$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft File: 3424CAC085E77B82A8878925FC49A646944DB380.mft (raw, json) Hash identifier: dsm9A/PUBAw+vX/lvzw44jL0IaBf3VY5soFzteoxS/Y= Subject key identifier: 41:75:24:0D:F4:8F:D1:F9:A9:DB:2A:B0:F3:84:E1:3D:2A:36:49:3D Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80 Certificate issuer: /CN=3424CAC085E77B82A8878925FC49A646944DB380 Certificate serial: 20A1721965B5E6599FE5C8B55CFD56D068DDDC27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft Manifest number: 0138 Signing time: Mon 10 Nov 2025 06:03:00 +0000 Manifest this update: Mon 10 Nov 2025 05:58:00 +0000 Manifest next update: Sun 16 Nov 2025 00:29:00 +0000 Files and hashes: 1: 323830333a666634303a3a2f33322d3332203d3e20323633373939.roa (hash: P8b7ZOEerp/NGHhCOgMX088+SfPKoRjkexqL8HKe8+4=) 2: 3424CAC085E77B82A8878925FC49A646944DB380.crl (hash: Y0Alqjla84BMR2DbvxDs1648Rj5WijbfW7sUFt5jGv0=) 3: 3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa (hash: 256L5xAhaOtJaHtIXft9UY+WCURmLfsxx/fWc1QYxOY=) 4: 3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa (hash: EXnLTY5U73HI8SEYhr8O6uuT4l4emJMRsqDGEG/d054=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 16 Nov 2025 00:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a1:72:19:65:b5:e6:59:9f:e5:c8:b5:5c:fd:56:d0:68:dd:dc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380 Validity Not Before: Nov 10 05:58:00 2025 GMT Not After : Nov 16 00:29:00 2025 GMT Subject: CN=4175240DF48FD1F9A9DB2AB0F384E13D2A36493D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:fe:48:d3:69:6f:a8:a3:a0:26:30:7a:2f: ec:c1:0e:71:67:37:ef:1d:99:99:21:81:e7:ff:3b: a2:a7:19:15:5e:f5:45:29:e6:d2:ba:35:07:fc:e6: ae:c9:cb:b9:63:be:f0:03:21:cd:e3:9b:2e:6e:af: a7:d6:43:1a:de:68:11:1b:b8:c7:c4:3c:7a:3b:4d: 28:49:c9:33:a3:f5:77:ef:68:c1:46:a8:f3:21:ec: 91:45:af:b3:4a:7b:23:fe:b7:af:d8:98:5a:53:d6: 32:74:c6:27:4d:f5:0a:ed:a3:94:36:88:c6:ce:21: c1:8d:0a:bc:42:d0:dd:56:78:6c:29:83:29:a1:ba: a6:50:c1:6e:92:74:cb:ed:ee:09:9b:13:dd:72:94: 26:50:7d:81:07:09:14:65:cc:60:cb:c7:06:45:11: 63:24:32:bb:77:28:7b:0f:52:8b:38:7f:a0:e2:ad: c4:fc:33:14:2a:a0:ca:11:e2:5e:95:b9:de:b5:71: 37:b8:31:45:e0:15:d8:e5:3a:c2:44:78:7b:04:2f: 5f:cc:8a:a8:cc:cd:02:9c:68:aa:ce:67:77:15:13: a7:68:57:d1:b6:ec:12:bb:41:56:b1:5a:b2:ef:a4: de:56:50:d5:3d:ec:c9:0a:e1:3c:5c:70:8b:f2:a8: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:75:24:0D:F4:8F:D1:F9:A9:DB:2A:B0:F3:84:E1:3D:2A:36:49:3D X509v3 Authority Key Identifier: keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1d:49:f7:d8:ee:9b:34:ff:10:c2:fd:ee:55:1c:7e:5f:8d: 21:fb:9d:7f:9a:6a:f7:57:57:45:81:02:c7:e4:f0:66:bf:3c: 11:fa:f8:2f:0d:53:23:01:7d:6c:a2:86:3a:4d:96:60:e2:a8: cb:99:92:f9:89:34:c0:98:6d:db:62:9c:82:bf:ed:77:a8:e6: 6f:d7:ac:9e:8b:cf:91:c6:56:ec:67:00:67:5e:20:22:e2:51: 31:3c:b5:ff:da:4c:79:2e:ca:c0:31:af:9c:9f:1d:c3:3d:e0: 06:4f:56:84:0c:a9:ab:dc:05:d4:6d:2f:83:c7:6e:75:05:cf: aa:56:53:99:e1:d8:7a:d8:32:49:cc:8e:7f:18:f9:49:48:73: 46:7c:ac:6c:30:79:ef:24:f4:28:7b:49:56:49:35:11:bb:99: b0:24:4f:0e:f7:c9:cf:30:3d:cf:13:81:64:56:31:5f:57:ed: 61:ce:e1:c2:4e:3e:38:59:c9:5f:36:2c:42:56:64:a1:9c:5a: 6b:54:7d:f0:71:a1:8c:61:78:c9:2a:f8:cf:12:bb:27:b4:ed: fb:aa:6f:49:7e:08:10:97:86:d3:68:56:02:28:82:16:fb:84: 15:74:c6:b7:b8:b0:bd:ee:6d:7f:87:42:be:0a:6a:4d:08:0e: 90:2a:7b:db -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIKFyGWW15lmf5ci1XP1W0Gjd3CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyNENBQzA4NUU3N0I4MkE4ODc4OTI1RkM0OUE2NDY5 NDREQjM4MDAeFw0yNTExMTAwNTU4MDBaFw0yNTExMTYwMDI5MDBaMDMxMTAvBgNV BAMTKDQxNzUyNDBERjQ4RkQxRjlBOURCMkFCMEYzODRFMTNEMkEzNjQ5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Gf5I02lvqKOgJjB6L+zBDnFn N+8dmZkhgef/O6KnGRVe9UUp5tK6NQf85q7Jy7ljvvADIc3jmy5ur6fWQxreaBEb uMfEPHo7TShJyTOj9XfvaMFGqPMh7JFFr7NKeyP+t6/YmFpT1jJ0xidN9Qrto5Q2 iMbOIcGNCrxC0N1WeGwpgymhuqZQwW6SdMvt7gmbE91ylCZQfYEHCRRlzGDLxwZF EWMkMrt3KHsPUos4f6DircT8MxQqoMoR4l6Vud61cTe4MUXgFdjlOsJEeHsEL1/M iqjMzQKcaKrOZ3cVE6doV9G27BK7QVaxWrLvpN5WUNU97MkK4TxccIvyqDuBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQXUkDfSP0fmp2yqw84ThPSo2ST0wHwYDVR0j BBgwFoAUNCTKwIXne4Koh4kl/EmmRpRNs4AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yM0ZBNDA4OENEOUNDQUMxQ0U3NkZDMERGMDhDRjdBOTBF QTkzOEJGNURBRDUzQkU4ODlFQjk4MUE0NEU4QTYxLzAvMzQyNENBQzA4NUU3N0I4 MkE4ODc4OTI1RkM0OUE2NDY5NDREQjM4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDI0Q0FDMDg1RTc3QjgyQTg4 Nzg5MjVGQzQ5QTY0Njk0NERCMzgwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjNGQTQwODhDRDlDQ0FDMUNFNzZGQzBERjA4Q0Y3QTkwRUE5MzhCRjVE QUQ1M0JFODg5RUI5ODFBNDRFOEE2MS8wLzM0MjRDQUMwODVFNzdCODJBODg3ODky NUZDNDlBNjQ2OTQ0REIzODAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9HUn32O6bNP8Qwv3uVRx+X40h +51/mmr3V1dFgQLH5PBmvzwR+vgvDVMjAX1sooY6TZZg4qjLmZL5iTTAmG3bYpyC v+13qOZv16yei8+RxlbsZwBnXiAi4lExPLX/2kx5LsrAMa+cnx3DPeAGT1aEDKmr 3AXUbS+Dx251Bc+qVlOZ4dh62DJJzI5/GPlJSHNGfKxsMHnvJPQoe0lWSTURu5mw JE8O98nPMD3PE4FkVjFfV+1hzuHCTj44WclfNixCVmShnFprVH3wcaGMYXjJKvjP ErsntO37qm9JfggQl4bTaFYCKIIW+4QVdMa3uLC97m1/h0K+CmpNCA6QKnvb -----END CERTIFICATE-----Generated at Tue Nov 11 17:17:33 2025 by rpki-client