$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft File: 3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft (raw, json) Hash identifier: dJSN4pWq0NSgMCMCODLIb/09YpTbaGvVnKrr0hsgT9E= Subject key identifier: 8A:28:70:2D:06:CA:DF:1D:3D:11:4D:11:9C:6E:3A:63:6A:0D:E5:36 Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7 Certificate issuer: /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7 Certificate serial: 08D2DD3A253837055289BE0422332E2FC321FD7B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 20:08:48 +0000 Manifest this update: Tue 04 Nov 2025 20:03:48 +0000 Manifest next update: Sun 09 Nov 2025 19:17:48 +0000 Files and hashes: 1: 3138362e36372e302e302f31362d3234203d3e203237363531.roa (hash: Cp5C3RXsfTHxtoMS0KSqvpfLRpscvFAeMQo724iJZU0=) 2: 3230302e37322e302e302f31362d3234203d3e2036343731.roa (hash: 69jyN53FmJ3RhEvLOicEV9DNGkPSG6CV5/fupZGFY/E=) 3: 3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa (hash: MnbHmYqLOZbUSF3OTM29mZE4YRx9iThbaP4clNGnXcs=) 4: 3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl (hash: ZhQgioYNvZURn1va+IonG7M12YzCc/F4IVD/I1uTslI=) 5: 323830303a3330303a3a2f33322d313238203d3e203237393836.roa (hash: RH+gQcmE5nEJsYXcXmbvuj7mG6lQB++El58rh576a6A=) 6: 3139302e3135312e35382e302f32342d3234203d3e2033323537.roa (hash: a5NOqZnJBTC1uKc+gkHaCsUDLuOuUtmgkLqYeGIWKxM=) 7: 3230302e3131312e38362e302f32332d3233203d3e203237393235.roa (hash: JXJZD4MP/FwOOaSaJB6iAjT9EHg5T3wi0dKIC7BS86k=) 8: 3230302e31312e39362e302f32312d3234203d3e2036343731.roa (hash: xLmdCzSFdsjtejluUGdbf6g3dJhoSdP7Y0tpSz761gs=) 9: 3230302e37322e302e302f31362d3234203d3e203237363531.roa (hash: 9GK6qE+2jFkCb9zXpDEUeycpNJJ9wTbDzrTM3g2FqtQ=) 10: 3230302e372e31362e302f32302d3231203d3e203237363531.roa (hash: V15NFzJplCH0LEBR2x3+lQxKFRTmGIf8TTRNstu5ljI=) 11: 3230302e3131312e302e302f31362d3234203d3e203237363531.roa (hash: IrQ0o/jV11TArVnJq3RPhbmcA/oOpI8eVv7fShosmCY=) 12: 3138362e36372e3234382e302f32342d3234203d3e203237393836.roa (hash: Z3oqWJb+3tzGqWZzzZnRP0inqTHN+DbPmJTIjsmn0sc=) 13: 3139302e3135312e302e302f31372d3234203d3e2036343731.roa (hash: VLosTIRcQ/Wd4YbwQMNWQ9U0hA4YX7kjOK9TUZvJSUM=) 14: 3230302e3131312e302e302f31362d3234203d3e2036343731.roa (hash: x12nyMwAyC7iZFamMmDYYRFrrbaJ0joesa6t3J8k68k=) 15: 3230302e372e31362e302f32302d3234203d3e2036343731.roa (hash: ZjbfGOt6Tq0pS6iO5t4sCnt0PV85IO81YaTril3EBJo=) 16: 3230302e3131312e3230382e302f32322d3232203d3e203237393235.roa (hash: /onFQj9yDPOH4V65JKZUPqJbjBt+EnbTEYFmYT9xxGg=) 17: 3230302e31312e39342e302f32342d3234203d3e203237393235.roa (hash: owH7QAGKCGJcGj99FObISCFIg7aOi5l5LopXCVOpt4c=) 18: 3139302e3135312e302e302f31372d3234203d3e203237363531.roa (hash: jMt27gLMAll1q/Zl/MiaUmGUHBfU6DFyDChzD06bVSk=) 19: 3135322e3233312e3131302e302f32332d3234203d3e203237393836.roa (hash: /PQS15JvsXQobWyCsJq6Hnggl2hcGCHUqNGEEkVn8rQ=) 20: 3230302e37322e3231312e302f32342d3234203d3e203237393235.roa (hash: J0YVLiMv49GDlbGUfLVDX3X6AYoBbrvMlLcvijwI7uk=) 21: 3230302e31312e36342e302f31392d3234203d3e203237363531.roa (hash: ovqlfNdikDlmX045AT21ONoSNJRXlVMZmnpn3bJJ0Qs=) 22: 3138362e36372e302e302f31362d3234203d3e2036343731.roa (hash: 9j0gH762XrVsZlfITqkLhLxJcFtXAPrrruwIUtphqRE=) 23: 3230302e31312e39362e302f32312d3234203d3e203237363531.roa (hash: r7o2ehGlmayIFlRJiCUEBvKC4aGPOMu7ucTl0iT2FoU=) 24: 3135322e3233312e36342e302f31382d3234203d3e203237363531.roa (hash: P3fOvj1xuMyHP5Grca8sEGJenT1pcfuKJzdk8vK9otk=) 25: 323830303a3330303a3a2f33322d313238203d3e203237363531.roa (hash: dX9mBKQk/aZ9j4t8GO2UvyBSQx1+D6w1tENk86NVk/U=) 26: 3230302e31312e36342e302f31392d3234203d3e2036343731.roa (hash: LPWf/SlAI2Ppi/EaiKNZt9KE7HpfgRDiz4ssCEQmPSM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d2:dd:3a:25:38:37:05:52:89:be:04:22:33:2e:2f:c3:21:fd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7 Validity Not Before: Nov 4 20:03:48 2025 GMT Not After : Nov 9 19:17:48 2025 GMT Subject: CN=8A28702D06CADF1D3D114D119C6E3A636A0DE536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:5c:31:e4:48:35:ae:cb:b8:6e:c6:26:9c: e1:ef:74:ee:2a:f1:61:87:93:d4:d2:3d:a2:1e:4f: c4:5f:bb:85:71:33:90:01:16:e2:fa:0e:8b:92:72: 69:39:e7:87:58:51:0a:d8:b2:49:9e:e9:4a:4e:4b: 21:84:bb:97:b1:ed:8b:81:e2:6b:f6:d6:3c:7c:fc: 25:db:b0:08:44:49:29:af:3c:d2:4a:c7:20:8e:a9: 39:29:1f:a1:02:bd:3f:9e:75:fc:6d:0b:49:b0:ed: 3f:df:54:1f:a7:05:8c:d5:3d:90:dd:40:4d:22:af: 9d:7c:48:5d:f8:72:c8:95:3a:9e:81:e8:0f:2a:f5: 0e:97:0b:83:25:dd:4d:c8:e9:47:1e:56:85:bb:33: 96:5e:98:06:4b:9b:d5:85:a2:e9:61:5b:7e:40:21: dc:14:0f:f8:fa:48:c9:36:3f:42:eb:72:d3:cc:30: 53:d6:60:7d:70:97:d1:f7:c8:47:19:8d:96:75:e7: ee:16:db:21:2d:09:e5:7d:a4:b1:e3:e8:0b:f5:49: 0a:65:8e:68:ad:89:a8:07:6e:64:64:91:1c:ba:b0: 8f:26:64:16:30:0c:88:83:b1:0a:38:96:e4:8a:33: 22:0b:9a:e1:87:7a:46:b4:fb:9f:55:53:10:a7:b4: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:70:2D:06:CA:DF:1D:3D:11:4D:11:9C:6E:3A:63:6A:0D:E5:36 X509v3 Authority Key Identifier: keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:24:77:1d:79:61:d0:3d:fa:af:da:24:64:4f:78:0e:05:fa: 55:91:a6:b3:45:d9:9c:21:89:d4:c7:13:f1:e6:e9:18:b4:b6: 67:eb:2a:dc:ed:87:d6:9b:4e:bb:70:ce:af:7e:de:bf:c0:ef: b9:06:e4:c8:64:cb:59:1b:55:c0:c3:87:81:54:01:3e:0c:ac: 08:93:2d:7f:67:1f:e6:7e:19:f1:67:13:c3:3b:6b:fa:de:7d: 3e:92:ba:ac:3c:19:b3:06:55:4a:5c:82:8a:62:d4:0f:8a:49: 80:11:99:74:11:ed:33:df:3d:8d:85:f4:40:c1:d4:1f:9c:50: 7a:0a:ce:b2:c7:e3:09:5b:c5:3d:c9:ba:55:32:fc:52:42:81: 5c:b7:04:a8:10:44:00:6a:0d:50:cc:b0:18:0f:54:12:7e:93: 11:da:ab:69:5a:a2:c8:37:ab:31:3b:7f:f8:4c:1b:73:73:2e: e2:6c:e1:1e:9f:2b:ba:77:54:c8:3d:4e:c5:da:f5:38:72:1a: a7:9e:af:f7:5a:a6:7f:52:a2:ed:1f:7a:23:13:9d:c0:70:1b: 74:22:9b:a5:8f:d8:2e:bf:b0:ec:17:69:e7:03:47:0f:ad:bd: 69:56:21:47:d2:40:df:13:09:b9:e5:5f:31:4f:04:64:cb:61: 37:8b:30:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCNLdOiU4NwVSib4EIjMuL8Mh/XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZEQjQ0RDE4QkMxNkFCMDM5QzJCMUI2QkQzODY2QUIy OUUxMjJBNzAeFw0yNTExMDQyMDAzNDhaFw0yNTExMDkxOTE3NDhaMDMxMTAvBgNV BAMTKDhBMjg3MDJEMDZDQURGMUQzRDExNEQxMTlDNkUzQTYzNkEwREU1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/1wx5Eg1rsu4bsYmnOHvdO4q 8WGHk9TSPaIeT8Rfu4VxM5ABFuL6DouScmk554dYUQrYskme6UpOSyGEu5ex7YuB 4mv21jx8/CXbsAhESSmvPNJKxyCOqTkpH6ECvT+edfxtC0mw7T/fVB+nBYzVPZDd QE0ir518SF34csiVOp6B6A8q9Q6XC4Ml3U3I6UceVoW7M5ZemAZLm9WFoulhW35A IdwUD/j6SMk2P0LrctPMMFPWYH1wl9H3yEcZjZZ15+4W2yEtCeV9pLHj6Av1SQpl jmitiagHbmRkkRy6sI8mZBYwDIiDsQo4luSKMyILmuGHeka0+59VUxCntL9vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiihwLQbK3x09EU0RnG46Y2oN5TYwHwYDVR0j BBgwFoAUP9tE0YvBarA5wrG2vThmqynhIqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DODYyQzkyRkU3OTU3MUNEQ0U4MzRBNjA5MDUzMDAyQTEy MTJDOUI3MDc5NkFGQUQwMUM2MTkzRDdGMERBQUFCLzAvM0ZEQjQ0RDE4QkMxNkFC MDM5QzJCMUI2QkQzODY2QUIyOUUxMjJBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkRCNDREMThCQzE2QUIwMzlD MkIxQjZCRDM4NjZBQjI5RTEyMkE3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzg2MkM5MkZFNzk1NzFDRENFODM0QTYwOTA1MzAwMkExMjEyQzlCNzA3 OTZBRkFEMDFDNjE5M0Q3RjBEQUFBQi8wLzNGREI0NEQxOEJDMTZBQjAzOUMyQjFC NkJEMzg2NkFCMjlFMTIyQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEJHcdeWHQPfqv2iRkT3gOBfpV kaazRdmcIYnUxxPx5ukYtLZn6yrc7YfWm067cM6vft6/wO+5BuTIZMtZG1XAw4eB VAE+DKwIky1/Zx/mfhnxZxPDO2v63n0+krqsPBmzBlVKXIKKYtQPikmAEZl0Ee0z 3z2NhfRAwdQfnFB6Cs6yx+MJW8U9ybpVMvxSQoFctwSoEEQAag1QzLAYD1QSfpMR 2qtpWqLIN6sxO3/4TBtzcy7ibOEenyu6d1TIPU7F2vU4chqnnq/3WqZ/UqLtH3oj E53AcBt0Ipulj9guv7DsF2nnA0cPrb1pViFH0kDfEwm55V8xTwRky2E3izDy -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:55 2025 by rpki-client