$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft File: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft (raw, json) Hash identifier: b8JQgEpfpa870bmaZzKStDRf7nF1YPLFCTcyQAZvDR8= Subject key identifier: 82:4B:A9:75:84:D4:7B:52:F3:26:63:55:AA:FD:B9:73:C1:F4:81:1A Authority key identifier: 3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E Certificate issuer: /CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E Certificate serial: 18B9DA6E8E0F9AA66070BF603D57D6A1ECEF908F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 01:48:32 +0000 Manifest this update: Tue 04 Nov 2025 01:43:32 +0000 Manifest next update: Sun 09 Nov 2025 11:16:32 +0000 Files and hashes: 1: 323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa (hash: zz+ykG6PTIUfeyVW8QkHjl9sWUdAPa6Jxjy6RpuzCSA=) 2: 3139302e31322e3134342e302f32322d3234203d3e20323730313237.roa (hash: i/aGyey4Qp/zhDcDPEyURyQoAJmparKePo+PPRJ2tqU=) 3: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl (hash: S+Q49V7fD60Oe+r/JP68GoxrHi4j9bAFz7bo6wVJX9w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b9:da:6e:8e:0f:9a:a6:60:70:bf:60:3d:57:d6:a1:ec:ef:90:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E Validity Not Before: Nov 4 01:43:32 2025 GMT Not After : Nov 9 11:16:32 2025 GMT Subject: CN=824BA97584D47B52F3266355AAFDB973C1F4811A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:b8:cb:0e:72:97:77:c3:67:cb:19:b1:d9: 20:44:48:c6:27:63:26:c1:e7:a2:e1:be:9c:31:1b: 2c:af:6c:14:5e:26:e8:c7:04:66:9b:2c:0d:3f:a8: a2:0c:d1:80:ae:12:75:98:c7:08:8e:7c:54:bd:24: 90:73:fc:67:c8:81:d0:e3:24:af:56:2a:5c:12:ea: 34:99:23:1d:7b:06:9f:9c:58:b9:22:6c:51:c8:81: eb:f8:c5:33:43:a4:55:71:b7:c3:ea:7c:86:01:c0: 42:fd:a5:f8:c1:0b:97:98:07:e6:01:c9:25:7a:cb: 60:39:4d:79:36:5e:50:e4:b9:ec:a6:8e:5d:b0:00: fd:ae:98:45:4f:9c:a5:c3:78:dd:00:04:5f:c4:a6: 02:96:53:f2:b9:3a:c5:c5:fd:d1:22:49:2f:99:a2: 32:a3:02:d4:50:77:86:8c:3f:f6:a2:e9:79:12:48: 24:df:50:62:3e:16:6d:9e:44:bc:1f:0f:21:aa:54: e6:d9:19:2f:f8:5a:c2:e3:07:2f:b6:a8:47:88:64: 48:b6:44:b9:c8:93:b1:4f:a8:51:1c:e4:6c:87:83: 7e:70:b4:50:c8:07:ce:a5:32:e4:0f:ec:70:b4:77: 70:30:25:0f:56:34:fa:5c:99:23:0f:b2:5d:b0:3d: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4B:A9:75:84:D4:7B:52:F3:26:63:55:AA:FD:B9:73:C1:F4:81:1A X509v3 Authority Key Identifier: keyid:3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bb:31:63:25:66:e9:05:59:bf:1e:da:d3:6c:cf:d0:50:a2: db:35:7a:c3:89:72:40:76:5f:69:e7:30:c1:da:bd:3f:fc:cc: 06:80:5d:5a:a0:26:14:c2:6a:bb:be:17:3a:26:62:33:6b:f4: 7a:80:ce:2d:13:9f:29:18:f9:8e:f9:c5:be:db:e1:a8:01:3e: 92:f9:f9:42:43:aa:ec:64:17:e8:83:2a:1c:0b:02:76:63:e9: 30:67:0f:06:ca:71:63:3b:a0:97:3f:49:26:a2:87:17:c4:5f: a8:7b:f1:b9:72:ca:87:85:c5:80:ac:5f:83:45:10:ab:7c:8d: 6c:a9:f0:b7:61:d4:5d:75:2e:c2:36:f1:83:09:35:ef:ea:43: 0b:d3:4f:39:5c:ce:27:57:ea:d7:c6:c5:23:fc:e8:c9:ec:e3: 5f:db:62:ed:6c:09:4b:77:f9:5b:35:4d:8f:22:1f:5c:40:6b: ba:4d:b7:b8:06:97:44:61:75:15:62:4c:fe:fc:86:eb:6e:95: ef:8c:6c:33:6b:cd:17:30:9c:cd:23:40:98:a3:43:27:90:96: 6e:2a:79:08:4c:f0:30:88:8b:8b:82:79:91:0c:17:cf:d0:2f: 5e:e3:ac:6c:ed:a4:0a:65:a6:a3:75:3f:8f:74:ed:ec:d3:73: e5:85:e2:15 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGLnabo4PmqZgcL9gPVfWoezvkI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGM0U0MzVDN0FGMTQ4OTJDQUExQ0IzNzUxNEU0RDE1 RjZEODUyRTAeFw0yNTExMDQwMTQzMzJaFw0yNTExMDkxMTE2MzJaMDMxMTAvBgNV BAMTKDgyNEJBOTc1ODRENDdCNTJGMzI2NjM1NUFBRkRCOTczQzFGNDgxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmrjLDnKXd8Nnyxmx2SBESMYn YybB56LhvpwxGyyvbBReJujHBGabLA0/qKIM0YCuEnWYxwiOfFS9JJBz/GfIgdDj JK9WKlwS6jSZIx17Bp+cWLkibFHIgev4xTNDpFVxt8PqfIYBwEL9pfjBC5eYB+YB ySV6y2A5TXk2XlDkueymjl2wAP2umEVPnKXDeN0ABF/EpgKWU/K5OsXF/dEiSS+Z ojKjAtRQd4aMP/ai6XkSSCTfUGI+Fm2eRLwfDyGqVObZGS/4WsLjBy+2qEeIZEi2 RLnIk7FPqFEc5GyHg35wtFDIB86lMuQP7HC0d3AwJQ9WNPpcmSMPsl2wPe3hAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUgkupdYTUe1LzJmNVqv25c8H0gRowHwYDVR0j BBgwFoAUPPPkNcevFIksqhyzdRTk0V9thS4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81N0UzRTk0OTA3QTRENTI0QTU2REE0MUQ3MjM1QUUxRjU1 QzE0RDBCOTcxQkFFMzlGMTc0MTA0MTc5QTFCRDBGLzAvM0NGM0U0MzVDN0FGMTQ4 OTJDQUExQ0IzNzUxNEU0RDE1RjZEODUyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0YzRTQzNUM3QUYxNDg5MkNB QTFDQjM3NTE0RTREMTVGNkQ4NTJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTdFM0U5NDkwN0E0RDUyNEE1NkRBNDFENzIzNUFFMUY1NUMxNEQwQjk3 MUJBRTM5RjE3NDEwNDE3OUExQkQwRi8wLzNDRjNFNDM1QzdBRjE0ODkyQ0FBMUNC Mzc1MTRFNEQxNUY2RDg1MkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbuzFjJWbpBVm/HtrTbM/QUKLb NXrDiXJAdl9p5zDB2r0//MwGgF1aoCYUwmq7vhc6JmIza/R6gM4tE58pGPmO+cW+ 2+GoAT6S+flCQ6rsZBfogyocCwJ2Y+kwZw8GynFjO6CXP0kmoocXxF+oe/G5csqH hcWArF+DRRCrfI1sqfC3YdRddS7CNvGDCTXv6kML0085XM4nV+rXxsUj/OjJ7ONf 22LtbAlLd/lbNU2PIh9cQGu6Tbe4BpdEYXUVYkz+/IbrbpXvjGwza80XMJzNI0CY o0MnkJZuKnkITPAwiIuLgnmRDBfP0C9e46xs7aQKZaajdT+PdO3s03PlheIV -----END CERTIFICATE-----Generated at Tue Nov 4 22:52:24 2025 by rpki-client