$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft File: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft (raw, json) Hash identifier: b+G4LRyBFCAJjtCPs+T+kho8hpUgAsn/VyIMl6rbG+U= Subject key identifier: C3:7A:93:D5:9E:A2:0B:58:D7:12:C8:E3:CD:B8:BA:D9:8E:E6:3C:39 Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Certificate serial: 79F38DA5CF860B9B94CB14F417297CDDA502C9DE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft Manifest number: 0128 Signing time: Thu 23 Oct 2025 07:28:54 +0000 Manifest this update: Thu 23 Oct 2025 07:23:54 +0000 Manifest next update: Tue 28 Oct 2025 12:43:54 +0000 Files and hashes: 1: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (hash: Ndho+BhViPHLNULz7C2z55/V4iRAPugD06lZUvZ4mIY=) 2: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (hash: yZWkzdnI2yE2GWAW0fR8ozyK+67wGcmDL/+BxkZFYOM=) 3: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl (hash: /Vc4eOOqaGdOLBag67ltHuNGQt1h5W61t/Wf9zgiW3U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f3:8d:a5:cf:86:0b:9b:94:cb:14:f4:17:29:7c:dd:a5:02:c9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Validity Not Before: Oct 23 07:23:54 2025 GMT Not After : Oct 28 12:43:54 2025 GMT Subject: CN=C37A93D59EA20B58D712C8E3CDB8BAD98EE63C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9d:71:d2:43:f9:05:ea:49:b9:ff:00:14:92: 0b:48:d7:d1:7a:66:82:09:05:b2:ca:d1:6f:7b:46: 13:40:0e:61:b2:f4:71:21:d0:88:10:58:74:32:ea: 69:c7:36:af:d8:44:92:4d:97:37:26:20:5a:9e:20: 8f:11:df:1d:52:49:ca:4b:93:1b:05:3b:fc:77:f8: 07:59:86:af:23:94:43:2c:47:8c:6d:fd:c6:eb:16: 14:5c:10:10:cb:aa:93:bf:31:b0:c0:ef:fc:d3:8c: 81:e1:c4:a6:43:17:ea:b5:01:72:81:2a:bf:9c:d4: dd:24:af:de:35:c6:d1:98:9a:4a:67:75:14:4c:b3: a5:c9:b3:b8:9d:43:a6:bf:02:1d:97:df:a6:5b:b8: 69:63:be:5b:bc:d7:ca:8f:fc:06:e4:c6:5a:8d:04: a3:d1:b3:ed:be:3f:58:7a:91:09:46:da:0f:a5:89: 0b:7a:ab:ca:03:ff:76:d4:be:f5:b5:74:fa:73:47: dd:a3:d8:42:01:a6:e5:df:6d:64:a8:af:c6:d3:8e: 87:51:12:66:e1:80:d8:b4:01:9c:e3:22:43:ba:f3: 1e:df:51:91:34:06:89:61:48:8c:5b:d3:34:c6:67: 9e:b1:e5:5c:e9:16:d0:63:2c:d8:4f:db:6f:2a:7e: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7A:93:D5:9E:A2:0B:58:D7:12:C8:E3:CD:B8:BA:D9:8E:E6:3C:39 X509v3 Authority Key Identifier: keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:7a:54:3f:97:26:59:1f:09:76:12:a6:ef:ae:1c:6e:af: eb:e3:36:e7:17:19:0e:d2:a5:aa:79:da:97:6c:66:06:d3:2a: b9:15:68:46:43:1c:c4:e7:05:0c:43:ae:88:cd:ff:e1:81:23: e9:ef:35:4b:30:5c:27:18:fb:49:6c:f2:99:c9:6f:38:e1:2c: bf:e9:f8:b9:6e:cc:ba:de:1c:7e:83:6d:4d:9a:53:58:a2:67: 06:81:00:03:2c:35:b0:35:e4:de:38:8b:ef:87:4d:81:ae:67: fd:b9:99:d1:28:26:91:27:65:e7:23:ec:71:6c:d4:17:05:af: c9:d6:42:e4:7b:70:a6:08:74:e8:60:c7:9f:fc:dc:3d:a1:93: b5:8a:56:70:d8:6a:05:8f:52:cb:64:0f:a0:33:e7:74:d6:b8: 64:3f:d5:cc:c2:6a:f2:22:5e:fd:c3:13:26:c2:da:cf:af:09: f1:b9:9e:12:62:f5:0e:bc:18:d4:8a:10:ac:db:79:41:9d:81: 63:90:9d:76:d7:af:25:b4:c8:48:8f:5a:b3:94:60:da:f3:52: 1b:fe:2e:06:5b:42:26:7a:93:4a:8a:38:ee:6a:06:7e:b2:8d: 43:a2:43:ab:ba:72:b4:20:aa:c8:57:94:3d:c3:96:b9:95:9d: d7:1f:b6:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUefONpc+GC5uUyxT0Fyl83aUCyd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1 QzU2QTMzNjAeFw0yNTEwMjMwNzIzNTRaFw0yNTEwMjgxMjQzNTRaMDMxMTAvBgNV BAMTKEMzN0E5M0Q1OUVBMjBCNThENzEyQzhFM0NEQjhCQUQ5OEVFNjNDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnXHSQ/kF6km5/wAUkgtI19F6 ZoIJBbLK0W97RhNADmGy9HEh0IgQWHQy6mnHNq/YRJJNlzcmIFqeII8R3x1SScpL kxsFO/x3+AdZhq8jlEMsR4xt/cbrFhRcEBDLqpO/MbDA7/zTjIHhxKZDF+q1AXKB Kr+c1N0kr941xtGYmkpndRRMs6XJs7idQ6a/Ah2X36ZbuGljvlu818qP/AbkxlqN BKPRs+2+P1h6kQlG2g+liQt6q8oD/3bUvvW1dPpzR92j2EIBpuXfbWSor8bTjodR EmbhgNi0AZzjIkO68x7fUZE0BolhSIxb0zTGZ56x5VzpFtBjLNhP228qfjI9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUw3qT1Z6iC1jXEsjjzbi62Y7mPDkwHwYDVR0j BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3 OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1 NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzAwRkYyOTVCOTM5QUQ3MjU4OUNFMjRC N0U0RUQ0MUZDNUM1NkEzMzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn6XpUP5cmWR8JdhKm764cbq/r 4zbnFxkO0qWqedqXbGYG0yq5FWhGQxzE5wUMQ66Izf/hgSPp7zVLMFwnGPtJbPKZ yW844Sy/6fi5bsy63hx+g21NmlNYomcGgQADLDWwNeTeOIvvh02Brmf9uZnRKCaR J2XnI+xxbNQXBa/J1kLke3CmCHToYMef/Nw9oZO1ilZw2GoFj1LLZA+gM+d01rhk P9XMwmryIl79wxMmwtrPrwnxuZ4SYvUOvBjUihCs23lBnYFjkJ12168ltMhIj1qz lGDa81Ib/i4GW0ImepNKijjuagZ+so1DokOrunK0IKrIV5Q9w5a5lZ3XH7Ze -----END CERTIFICATE-----Generated at Thu Oct 23 20:36:49 2025 by rpki-client