$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.mft File: BA340C77857657BA84C4ACA36039874FAF1238B7.mft (raw, json) Hash identifier: W0jOyH1tQgHz/R5w97eO55NWsBcHnLME4uMRMG4GNok= Subject key identifier: EE:E8:FD:17:5C:5E:4D:65:21:FF:B3:11:8D:E5:97:59:1F:26:AB:12 Authority key identifier: BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7 Certificate issuer: /CN=BA340C77857657BA84C4ACA36039874FAF1238B7 Certificate serial: 17207D55DA002302990C152DDDC69D261CDC9593 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.mft Manifest number: 0122 Signing time: Mon 20 Oct 2025 20:45:13 +0000 Manifest this update: Mon 20 Oct 2025 20:40:13 +0000 Manifest next update: Sat 25 Oct 2025 15:15:13 +0000 Files and hashes: 1: 3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa (hash: E/ZoFX/CdIRDhFPmgg8DL0GD77OG+3AaL6nHiOkFH60=) 2: BA340C77857657BA84C4ACA36039874FAF1238B7.crl (hash: +5mEtsumGX+UqHKhiWy+7fV4Bw8ykwKxejiEIWGebFI=) 3: 323830333a613765303a3a2f33322d3438203d3e20323730313030.roa (hash: FY+484MrnMGsYAa/dm2O9LiH45Uim557oQlgwnSXlJQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Oct 2025 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:20:7d:55:da:00:23:02:99:0c:15:2d:dd:c6:9d:26:1c:dc:95:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA340C77857657BA84C4ACA36039874FAF1238B7 Validity Not Before: Oct 20 20:40:13 2025 GMT Not After : Oct 25 15:15:13 2025 GMT Subject: CN=EEE8FD175C5E4D6521FFB3118DE597591F26AB12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:eb:bd:9d:be:76:17:a6:f8:c5:4a:fb:59: 77:1b:2d:ad:81:3a:6d:97:f8:3a:7b:79:73:b2:87: 7b:02:8a:04:36:bd:15:99:e3:a7:c6:a0:6e:aa:60: b8:cd:fe:e0:27:02:d9:32:38:0e:16:02:1e:d2:b1: 93:1f:ca:ca:eb:a1:8a:69:5c:15:7a:d1:c5:0f:6b: bb:85:1c:77:e9:c8:93:1e:06:ae:2a:41:62:4e:11: be:9f:d7:a6:6d:13:22:4b:42:69:75:fc:bd:36:df: 86:5e:18:16:70:c0:68:30:74:a8:d7:76:9b:04:06: 1b:bf:4c:83:a7:43:7f:ee:61:88:bb:37:e0:d1:89: 65:e1:96:30:17:c5:a9:1d:5a:f5:d7:88:17:6b:61: 24:48:6d:20:46:92:4c:c5:89:a3:cd:24:f8:10:67: cb:47:c1:cb:4d:5b:81:8f:2d:35:2f:d1:b7:79:7c: 77:29:42:97:37:d7:9f:b6:34:3b:ff:25:cf:98:4c: fe:d7:97:ae:68:81:ca:16:bc:32:69:38:5f:b0:7f: 9e:59:28:cd:c9:d6:d2:f5:c9:22:94:e3:76:63:08: cf:ac:be:d4:33:c2:1e:c9:20:b2:18:ff:30:50:ff: 74:85:3c:4c:c7:22:84:70:1e:b1:27:44:94:b8:67: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E8:FD:17:5C:5E:4D:65:21:FF:B3:11:8D:E5:97:59:1F:26:AB:12 X509v3 Authority Key Identifier: keyid:BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ae:48:0f:e3:66:14:a3:3e:f8:15:41:e2:a3:a0:0e:7c:79: 37:3b:7b:09:b4:8e:5b:e2:14:e5:4e:4c:b0:7d:fa:4a:bd:af: fd:73:0a:67:56:3f:9b:53:d8:0c:29:11:3a:8f:c3:fa:9b:6f: f5:83:76:7a:56:d9:ca:21:0a:6f:53:b2:67:eb:d2:d3:29:8c: ae:ec:a2:03:02:ba:f9:95:b7:16:b5:f2:d8:b9:c6:65:4f:a7: c6:e6:7f:c3:73:b1:99:5d:dd:3b:f6:1c:97:92:17:56:7d:80: 52:3e:c8:69:9d:5b:51:55:4d:7f:e4:68:88:bb:6a:c0:7a:d6: 50:9c:6a:88:f1:dc:29:74:ec:24:0b:24:dc:fa:cc:ef:48:f6: 39:2b:60:ad:84:4e:18:43:2e:01:cb:cf:9b:9e:e4:36:7e:d8: 51:7f:29:24:b1:de:d5:0a:cd:65:db:29:a6:ca:fd:1f:ab:00: 74:dc:ad:98:f3:27:fa:10:ca:80:9a:d2:ce:f1:86:5c:3c:6b: 6e:b6:f6:97:8f:3d:6d:fc:d0:d9:df:74:0c:9a:d0:7e:d5:ae: 5a:12:b3:11:3a:ff:31:2d:fc:6b:d1:9b:14:ca:be:1d:28:76: 28:d6:38:37:60:a6:4b:ce:03:71:d1:c7:de:4f:4a:21:f4:62: 0c:e4:1b:89 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFyB9VdoAIwKZDBUt3cadJhzclZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzNDBDNzc4NTc2NTdCQTg0QzRBQ0EzNjAzOTg3NEZB RjEyMzhCNzAeFw0yNTEwMjAyMDQwMTNaFw0yNTEwMjUxNTE1MTNaMDMxMTAvBgNV BAMTKEVFRThGRDE3NUM1RTRENjUyMUZGQjMxMThERTU5NzU5MUYyNkFCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJ+u9nb52F6b4xUr7WXcbLa2B Om2X+Dp7eXOyh3sCigQ2vRWZ46fGoG6qYLjN/uAnAtkyOA4WAh7SsZMfysrroYpp XBV60cUPa7uFHHfpyJMeBq4qQWJOEb6f16ZtEyJLQml1/L0234ZeGBZwwGgwdKjX dpsEBhu/TIOnQ3/uYYi7N+DRiWXhljAXxakdWvXXiBdrYSRIbSBGkkzFiaPNJPgQ Z8tHwctNW4GPLTUv0bd5fHcpQpc315+2NDv/Jc+YTP7Xl65ogcoWvDJpOF+wf55Z KM3J1tL1ySKU43ZjCM+svtQzwh7JILIY/zBQ/3SFPEzHIoRwHrEnRJS4Z931AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7uj9F1xeTWUh/7MRjeWXWR8mqxIwHwYDVR0j BBgwFoAUujQMd4V2V7qExKyjYDmHT68SOLcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GQzhCMUEzQzREOTNFNTg5QTlENjdCMUU0OUFBQTdENTQ2 RTMyRDdDMzQ5NEMwM0FEQjJFQzQ0NDMwOEVCNzQ3LzAvQkEzNDBDNzc4NTc2NTdC QTg0QzRBQ0EzNjAzOTg3NEZBRjEyMzhCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQTM0MEM3Nzg1NzY1N0JBODRD NEFDQTM2MDM5ODc0RkFGMTIzOEI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkM4QjFBM0M0RDkzRTU4OUE5RDY3QjFFNDlBQUE3RDU0NkUzMkQ3QzM0 OTRDMDNBREIyRUM0NDQzMDhFQjc0Ny8wL0JBMzQwQzc3ODU3NjU3QkE4NEM0QUNB MzYwMzk4NzRGQUYxMjM4QjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAirkgP42YUoz74FUHio6AOfHk3 O3sJtI5b4hTlTkywffpKva/9cwpnVj+bU9gMKRE6j8P6m2/1g3Z6VtnKIQpvU7Jn 69LTKYyu7KIDArr5lbcWtfLYucZlT6fG5n/Dc7GZXd079hyXkhdWfYBSPshpnVtR VU1/5GiIu2rAetZQnGqI8dwpdOwkCyTc+szvSPY5K2CthE4YQy4By8+bnuQ2fthR fykksd7VCs1l2ymmyv0fqwB03K2Y8yf6EMqAmtLO8YZcPGtutvaXjz1t/NDZ33QM mtB+1a5aErMROv8xLfxr0ZsUyr4dKHYo1jg3YKZLzgNx0cfeT0oh9GIM5BuJ -----END CERTIFICATE-----Generated at Wed Oct 22 12:13:32 2025 by rpki-client