$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft File: 420B44E3D543CA237CB6BC9020FEC4357D75D278.mft (raw, json) Hash identifier: i3TfLHlQ2/kHsn9x1AsF5krTCXXcK5F94g7A510MsVo= Subject key identifier: 1F:D5:67:7C:CE:5A:7F:79:36:78:80:3B:92:A6:91:58:AA:39:95:A9 Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78 Certificate issuer: /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278 Certificate serial: 4C5E035787469EF9F80F33E10C17E68EA42F33D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft Manifest number: 0138 Signing time: Thu 30 Oct 2025 06:53:57 +0000 Manifest this update: Thu 30 Oct 2025 06:48:57 +0000 Manifest next update: Tue 04 Nov 2025 18:14:57 +0000 Files and hashes: 1: 34352e3137332e31302e302f32332d3234203d3e20323632353839.roa (hash: kazJYo39sP5p22aozbqs/gxJAGWy0rZvU8tXXuY2LlE=) 2: 420B44E3D543CA237CB6BC9020FEC4357D75D278.crl (hash: ESvqcce2IjJk6huV2lWphD68bTlqFlrqUqBDnSbcksI=) 3: 34352e3137332e392e302f32342d3234203d3e20323732393935.roa (hash: k0iN4XJYUJqNfRCXjrL68TShISbFe8R2TaAS6n0LHeg=) 4: 323830333a663836303a3a2f33322d3438203d3e20323632353839.roa (hash: AYJunXWOaZzPW7GNffbz2hS/zRX/ILxXGvW7p+BaLOg=) 5: 323830333a663836303a3a2f33322d3438203d3e20323732393935.roa (hash: lua80lqZs3pnNPzwC8YM5I/4s8xiZPbTcpo2byV9anA=) 6: 34352e3137332e31302e302f32332d3234203d3e20323732393935.roa (hash: bOs7kcdOXaU0+s3i+H7IAYDD9Y1iXh5X6R1+m3hcO7k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5e:03:57:87:46:9e:f9:f8:0f:33:e1:0c:17:e6:8e:a4:2f:33:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278 Validity Not Before: Oct 30 06:48:57 2025 GMT Not After : Nov 4 18:14:57 2025 GMT Subject: CN=1FD5677CCE5A7F793678803B92A69158AA3995A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:5d:7c:ee:f5:3b:fe:97:9a:8b:37:52:6a: 07:43:f9:1c:68:0b:6c:c3:bb:b8:64:c3:ce:35:89: bc:c1:80:c8:ae:d3:d7:90:c7:a8:75:86:e2:45:94: a2:67:cc:9b:51:af:00:73:ad:da:24:93:a3:4a:e3: 4e:b0:4f:1a:38:89:5a:a5:a4:f0:36:27:6f:91:e6: 04:e9:e2:d4:71:c1:74:43:60:8b:d0:91:7c:47:96: 63:af:d0:ea:38:ec:85:ad:f2:21:48:2b:7a:92:de: b2:9c:2f:dd:9d:84:95:cc:aa:bc:15:41:fd:59:43: cb:23:94:7a:5b:2d:49:b1:e6:c3:3c:48:9b:d0:94: 77:e0:fe:58:93:39:c1:de:1a:22:91:e4:8d:6f:ef: e6:ab:48:54:62:b7:ec:cb:eb:ef:bd:46:e0:7d:ac: 55:a1:df:9c:ab:19:93:67:34:36:6f:5e:31:2b:cf: 06:88:80:60:bc:38:6c:e6:1d:84:35:84:c7:c3:6e: 17:a4:7e:da:14:59:ab:ec:fd:7c:1e:1e:16:a9:ad: 05:da:74:e4:b5:5b:7a:cf:d1:ea:eb:07:cb:32:cf: 37:1a:02:49:2d:d8:bc:fe:87:bd:0b:83:e5:76:99: f8:0e:03:1d:68:7f:a6:3e:1e:ea:67:3c:43:99:76: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D5:67:7C:CE:5A:7F:79:36:78:80:3B:92:A6:91:58:AA:39:95:A9 X509v3 Authority Key Identifier: keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:37:30:b4:7d:a3:e5:d2:7f:71:0f:ee:0f:4b:10:02:83:d5: 73:6b:38:73:45:62:d0:88:04:c0:e3:5d:ab:75:dc:b2:f5:bc: 80:de:80:b1:17:79:ed:91:fa:eb:42:33:bb:4e:cb:98:fb:fe: 6e:0d:ab:17:d9:e4:eb:45:38:b3:24:ea:e8:de:f4:27:78:44: 34:8f:be:9b:78:3f:24:ee:ab:fb:c1:19:b0:80:04:d3:f5:bd: 37:94:5d:1e:32:20:6e:97:aa:26:28:76:d4:47:09:3d:80:bd: e1:c4:7d:b0:ff:41:c4:5f:e1:98:51:23:44:e1:20:01:ce:83: 89:a0:e6:a2:45:fe:df:e8:fa:f6:1d:95:e8:67:d1:b7:83:12: 6e:d9:77:26:4f:2f:cd:55:91:15:95:8f:db:f2:e9:ed:1c:b1: 8a:8b:ed:76:c3:7a:1d:fc:e3:c9:da:3b:f2:6a:6b:5d:a3:a1: 81:70:a3:01:95:e3:8d:cf:2b:06:a6:ed:c4:69:84:98:dd:62: 66:34:b0:c8:d8:1e:3f:cb:8b:84:b3:db:be:f0:41:68:b2:1e: fa:bd:50:a5:e3:46:2d:3d:53:ff:33:6e:58:85:2f:5c:bd:61: 6f:d5:34:07:a2:66:25:06:6d:b8:85:ee:c8:57:0c:9b:d0:73: a6:c1:55:e3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTF4DV4dGnvn4DzPhDBfmjqQvM9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwQjQ0RTNENTQzQ0EyMzdDQjZCQzkwMjBGRUM0MzU3 RDc1RDI3ODAeFw0yNTEwMzAwNjQ4NTdaFw0yNTExMDQxODE0NTdaMDMxMTAvBgNV BAMTKDFGRDU2NzdDQ0U1QTdGNzkzNjc4ODAzQjkyQTY5MTU4QUEzOTk1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7l187vU7/peaizdSagdD+Rxo C2zDu7hkw841ibzBgMiu09eQx6h1huJFlKJnzJtRrwBzrdokk6NK406wTxo4iVql pPA2J2+R5gTp4tRxwXRDYIvQkXxHlmOv0Oo47IWt8iFIK3qS3rKcL92dhJXMqrwV Qf1ZQ8sjlHpbLUmx5sM8SJvQlHfg/liTOcHeGiKR5I1v7+arSFRit+zL6++9RuB9 rFWh35yrGZNnNDZvXjErzwaIgGC8OGzmHYQ1hMfDbhekftoUWavs/XweHhaprQXa dOS1W3rP0errB8syzzcaAkkt2Lz+h70Lg+V2mfgOAx1of6Y+HupnPEOZdrn7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUH9VnfM5af3k2eIA7kqaRWKo5lakwHwYDVR0j BBgwFoAUQgtE49VDyiN8tryQIP7ENX110ngwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GN0I5NUYxRERCOUUzQzQyNDJFRTM2QkUwRTNCMUNFM0ND RkVCMDBGODk1MDhDMUQ3RTc1NTk2RDNEMTEyRURFLzAvNDIwQjQ0RTNENTQzQ0Ey MzdDQjZCQzkwMjBGRUM0MzU3RDc1RDI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBCNDRFM0Q1NDNDQTIzN0NC NkJDOTAyMEZFQzQzNTdENzVEMjc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjdCOTVGMUREQjlFM0M0MjQyRUUzNkJFMEUzQjFDRTNDQ0ZFQjAwRjg5 NTA4QzFEN0U3NTU5NkQzRDExMkVERS8wLzQyMEI0NEUzRDU0M0NBMjM3Q0I2QkM5 MDIwRkVDNDM1N0Q3NUQyNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYNzC0faPl0n9xD+4PSxACg9Vz azhzRWLQiATA412rddyy9byA3oCxF3ntkfrrQjO7TsuY+/5uDasX2eTrRTizJOro 3vQneEQ0j76beD8k7qv7wRmwgATT9b03lF0eMiBul6omKHbURwk9gL3hxH2w/0HE X+GYUSNE4SABzoOJoOaiRf7f6Pr2HZXoZ9G3gxJu2XcmTy/NVZEVlY/b8untHLGK i+12w3od/OPJ2jvyamtdo6GBcKMBleONzysGpu3EaYSY3WJmNLDI2B4/y4uEs9u+ 8EFosh76vVCl40YtPVP/M25YhS9cvWFv1TQHomYlBm24he7IVwyb0HOmwVXj -----END CERTIFICATE-----Generated at Sat Nov 1 03:50:41 2025 by rpki-client