$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft File: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft (raw, json) Hash identifier: pJY5WfspZmCcKe7ayQ0qYB4dkEiIDMoXNPeaPjS6qkM= Subject key identifier: 84:2A:CC:0E:63:45:46:7A:80:64:B0:7B:29:DB:D4:71:EC:8B:72:28 Authority key identifier: 0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 Certificate issuer: /CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Certificate serial: 5534F9DBF5C851DCE73AFA136A4B47BF6646B419 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft Manifest number: 0135 Signing time: Fri 31 Oct 2025 20:24:21 +0000 Manifest this update: Fri 31 Oct 2025 20:19:21 +0000 Manifest next update: Thu 06 Nov 2025 07:04:21 +0000 Files and hashes: 1: 3230302e37312e38382e302f32312d3234203d3e203237393936.roa (hash: r/EnoAJ/QDLRyKJ2eUMGsfZEAwWctbmLg0N+5EAKcZA=) 2: 3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa (hash: ALd1zdR/wdEwWr8XpENniianx6ebOr87tR/bFvCA3As=) 3: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl (hash: /rEML+8/UrtXoBMbpkBh0LNSMB/F80K7HG+dDzW8QMs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:34:f9:db:f5:c8:51:dc:e7:3a:fa:13:6a:4b:47:bf:66:46:b4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Validity Not Before: Oct 31 20:19:21 2025 GMT Not After : Nov 6 07:04:21 2025 GMT Subject: CN=842ACC0E6345467A8064B07B29DBD471EC8B7228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:a7:59:0b:0a:52:5e:bd:98:b0:c0:a1:b8: 7d:25:2d:a6:c2:58:33:cd:4a:f8:9d:ff:33:8b:8b: d7:13:c8:86:33:58:c9:a7:94:2f:cd:08:10:c8:92: 98:db:f4:6a:4e:b4:90:77:a6:70:ef:3d:14:4b:b4: 30:40:03:cd:a6:4a:c9:f5:4d:d0:b4:36:46:75:40: b4:d8:99:6a:7e:cf:c2:1f:6c:17:f4:0c:5d:d4:65: 59:4b:b3:af:43:fd:e3:d7:89:93:d0:a3:5f:48:1f: 41:0e:c3:8e:46:49:76:4a:45:14:03:5a:b7:30:b6: 5e:43:61:42:b3:eb:b4:86:89:b4:ec:92:e5:a7:7d: 22:15:59:8b:55:14:53:16:e1:4f:05:77:da:c1:33: 92:c8:54:4b:1a:ed:bc:bf:b4:b7:54:06:09:b0:93: ca:5e:f6:3c:37:40:8d:46:5d:0a:18:e3:9e:02:99: 7b:37:f2:36:c7:f8:61:b6:19:19:5f:27:74:15:0e: 5f:4a:15:01:02:82:62:6b:d0:8b:03:a5:dc:b6:e9: 1c:84:99:2c:e1:d7:05:4e:0e:33:74:86:6e:e9:92: c5:4c:92:c5:0a:80:06:74:a2:9f:83:a6:a0:2c:ad: 62:cc:69:00:76:8a:04:f9:c7:e6:1a:c1:67:05:bf: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2A:CC:0E:63:45:46:7A:80:64:B0:7B:29:DB:D4:71:EC:8B:72:28 X509v3 Authority Key Identifier: keyid:0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5e:66:ed:bd:13:3e:4f:37:6c:c3:9e:9f:d0:08:91:7a:c3: 4b:7c:0c:11:a7:02:8e:28:ad:64:35:50:39:0a:57:d9:62:b1: 4a:20:88:63:cd:ea:f5:b0:14:d1:0b:9d:7b:2e:27:8f:bf:cc: bd:ae:16:2f:cf:31:4c:f6:ed:1f:29:59:f3:57:29:30:e7:f9: d4:8f:81:e9:f8:7c:77:95:9e:9c:61:7d:45:f5:55:c8:34:33: 18:17:76:9e:eb:89:e5:53:38:ed:92:f0:65:a5:61:e5:89:0b: 1b:35:13:00:2b:3d:54:34:2b:fc:fa:78:a1:df:5b:1e:57:43: bc:e2:c5:a1:ef:e9:63:1c:53:e3:dd:ff:76:2e:05:c1:c7:33: 63:23:1d:8f:0e:b5:94:47:ec:dd:92:6d:de:ed:7e:29:d7:85: cf:79:67:7c:93:4b:32:7c:50:74:1a:9f:e3:61:13:ed:75:f8: 6f:4f:78:b2:b6:cc:2e:30:65:57:14:29:fc:80:43:69:0d:62: ee:66:99:8d:ef:e4:47:18:06:58:53:ad:7c:b9:3c:c0:6f:e6: 4c:4e:81:fb:9a:a7:f3:02:9d:db:29:e7:04:6c:99:cd:c9:c6: aa:7b:0c:50:ec:37:75:c0:63:40:d5:7e:ff:25:ea:c3:d3:d9: fa:2a:2a:d2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVTT52/XIUdznOvoTaktHv2ZGtBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENCMEM3NzY2ODcwMDFBNkJFRkE5RUREMjBGOUJBNkM4 ODhFRTg1NDAeFw0yNTEwMzEyMDE5MjFaFw0yNTExMDYwNzA0MjFaMDMxMTAvBgNV BAMTKDg0MkFDQzBFNjM0NTQ2N0E4MDY0QjA3QjI5REJENDcxRUM4QjcyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwKdZCwpSXr2YsMChuH0lLabC WDPNSvid/zOLi9cTyIYzWMmnlC/NCBDIkpjb9GpOtJB3pnDvPRRLtDBAA82mSsn1 TdC0NkZ1QLTYmWp+z8IfbBf0DF3UZVlLs69D/ePXiZPQo19IH0EOw45GSXZKRRQD Wrcwtl5DYUKz67SGibTskuWnfSIVWYtVFFMW4U8Fd9rBM5LIVEsa7by/tLdUBgmw k8pe9jw3QI1GXQoY454CmXs38jbH+GG2GRlfJ3QVDl9KFQECgmJr0IsDpdy26RyE mSzh1wVODjN0hm7pksVMksUKgAZ0op+DpqAsrWLMaQB2igT5x+YawWcFv45PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhCrMDmNFRnqAZLB7KdvUceyLcigwHwYDVR0j BBgwFoAUDLDHdmhwAaa++p7dIPm6bIiO6FQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkY0RjNFMUEyQkY5RkExNTVGMzM4RkNCREE1RjYwNDIy QkRCODEwRDc0OUZEMTE2N0VDQUQ4RURCNERCOEQxLzAvMENCMEM3NzY2ODcwMDFB NkJFRkE5RUREMjBGOUJBNkM4ODhFRTg1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0IwQzc3NjY4NzAwMUE2QkVG QTlFREQyMEY5QkE2Qzg4OEVFODU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZGNEYzRTFBMkJGOUZBMTU1RjMzOEZDQkRBNUY2MDQyMkJEQjgxMEQ3 NDlGRDExNjdFQ0FEOEVEQjREQjhEMS8wLzBDQjBDNzc2Njg3MDAxQTZCRUZBOUVE RDIwRjlCQTZDODg4RUU4NTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVXmbtvRM+Tzdsw56f0AiResNL fAwRpwKOKK1kNVA5ClfZYrFKIIhjzer1sBTRC517LiePv8y9rhYvzzFM9u0fKVnz Vykw5/nUj4Hp+Hx3lZ6cYX1F9VXINDMYF3ae64nlUzjtkvBlpWHliQsbNRMAKz1U NCv8+nih31seV0O84sWh7+ljHFPj3f92LgXBxzNjIx2PDrWUR+zdkm3e7X4p14XP eWd8k0syfFB0Gp/jYRPtdfhvT3iytswuMGVXFCn8gENpDWLuZpmN7+RHGAZYU618 uTzAb+ZMToH7mqfzAp3bKecEbJnNycaqewxQ7Dd1wGNA1X7/JerD09n6KirS -----END CERTIFICATE-----Generated at Sun Nov 2 21:07:46 2025 by rpki-client