$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft File: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft (raw, json) Hash identifier: JNgjwbm0Ful9XjQbCEaEYf04bGUH79XBoypJ44850oE= Subject key identifier: 85:13:2B:2A:1C:1B:3A:BA:D2:F9:93:6D:94:B7:0C:16:98:7C:AE:39 Authority key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 Certificate issuer: /CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0 Certificate serial: 0702DE38262D899D12B1CE9A833D290006B04B13 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft Manifest number: 0136 Signing time: Fri 31 Oct 2025 17:37:58 +0000 Manifest this update: Fri 31 Oct 2025 17:32:58 +0000 Manifest next update: Wed 05 Nov 2025 11:10:58 +0000 Files and hashes: 1: 3230312e3133302e31362e302f32322d3232203d3e203237393531.roa (hash: abImvvbFsudfph5qw211U6DBVARt/+FYVfAAbpcdAJc=) 2: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl (hash: MpaUAaYWvibW024aO/pWykp6cIvymej9GxU7KfK3Tlk=) 3: 323830313a3163343a3a2f34342d3434203d3e20323632353839.roa (hash: lorZn9/vXoPIp0R8IKOORdaOFAbwOZuk9eFtFCf+UjY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:02:de:38:26:2d:89:9d:12:b1:ce:9a:83:3d:29:00:06:b0:4b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0 Validity Not Before: Oct 31 17:32:58 2025 GMT Not After : Nov 5 11:10:58 2025 GMT Subject: CN=85132B2A1C1B3ABAD2F9936D94B70C16987CAE39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:f8:b1:3a:ac:ca:cc:92:ed:dd:23:98:75: 81:4c:69:a5:c8:ad:bb:fa:c1:93:23:51:d9:31:67: 5b:4b:b7:2a:e3:06:44:ac:84:1d:76:1f:e2:19:51: e4:da:88:7d:f9:7c:74:55:02:bc:04:5f:18:5c:52: a7:22:b7:57:b9:96:60:9c:5e:d8:14:aa:1e:6e:56: aa:4a:f4:87:77:05:a4:43:67:da:d4:11:7c:ec:ac: aa:74:79:1f:22:b0:7b:b9:47:5e:cb:2f:31:2b:13: 24:01:3f:dc:d8:e6:aa:0b:50:56:15:8d:99:e2:6e: 82:8f:a6:8a:a7:7b:ca:4f:91:2f:94:03:61:f8:a7: 64:ba:6b:bf:1b:5f:73:3c:3e:75:07:91:31:41:ad: 92:d0:2b:82:75:01:07:67:85:ce:1c:ec:0b:43:d1: e7:ef:84:e8:2a:0f:03:d7:de:e7:71:14:08:c6:c5: f1:9f:e8:6d:96:6c:c5:fd:32:ba:07:97:37:d2:5d: dd:a8:fc:35:5f:a2:73:e4:2b:81:31:21:fb:52:c7: ec:88:aa:2b:eb:29:04:97:66:0b:5e:70:45:03:3b: 0e:e9:c2:19:57:c1:28:a7:67:0d:fa:06:e9:bd:49: 3e:23:7e:84:75:ba:4c:3c:be:65:92:ba:d8:53:6d: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:13:2B:2A:1C:1B:3A:BA:D2:F9:93:6D:94:B7:0C:16:98:7C:AE:39 X509v3 Authority Key Identifier: keyid:3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:62:4e:96:d0:0e:ac:68:6e:1d:01:a2:0f:40:8a:eb:6a:ec: 65:12:4d:09:2d:eb:b2:ab:2b:dc:00:35:4c:de:ea:b6:6f:46: 1a:bc:77:69:3d:bd:ac:06:88:88:2a:9c:bb:4f:ea:48:48:78: 30:5f:1a:2d:8e:06:6d:4d:e3:bf:2a:d5:6d:6a:0d:65:03:59: bd:f5:90:e0:0b:83:90:52:b5:5c:50:2c:3a:f5:5a:7d:29:0e: e7:dc:ac:38:0f:ed:07:fc:06:89:17:93:29:e8:99:f5:e8:a5: 30:6b:27:10:ef:e8:8d:91:5d:e5:4a:45:8b:90:e7:4f:0a:f7: fa:e6:6e:93:47:72:87:3b:dc:df:32:6f:b7:d5:af:9c:89:d4: f8:b6:c6:c1:4d:5b:43:ac:ad:5c:5f:00:36:a0:a4:16:d7:c5: 5d:2c:96:8c:3c:2b:04:65:64:15:e3:bc:c0:7f:f2:7b:46:0c: d9:15:55:8c:22:d8:ce:be:8b:05:2a:23:6e:68:5a:a9:75:16: 08:12:d2:1d:bf:5d:e0:b7:e8:2b:7a:a5:a5:fc:81:39:24:c1: e1:9a:53:9c:05:54:2a:e2:54:eb:f2:18:33:e6:2c:4e:38:bb: 6b:5e:67:b7:13:e7:1a:d5:4a:e0:0c:7a:82:57:77:b7:18:2e: 6b:3b:61:6f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBwLeOCYtiZ0Ssc6agz0pAAawSxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5NEFDREM0Mzg2NTlGMjBEMkFDOENEMzk5MzRBMUND MEVGRTNBMDAeFw0yNTEwMzExNzMyNThaFw0yNTExMDUxMTEwNThaMDMxMTAvBgNV BAMTKDg1MTMyQjJBMUMxQjNBQkFEMkY5OTM2RDk0QjcwQzE2OTg3Q0FFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbPixOqzKzJLt3SOYdYFMaaXI rbv6wZMjUdkxZ1tLtyrjBkSshB12H+IZUeTaiH35fHRVArwEXxhcUqcit1e5lmCc XtgUqh5uVqpK9Id3BaRDZ9rUEXzsrKp0eR8isHu5R17LLzErEyQBP9zY5qoLUFYV jZniboKPpoqne8pPkS+UA2H4p2S6a78bX3M8PnUHkTFBrZLQK4J1AQdnhc4c7AtD 0efvhOgqDwPX3udxFAjGxfGf6G2WbMX9MroHlzfSXd2o/DVfonPkK4ExIftSx+yI qivrKQSXZgtecEUDOw7pwhlXwSinZw36Bum9ST4jfoR1ukw8vmWSuthTbTIJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhRMrKhwbOrrS+ZNtlLcMFph8rjkwHwYDVR0j BBgwFoAUPJSs3EOGWfINKsjNOZNKHMDv46AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BODIzMUE0N0EyRjA4MkJDNzZCQjlDRUU5RTNGNUVBQjg1 MkZDRTY1QzRGNzQ0N0MyNDgxOUJDMDQwOEU2Qjc2LzAvM0M5NEFDREM0Mzg2NTlG MjBEMkFDOENEMzk5MzRBMUNDMEVGRTNBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzk0QUNEQzQzODY1OUYyMEQy QUM4Q0QzOTkzNEExQ0MwRUZFM0EwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTgyMzFBNDdBMkYwODJCQzc2QkI5Q0VFOUUzRjVFQUI4NTJGQ0U2NUM0 Rjc0NDdDMjQ4MTlCQzA0MDhFNkI3Ni8wLzNDOTRBQ0RDNDM4NjU5RjIwRDJBQzhD RDM5OTM0QTFDQzBFRkUzQTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnYk6W0A6saG4dAaIPQIrrauxl Ek0JLeuyqyvcADVM3uq2b0YavHdpPb2sBoiIKpy7T+pISHgwXxotjgZtTeO/KtVt ag1lA1m99ZDgC4OQUrVcUCw69Vp9KQ7n3Kw4D+0H/AaJF5Mp6Jn16KUwaycQ7+iN kV3lSkWLkOdPCvf65m6TR3KHO9zfMm+31a+cidT4tsbBTVtDrK1cXwA2oKQW18Vd LJaMPCsEZWQV47zAf/J7RgzZFVWMItjOvosFKiNuaFqpdRYIEtIdv13gt+greqWl /IE5JMHhmlOcBVQq4lTr8hgz5ixOOLtrXme3E+ca1UrgDHqCV3e3GC5rO2Fv -----END CERTIFICATE-----Generated at Sat Nov 1 03:52:51 2025 by rpki-client