$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft File: 402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft (raw, json) Hash identifier: N2pztCsOxOyW72oPS7Q/z+dQgdrw67vyduhKDQsz8qk= Subject key identifier: E4:52:44:AF:89:4B:D6:51:16:DB:C6:18:82:45:63:77:0D:33:97:A0 Authority key identifier: 40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74 Certificate issuer: /CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374 Certificate serial: 6F7BEF4413D8D655008D2321A0585CEE7057172D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft Manifest number: 0125 Signing time: Fri 24 Oct 2025 07:09:06 +0000 Manifest this update: Fri 24 Oct 2025 07:04:06 +0000 Manifest next update: Wed 29 Oct 2025 09:01:06 +0000 Files and hashes: 1: 3137372e3132362e33362e302f32322d3234203d3e203634313134.roa (hash: EkNUzbH+eIILY5TXllys7CflSV6642bjM0aT5i+EASo=) 2: 402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl (hash: fsKA7ubDscGR5B3SSLRwU9e5w9JPRWqVz4FqJMCPoRg=) 3: 323830333a613431303a3a2f33322d3438203d3e203634313134.roa (hash: wUH/nQgJ4RCIJGBr5QzWN9bv6cmXEhYRkxM8RmVHm3I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Oct 2025 12:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7b:ef:44:13:d8:d6:55:00:8d:23:21:a0:58:5c:ee:70:57:17:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374 Validity Not Before: Oct 24 07:04:06 2025 GMT Not After : Oct 29 09:01:06 2025 GMT Subject: CN=E45244AF894BD65116DBC618824563770D3397A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:25:2d:b6:ac:83:c3:d7:c0:bd:de:02:80:1a: 84:79:27:b5:37:a2:24:3c:22:42:3e:99:a4:71:ad: 02:8e:a8:8c:e4:17:1c:a7:eb:1f:90:06:f2:25:86: 8b:44:4a:81:01:cc:c6:76:4a:30:b0:68:0c:98:b8: e2:5e:2d:7b:27:a9:3f:9a:4e:cd:fe:54:3b:b4:7d: 7d:6b:e2:01:ae:87:7f:00:75:75:b6:2a:2e:b5:e8: 05:4b:d0:ee:c4:17:c1:14:bf:ac:69:bf:82:3f:98: 93:5c:da:e4:f8:b7:90:ef:85:97:ff:0f:81:d1:db: 27:bd:ef:54:6c:1a:13:6e:4d:fe:9e:a3:bb:6f:ab: 1b:b9:ce:fe:ea:3e:ba:f5:3b:98:3e:29:d4:10:a3: 8e:d0:bb:24:94:fe:a2:44:8b:c4:e3:19:31:ea:ba: cd:0a:f4:e2:25:e9:dc:2c:f9:41:74:8f:b7:f0:2f: 98:e2:1a:68:a7:61:6c:25:bf:44:d3:59:b2:0f:9a: f2:4a:24:b8:a5:e1:4d:9c:1e:1c:10:a7:bf:8d:61: 54:15:0f:e6:6f:dc:6e:94:e9:38:0f:fc:90:76:98: 42:5a:a1:a5:ca:0f:4f:8f:74:76:5b:6c:89:4e:51: 99:3f:ee:55:d3:0c:b5:4e:0d:02:e2:a2:d9:31:bc: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:52:44:AF:89:4B:D6:51:16:DB:C6:18:82:45:63:77:0D:33:97:A0 X509v3 Authority Key Identifier: keyid:40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ff:28:a9:ec:45:66:26:22:aa:c1:7e:67:4f:ae:9d:c7:a9: d7:87:c7:e9:54:71:9e:04:3c:a4:f2:da:5d:c6:d1:69:0a:75: cc:6d:c7:d9:c5:64:48:77:10:13:73:51:ce:c2:74:f5:24:33: 6a:83:99:37:81:81:3e:72:fb:dc:b8:6e:9c:f3:ab:23:67:6a: 12:45:2c:29:75:ca:c6:74:80:f6:98:21:a6:c1:64:b9:45:70: 36:d2:7e:b7:01:70:77:73:8d:fc:93:eb:02:7d:7f:39:30:20: df:a9:bb:44:00:df:69:58:ec:2b:5d:b0:9e:fd:bd:f9:4d:2a: 3f:88:3b:60:61:b5:f9:d3:a9:3b:f3:dc:86:9e:bb:fe:4c:9f: 59:a9:4a:bc:83:93:0a:fd:6f:1d:d0:29:ff:c9:43:d8:40:25: b9:e5:ce:a5:91:48:77:01:7e:2e:7f:a8:ed:50:06:d8:85:5e: 61:56:84:bf:89:99:1c:12:bd:1d:a6:3e:22:e7:65:7f:2f:0f: c1:08:e9:c8:e2:e1:9b:5b:82:58:ca:5c:75:0b:ca:cd:99:87: 94:ea:4b:e7:38:ad:18:1f:80:5a:ad:25:db:02:72:f3:c9:ae: fa:0e:ac:ee:b4:03:3d:28:21:dd:5d:2d:b3:38:49:12:0c:ea: 88:14:2c:89 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUb3vvRBPY1lUAjSMhoFhc7nBXFy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRUUxRDlCMDZGRjk5MDkwQUIyNUNBQTI4NkFCQzBF NTZCQjM3NDAeFw0yNTEwMjQwNzA0MDZaFw0yNTEwMjkwOTAxMDZaMDMxMTAvBgNV BAMTKEU0NTI0NEFGODk0QkQ2NTExNkRCQzYxODgyNDU2Mzc3MEQzMzk3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJS22rIPD18C93gKAGoR5J7U3 oiQ8IkI+maRxrQKOqIzkFxyn6x+QBvIlhotESoEBzMZ2SjCwaAyYuOJeLXsnqT+a Ts3+VDu0fX1r4gGuh38AdXW2Ki616AVL0O7EF8EUv6xpv4I/mJNc2uT4t5DvhZf/ D4HR2ye971RsGhNuTf6eo7tvqxu5zv7qPrr1O5g+KdQQo47QuySU/qJEi8TjGTHq us0K9OIl6dws+UF0j7fwL5jiGminYWwlv0TTWbIPmvJKJLil4U2cHhwQp7+NYVQV D+Zv3G6U6TgP/JB2mEJaoaXKD0+PdHZbbIlOUZk/7lXTDLVODQLiotkxvNyXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5FJEr4lL1lEW28YYgkVjdw0zl6AwHwYDVR0j BBgwFoAUQC7h2bBv+ZCQqyXKooarwOVrs3QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xREVDNjg4Q0UxQkM3RTFFRUFGM0Y4MjY3NzA3OEM5QTI1 M0ZDNjUzNzI2OTBGNkU3QjE0NUVDOUI4NENDNDUyLzAvNDAyRUUxRDlCMDZGRjk5 MDkwQUIyNUNBQTI4NkFCQzBFNTZCQjM3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDJFRTFEOUIwNkZGOTkwOTBB QjI1Q0FBMjg2QUJDMEU1NkJCMzc0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMURFQzY4OENFMUJDN0UxRUVBRjNGODI2NzcwNzhDOUEyNTNGQzY1Mzcy NjkwRjZFN0IxNDVFQzlCODRDQzQ1Mi8wLzQwMkVFMUQ5QjA2RkY5OTA5MEFCMjVD QUEyODZBQkMwRTU2QkIzNzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBl/yip7EVmJiKqwX5nT66dx6nX h8fpVHGeBDyk8tpdxtFpCnXMbcfZxWRIdxATc1HOwnT1JDNqg5k3gYE+cvvcuG6c 86sjZ2oSRSwpdcrGdID2mCGmwWS5RXA20n63AXB3c438k+sCfX85MCDfqbtEAN9p WOwrXbCe/b35TSo/iDtgYbX506k789yGnrv+TJ9ZqUq8g5MK/W8d0Cn/yUPYQCW5 5c6lkUh3AX4uf6jtUAbYhV5hVoS/iZkcEr0dpj4i52V/Lw/BCOnI4uGbW4JYylx1 C8rNmYeU6kvnOK0YH4BarSXbAnLzya76DqzutAM9KCHdXS2zOEkSDOqIFCyJ -----END CERTIFICATE-----Generated at Sat Oct 25 08:27:40 2025 by rpki-client