$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F192D3E65B741BC96E61B6810943E6A8F832DFB178388046815B4288805D4D08/0/3F0974925580D1783B4D99DCE063F669C26152F5.mft File: 3F0974925580D1783B4D99DCE063F669C26152F5.mft (raw, json) Hash identifier: f9wXJ/e74m88f6A94tIH7CAaebt1yfYCi3qny4tIQL0= Subject key identifier: C6:B7:17:E8:F0:95:39:C7:D4:0F:AA:9A:67:EA:46:92:C7:47:B8:E5 Authority key identifier: 3F:09:74:92:55:80:D1:78:3B:4D:99:DC:E0:63:F6:69:C2:61:52:F5 Certificate issuer: /CN=3F0974925580D1783B4D99DCE063F669C26152F5 Certificate serial: 1393203FEC3CB9B60180D8D8E2807E9EE184A951 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F0974925580D1783B4D99DCE063F669C26152F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F192D3E65B741BC96E61B6810943E6A8F832DFB178388046815B4288805D4D08/0/3F0974925580D1783B4D99DCE063F669C26152F5.mft Manifest number: 012B Signing time: Mon 20 Oct 2025 12:04:25 +0000 Manifest this update: Mon 20 Oct 2025 11:59:25 +0000 Manifest next update: Sat 25 Oct 2025 23:56:25 +0000 Files and hashes: 1: 3F0974925580D1783B4D99DCE063F669C26152F5.crl (hash: d87ThM8yQ9VBzhNvxHYBMAba67ajaNm/eQvTWooxTKw=) 2: 3139302e39372e3131322e302f32312d3234203d3e20323632313838.roa (hash: zbsKSf/S7+mzisq9khhNlUkSx20JXfnjAU0e4Vxp45w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F192D3E65B741BC96E61B6810943E6A8F832DFB178388046815B4288805D4D08/0/3F0974925580D1783B4D99DCE063F669C26152F5.crl rsync://repository.lacnic.net/rpki/lacnic/F192D3E65B741BC96E61B6810943E6A8F832DFB178388046815B4288805D4D08/0/3F0974925580D1783B4D99DCE063F669C26152F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F0974925580D1783B4D99DCE063F669C26152F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Oct 2025 08:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:93:20:3f:ec:3c:b9:b6:01:80:d8:d8:e2:80:7e:9e:e1:84:a9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0974925580D1783B4D99DCE063F669C26152F5 Validity Not Before: Oct 20 11:59:25 2025 GMT Not After : Oct 25 23:56:25 2025 GMT Subject: CN=C6B717E8F09539C7D40FAA9A67EA4692C747B8E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:cb:5a:ed:2b:3d:27:13:be:8f:50:a4:bb: 00:14:fe:05:4f:c3:0d:eb:ec:fd:79:50:c2:27:32: 58:f4:64:13:34:74:a7:59:00:50:9e:7d:be:17:a3: 92:9d:ec:09:6d:9a:61:d1:b0:e1:4a:65:1e:70:78: 56:f0:95:7a:dc:fb:4a:cd:cd:2b:da:c3:90:a9:62: cf:26:cd:11:a2:2c:01:8d:bd:c0:41:16:b4:9e:59: 15:4c:da:fd:cb:77:3f:f8:f9:71:2b:ba:32:05:47: e2:ac:3a:05:dd:1f:16:bd:0f:09:80:68:55:91:84: 41:88:7e:10:e5:83:f6:f9:36:9a:12:71:f5:7f:8a: 35:1a:2b:26:d0:89:e8:ba:1a:6a:2e:9f:90:12:a7: d3:3b:c0:27:26:61:3c:10:5d:f8:37:79:49:1b:bd: 28:61:ab:b6:01:e5:28:df:2a:6e:de:38:0e:97:6d: 87:cd:6c:8c:7a:c8:eb:02:86:85:18:7a:af:85:11: a1:cc:52:f3:5c:17:a0:fe:00:60:89:49:55:ff:70: d2:c3:eb:eb:73:c2:00:19:14:38:30:17:19:14:fe: 6a:2f:f9:4d:1c:73:0e:cc:f8:1c:de:87:b9:ef:35: 23:dc:1b:12:08:ba:b0:7c:e1:40:26:34:f7:59:15: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:17:E8:F0:95:39:C7:D4:0F:AA:9A:67:EA:46:92:C7:47:B8:E5 X509v3 Authority Key Identifier: keyid:3F:09:74:92:55:80:D1:78:3B:4D:99:DC:E0:63:F6:69:C2:61:52:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F192D3E65B741BC96E61B6810943E6A8F832DFB178388046815B4288805D4D08/0/3F0974925580D1783B4D99DCE063F669C26152F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F0974925580D1783B4D99DCE063F669C26152F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F192D3E65B741BC96E61B6810943E6A8F832DFB178388046815B4288805D4D08/0/3F0974925580D1783B4D99DCE063F669C26152F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ba:22:de:30:71:15:03:90:30:03:9b:c7:0a:b9:fa:75:c7: 45:00:97:40:4b:cc:ab:54:25:39:90:a4:82:d2:96:60:9b:2a: 8d:2e:92:cb:08:7f:8c:1e:2e:ff:45:c6:6d:14:d8:86:58:06: 44:3b:1c:4b:9b:18:a7:e7:52:b9:f6:3d:7b:bd:20:89:6e:eb: 9e:46:27:6d:98:c2:67:9b:5a:cd:26:02:63:7d:04:61:d7:99: cf:20:30:99:4c:2a:c2:25:76:b2:df:09:22:7d:6a:0a:3c:af: 65:9d:76:27:47:1c:3b:d6:d5:95:f5:02:55:bd:5f:07:24:5c: 83:33:e9:b1:f1:d7:42:6e:16:a1:da:02:16:7e:1e:b4:67:b5: 9e:2e:90:20:d1:36:aa:31:1c:60:ec:dc:3b:38:17:5b:81:8f: b0:b2:21:f3:4c:c7:4a:35:d1:5b:68:01:09:81:9e:42:6f:5d: f8:30:58:c4:fd:37:e8:b0:25:38:8a:39:c8:c1:fd:3a:0d:9e: 5f:26:35:a5:65:e5:0e:75:09:4a:37:ea:a4:70:5b:d9:8a:b5: bb:c6:66:12:cb:9c:fe:08:f2:1d:e1:1d:8b:2f:7a:28:10:af: f6:6e:8d:31:2e:9c:4a:77:05:0a:55:c4:85:30:a5:85:10:7f: 46:f2:05:f6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUE5MgP+w8ubYBgNjY4oB+nuGEqVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwOTc0OTI1NTgwRDE3ODNCNEQ5OURDRTA2M0Y2NjlD MjYxNTJGNTAeFw0yNTEwMjAxMTU5MjVaFw0yNTEwMjUyMzU2MjVaMDMxMTAvBgNV BAMTKEM2QjcxN0U4RjA5NTM5QzdENDBGQUE5QTY3RUE0NjkyQzc0N0I4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfsta7Ss9JxO+j1CkuwAU/gVP ww3r7P15UMInMlj0ZBM0dKdZAFCefb4Xo5Kd7AltmmHRsOFKZR5weFbwlXrc+0rN zSvaw5CpYs8mzRGiLAGNvcBBFrSeWRVM2v3Ldz/4+XErujIFR+KsOgXdHxa9DwmA aFWRhEGIfhDlg/b5NpoScfV/ijUaKybQiei6Gmoun5ASp9M7wCcmYTwQXfg3eUkb vShhq7YB5SjfKm7eOA6XbYfNbIx6yOsChoUYeq+FEaHMUvNcF6D+AGCJSVX/cNLD 6+tzwgAZFDgwFxkU/mov+U0ccw7M+Bzeh7nvNSPcGxIIurB84UAmNPdZFdURAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxrcX6PCVOcfUD6qaZ+pGksdHuOUwHwYDVR0j BBgwFoAUPwl0klWA0Xg7TZnc4GP2acJhUvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMTkyRDNFNjVCNzQxQkM5NkU2MUI2ODEwOTQzRTZBOEY4 MzJERkIxNzgzODgwNDY4MTVCNDI4ODgwNUQ0RDA4LzAvM0YwOTc0OTI1NTgwRDE3 ODNCNEQ5OURDRTA2M0Y2NjlDMjYxNTJGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjA5NzQ5MjU1ODBEMTc4M0I0 RDk5RENFMDYzRjY2OUMyNjE1MkY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjE5MkQzRTY1Qjc0MUJDOTZFNjFCNjgxMDk0M0U2QThGODMyREZCMTc4 Mzg4MDQ2ODE1QjQyODg4MDVENEQwOC8wLzNGMDk3NDkyNTU4MEQxNzgzQjREOTlE Q0UwNjNGNjY5QzI2MTUyRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4uiLeMHEVA5AwA5vHCrn6dcdF AJdAS8yrVCU5kKSC0pZgmyqNLpLLCH+MHi7/RcZtFNiGWAZEOxxLmxin51K59j17 vSCJbuueRidtmMJnm1rNJgJjfQRh15nPIDCZTCrCJXay3wkifWoKPK9lnXYnRxw7 1tWV9QJVvV8HJFyDM+mx8ddCbhah2gIWfh60Z7WeLpAg0TaqMRxg7Nw7OBdbgY+w siHzTMdKNdFbaAEJgZ5Cb134MFjE/TfosCU4ijnIwf06DZ5fJjWlZeUOdQlKN+qk cFvZirW7xmYSy5z+CPId4R2LL3ooEK/2bo0xLpxKdwUKVcSFMKWFEH9G8gX2 -----END CERTIFICATE-----Generated at Tue Oct 21 17:25:22 2025 by rpki-client