$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: AH06LGGCZMsMgOV4GOccltWe+6VgonE+T063O3/XHJI= Subject key identifier: FD:F7:3F:9A:26:82:2A:9B:B4:46:F4:16:4B:E8:13:5A:FE:45:DD:A5 Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 74AC966A065B20DA74D03B5C6D8FF02213E6A65B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: 0125 Signing time: Thu 16 Oct 2025 06:33:08 +0000 Manifest this update: Thu 16 Oct 2025 06:28:08 +0000 Manifest next update: Mon 20 Oct 2025 13:07:08 +0000 Files and hashes: 1: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: uPr5TuhRUUql5Pz7m8LU6PStqcWpnL3Mg6FC17C8d3Y=) 2: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: RVIHmIDNCmIP3eyPllQpcbn7ursqn1i4Fz/Qr5n+Mjo=) 3: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: aTo2/+6iPhrQgjeny1Eq8QNGnFjGyq2bLQ3CV8+XMwk=) 4: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=) 5: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=) 6: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: oLwt4cN5vBy0Yz+mlcIKpg1yZOaygBBPGvedyS3l5uU=) 7: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: 1J1NNHDBkQ0U7ZEQkyCpz3eWSAYSC0imzAPoYiRKK7k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 13:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ac:96:6a:06:5b:20:da:74:d0:3b:5c:6d:8f:f0:22:13:e6:a6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Oct 16 06:28:08 2025 GMT Not After : Oct 20 13:07:08 2025 GMT Subject: CN=FDF73F9A26822A9BB446F4164BE8135AFE45DDA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:21:75:58:86:cd:5d:65:36:fb:2f:79:10: f2:5a:b3:86:24:22:91:af:20:05:6b:8b:f7:22:f8: 62:e7:f7:74:f2:54:89:52:52:ff:16:cf:60:bc:d8: 4e:fd:bc:ba:11:b1:6c:da:bc:b8:31:5e:08:26:35: 7a:c4:f3:8e:3f:45:c2:72:19:1b:9b:de:33:fb:37: 39:c9:5b:ea:c1:d7:69:a2:51:7f:1f:9c:de:a6:cc: f4:8d:1a:b1:b5:a2:18:8e:58:90:ce:5c:6d:05:f8: 23:86:31:18:c7:96:10:62:0f:10:9b:c2:d3:ef:cf: e5:41:ec:86:9d:ba:45:fe:78:a2:4f:85:cc:39:bf: c1:16:09:4f:cf:dc:5c:3c:95:d7:64:c8:39:a2:d4: 73:97:19:4b:f5:35:ef:06:cb:3d:13:00:0f:c6:8f: 3c:50:ac:5f:8e:65:39:54:66:64:7a:76:07:56:6b: 98:e9:9d:e7:2c:80:15:c9:dd:d8:ba:4f:ad:ac:be: 90:7a:fb:fe:c5:7e:4d:a6:e1:00:84:52:12:34:f5: 90:85:21:64:fe:e0:e7:2f:df:0a:eb:2f:0f:d4:e0: a6:9b:98:23:f3:4d:07:89:34:a6:36:0f:c0:3d:3e: 5e:16:d6:83:be:93:fb:23:b9:be:db:31:c7:90:6a: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F7:3F:9A:26:82:2A:9B:B4:46:F4:16:4B:E8:13:5A:FE:45:DD:A5 X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:12:05:77:56:0d:ad:b1:79:80:bc:9f:80:8d:4f:db:43:7b: e4:5e:5c:fc:aa:b3:89:0d:f2:a1:93:32:00:5d:d3:36:a9:35: c1:16:54:44:aa:f6:c9:32:95:90:46:0c:3f:e8:46:ce:ab:01: df:45:e7:e5:0c:b5:d1:35:f6:f5:f7:5b:20:32:81:3f:e6:0e: 1c:a6:a4:fb:c7:cc:d6:d7:ad:5d:ab:d4:1d:7c:67:8d:01:96: 90:d6:53:74:1b:1b:fe:99:59:2f:24:f8:40:18:76:9c:97:c9: 8d:53:6b:65:cb:db:1e:84:15:8e:f1:d1:06:e0:79:56:a8:e1: 3c:1e:dd:39:73:81:3e:eb:d2:82:05:0a:0a:db:4a:77:cf:48: 76:3f:69:37:30:f6:3e:34:72:18:0c:63:d2:dc:cf:9b:6f:fd: 81:be:2b:77:ba:86:49:68:1b:39:b2:ee:0b:ca:8d:a0:9a:7f: b3:cd:be:9f:1f:d5:65:2d:5b:e5:09:95:3a:9c:4a:73:cf:ec: b6:66:08:19:f5:82:10:38:1d:37:b9:69:28:7a:d0:57:6d:7e: 2b:59:8d:f1:b2:42:cb:3f:6c:0f:a8:51:b7:0d:c2:df:95:84: 7b:30:f3:49:48:34:77:a4:a1:c9:93:1b:14:86:0c:c2:ed:e8: 3f:73:93:fa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdKyWagZbINp00DtcbY/wIhPmplswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNTEwMTYwNjI4MDhaFw0yNTEwMjAxMzA3MDhaMDMxMTAvBgNV BAMTKEZERjczRjlBMjY4MjJBOUJCNDQ2RjQxNjRCRTgxMzVBRkU0NUREQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3byF1WIbNXWU2+y95EPJas4Yk IpGvIAVri/ci+GLn93TyVIlSUv8Wz2C82E79vLoRsWzavLgxXggmNXrE844/RcJy GRub3jP7NznJW+rB12miUX8fnN6mzPSNGrG1ohiOWJDOXG0F+COGMRjHlhBiDxCb wtPvz+VB7IadukX+eKJPhcw5v8EWCU/P3Fw8lddkyDmi1HOXGUv1Ne8Gyz0TAA/G jzxQrF+OZTlUZmR6dgdWa5jpnecsgBXJ3di6T62svpB6+/7Ffk2m4QCEUhI09ZCF IWT+4Ocv3wrrLw/U4KabmCPzTQeJNKY2D8A9Pl4W1oO+k/sjub7bMceQajbVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/fc/miaCKpu0RvQWS+gTWv5F3aUwHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxEgV3Vg2tsXmAvJ+AjU/bQ3vk Xlz8qrOJDfKhkzIAXdM2qTXBFlREqvbJMpWQRgw/6EbOqwHfReflDLXRNfb191sg MoE/5g4cpqT7x8zW161dq9QdfGeNAZaQ1lN0Gxv+mVkvJPhAGHacl8mNU2tly9se hBWO8dEG4HlWqOE8Ht05c4E+69KCBQoK20p3z0h2P2k3MPY+NHIYDGPS3M+bb/2B vit3uoZJaBs5su4Lyo2gmn+zzb6fH9VlLVvlCZU6nEpzz+y2ZggZ9YIQOB03uWko etBXbX4rWY3xskLLP2wPqFG3DcLflYR7MPNJSDR3pKHJkxsUhgzC7eg/c5P6 -----END CERTIFICATE-----Generated at Fri Oct 17 05:19:14 2025 by rpki-client