$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft File: 3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft (raw, json) Hash identifier: RalJz3FKCNyImEqmWq7a8dwMLw5TedhLpQ+JVf4/wds= Subject key identifier: 65:CF:FB:E7:A0:72:74:F4:AD:ED:8F:3D:5B:F9:32:2B:12:EF:9A:F1 Authority key identifier: 38:34:E0:AC:0F:6F:E4:7D:0E:28:19:D7:BD:DE:CC:70:CC:B2:EB:E0 Certificate issuer: /CN=3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0 Certificate serial: 6AC2C7CB3B52EFE9BAD48931A30B95F297D252EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft Manifest number: 012E Signing time: Fri 24 Oct 2025 09:40:47 +0000 Manifest this update: Fri 24 Oct 2025 09:35:47 +0000 Manifest next update: Wed 29 Oct 2025 15:35:47 +0000 Files and hashes: 1: 3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl (hash: VXDhAcIygeoHShfhJ7IyP/0qkMw0ShuNuE3nSOgi4zk=) 2: 3137392e36332e342e302f32322d3234203d3e20323732383031.roa (hash: unVIWL9Rb/hAm0sECiQuIqJTRQGUJ5jwcSLWiyoxrJM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 15:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c2:c7:cb:3b:52:ef:e9:ba:d4:89:31:a3:0b:95:f2:97:d2:52:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0 Validity Not Before: Oct 24 09:35:47 2025 GMT Not After : Oct 29 15:35:47 2025 GMT Subject: CN=65CFFBE7A07274F4ADED8F3D5BF9322B12EF9AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:7b:38:96:a5:6d:7f:79:a4:c6:7e:38:f4: 5f:df:5c:90:fd:e2:55:3f:cc:6e:5a:bf:d9:41:9e: e0:83:fa:6b:6a:a7:c3:59:e2:5d:c0:c8:d2:5a:14: 24:e2:64:ce:82:02:8d:48:ea:bf:66:b6:05:f8:fb: 1d:6e:cc:56:dd:a0:70:7e:93:e6:c0:80:45:c4:1f: c7:58:22:f0:85:e6:33:9e:75:75:6d:21:46:1d:fc: e9:37:e8:f7:67:d1:a3:01:e8:19:15:15:31:cd:a2: 8a:ae:cb:c5:9c:61:b3:f3:ee:5d:91:a3:51:3f:5b: c2:a9:ac:7b:c0:f6:c2:3a:ad:29:3b:72:c4:d3:4b: 93:47:ad:23:af:76:0e:64:d9:f9:ae:cf:bd:7f:38: 11:45:f9:1c:0c:de:e7:9e:88:25:ff:6a:b6:04:0a: 98:49:80:f8:2a:46:bc:9e:d4:1f:b1:83:b0:d5:9f: ba:55:d4:b3:97:7b:34:2e:9c:36:f1:56:4c:74:c4: 95:f8:43:6e:cb:85:d1:dc:0f:04:59:4f:d5:6f:bd: a8:6d:88:7f:4b:f7:9e:80:55:37:65:07:95:fe:6c: 40:67:52:53:e7:11:6c:b4:02:66:ae:28:84:11:3a: 05:8e:09:24:d3:c6:93:fc:f9:5c:a6:2e:a0:a9:d2: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:FB:E7:A0:72:74:F4:AD:ED:8F:3D:5B:F9:32:2B:12:EF:9A:F1 X509v3 Authority Key Identifier: keyid:38:34:E0:AC:0F:6F:E4:7D:0E:28:19:D7:BD:DE:CC:70:CC:B2:EB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cd:c5:5d:f3:dd:04:55:e4:7c:83:fd:12:b6:9e:18:e9:a4: 8f:87:10:ce:9c:93:1e:58:52:de:d6:07:8f:33:da:d5:2e:76: 69:a8:b0:b2:e7:5b:4d:79:42:00:77:7a:bf:fb:50:85:c4:12: 44:9b:b8:d8:77:2f:94:39:07:79:79:37:c1:d7:a1:78:0f:0f: ec:2a:26:aa:b9:49:d5:8b:f2:0c:56:fd:f2:66:ec:b5:db:d9: f7:dd:7f:6d:91:4a:d2:06:c5:df:65:bc:b6:46:a4:fc:cf:41: 12:98:62:f5:3b:c1:4c:94:fd:40:a7:d0:f4:51:e7:45:08:f5: ea:c2:a3:89:c9:9d:2b:4a:ec:ae:ce:d0:69:e6:a5:86:1c:41: f7:dc:19:c2:96:47:29:82:69:47:46:f0:81:80:d5:a0:fa:48: 53:30:93:6a:58:07:10:dd:57:b5:55:a7:30:ce:1d:ce:4c:bb: 0f:20:c5:d8:be:68:cc:b3:8e:1e:bc:c0:f7:34:8c:73:85:03: e2:08:ca:c3:44:43:b2:81:bb:87:00:b8:54:e3:f2:d9:c9:b0: 55:04:74:55:11:c8:fe:e2:c0:b5:61:b3:e5:46:aa:51:9e:3c: c3:f0:e3:22:5e:0e:6d:8f:81:3e:2d:95:33:25:5c:3a:e8:14: a3:0c:d8:1c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUasLHyztS7+m61IkxowuV8pfSUuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgzNEUwQUMwRjZGRTQ3RDBFMjgxOUQ3QkRERUNDNzBD Q0IyRUJFMDAeFw0yNTEwMjQwOTM1NDdaFw0yNTEwMjkxNTM1NDdaMDMxMTAvBgNV BAMTKDY1Q0ZGQkU3QTA3Mjc0RjRBREVEOEYzRDVCRjkzMjJCMTJFRjlBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rHs4lqVtf3mkxn449F/fXJD9 4lU/zG5av9lBnuCD+mtqp8NZ4l3AyNJaFCTiZM6CAo1I6r9mtgX4+x1uzFbdoHB+ k+bAgEXEH8dYIvCF5jOedXVtIUYd/Ok36Pdn0aMB6BkVFTHNooquy8WcYbPz7l2R o1E/W8KprHvA9sI6rSk7csTTS5NHrSOvdg5k2fmuz71/OBFF+RwM3ueeiCX/arYE CphJgPgqRrye1B+xg7DVn7pV1LOXezQunDbxVkx0xJX4Q27LhdHcDwRZT9Vvvaht iH9L956AVTdlB5X+bEBnUlPnEWy0AmauKIQROgWOCSTTxpP8+VymLqCp0gsxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZc/756BydPSt7Y89W/kyKxLvmvEwHwYDVR0j BBgwFoAUODTgrA9v5H0OKBnXvd7McMyy6+AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMUQ2NjU3Q0VCNDI0RDk2NjBEQzNCMjEzMjVFREZFOTJF ODVFQkRBQTNBODk2OTIwMzUyNzJFMjU4RTQwNUEzLzAvMzgzNEUwQUMwRjZGRTQ3 RDBFMjgxOUQ3QkRERUNDNzBDQ0IyRUJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODM0RTBBQzBGNkZFNDdEMEUy ODE5RDdCRERFQ0M3MENDQjJFQkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDFENjY1N0NFQjQyNEQ5NjYwREMzQjIxMzI1RURGRTkyRTg1RUJEQUEz QTg5NjkyMDM1MjcyRTI1OEU0MDVBMy8wLzM4MzRFMEFDMEY2RkU0N0QwRTI4MTlE N0JEREVDQzcwQ0NCMkVCRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFzcVd890EVeR8g/0Stp4Y6aSP hxDOnJMeWFLe1gePM9rVLnZpqLCy51tNeUIAd3q/+1CFxBJEm7jYdy+UOQd5eTfB 16F4Dw/sKiaquUnVi/IMVv3yZuy129n33X9tkUrSBsXfZby2RqT8z0ESmGL1O8FM lP1Ap9D0UedFCPXqwqOJyZ0rSuyuztBp5qWGHEH33BnClkcpgmlHRvCBgNWg+khT MJNqWAcQ3Ve1Vacwzh3OTLsPIMXYvmjMs44evMD3NIxzhQPiCMrDREOygbuHALhU 4/LZybBVBHRVEcj+4sC1YbPlRqpRnjzD8OMiXg5tj4E+LZUzJVw66BSjDNgc -----END CERTIFICATE-----Generated at Sun Oct 26 11:34:56 2025 by rpki-client