$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft File: CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft (raw, json) Hash identifier: iql2RR3aAV2TTVpiNrsSskddVB4AkTDQE0Pzpsy9/JM= Subject key identifier: 50:E3:B0:B5:CE:BC:7F:2B:00:35:D2:B5:FC:F0:0D:18:42:EE:34:84 Authority key identifier: CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27 Certificate issuer: /CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27 Certificate serial: 51C0DE72A1B7E4898CE89090DBBD7AF7635E9FC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft Manifest number: 013A Signing time: Fri 07 Nov 2025 00:27:32 +0000 Manifest this update: Fri 07 Nov 2025 00:22:32 +0000 Manifest next update: Tue 11 Nov 2025 18:33:32 +0000 Files and hashes: 1: CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl (hash: H7bqasNhH7Us0jT1pn3Yya0dpt9v/rM2pda/pqhQbqE=) 2: 323830313a3133613a3a2f34342d3434203d3e20323730303238.roa (hash: Q1TLNayYAd06cStRkVHP3ITO3rEv1WH9iz5ULgyaMCM=) 3: 3230302e31312e33332e302f32342d3234203d3e20323730303238.roa (hash: wK3oeno74goU9D7+c/b55vzwIp59oFbD0eZNt8h6ig0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c0:de:72:a1:b7:e4:89:8c:e8:90:90:db:bd:7a:f7:63:5e:9f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27 Validity Not Before: Nov 7 00:22:32 2025 GMT Not After : Nov 11 18:33:32 2025 GMT Subject: CN=50E3B0B5CEBC7F2B0035D2B5FCF00D1842EE3484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:11:eb:56:01:01:6f:83:5e:17:68:48:5e: 76:83:b2:df:38:30:7c:37:38:66:04:f3:30:99:d0: 4b:cd:7b:6a:f1:9f:9a:8f:cc:bb:49:41:09:0d:2e: df:eb:84:b8:86:23:ec:c0:a7:dd:8a:3a:a8:59:ed: 88:c0:58:a8:cd:20:6e:22:4d:ab:db:2c:40:38:af: 10:60:1d:0c:3d:42:d0:ca:76:87:a0:75:fb:38:e1: f5:82:0c:1d:62:47:ee:12:a4:97:e7:3a:a6:20:0b: 39:b2:c8:13:d0:ef:3d:7c:91:85:90:f3:5f:10:57: 7b:55:81:69:63:26:dc:35:fc:8b:38:73:04:6c:87: 11:45:8a:44:71:6a:e3:d3:ac:e6:a4:01:e1:98:d7: db:59:56:f0:fb:e2:5d:65:ff:76:cc:91:2d:32:0a: 4c:c9:5d:83:2f:8b:82:fa:0d:d4:8e:c4:18:c7:d4: 4c:15:5f:91:07:98:0c:ed:28:53:93:c5:e4:d8:25: 1a:f6:94:d5:ae:33:85:05:47:ed:9b:62:08:a7:b2: 38:f2:4c:c1:e5:39:c7:8c:f2:dd:7f:28:94:c8:1e: 49:fc:79:11:4b:9f:a6:70:08:a1:c5:b5:30:b6:e9: a2:4e:f9:09:8e:b6:bb:ef:21:40:2f:89:0e:b5:91: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E3:B0:B5:CE:BC:7F:2B:00:35:D2:B5:FC:F0:0D:18:42:EE:34:84 X509v3 Authority Key Identifier: keyid:CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f8:d3:4e:2f:20:2c:b4:80:ea:ed:41:33:d8:89:73:30:e6: 57:f8:27:45:c2:f8:38:53:4d:19:c9:0c:48:bf:69:05:2c:8b: 37:10:71:0c:1f:34:e5:19:2b:5e:e5:1d:d2:73:ba:f3:70:a5: 1e:a0:d8:06:c0:db:92:1d:a6:41:e4:72:19:2d:85:ff:98:95: 2e:f3:26:c1:b4:3d:96:37:45:c6:37:0f:f3:85:1f:5b:a9:d3: dd:15:73:a3:65:81:52:43:40:3d:fb:d4:c1:49:41:d4:63:df: 60:4a:1e:98:3f:72:16:ed:56:8c:fb:73:7d:e5:7b:72:3f:44: 43:c6:52:34:23:0e:c5:18:bc:15:6a:b0:71:c9:d5:91:da:06: 15:92:d4:2b:b2:69:7a:6b:56:9a:fb:98:af:06:5a:38:20:32: 53:96:bd:bd:26:b0:d4:30:d0:e6:93:c4:58:0f:3f:65:d6:62: 95:e0:40:af:7c:a0:ce:5c:c4:08:dd:ac:31:49:e8:3e:7a:c8: 3b:30:24:49:48:63:77:36:37:0b:f1:99:8e:27:dd:5d:17:4c: 02:eb:2a:3d:45:14:1d:c3:05:ad:f9:cf:e7:22:b2:72:c6:42: 23:91:ea:7e:55:fd:40:1a:1a:b5:84:ca:02:73:f9:9d:cb:1e: 7b:8b:e5:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUcDecqG35ImM6JCQ271692Nen8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzQ0Q2MkE2MkNBRkJEOTlEMUFDNkNCQjZFMDczQTU1 MTg0NUYyNzAeFw0yNTExMDcwMDIyMzJaFw0yNTExMTExODMzMzJaMDMxMTAvBgNV BAMTKDUwRTNCMEI1Q0VCQzdGMkIwMDM1RDJCNUZDRjAwRDE4NDJFRTM0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2hHrVgEBb4NeF2hIXnaDst84 MHw3OGYE8zCZ0EvNe2rxn5qPzLtJQQkNLt/rhLiGI+zAp92KOqhZ7YjAWKjNIG4i TavbLEA4rxBgHQw9QtDKdoegdfs44fWCDB1iR+4SpJfnOqYgCzmyyBPQ7z18kYWQ 818QV3tVgWljJtw1/Is4cwRshxFFikRxauPTrOakAeGY19tZVvD74l1l/3bMkS0y CkzJXYMvi4L6DdSOxBjH1EwVX5EHmAztKFOTxeTYJRr2lNWuM4UFR+2bYginsjjy TMHlOceM8t1/KJTIHkn8eRFLn6ZwCKHFtTC26aJO+QmOtrvvIUAviQ61kUZBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUOOwtc68fysANdK1/PANGELuNIQwHwYDVR0j BBgwFoAUzTzWKmLK+9mdGsbLtuBzpVGEXycwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOUI3MDdCM0E1QjNDQjQ2QTgxMjZBMDNBN0Y0QjlFMTVG MEQzNTY0NDhENUJGQkM0NEQxMTRENENBQTMwOEMyLzAvQ0QzQ0Q2MkE2MkNBRkJE OTlEMUFDNkNCQjZFMDczQTU1MTg0NUYyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNDRDYyQTYyQ0FGQkQ5OUQx QUM2Q0JCNkUwNzNBNTUxODQ1RjI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzlCNzA3QjNBNUIzQ0I0NkE4MTI2QTAzQTdGNEI5RTE1RjBEMzU2NDQ4 RDVCRkJDNDREMTE0RDRDQUEzMDhDMi8wL0NEM0NENjJBNjJDQUZCRDk5RDFBQzZD QkI2RTA3M0E1NTE4NDVGMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAk+NNOLyAstIDq7UEz2IlzMOZX +CdFwvg4U00ZyQxIv2kFLIs3EHEMHzTlGSte5R3Sc7rzcKUeoNgGwNuSHaZB5HIZ LYX/mJUu8ybBtD2WN0XGNw/zhR9bqdPdFXOjZYFSQ0A9+9TBSUHUY99gSh6YP3IW 7VaM+3N95XtyP0RDxlI0Iw7FGLwVarBxydWR2gYVktQrsml6a1aa+5ivBlo4IDJT lr29JrDUMNDmk8RYDz9l1mKV4ECvfKDOXMQI3awxSeg+esg7MCRJSGN3NjcL8ZmO J91dF0wC6yo9RRQdwwWt+c/nIrJyxkIjkep+Vf1AGhq1hMoCc/mdyx57i+V+ -----END CERTIFICATE-----Generated at Fri Nov 7 13:23:15 2025 by rpki-client