$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft File: 10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft (raw, json) Hash identifier: PEuztjozoIpQ9VcucZparo8cqXH/MItCqf5rwhBINq8= Subject key identifier: 4A:00:D5:9A:EB:F1:4C:9D:C3:E4:63:1E:AF:B8:A4:20:6B:DE:8B:E0 Authority key identifier: 10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3 Certificate issuer: /CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3 Certificate serial: 6D518E9A1BD7DB195C59A07498EE9748479A1DEC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft Manifest number: 012C Signing time: Wed 29 Oct 2025 17:36:24 +0000 Manifest this update: Wed 29 Oct 2025 17:31:24 +0000 Manifest next update: Tue 04 Nov 2025 16:23:24 +0000 Files and hashes: 1: 323830313a3134343a3a2f34322d3432203d3e20323634383335.roa (hash: 9PtUNz7ObPIQI53JgwVg1GUSiwSW+73wNvb2q42j9RQ=) 2: 3137302e38322e34302e302f32332d3233203d3e20323634383335.roa (hash: v6H3zyzhWWRPj0vdY+YqAWWlysiq/3DJkITvEk1nxso=) 3: 10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl (hash: j4ZxrVMkdxuwD34pbQhGDYY05IKCM5PKSa2SKRfoDdU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:51:8e:9a:1b:d7:db:19:5c:59:a0:74:98:ee:97:48:47:9a:1d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3 Validity Not Before: Oct 29 17:31:24 2025 GMT Not After : Nov 4 16:23:24 2025 GMT Subject: CN=4A00D59AEBF14C9DC3E4631EAFB8A4206BDE8BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:21:df:9a:73:64:66:04:79:da:70:75:ba: 97:7a:2d:f9:6d:99:9f:c5:20:f1:65:88:f8:4e:54: d1:ca:af:32:d4:eb:88:85:ac:7d:f0:35:bf:08:a3: eb:02:a2:28:59:f4:43:96:d0:de:3f:fb:23:56:5e: 5b:6e:39:43:b1:6c:e1:cf:c4:e8:0f:5b:f9:dd:af: 58:70:37:30:bb:b0:3d:1c:58:5b:a9:e9:c9:0b:85: 32:75:b9:f8:64:73:18:83:93:69:80:d7:c0:ea:47: 4b:09:00:6b:f5:98:95:28:14:4f:63:40:b7:21:77: ab:5d:79:66:7b:06:5f:cf:ce:4e:a0:11:da:2e:f8: be:1d:5e:ae:9a:1d:9c:77:10:2e:76:e1:6f:a4:fb: 5e:29:5c:f3:65:48:74:cb:e5:5c:1f:8b:7a:c7:9e: 2c:08:b9:5d:5b:ea:42:fd:22:a3:c2:de:c1:32:34: 41:7b:85:3a:4d:4c:a4:4f:a5:3e:2d:65:80:09:47: c9:98:1a:78:43:6b:15:ca:9f:f9:f3:07:60:56:d9: b6:64:18:ee:d0:07:8d:12:60:44:e4:5c:31:28:20: cc:cd:8d:f7:ae:13:94:b6:a7:0f:29:43:3a:9a:01: ac:37:0e:6e:60:64:97:b3:13:89:be:64:22:84:03: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:00:D5:9A:EB:F1:4C:9D:C3:E4:63:1E:AF:B8:A4:20:6B:DE:8B:E0 X509v3 Authority Key Identifier: keyid:10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bd:76:bb:3f:0f:70:38:1c:73:89:b4:0e:5f:b7:a1:05:a2: 20:d7:6a:ba:47:97:ad:91:af:4c:62:35:7f:e6:3c:0e:1e:d9: 78:94:b9:ea:01:8e:b3:98:8a:c7:47:72:5b:04:52:b6:00:26: d8:8e:4d:96:c0:41:cc:6f:d6:f0:c1:2b:76:50:bc:5e:a9:6c: b0:c1:0b:58:f0:fb:fd:05:9a:eb:5b:25:7e:8a:47:98:a3:cf: 55:eb:06:97:0a:81:39:73:e2:6a:dc:a3:8b:3b:bd:58:96:c7: d2:91:85:3f:13:db:f5:1c:d2:bf:df:53:1c:2c:2e:53:4e:4a: a8:65:31:5b:1a:77:4e:81:f6:91:44:51:41:24:6e:71:16:83: 02:83:1a:f3:2a:87:8f:51:3c:36:3e:26:53:16:78:a2:0f:45: 0e:fa:dd:a9:4d:1d:82:45:81:df:3a:6b:93:0b:4a:37:41:38: cc:70:63:f4:8e:73:ad:f3:c7:27:04:8c:6c:5d:34:0a:f3:16: ce:75:03:39:12:32:0a:d6:da:8d:61:ba:61:fe:b9:ec:5d:b7: 5d:9a:24:77:3f:38:f6:bb:63:8d:a4:67:9a:6d:fd:3c:69:c6: e4:6d:20:13:6f:e8:80:9a:b3:81:5b:bd:a0:90:28:10:eb:14: 2b:66:46:f3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbVGOmhvX2xlcWaB0mO6XSEeaHewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDRDNBNEFFRjE4NkQ2NzY5RjBCOTgyMzNEMThGNDBG RTU2NENCMzAeFw0yNTEwMjkxNzMxMjRaFw0yNTExMDQxNjIzMjRaMDMxMTAvBgNV BAMTKDRBMDBENTlBRUJGMTRDOURDM0U0NjMxRUFGQjhBNDIwNkJERThCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtyHfmnNkZgR52nB1upd6Lflt mZ/FIPFliPhOVNHKrzLU64iFrH3wNb8Io+sCoihZ9EOW0N4/+yNWXltuOUOxbOHP xOgPW/ndr1hwNzC7sD0cWFup6ckLhTJ1ufhkcxiDk2mA18DqR0sJAGv1mJUoFE9j QLchd6tdeWZ7Bl/Pzk6gEdou+L4dXq6aHZx3EC524W+k+14pXPNlSHTL5Vwfi3rH niwIuV1b6kL9IqPC3sEyNEF7hTpNTKRPpT4tZYAJR8mYGnhDaxXKn/nzB2BW2bZk GO7QB40SYETkXDEoIMzNjfeuE5S2pw8pQzqaAaw3Dm5gZJezE4m+ZCKEA/8VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSgDVmuvxTJ3D5GMer7ikIGvei+AwHwYDVR0j BBgwFoAUEM06Su8YbWdp8LmCM9GPQP5WTLMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GQjAxMEU3NDgwMzI5RTgxMkNFNDlCQTRDMjgzMzI2ODAy QjBBREFFRUNBRTk1RjYyNkMwRjAzQzgyRTYyREEyLzAvMTBDRDNBNEFFRjE4NkQ2 NzY5RjBCOTgyMzNEMThGNDBGRTU2NENCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMENEM0E0QUVGMTg2RDY3NjlG MEI5ODIzM0QxOEY0MEZFNTY0Q0IzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkIwMTBFNzQ4MDMyOUU4MTJDRTQ5QkE0QzI4MzMyNjgwMkIwQURBRUVD QUU5NUY2MjZDMEYwM0M4MkU2MkRBMi8wLzEwQ0QzQTRBRUYxODZENjc2OUYwQjk4 MjMzRDE4RjQwRkU1NjRDQjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBevXa7Pw9wOBxzibQOX7ehBaIg 12q6R5etka9MYjV/5jwOHtl4lLnqAY6zmIrHR3JbBFK2ACbYjk2WwEHMb9bwwSt2 ULxeqWywwQtY8Pv9BZrrWyV+ikeYo89V6waXCoE5c+Jq3KOLO71YlsfSkYU/E9v1 HNK/31McLC5TTkqoZTFbGndOgfaRRFFBJG5xFoMCgxrzKoePUTw2PiZTFniiD0UO +t2pTR2CRYHfOmuTC0o3QTjMcGP0jnOt88cnBIxsXTQK8xbOdQM5EjIK1tqNYbph /rnsXbddmiR3Pzj2u2ONpGeabf08acbkbSATb+iAmrOBW72gkCgQ6xQrZkbz -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:44 2025 by rpki-client