$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft File: D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft (raw, json) Hash identifier: HB8X01H/eWZk6FEfTf8wIjx+IILq5oHkOHmD+j5LyGk= Subject key identifier: 36:EC:71:64:57:13:7C:76:DD:D5:2B:0D:2F:F5:DA:F2:F1:99:08:19 Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 Certificate issuer: /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Certificate serial: 288542467403FCE75D41271DA075A4A19EEA5F41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft Manifest number: 0128 Signing time: Fri 17 Oct 2025 02:05:47 +0000 Manifest this update: Fri 17 Oct 2025 02:00:47 +0000 Manifest next update: Wed 22 Oct 2025 05:21:47 +0000 Files and hashes: 1: D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl (hash: aDsn/On2zDUNPmvUxkW0+i3ddSB6nowAJp5GfiQrGaA=) 2: 3133312e302e3133362e302f32322d3232203d3e203631343637.roa (hash: hIcGTsTzrbpPkkDFPHDJ/vJiVZDkozy3mhBw4FInUkg=) 3: 323830333a653538303a3a2f33322d3332203d3e203631343637.roa (hash: VPdQcvxY+Djypk/d3zIynnwjkLRuN2kmRMjzxd8Khgg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 05:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:85:42:46:74:03:fc:e7:5d:41:27:1d:a0:75:a4:a1:9e:ea:5f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Validity Not Before: Oct 17 02:00:47 2025 GMT Not After : Oct 22 05:21:47 2025 GMT Subject: CN=36EC716457137C76DDD52B0D2FF5DAF2F1990819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:ef:4d:e4:e3:eb:ed:7a:36:6d:78:77:96: cf:ba:23:1f:81:d2:88:84:bc:dc:2a:b8:2c:a4:01: 9e:e6:15:62:44:a9:eb:04:5e:b8:4e:d2:0d:f1:6d: 4c:2d:34:74:70:2c:bd:4e:6c:24:32:01:8c:01:99: 18:64:f5:fa:f3:75:d1:31:6d:78:c9:4b:0b:1d:f1: 2e:c0:5e:94:07:50:7a:3a:73:9d:92:d9:1a:51:a7: a1:b9:de:0c:cf:9e:63:b9:1b:16:b3:11:aa:43:f3: ca:47:a2:a5:54:16:53:69:ab:43:78:bb:5b:ee:ef: 64:65:d7:21:44:ba:f0:87:d2:c0:74:04:93:69:50: 88:6f:84:b7:a0:d5:53:96:ba:c8:17:1d:ba:f1:cd: e3:8c:5d:01:f8:28:22:ee:10:6f:f0:c7:04:a5:a0: ad:90:ee:46:a8:3e:80:84:07:4c:0f:3f:23:16:e1: 8f:66:e8:45:71:8b:79:f9:49:9b:96:db:e8:bd:04: 54:6f:06:bc:6b:3b:16:f1:22:75:e3:d8:ce:ce:35: ed:97:18:48:f9:79:e1:32:43:00:af:42:bc:4a:51: a8:a0:62:6a:e3:06:44:01:ee:77:91:82:75:15:48: 23:0b:ee:00:6f:4e:c8:7d:a9:57:a2:a5:ec:44:40: b6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EC:71:64:57:13:7C:76:DD:D5:2B:0D:2F:F5:DA:F2:F1:99:08:19 X509v3 Authority Key Identifier: keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:76:80:51:19:06:d4:61:0b:4d:98:43:fb:b7:57:34:b9:60: 57:ba:a7:e4:1a:37:74:bf:38:f5:b5:6a:f4:66:23:60:88:5e: 8e:b9:8f:70:ef:d2:44:e5:c5:90:05:28:bf:29:6d:68:9c:f2: 04:62:c7:92:66:b6:4c:e7:a0:74:77:81:6c:ba:a1:17:d9:82: 80:6d:0b:a7:ad:bf:c6:96:9e:50:22:fa:f2:75:cf:3e:24:c9: ad:f9:4f:03:19:22:c6:15:16:7b:8a:4e:88:ec:e7:5c:52:4e: 94:76:25:d7:bb:70:2a:35:3f:3d:90:6f:76:63:a7:e6:2e:a8: 8a:ee:56:f7:9e:0a:ef:26:59:b6:20:3a:57:51:5f:68:84:98: 5f:88:2f:1f:97:0d:01:28:0a:86:6c:01:91:51:17:fa:9b:ff: 93:88:b2:45:10:29:8b:21:59:cb:25:2a:8f:a1:72:c2:28:1c: db:c6:4f:d3:9c:5b:41:4a:6e:38:ce:58:3a:70:42:71:66:38: 9d:d8:00:1a:e8:1d:8a:af:3c:b8:29:62:3c:b7:3a:00:3a:ff: a8:da:38:2c:7b:e6:67:f9:30:9f:b4:a8:41:46:14:6a:e9:09: 94:b5:67:ab:b3:21:00:8b:90:2b:2f:0b:94:d7:0e:c1:e8:18: 08:36:7e:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKIVCRnQD/OddQScdoHWkoZ7qX0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwODczNURDRkJENDQzOUYxRjYxQTYxNzlEQkU5MjBE ODZCMUUyODAeFw0yNTEwMTcwMjAwNDdaFw0yNTEwMjIwNTIxNDdaMDMxMTAvBgNV BAMTKDM2RUM3MTY0NTcxMzdDNzZEREQ1MkIwRDJGRjVEQUYyRjE5OTA4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjN+9N5OPr7Xo2bXh3ls+6Ix+B 0oiEvNwquCykAZ7mFWJEqesEXrhO0g3xbUwtNHRwLL1ObCQyAYwBmRhk9frzddEx bXjJSwsd8S7AXpQHUHo6c52S2RpRp6G53gzPnmO5GxazEapD88pHoqVUFlNpq0N4 u1vu72Rl1yFEuvCH0sB0BJNpUIhvhLeg1VOWusgXHbrxzeOMXQH4KCLuEG/wxwSl oK2Q7kaoPoCEB0wPPyMW4Y9m6EVxi3n5SZuW2+i9BFRvBrxrOxbxInXj2M7ONe2X GEj5eeEyQwCvQrxKUaigYmrjBkQB7neRgnUVSCML7gBvTsh9qVeipexEQLYJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNuxxZFcTfHbd1SsNL/Xa8vGZCBkwHwYDVR0j BBgwFoAU0whzXc+9RDnx9hphedvpINhrHigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUY0MzdERDdEMTFGMjhDNTgzMjk1RjkzQjlDNTRDRkU5 ODAyNUNBREQyNzdBNTM2NEJDMDU2NzQ5NjE4ODY5LzAvRDMwODczNURDRkJENDQz OUYxRjYxQTYxNzlEQkU5MjBEODZCMUUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzA4NzM1RENGQkQ0NDM5RjFG NjFBNjE3OURCRTkyMEQ4NkIxRTI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFGNDM3REQ3RDExRjI4QzU4MzI5NUY5M0I5QzU0Q0ZFOTgwMjVDQURE Mjc3QTUzNjRCQzA1Njc0OTYxODg2OS8wL0QzMDg3MzVEQ0ZCRDQ0MzlGMUY2MUE2 MTc5REJFOTIwRDg2QjFFMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApdoBRGQbUYQtNmEP7t1c0uWBX uqfkGjd0vzj1tWr0ZiNgiF6OuY9w79JE5cWQBSi/KW1onPIEYseSZrZM56B0d4Fs uqEX2YKAbQunrb/Glp5QIvrydc8+JMmt+U8DGSLGFRZ7ik6I7OdcUk6UdiXXu3Aq NT89kG92Y6fmLqiK7lb3ngrvJlm2IDpXUV9ohJhfiC8flw0BKAqGbAGRURf6m/+T iLJFECmLIVnLJSqPoXLCKBzbxk/TnFtBSm44zlg6cEJxZjid2AAa6B2Krzy4KWI8 tzoAOv+o2jgse+Zn+TCftKhBRhRq6QmUtWersyEAi5ArLwuU1w7B6BgINn6H -----END CERTIFICATE-----Generated at Fri Oct 17 10:12:30 2025 by rpki-client