$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft File: 3214A9089E97D5F53B714A9F9256A933E4595E53.mft (raw, json) Hash identifier: 3RLY5M2CVlTQIVCYrHOPKCv9/9bd6kRHilYboWLLnvs= Subject key identifier: 90:32:37:89:14:F4:F7:FF:CC:E8:7C:E4:E1:2B:AA:37:21:B3:48:65 Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 Certificate issuer: /CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Certificate serial: 2413EAD8741022E0BEC04DBF6952EACCA3888CF0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft Manifest number: 0130 Signing time: Fri 24 Oct 2025 16:25:34 +0000 Manifest this update: Fri 24 Oct 2025 16:20:34 +0000 Manifest next update: Thu 30 Oct 2025 05:37:34 +0000 Files and hashes: 1: 34352e3137382e33392e302f32342d3234203d3e203232373234.roa (hash: 111gob655h+J1ltSdpVz1rHfordidT3DHlpMVoHhsG4=) 2: 3214A9089E97D5F53B714A9F9256A933E4595E53.crl (hash: HeaqRUZaP8/XXTCm/PHYtpOvnxjNtpzSVnqRtqMxwjM=) 3: 34352e3137382e33372e302f32342d3234203d3e203232373234.roa (hash: 0HhnYrRRVi7CHJEvS9xN8EZDppFHk6whkimhveshWDc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:13:ea:d8:74:10:22:e0:be:c0:4d:bf:69:52:ea:cc:a3:88:8c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Validity Not Before: Oct 24 16:20:34 2025 GMT Not After : Oct 30 05:37:34 2025 GMT Subject: CN=9032378914F4F7FFCCE87CE4E12BAA3721B34865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:63:57:d5:37:20:4c:64:e3:81:f9:fe:2b: 5a:89:36:3c:9b:bb:e6:88:b4:1e:45:8d:52:02:85: 57:bb:90:95:b0:d0:39:4f:87:a4:1e:e9:1b:f6:fa: 18:d3:17:0e:ef:36:f8:dd:5b:ab:ae:39:76:88:30: 7a:14:8e:d4:c7:c0:55:8e:61:db:bb:cb:68:50:85: de:04:47:3d:4f:2a:ef:03:a0:a8:b2:b1:6e:3e:9e: 0b:ca:3e:77:19:ff:45:0e:31:fd:bc:7a:e5:e8:6a: 62:d0:2e:33:aa:b7:8b:0c:08:f4:60:98:b8:05:f6: 92:3d:51:1d:25:70:97:d2:06:e5:75:81:0d:85:98: d6:b7:e8:d5:84:c6:af:55:9e:c1:1b:c5:8a:7b:54: 8e:77:be:5d:41:e0:95:09:13:3b:33:bf:17:12:06: 31:66:54:f8:74:2c:24:0a:7a:d3:6f:c7:ff:e0:5c: 66:84:a2:c2:87:14:58:c6:ff:f8:ce:ef:14:95:53: 1e:63:08:44:9e:75:39:1a:8e:09:e4:a8:87:ee:dd: 78:eb:63:c6:af:33:1d:52:6a:1b:92:7c:70:94:67: a0:64:9a:cd:39:0d:b9:ae:3f:93:db:f2:54:65:10: 25:d9:aa:89:cb:2e:f8:e9:21:ea:9f:16:82:ad:02: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:37:89:14:F4:F7:FF:CC:E8:7C:E4:E1:2B:AA:37:21:B3:48:65 X509v3 Authority Key Identifier: keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:73:7e:c1:e7:e7:1f:00:79:83:f8:8e:90:af:3c:7f:cf:e0: 3d:c6:7c:52:1c:ca:ab:12:bd:98:bf:6e:a8:9b:5b:09:4c:ce: 4b:78:77:80:3d:32:96:35:c8:f6:40:82:aa:5b:e3:89:29:a7: fe:c8:08:f1:ee:96:ff:a4:d8:af:af:9b:1a:95:b3:30:ef:d3: d3:97:7f:71:3e:93:ee:83:d0:02:08:9a:a1:5c:f4:08:00:e0: a7:57:2a:d5:80:82:af:6c:62:96:e4:dd:f2:97:b7:d3:ef:a2: 6e:dd:01:95:36:be:fa:0a:2a:3b:af:50:f4:15:ae:99:f2:3a: ed:da:9d:fe:9e:f1:51:40:f3:98:89:01:d3:19:da:ee:c0:23: 24:fa:58:c6:46:0a:a2:44:62:45:db:9c:0c:46:f8:c5:09:74: 14:40:9f:3d:ef:ba:fd:cf:9b:6b:46:a7:02:6d:d9:63:3e:95: f7:c8:fe:77:73:22:a4:96:15:ce:3e:f0:2f:5b:cf:0b:8a:89: da:0a:35:34:81:a4:93:f1:e8:e6:16:f3:33:8a:9a:e3:dd:4f: 62:66:a5:2f:ab:df:c3:7a:76:9b:33:21:07:ff:ab:bb:54:60: 21:38:c2:77:57:7f:b0:97:bc:3e:8b:d0:d4:d7:55:07:4e:e4: 65:76:0b:20 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJBPq2HQQIuC+wE2/aVLqzKOIjPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxNEE5MDg5RTk3RDVGNTNCNzE0QTlGOTI1NkE5MzNF NDU5NUU1MzAeFw0yNTEwMjQxNjIwMzRaFw0yNTEwMzAwNTM3MzRaMDMxMTAvBgNV BAMTKDkwMzIzNzg5MTRGNEY3RkZDQ0U4N0NFNEUxMkJBQTM3MjFCMzQ4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRWNX1TcgTGTjgfn+K1qJNjyb u+aItB5FjVIChVe7kJWw0DlPh6Qe6Rv2+hjTFw7vNvjdW6uuOXaIMHoUjtTHwFWO Ydu7y2hQhd4ERz1PKu8DoKiysW4+ngvKPncZ/0UOMf28euXoamLQLjOqt4sMCPRg mLgF9pI9UR0lcJfSBuV1gQ2FmNa36NWExq9VnsEbxYp7VI53vl1B4JUJEzszvxcS BjFmVPh0LCQKetNvx//gXGaEosKHFFjG//jO7xSVUx5jCESedTkajgnkqIfu3Xjr Y8avMx1SahuSfHCUZ6Bkms05DbmuP5Pb8lRlECXZqonLLvjpIeqfFoKtAkmFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkDI3iRT09//M6Hzk4SuqNyGzSGUwHwYDVR0j BBgwFoAUMhSpCJ6X1fU7cUqfklapM+RZXlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMTI2OTU1Rjg2NzdFODU4MzZENkMwMDNFMzhCRTNDRTcy N0IyQzk3RkQ2MjU1ODFCMDA4ODc5M0NFMTlERUFGLzAvMzIxNEE5MDg5RTk3RDVG NTNCNzE0QTlGOTI1NkE5MzNFNDU5NUU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjE0QTkwODlFOTdENUY1M0I3 MTRBOUY5MjU2QTkzM0U0NTk1RTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzEyNjk1NUY4Njc3RTg1ODM2RDZDMDAzRTM4QkUzQ0U3MjdCMkM5N0ZE NjI1NTgxQjAwODg3OTNDRTE5REVBRi8wLzMyMTRBOTA4OUU5N0Q1RjUzQjcxNEE5 RjkyNTZBOTMzRTQ1OTVFNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApc37B5+cfAHmD+I6Qrzx/z+A9 xnxSHMqrEr2Yv26om1sJTM5LeHeAPTKWNcj2QIKqW+OJKaf+yAjx7pb/pNivr5sa lbMw79PTl39xPpPug9ACCJqhXPQIAOCnVyrVgIKvbGKW5N3yl7fT76Ju3QGVNr76 Cio7r1D0Fa6Z8jrt2p3+nvFRQPOYiQHTGdruwCMk+ljGRgqiRGJF25wMRvjFCXQU QJ8977r9z5trRqcCbdljPpX3yP53cyKklhXOPvAvW88LionaCjU0gaST8ejmFvMz iprj3U9iZqUvq9/DenabMyEH/6u7VGAhOMJ3V3+wl7w+i9DU11UHTuRldgsg -----END CERTIFICATE-----Generated at Sun Oct 26 11:34:52 2025 by rpki-client