$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft File: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json) Hash identifier: x7oWdkONI0me0fI5UQ2mly4/M1MniVX3aQXlq2cwzNk= Subject key identifier: 10:BA:99:5B:F2:2A:7C:E6:7A:AB:89:C9:C8:74:6D:DE:EC:0D:86:27 Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC Certificate issuer: /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC Certificate serial: 0F081E1DC2211F91ABC9DB76294EFCE492ED86EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft Manifest number: 0136 Signing time: Sat 01 Nov 2025 14:24:25 +0000 Manifest this update: Sat 01 Nov 2025 14:19:25 +0000 Manifest next update: Thu 06 Nov 2025 20:32:25 +0000 Files and hashes: 1: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=) 2: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=) 3: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: Yuf5XFzKCIo2d0epsdNAai1Ql9jRbdyDY/wpCpQorNA=) 4: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: l4Jx734awB6q++zt4yuuQs6QtfSrV51cP9wPz5GLhCQ=) 5: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: SoAAkRtR2FKbhVamyM3gTG2PhaR1XUS9n4+FzdMlDXY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 20:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:08:1e:1d:c2:21:1f:91:ab:c9:db:76:29:4e:fc:e4:92:ed:86:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC Validity Not Before: Nov 1 14:19:25 2025 GMT Not After : Nov 6 20:32:25 2025 GMT Subject: CN=10BA995BF22A7CE67AAB89C9C8746DDEEC0D8627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:1a:4d:95:49:4f:05:7b:96:fb:c2:86:b3: ba:24:71:e7:57:26:30:32:14:61:b1:ab:56:37:67: 6d:40:58:c6:5f:64:38:81:4f:c5:b0:77:9f:ab:c0: 47:db:6f:59:d1:ca:01:69:40:dc:0f:c4:92:71:1d: 43:da:06:f8:1a:f5:79:0b:6d:7d:25:cc:63:d3:51: c2:ad:65:47:28:1b:fa:f0:4a:a3:cf:b7:0f:70:dc: 4a:cf:3a:37:20:9c:28:a1:bd:49:fe:e7:16:21:3d: a5:f5:38:13:b8:bd:05:8b:ef:4a:f1:39:82:0b:80: 35:be:f5:c2:cd:56:f6:02:86:38:49:c0:aa:40:26: b7:c1:bd:14:51:aa:f9:f3:8f:cf:cb:e1:3b:d8:1c: 4c:e0:5e:84:32:2b:01:db:84:75:3b:86:a9:74:ad: 0b:de:b6:d7:dc:09:89:11:b5:6a:df:01:95:da:ed: 06:c9:d5:2c:84:44:20:1c:a7:26:67:e6:d7:c7:66: 3f:09:2f:a6:a8:d5:2d:8b:4f:8b:4c:af:49:e1:af: 27:de:c1:d4:fb:fc:85:d0:04:45:35:70:6b:75:a4: e5:06:98:7d:f7:12:65:06:d4:17:8d:53:1d:3d:53: df:8c:6e:43:4a:75:ed:14:da:d4:55:db:91:06:01: 98:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BA:99:5B:F2:2A:7C:E6:7A:AB:89:C9:C8:74:6D:DE:EC:0D:86:27 X509v3 Authority Key Identifier: keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1c:39:ea:e0:de:cf:ea:90:57:a3:af:77:5e:8e:44:cb:e2: 7b:a8:5f:41:e5:52:e9:b4:e2:aa:d1:ac:69:c5:36:10:dc:8e: 51:27:c5:95:86:ae:a8:44:27:b0:92:ad:1e:27:17:71:98:5b: db:66:59:6d:ac:0b:1f:fe:24:57:e1:76:c4:19:d9:ea:8c:c8: 80:0b:de:a4:64:f1:70:4a:e7:e7:a1:f4:e5:0f:38:9a:6a:ba: a3:f0:5f:1a:05:36:98:6c:98:40:65:ca:5f:63:0c:02:1c:b2: 23:35:13:32:00:95:b9:d4:ce:f1:0c:7e:14:83:45:df:ad:c4: 5c:3d:ac:b0:29:ec:89:24:df:9c:f0:1a:08:fb:3b:1b:ca:33: 5d:ad:66:5c:4c:d7:c0:41:98:39:da:99:8d:56:83:0c:a9:3d: 37:e5:b1:5c:3a:f3:14:17:2c:76:22:e9:db:14:33:5b:75:54: 94:9d:7b:d7:dc:3a:fb:eb:de:d3:ef:92:2c:aa:36:c0:74:77: e8:3a:26:58:7b:a6:f8:dd:b9:eb:c2:9d:28:ab:6e:25:74:e4: aa:7c:f7:55:f1:fd:d4:4d:33:a7:06:96:82:b3:60:3c:6f:c8: 96:48:2a:8a:1c:80:8c:6d:9d:ef:a9:65:23:27:66:92:8b:36: c5:66:c3:1a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDwgeHcIhH5Grydt2KU785JLthu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0REOEQ2NTEyNUMz NjRBNERFQzAeFw0yNTExMDExNDE5MjVaFw0yNTExMDYyMDMyMjVaMDMxMTAvBgNV BAMTKDEwQkE5OTVCRjIyQTdDRTY3QUFCODlDOUM4NzQ2RERFRUMwRDg2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASBpNlUlPBXuW+8KGs7okcedX JjAyFGGxq1Y3Z21AWMZfZDiBT8Wwd5+rwEfbb1nRygFpQNwPxJJxHUPaBvga9XkL bX0lzGPTUcKtZUcoG/rwSqPPtw9w3ErPOjcgnCihvUn+5xYhPaX1OBO4vQWL70rx OYILgDW+9cLNVvYChjhJwKpAJrfBvRRRqvnzj8/L4TvYHEzgXoQyKwHbhHU7hql0 rQvettfcCYkRtWrfAZXa7QbJ1SyERCAcpyZn5tfHZj8JL6ao1S2LT4tMr0nhryfe wdT7/IXQBEU1cGt1pOUGmH33EmUG1BeNUx09U9+MbkNKde0U2tRV25EGAZhjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUELqZW/IqfOZ6q4nJyHRt3uwNhicwHwYDVR0j BBgwFoAUzv9YUHrxoGrv2mfdjWUSXDZKTewwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5 MjdEMjRBQUNBRjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2 QUVGREE2N0REOEQ2NTEyNUMzNjRBNERFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZGNTg1MDdBRjFBMDZBRUZE QTY3REQ4RDY1MTI1QzM2NEE0REVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjVEQzk3NjhFQTBBQUNGNDZEQzkxMUU4MUQwRDlEMDQ5OTI3RDI0QUFD QUYwNjg1Q0IzNjdENTRDRUUyQkQ5NS8wL0NFRkY1ODUwN0FGMUEwNkFFRkRBNjdE RDhENjUxMjVDMzY0QTRERUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAHDnq4N7P6pBXo693Xo5Ey+J7 qF9B5VLptOKq0axpxTYQ3I5RJ8WVhq6oRCewkq0eJxdxmFvbZlltrAsf/iRX4XbE GdnqjMiAC96kZPFwSufnofTlDziaarqj8F8aBTaYbJhAZcpfYwwCHLIjNRMyAJW5 1M7xDH4Ug0XfrcRcPaywKeyJJN+c8BoI+zsbyjNdrWZcTNfAQZg52pmNVoMMqT03 5bFcOvMUFyx2IunbFDNbdVSUnXvX3Dr7697T75IsqjbAdHfoOiZYe6b43bnrwp0o q24ldOSqfPdV8f3UTTOnBpaCs2A8b8iWSCqKHICMbZ3vqWUjJ2aSizbFZsMa -----END CERTIFICATE-----Generated at Sun Nov 2 17:39:35 2025 by rpki-client