 07:29:00 +0000 Files and hashes: 1: 323830333a653661303a3a2f33322d3438203d3e20323636383932.roa (hash: rpqQ+fbTXXpFhDg1sV0Bpve1Q/WP+0NH+Eu6DaTbvT0=) 2: 34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa (hash: qiQHmUgaKHVJB+drgDZ06FMIaIuUzNB6r1EnWVGGOvU=) 3: C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl (hash: DBxtQA86xkHB3KSI/XrbP5taqW6esuhoU4YYKWLiCXM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:c5:cd:0d:1f:ad:aa:01:b7:cb:b5:b5:28:b1:e1:ee:99:df:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C Validity Not Before: Nov 1 09:27:00 2025 GMT Not After : Nov 7 07:29:00 2025 GMT Subject: CN=2F948FABB6F6D2B9BF1C9F1D997B5BF6BDA03BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:06:e7:67:bb:3f:89:cb:33:a3:e0:c0:fc: fd:72:5b:1c:59:5b:bc:c5:26:d2:6f:68:62:41:55: 24:84:cb:4b:ef:d2:1f:83:72:45:6a:09:c4:14:f0: aa:33:41:27:65:a3:af:d2:8c:a7:7e:5c:c6:87:66: 08:8b:13:ef:ff:53:57:2e:5c:7d:63:67:70:d8:d4: 91:83:89:d6:5c:01:27:b1:13:be:c2:e1:b2:26:0d: fc:81:c9:1e:7a:9c:b6:92:16:83:41:ec:b4:cb:47: b0:5b:d9:87:53:98:48:cb:cb:f2:ec:72:1c:7e:e6: c3:65:4c:03:eb:ef:e5:cf:fe:d0:e2:e4:f7:8a:85: 2b:14:d6:4f:ad:02:b2:56:23:79:10:72:2e:54:8f: 68:83:a0:cc:7b:49:18:d6:65:bf:e3:5b:02:b7:67: 73:f7:3c:47:a0:d8:6b:13:32:4d:e4:31:fa:3e:fc: d2:b1:08:be:b5:59:bd:be:af:63:e8:21:d6:17:e8: 71:81:4d:14:9f:e0:a0:d3:f6:c6:cd:0d:3f:8c:e5: b5:17:fc:b5:6e:a4:fe:d7:58:fe:94:0f:35:4d:f2: cc:17:59:9f:ab:d5:8a:c4:cc:6d:40:a0:34:b2:2e: af:31:f5:8e:53:62:04:a9:49:65:3f:be:af:9c:cf: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:94:8F:AB:B6:F6:D2:B9:BF:1C:9F:1D:99:7B:5B:F6:BD:A0:3B:D1 X509v3 Authority Key Identifier: keyid:C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:22:5a:cf:c6:e9:73:dd:22:84:3f:57:07:27:31:4d:29:e9: ac:b2:51:1d:39:bc:5f:b0:f4:b9:17:46:f3:74:0d:c5:d8:4b: f6:52:f5:a2:98:58:93:dd:69:79:17:ab:39:38:7d:fc:da:fb: c4:77:6e:1c:a9:fd:cf:50:9d:7f:12:ee:a0:a6:25:a7:2e:1d: 40:85:37:e4:95:e8:0b:dd:29:4f:13:93:51:07:cd:91:1f:e5: 6b:9f:19:4f:1e:75:65:9b:81:db:d2:2d:7b:eb:3c:a0:ca:96: 01:64:38:8d:fe:73:f6:3a:0b:fc:d3:82:9c:6a:a7:c8:6b:0d: ad:b1:48:28:9f:6b:b5:7a:3b:9c:da:09:fc:77:9a:15:a5:8e: 35:a0:f1:5a:e2:28:9f:2f:c8:0c:d0:be:6a:1f:16:f6:1a:02: 5d:4d:5a:fc:f3:fd:c4:7c:84:2b:f1:1f:22:28:11:02:c7:2f: 3f:1f:e3:60:04:62:2c:0d:41:4f:1e:57:3e:a8:1c:33:81:06: 60:aa:5f:ff:9c:29:36:6d:4b:b5:26:1d:4a:e8:d4:05:46:c1: 9e:82:27:a9:24:af:f7:e4:24:30:1e:27:83:fa:6b:be:92:7f: 16:63:22:6f:ad:77:4f:d7:2d:ae:69:ed:e5:9e:e1:66:50:df: 8a:d1:12:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIb/FzQ0fraoBt8u1tSix4e6Z394wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0NDBBMzlGODVEOERDMkE5OUQwQzVGNTRFMkFFM0Ey MTM0N0UxQzAeFw0yNTExMDEwOTI3MDBaFw0yNTExMDcwNzI5MDBaMDMxMTAvBgNV BAMTKDJGOTQ4RkFCQjZGNkQyQjlCRjFDOUYxRDk5N0I1QkY2QkRBMDNCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoZwbnZ7s/icszo+DA/P1yWxxZ W7zFJtJvaGJBVSSEy0vv0h+DckVqCcQU8KozQSdlo6/SjKd+XMaHZgiLE+//U1cu XH1jZ3DY1JGDidZcASexE77C4bImDfyByR56nLaSFoNB7LTLR7Bb2YdTmEjLy/Ls chx+5sNlTAPr7+XP/tDi5PeKhSsU1k+tArJWI3kQci5Uj2iDoMx7SRjWZb/jWwK3 Z3P3PEeg2GsTMk3kMfo+/NKxCL61Wb2+r2PoIdYX6HGBTRSf4KDT9sbNDT+M5bUX /LVupP7XWP6UDzVN8swXWZ+r1YrEzG1AoDSyLq8x9Y5TYgSpSWU/vq+czwWDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUL5SPq7b20rm/HJ8dmXtb9r2gO9EwHwYDVR0j BBgwFoAUyUQKOfhdjcKpnQxfVOKuOiE0fhwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNzhBM0NDRjU3MUM1OUVFQjY2QzZGNDQyODY3NzFCRTFF QTZDRjk5RjVCM0U0NDhDRUE2MjA1RUI2QkUwM0U0LzAvQzk0NDBBMzlGODVEOERD MkE5OUQwQzVGNTRFMkFFM0EyMTM0N0UxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOTQ0MEEzOUY4NUQ4REMyQTk5 RDBDNUY1NEUyQUUzQTIxMzQ3RTFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTc4QTNDQ0Y1NzFDNTlFRUI2NkM2RjQ0Mjg2NzcxQkUxRUE2Q0Y5OUY1 QjNFNDQ4Q0VBNjIwNUVCNkJFMDNFNC8wL0M5NDQwQTM5Rjg1RDhEQzJBOTlEMEM1 RjU0RTJBRTNBMjEzNDdFMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/IlrPxulz3SKEP1cHJzFNKems slEdObxfsPS5F0bzdA3F2Ev2UvWimFiT3Wl5F6s5OH382vvEd24cqf3PUJ1/Eu6g piWnLh1AhTfklegL3SlPE5NRB82RH+VrnxlPHnVlm4Hb0i176zygypYBZDiN/nP2 Ogv804KcaqfIaw2tsUgon2u1ejuc2gn8d5oVpY41oPFa4iifL8gM0L5qHxb2GgJd TVr88/3EfIQr8R8iKBECxy8/H+NgBGIsDUFPHlc+qBwzgQZgql//nCk2bUu1Jh1K 6NQFRsGegiepJK/35CQwHieD+mu+kn8WYyJvrXdP1y2uae3lnuFmUN+K0RJc -----END CERTIFICATE-----Generated at Sat Nov 1 19:19:00 2025 by rpki-client