$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft File: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft (raw, json) Hash identifier: l5G2qpsz4oV7nh2oqagHiMcoV/WGVn9lftO8CfYrWJc= Subject key identifier: 7D:A6:CE:A2:5C:17:FF:CF:5C:EE:38:57:05:AF:BB:37:ED:DC:6A:4E Authority key identifier: 3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 Certificate issuer: /CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3 Certificate serial: 65104EB95FB91A9AD608254970725BD9F5900C21 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft Manifest number: 0D Signing time: Thu 18 Sep 2025 01:13:23 +0000 Manifest this update: Thu 18 Sep 2025 01:08:23 +0000 Manifest next update: Wed 24 Sep 2025 00:56:23 +0000 Files and hashes: 1: 323830333a366464303a3a2f33322d3438203d3e20323734313930.roa (hash: ngugspegyt4RHmTCpqVQx/FbbfeCWLgUEwqECaAoFsw=) 2: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl (hash: KkKJElumkgDdSd6RwJGEfZuAocN8BLHPM9aMkvwil1Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:10:4e:b9:5f:b9:1a:9a:d6:08:25:49:70:72:5b:d9:f5:90:0c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3 Validity Not Before: Sep 18 01:08:23 2025 GMT Not After : Sep 24 00:56:23 2025 GMT Subject: CN=7DA6CEA25C17FFCF5CEE385705AFBB37EDDC6A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:d3:c6:53:bd:87:01:23:f8:d8:68:5c:fa: d3:e4:0f:85:27:2a:ad:ac:b4:69:f0:2e:ce:c1:f4: 0b:3f:bd:28:70:27:92:71:a8:ac:19:c6:6a:ef:c6: b0:ef:38:dd:de:68:5e:ed:8d:bd:d0:8d:41:52:00: 71:56:5f:bb:d3:21:a7:d2:a2:90:ef:41:a9:27:a4: 36:ad:5a:aa:91:f8:f9:1f:10:03:6a:6c:82:da:94: 4d:c6:f3:1b:b0:0e:68:5b:7a:ce:67:6b:99:b0:c3: 96:f4:48:ea:54:72:11:c6:e5:74:69:56:83:48:7f: 30:a3:c8:03:c3:98:95:3f:9c:71:19:75:c2:d6:73: f2:5a:68:75:8f:c9:b3:78:4a:1e:e5:30:0f:03:cb: b8:d5:03:cc:70:cc:c3:17:20:1d:33:5f:bb:82:89: 68:1e:4f:aa:15:53:d9:93:e6:31:82:71:75:c4:43: 39:40:56:40:be:65:d4:57:6a:60:ed:ed:ee:46:39: 27:6c:16:0a:f2:17:dd:0c:35:22:1c:8a:ce:73:d1: 15:ad:fb:28:d3:83:5f:40:29:ca:4e:6b:4d:27:dd: 62:72:92:59:3e:19:14:aa:d4:dd:21:67:f6:f6:39: 58:34:2c:ba:da:00:45:b3:c0:62:5d:63:f5:7e:c5: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A6:CE:A2:5C:17:FF:CF:5C:EE:38:57:05:AF:BB:37:ED:DC:6A:4E X509v3 Authority Key Identifier: keyid:3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c9:45:09:d4:33:cf:a9:ee:5f:37:13:99:0b:e8:46:1e:b0: 3a:a1:ed:d7:0d:6b:07:94:d5:88:c8:24:1e:a9:c6:9a:76:69: da:a2:73:04:26:eb:29:ce:c4:f3:e9:fb:a6:19:57:d4:6a:ec: 23:c1:63:a5:ad:03:0c:09:b9:a9:30:d3:3c:be:f4:64:35:b8: 40:a9:4a:6d:6f:51:7a:4b:b8:21:b8:bf:87:0c:c3:b8:24:6b: d8:21:87:90:6e:63:46:40:e6:66:7f:83:36:c4:a3:32:f7:e2: b9:6f:f6:4c:20:c1:17:be:cd:3d:74:c3:38:55:fd:8b:71:47: a3:46:7d:77:f2:63:99:2b:42:49:99:7f:a8:55:1e:59:32:c6: 9a:f4:08:9d:85:6f:93:65:fc:f9:d9:4d:0d:d3:4f:6e:9c:17: 62:46:3b:35:00:97:36:dc:1f:de:1d:51:8b:13:fd:fb:8e:57: e1:de:c7:6b:bc:b9:10:12:63:ae:be:12:bb:35:2e:bd:d7:c3: 33:00:59:e3:1b:ae:cb:12:c9:0f:8e:d6:46:63:f7:a7:ee:07: b6:a8:12:75:73:eb:bb:aa:04:18:69:73:be:09:4e:90:2a:fe: 46:c8:96:d0:cc:21:3b:15:bf:3d:f2:b6:28:9a:0d:51:94:81: 15:9e:ad:9f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZRBOuV+5GprWCCVJcHJb2fWQDCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGNDIwRTYwQURGQzBGNzFGMkYyRERENTRGQTdGNDFE RkQyNDRGMzAeFw0yNTA5MTgwMTA4MjNaFw0yNTA5MjQwMDU2MjNaMDMxMTAvBgNV BAMTKDdEQTZDRUEyNUMxN0ZGQ0Y1Q0VFMzg1NzA1QUZCQjM3RUREQzZBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlltPGU72HASP42Ghc+tPkD4Un Kq2stGnwLs7B9As/vShwJ5JxqKwZxmrvxrDvON3eaF7tjb3QjUFSAHFWX7vTIafS opDvQaknpDatWqqR+PkfEANqbILalE3G8xuwDmhbes5na5mww5b0SOpUchHG5XRp VoNIfzCjyAPDmJU/nHEZdcLWc/JaaHWPybN4Sh7lMA8Dy7jVA8xwzMMXIB0zX7uC iWgeT6oVU9mT5jGCcXXEQzlAVkC+ZdRXamDt7e5GOSdsFgryF90MNSIcis5z0RWt +yjTg19AKcpOa00n3WJyklk+GRSq1N0hZ/b2OVg0LLraAEWzwGJdY/V+xYndAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfabOolwX/89c7jhXBa+7N+3cak4wHwYDVR0j BBgwFoAUOvQg5grfwPcfLy3dVPp/Qd/SRPMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNUMxQjJCMTU0MTk4Q0Y4QTk1MEQyREQxNDczNzYxM0RE Q0RGRTIxQ0QwQTBFOUFERjg3QzlBMTU2RDlFODM2LzAvM0FGNDIwRTYwQURGQzBG NzFGMkYyRERENTRGQTdGNDFERkQyNDRGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUY0MjBFNjBBREZDMEY3MUYy RjJEREQ1NEZBN0Y0MURGRDI0NEYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjVDMUIyQjE1NDE5OENGOEE5NTBEMkREMTQ3Mzc2MTNERENERkUyMUNE MEEwRTlBREY4N0M5QTE1NkQ5RTgzNi8wLzNBRjQyMEU2MEFERkMwRjcxRjJGMkRE RDU0RkE3RjQxREZEMjQ0RjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCyUUJ1DPPqe5fNxOZC+hGHrA6 oe3XDWsHlNWIyCQeqcaadmnaonMEJuspzsTz6fumGVfUauwjwWOlrQMMCbmpMNM8 vvRkNbhAqUptb1F6S7ghuL+HDMO4JGvYIYeQbmNGQOZmf4M2xKMy9+K5b/ZMIMEX vs09dMM4Vf2LcUejRn138mOZK0JJmX+oVR5ZMsaa9AidhW+TZfz52U0N009unBdi Rjs1AJc23B/eHVGLE/37jlfh3sdrvLkQEmOuvhK7NS6918MzAFnjG67LEskPjtZG Y/en7ge2qBJ1c+u7qgQYaXO+CU6QKv5GyJbQzCE7Fb898rYomg1RlIEVnq2f -----END CERTIFICATE-----Generated at Thu Sep 18 21:40:26 2025 by rpki-client