$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft File: 03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft (raw, json) Hash identifier: N1rTnu5ftecXfiwmmNW2j3fBTWu809zTd1in7N9Y1xo= Subject key identifier: 40:52:B4:17:37:41:76:2F:58:7A:E6:18:E3:84:E2:B9:F9:40:8B:77 Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53 Certificate issuer: /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253 Certificate serial: 079C68F8C47E55D3AFA2936BA69DE8D59F95F073 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft Manifest number: 0127 Signing time: Tue 21 Oct 2025 18:49:18 +0000 Manifest this update: Tue 21 Oct 2025 18:44:18 +0000 Manifest next update: Sun 26 Oct 2025 10:36:18 +0000 Files and hashes: 1: 03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl (hash: PwHG8Myw2VdLcObh8bvpatbcLu/BNEeRhRehWdmMWm0=) 2: 323830333a623832303a3a2f33322d3332203d3e20323635383135.roa (hash: BgiZVEBkCsQBpduxD2lkBm4tWZPrSE7ZdRvsOKcVcyw=) 3: 3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa (hash: kUx7ZC/Avh4F/D6K24kJ0nu91aTs1NFQuO+O+sND8Wc=) 4: 3230312e3138322e3135302e302f32332d3234203d3e203532343638.roa (hash: WSMOqdyoE1ic1M/wXhWBvVgxHsF2CSe6rHQv+9gKKQI=) 5: 3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa (hash: MvedPI8wPX0DLSbpSEQnJQeBsGh+GfB3rH7mbTvmdEE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 26 Oct 2025 10:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9c:68:f8:c4:7e:55:d3:af:a2:93:6b:a6:9d:e8:d5:9f:95:f0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253 Validity Not Before: Oct 21 18:44:18 2025 GMT Not After : Oct 26 10:36:18 2025 GMT Subject: CN=4052B4173741762F587AE618E384E2B9F9408B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:2e:f9:50:40:4d:65:22:e6:35:7a:b2:16: fb:9c:d7:c8:9a:d6:e8:f9:f0:e8:94:ab:70:32:20: 7e:6a:8c:43:6a:79:b6:40:88:cf:76:9e:6a:57:3f: e6:a0:9d:e9:dc:2d:10:fc:70:e4:3e:b2:fc:20:41: 1b:00:3b:ba:e8:6f:5a:d4:a0:00:19:15:97:ab:5e: 30:0a:64:4e:46:af:0e:b1:fc:d2:5c:6e:91:df:79: 01:54:d3:5d:a4:a3:16:cb:a7:79:e1:4b:28:31:bd: 14:10:2f:fb:f6:32:3b:59:b8:09:63:d8:46:e8:1b: 59:b6:7f:71:22:53:1d:f8:fd:cd:30:17:9e:fa:66: 6f:67:59:82:15:f0:92:2c:45:7a:41:6b:24:b0:6a: df:ec:c8:1a:f7:d8:1c:d8:b9:0d:c6:8a:7d:82:f9: f4:6a:44:04:32:b7:f6:2d:aa:27:f9:82:13:79:dd: 21:d8:87:88:0f:3b:9b:66:f5:a8:9c:f5:33:91:a8: 8a:ae:e4:d5:b8:54:bb:4c:fe:16:43:ac:df:d5:ba: 84:d5:41:f2:41:87:b6:0b:51:cb:4e:6c:c6:e6:07: df:8d:4b:d1:28:82:7d:90:a5:c8:99:67:ee:ad:66: 58:3f:b8:ae:32:ac:a1:94:86:be:3b:51:57:3d:1b: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:52:B4:17:37:41:76:2F:58:7A:E6:18:E3:84:E2:B9:F9:40:8B:77 X509v3 Authority Key Identifier: keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:7f:aa:71:66:23:81:25:0f:30:2f:2e:72:81:f5:c8:27:c6: b0:b5:b3:b6:60:11:5d:cf:4f:70:b1:6b:ef:e9:ba:83:17:28: 67:5f:42:cb:ac:8e:87:52:95:a3:27:da:d1:13:96:bf:a2:95: 87:56:97:48:bd:30:dc:e1:8d:52:9e:86:45:4c:0a:ea:8b:7d: 82:91:9d:18:90:26:74:d7:54:31:84:f3:16:06:d6:df:dc:22: e0:43:8b:78:95:e5:43:5e:cf:6b:b0:3a:a9:80:f0:a3:b2:e2: 5b:ef:34:9a:45:76:85:ef:59:1f:cd:64:f9:3b:2a:65:c0:6b: b0:86:70:4a:3f:78:ff:33:6f:73:50:b2:4d:5a:29:fa:27:08: 33:47:6e:01:03:a7:01:9a:b1:fc:91:6e:78:67:61:c8:23:17: d5:11:19:29:f1:2b:8d:93:d0:63:21:f2:71:da:a4:8a:53:b1: 44:6a:e4:79:3a:0b:2e:3c:00:fc:25:c8:38:a1:eb:e0:d5:19: 06:c2:10:e2:4a:07:05:91:f0:bd:d3:5c:d4:b7:4e:54:fe:8f: d8:85:55:fb:bb:a2:25:6b:96:35:2d:ca:81:49:d0:d5:95:ae: 8b:18:a1:bd:f1:a6:be:a2:fb:64:53:23:fd:08:e5:91:a9:24: f6:95:88:47 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB5xo+MR+VdOvopNrpp3o1Z+V8HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4NjJBOUJGQ0I5N0VFNkI2MkNFMURCMDc3RTNCNkVB RDVGRTI1MzAeFw0yNTEwMjExODQ0MThaFw0yNTEwMjYxMDM2MThaMDMxMTAvBgNV BAMTKDQwNTJCNDE3Mzc0MTc2MkY1ODdBRTYxOEUzODRFMkI5Rjk0MDhCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYby75UEBNZSLmNXqyFvuc18ia 1uj58OiUq3AyIH5qjENqebZAiM92nmpXP+agnencLRD8cOQ+svwgQRsAO7rob1rU oAAZFZerXjAKZE5Grw6x/NJcbpHfeQFU012koxbLp3nhSygxvRQQL/v2MjtZuAlj 2EboG1m2f3EiUx34/c0wF576Zm9nWYIV8JIsRXpBaySwat/syBr32BzYuQ3Gin2C +fRqRAQyt/Ytqif5ghN53SHYh4gPO5tm9aic9TORqIqu5NW4VLtM/hZDrN/VuoTV QfJBh7YLUctObMbmB9+NS9Eogn2QpciZZ+6tZlg/uK4yrKGUhr47UVc9G1iDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQFK0FzdBdi9YeuYY44TiuflAi3cwHwYDVR0j BBgwFoAUA4Yqm/y5fua2LOHbB347bq1f4lMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNEM4OUQ0MzE2OTY2NEI5QjBGNDI3Nzk3NDlCOEUyNzE4 NEJFMTA3OUQ1N0M3QTc2QTc2RDVEODgxMDhGODBDLzAvMDM4NjJBOUJGQ0I5N0VF NkI2MkNFMURCMDc3RTNCNkVBRDVGRTI1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMzg2MkE5QkZDQjk3RUU2QjYy Q0UxREIwNzdFM0I2RUFENUZFMjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTRDODlENDMxNjk2NjRCOUIwRjQyNzc5NzQ5QjhFMjcxODRCRTEwNzlE NTdDN0E3NkE3NkQ1RDg4MTA4RjgwQy8wLzAzODYyQTlCRkNCOTdFRTZCNjJDRTFE QjA3N0UzQjZFQUQ1RkUyNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwf6pxZiOBJQ8wLy5ygfXIJ8aw tbO2YBFdz09wsWvv6bqDFyhnX0LLrI6HUpWjJ9rRE5a/opWHVpdIvTDc4Y1SnoZF TArqi32CkZ0YkCZ011QxhPMWBtbf3CLgQ4t4leVDXs9rsDqpgPCjsuJb7zSaRXaF 71kfzWT5OyplwGuwhnBKP3j/M29zULJNWin6JwgzR24BA6cBmrH8kW54Z2HIIxfV ERkp8SuNk9BjIfJx2qSKU7FEauR5OgsuPAD8Jcg4oevg1RkGwhDiSgcFkfC901zU t05U/o/YhVX7u6Ila5Y1LcqBSdDVla6LGKG98aa+ovtkUyP9COWRqST2lYhH -----END CERTIFICATE-----Generated at Thu Oct 23 02:24:58 2025 by rpki-client