$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft File: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft (raw, json) Hash identifier: VK/swfIFys7FJoX45tskjHuAYID5LQPy3gtJ0YwkRbE= Subject key identifier: C4:16:28:B3:D1:56:C9:86:4F:78:F6:8D:FC:CD:6B:70:EA:BC:B0:B4 Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70 Certificate issuer: /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70 Certificate serial: 34B6A8466D18A14D8F1139679DC992D1506DD974 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft Manifest number: 0123 Signing time: Wed 22 Oct 2025 08:28:40 +0000 Manifest this update: Wed 22 Oct 2025 08:23:40 +0000 Manifest next update: Tue 28 Oct 2025 06:37:40 +0000 Files and hashes: 1: 323830333a356439303a3a2f33322d3536203d3e20323733303030.roa (hash: 0OoP3A238IuGlM9478CrBEi+3xgJKgMmBk2U8Rug3mA=) 2: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl (hash: t0t1XFeKYnPWPv8KZ3UzywcJu1i4HKRsEbW5DNb+ut0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b6:a8:46:6d:18:a1:4d:8f:11:39:67:9d:c9:92:d1:50:6d:d9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70 Validity Not Before: Oct 22 08:23:40 2025 GMT Not After : Oct 28 06:37:40 2025 GMT Subject: CN=C41628B3D156C9864F78F68DFCCD6B70EABCB0B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:b5:dd:bd:7b:bd:e3:6f:85:05:94:45:ad: 32:49:a5:c4:a1:19:fa:7d:ca:7b:82:ea:d0:2f:c5: 34:d3:da:a3:48:5c:0c:5b:5e:91:b8:34:92:76:9c: 97:51:86:94:b7:3b:87:7a:93:03:74:3e:97:ae:5d: d2:a5:f4:da:a1:b5:04:33:a8:2f:db:ed:6c:44:1b: c4:1c:e9:ca:15:b1:6c:b7:13:38:ec:a8:b4:55:ec: 1a:83:cb:64:3c:6b:a0:7b:8e:15:39:ef:2a:2f:7c: 00:dd:00:79:8d:46:b2:66:97:1c:0f:a1:28:7f:55: 20:0b:7d:b3:6f:9b:29:59:d6:c9:75:61:d0:f2:57: d9:2c:73:1d:21:fd:c5:a5:c8:23:bb:11:0d:47:ec: 5b:1c:4b:69:a7:5b:62:88:b0:aa:74:80:e7:4e:48: 35:30:f4:51:27:31:cc:fe:07:d7:7c:39:76:b3:95: f4:aa:b2:fd:5c:8b:2e:a4:02:30:b0:83:1d:06:1f: 52:87:8c:f9:ff:66:75:c8:3b:24:15:45:cb:de:cd: 6b:4c:6e:31:3f:88:3c:94:11:c8:b8:98:a7:3a:c5: d1:73:d8:fe:6b:1c:5e:2b:40:91:52:58:fa:4e:c5: ca:e9:18:b2:06:27:33:15:41:69:4d:62:26:56:61: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:28:B3:D1:56:C9:86:4F:78:F6:8D:FC:CD:6B:70:EA:BC:B0:B4 X509v3 Authority Key Identifier: keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e8:cf:14:9b:78:ab:ac:b4:43:e6:04:a4:b6:33:93:99:9e: 1c:3f:fa:e6:21:9c:82:62:f7:92:e3:9d:05:1e:2d:7b:ed:96: b8:7a:61:24:0e:20:7e:22:20:5d:a0:98:aa:3d:83:09:38:c4: 1f:cc:27:db:1d:69:78:28:52:fa:ad:90:c3:18:cd:4e:86:09: cc:5d:dc:e2:e0:0a:f7:28:85:a9:fc:ca:71:9c:3a:33:76:08: 77:ce:2b:03:6e:7b:00:d1:cf:67:3b:2f:e0:c2:f6:05:69:8c: f8:7c:35:13:ea:e4:ef:c7:33:a8:b3:ce:3f:b0:a2:63:af:63: 91:76:12:4a:d1:ad:8e:f8:a0:09:5a:7a:2b:cb:c4:07:e1:71: af:0b:2e:60:ec:43:d9:d3:82:84:47:ca:32:74:33:73:70:67: 20:7e:9b:99:a2:3b:fe:7e:86:04:98:d8:30:3f:80:f4:96:cd: ba:aa:08:20:cc:2d:a6:68:f4:8b:a9:f4:97:26:bb:c8:f7:39: 07:6c:28:27:3b:41:bc:55:86:38:77:43:76:b1:c0:fd:b3:63: dc:3e:3f:6f:25:2b:3c:79:f6:bf:ca:eb:87:44:74:14:67:67: 7d:85:ef:2b:3b:26:e8:53:50:26:80:cf:27:5b:8f:2f:5d:7e: 57:fe:9d:e6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNLaoRm0YoU2PETlnncmS0VBt2XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQzMkM1MEZFQkI2RkI1N0Q4QUM0RUQ0QzA1REYyMEM4 OUZFNkQ3MDAeFw0yNTEwMjIwODIzNDBaFw0yNTEwMjgwNjM3NDBaMDMxMTAvBgNV BAMTKEM0MTYyOEIzRDE1NkM5ODY0Rjc4RjY4REZDQ0Q2QjcwRUFCQ0IwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE97XdvXu942+FBZRFrTJJpcSh Gfp9ynuC6tAvxTTT2qNIXAxbXpG4NJJ2nJdRhpS3O4d6kwN0PpeuXdKl9NqhtQQz qC/b7WxEG8Qc6coVsWy3EzjsqLRV7BqDy2Q8a6B7jhU57yovfADdAHmNRrJmlxwP oSh/VSALfbNvmylZ1sl1YdDyV9kscx0h/cWlyCO7EQ1H7FscS2mnW2KIsKp0gOdO SDUw9FEnMcz+B9d8OXazlfSqsv1ciy6kAjCwgx0GH1KHjPn/ZnXIOyQVRcvezWtM bjE/iDyUEci4mKc6xdFz2P5rHF4rQJFSWPpOxcrpGLIGJzMVQWlNYiZWYU9NAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxBYos9FWyYZPePaN/M1rcOq8sLQwHwYDVR0j BBgwFoAUNDLFD+u2+1fYrE7UwF3yDIn+bXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDVCRDY2NDkyNEZBNTdENTNDNTIzMEVDRkU0N0ZENDgz RkQyMEI5QjQ4QjcxRkJCN0E3Mzk1MzFFREQ4OEZCLzAvMzQzMkM1MEZFQkI2RkI1 N0Q4QUM0RUQ0QzA1REYyMEM4OUZFNkQ3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDMyQzUwRkVCQjZGQjU3RDhB QzRFRDRDMDVERjIwQzg5RkU2RDcwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ1QkQ2NjQ5MjRGQTU3RDUzQzUyMzBFQ0ZFNDdGRDQ4M0ZEMjBCOUI0 OEI3MUZCQjdBNzM5NTMxRUREODhGQi8wLzM0MzJDNTBGRUJCNkZCNTdEOEFDNEVE NEMwNURGMjBDODlGRTZENzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo6M8Um3irrLRD5gSktjOTmZ4c P/rmIZyCYveS450FHi177Za4emEkDiB+IiBdoJiqPYMJOMQfzCfbHWl4KFL6rZDD GM1OhgnMXdzi4Ar3KIWp/MpxnDozdgh3zisDbnsA0c9nOy/gwvYFaYz4fDUT6uTv xzOos84/sKJjr2ORdhJK0a2O+KAJWnory8QH4XGvCy5g7EPZ04KER8oydDNzcGcg fpuZojv+foYEmNgwP4D0ls26qgggzC2maPSLqfSXJrvI9zkHbCgnO0G8VYY4d0N2 scD9s2PcPj9vJSs8efa/yuuHRHQUZ2d9he8rOyboU1AmgM8nW48vXX5X/p3m -----END CERTIFICATE-----Generated at Thu Oct 23 00:26:19 2025 by rpki-client