$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.mft File: 12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.mft (raw, json) Hash identifier: /AJh6NlCTefvMMQTNrzkt/OKtkF52et1KF1y5blFlSE= Subject key identifier: 54:16:2C:A3:61:95:4E:C0:B4:33:BE:F1:BD:CE:E1:15:5C:47:5C:39 Authority key identifier: 12:BF:AA:7C:91:F4:EB:76:B9:0D:5D:65:B9:B1:AD:DD:70:4D:B0:AB Certificate issuer: /CN=12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB Certificate serial: 34B928208EC3F87A56E6DE410CC735C66B406F6B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.mft Manifest number: 0122 Signing time: Tue 16 Sep 2025 07:50:07 +0000 Manifest this update: Tue 16 Sep 2025 07:45:07 +0000 Manifest next update: Mon 22 Sep 2025 00:54:07 +0000 Files and hashes: 1: 323830313a303a3363303a3a2f34382d3438203d3e203631343633.roa (hash: clrcJlh/3CSCk7eBHU+6Ip0hMMfDMhYy/7dy3TMYOUg=) 2: 12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.crl (hash: ATwMC9kh8b60QbPfqdM3LOSfrpFQJokYTZ4chgr3zbM=) 3: 323830313a3132643a3a2f34302d3430203d3e203631343633.roa (hash: Vh2Qms488t4EsORX+fNB8DK1d149NLci3t014ie03E8=) 4: 3230302e33342e3137312e302f32342d3234203d3e203631343633.roa (hash: neoflDAQREmiHy4WLrg32htXI0XNtUUKNHbbkXlH9cA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.crl rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 21:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b9:28:20:8e:c3:f8:7a:56:e6:de:41:0c:c7:35:c6:6b:40:6f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB Validity Not Before: Sep 16 07:45:07 2025 GMT Not After : Sep 22 00:54:07 2025 GMT Subject: CN=54162CA361954EC0B433BEF1BDCEE1155C475C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:15:5d:9a:45:42:87:6e:52:ca:4a:56:b8: 3e:c7:f4:70:80:0a:73:a6:ee:28:b7:40:43:3c:ab: 5d:ed:3e:1a:eb:bb:ef:2c:f0:5b:06:ef:14:8d:4c: 6f:78:ea:e9:eb:fc:f7:9c:37:51:37:3a:c3:3a:36: c9:2c:d9:86:5d:39:94:0e:df:f6:0a:07:64:2b:ee: db:22:a3:0c:0d:0e:9f:4d:a6:9b:9e:7c:5b:5d:97: df:28:2c:7d:80:72:c8:01:7f:2d:22:a4:c6:21:87: ec:34:fc:a9:1a:a1:69:34:e5:ed:0c:23:42:95:2a: d6:46:9d:56:69:e0:ff:fc:43:cf:ca:85:02:7e:74: a7:9c:67:04:a1:a6:02:57:ca:67:92:12:27:e6:03: f3:32:9b:af:c6:cb:e6:cd:9f:20:a6:68:e2:64:7e: ef:a3:d9:bc:99:0d:45:95:25:6d:b3:32:a5:c9:f7: 7b:a6:e4:6f:4b:ce:c4:23:26:0b:b8:78:d5:26:d5: 52:38:85:fd:6d:a2:f2:ea:ea:87:54:eb:81:0a:e8: ce:3a:f6:49:56:2d:0c:a2:24:70:89:c0:5b:91:a2: 94:96:18:7b:9c:27:df:72:31:b8:98:cf:72:56:60: 94:19:0c:91:5a:5a:d9:71:be:a9:97:ec:8f:1f:81: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:2C:A3:61:95:4E:C0:B4:33:BE:F1:BD:CE:E1:15:5C:47:5C:39 X509v3 Authority Key Identifier: keyid:12:BF:AA:7C:91:F4:EB:76:B9:0D:5D:65:B9:B1:AD:DD:70:4D:B0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:91:2e:a5:ed:a1:2e:67:15:2c:69:01:66:c4:24:2e:e1:9c: e6:52:b5:06:94:f9:43:86:36:da:52:90:2c:03:22:41:94:dc: d7:30:b3:28:a2:6e:09:54:a5:13:2d:d1:17:cf:ef:9c:e1:cd: 51:38:34:e1:50:93:a5:a4:5c:bd:36:d3:3e:30:56:86:43:9a: 4d:ea:32:b8:04:e4:90:70:23:bf:ae:fd:c6:39:e2:ab:c4:40: 65:af:51:b7:f4:e6:be:dd:99:cb:b9:8f:58:e1:a0:39:91:bd: e3:5e:65:fb:22:81:3b:47:8f:45:ff:7b:79:33:13:0a:4f:76: 48:2d:25:29:e7:4b:38:0d:54:52:81:7b:c4:7a:0c:8f:14:3a: ba:9d:9f:c4:35:a2:69:73:38:ab:07:9e:31:79:f4:54:b8:9a: 23:db:8a:23:b7:60:a4:43:6a:b6:ef:bf:cf:46:d4:5c:4e:81: 1e:8b:70:8c:f5:45:eb:25:a3:a7:6b:22:c2:30:72:21:86:bb: cd:33:7a:c4:1a:d4:58:6b:96:c9:32:ed:a8:3d:2f:46:7e:c3: 3b:76:8e:ba:61:d8:82:4d:b9:e3:15:02:b7:b4:e7:6a:f9:3f: 37:9b:5a:94:29:11:09:5e:21:3f:cf:e2:72:0f:26:f9:03:4a: e2:39:fa:12 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNLkoII7D+HpW5t5BDMc1xmtAb2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRkFBN0M5MUY0RUI3NkI5MEQ1RDY1QjlCMUFEREQ3 MDREQjBBQjAeFw0yNTA5MTYwNzQ1MDdaFw0yNTA5MjIwMDU0MDdaMDMxMTAvBgNV BAMTKDU0MTYyQ0EzNjE5NTRFQzBCNDMzQkVGMUJEQ0VFMTE1NUM0NzVDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygxVdmkVCh25SykpWuD7H9HCA CnOm7ii3QEM8q13tPhrru+8s8FsG7xSNTG946unr/PecN1E3OsM6Nsks2YZdOZQO 3/YKB2Qr7tsiowwNDp9NppuefFtdl98oLH2AcsgBfy0ipMYhh+w0/KkaoWk05e0M I0KVKtZGnVZp4P/8Q8/KhQJ+dKecZwShpgJXymeSEifmA/Mym6/Gy+bNnyCmaOJk fu+j2byZDUWVJW2zMqXJ93um5G9LzsQjJgu4eNUm1VI4hf1tovLq6odU64EK6M46 9klWLQyiJHCJwFuRopSWGHucJ99yMbiYz3JWYJQZDJFaWtlxvqmX7I8fgcRhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUVBYso2GVTsC0M77xvc7hFVxHXDkwHwYDVR0j BBgwFoAUEr+qfJH063a5DV1lubGt3XBNsKswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQjMwRUJBRURDRDUyOEY0MjgzMTUyQTk1MjQyQzVERTVF QTQ4NTBDNjk3NDdFREUxQ0VFODYyQUY5QTYxNUFGLzAvMTJCRkFBN0M5MUY0RUI3 NkI5MEQ1RDY1QjlCMUFEREQ3MDREQjBBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMkJGQUE3QzkxRjRFQjc2Qjkw RDVENjVCOUIxQURERDcwNERCMEFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0IzMEVCQUVEQ0Q1MjhGNDI4MzE1MkE5NTI0MkM1REU1RUE0ODUwQzY5 NzQ3RURFMUNFRTg2MkFGOUE2MTVBRi8wLzEyQkZBQTdDOTFGNEVCNzZCOTBENUQ2 NUI5QjFBRERENzA0REIwQUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwkS6l7aEuZxUsaQFmxCQu4Zzm UrUGlPlDhjbaUpAsAyJBlNzXMLMoom4JVKUTLdEXz++c4c1RODThUJOlpFy9NtM+ MFaGQ5pN6jK4BOSQcCO/rv3GOeKrxEBlr1G39Oa+3ZnLuY9Y4aA5kb3jXmX7IoE7 R49F/3t5MxMKT3ZILSUp50s4DVRSgXvEegyPFDq6nZ/ENaJpczirB54xefRUuJoj 24ojt2CkQ2q277/PRtRcToEei3CM9UXrJaOnayLCMHIhhrvNM3rEGtRYa5bJMu2o PS9GfsM7do66YdiCTbnjFQK3tOdq+T83m1qUKREJXiE/z+JyDyb5A0riOfoS -----END CERTIFICATE-----Generated at Tue Sep 16 11:57:20 2025 by rpki-client