$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: pXmhzsBQ8D/xTyehI/KP9wXErjtJNQnjcUSLM7W4rsc= Subject key identifier: 06:0E:0C:7A:C9:4D:9E:11:92:9B:DE:3B:64:19:34:33:02:72:50:05 Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 22B68D4A623552329FDE6E1E0065EB0B61CF920D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: 011A Signing time: Wed 17 Sep 2025 10:17:07 +0000 Manifest this update: Wed 17 Sep 2025 10:12:07 +0000 Manifest next update: Sun 21 Sep 2025 19:22:07 +0000 Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (hash: Vc/Evbtc4Ei/5ZokRHixlnyDU63F54JdlowpFPJdT9k=) 2: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: Mu1aiZbTuKob4P/uHzlI5H1bWCj0RfxIyLfLzn5wSP0=) 3: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: 3x7x/8dYJs8BDKPitkjZDTiCBD0LKvtulrxHjVakbRk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 19:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b6:8d:4a:62:35:52:32:9f:de:6e:1e:00:65:eb:0b:61:cf:92:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Sep 17 10:12:07 2025 GMT Not After : Sep 21 19:22:07 2025 GMT Subject: CN=060E0C7AC94D9E11929BDE3B6419343302725005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:bc:a6:f3:89:b1:30:7a:30:c9:58:ec:62: f8:02:b0:47:8a:83:69:61:6e:fa:a5:c8:59:48:88: 1b:10:6a:3a:55:ea:42:f1:a7:f4:77:a0:2e:0b:a5: bd:23:34:ae:16:f1:c3:3f:a0:3f:e4:89:f6:1c:6b: 07:db:6f:53:30:1e:84:4f:bc:45:ce:5a:9c:cf:5b: c2:b9:49:91:e1:6b:4b:2e:16:4f:fb:39:fd:4c:18: e1:c1:1f:b2:f4:83:9c:26:53:88:71:88:ea:77:06: 01:5e:62:11:8b:50:68:71:d2:80:3e:cf:ff:4f:6e: 26:4e:a5:d6:00:64:2e:f3:c3:f8:1c:16:06:0f:2e: 5b:7b:cd:d4:74:bb:c2:ed:ad:a2:d6:26:5b:81:9d: a8:5f:a6:45:65:ad:41:4c:0e:66:ea:a7:cf:e7:57: 2b:7a:32:3d:f4:33:87:28:e7:36:f5:ab:35:b0:44: 4f:9b:e4:42:01:41:08:ea:cd:8a:de:a2:fb:40:5c: f3:ce:4d:55:42:50:33:36:d8:a6:a1:7e:bc:aa:b1: 1c:e6:2e:5a:b6:72:70:e7:81:47:5d:6b:9d:3b:b7: ca:be:e7:79:c3:07:0a:5d:c3:00:b6:91:c2:a5:1c: cf:3a:c8:32:fe:3d:2d:5c:a8:5c:5b:39:3e:73:57: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0E:0C:7A:C9:4D:9E:11:92:9B:DE:3B:64:19:34:33:02:72:50:05 X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6b:1a:b7:46:85:54:e9:43:86:cb:d0:61:a9:b3:40:7e:46: 28:71:31:27:12:c5:98:46:f7:d7:a0:29:ae:22:1e:2d:d3:91: fc:7e:56:f3:c1:8b:d6:08:a1:d1:ea:f1:1b:2c:fa:c9:e1:97: 29:ff:7f:f7:9e:0a:f8:9a:e9:6e:73:4f:4c:6a:6a:70:63:fc: f0:8c:b0:db:57:ae:91:d2:03:a9:89:c6:7d:a5:4b:7e:a4:c3: 95:bc:33:1f:c3:2e:c2:15:63:b3:4a:07:5e:42:57:73:f2:aa: ae:bf:3d:1f:7b:64:b4:9a:32:c0:f0:05:77:07:03:f9:81:5b: 7e:4f:d3:d1:ba:af:5e:79:3c:01:84:ee:af:5a:8a:bf:bf:2f: b2:d8:51:6a:4e:e0:e4:13:8b:cf:3e:77:68:55:c8:38:d6:75: 40:3b:20:9e:9b:8d:11:5d:b8:bc:a2:10:5b:7f:8a:63:7a:45: 13:f4:a9:b8:15:0c:67:52:c1:93:e7:70:0d:be:42:22:94:94: c9:c4:c4:39:37:75:2d:ce:e4:22:17:e1:7f:9c:2a:e2:b0:1f: 63:6e:56:82:1a:0b:fd:df:5a:f6:78:3a:ce:a5:37:de:e9:a5: 60:c4:21:c8:80:b2:4d:4d:e8:3d:3d:e2:01:71:ca:93:51:97: bd:ce:54:8b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIraNSmI1UjKf3m4eAGXrC2HPkg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNTA5MTcxMDEyMDdaFw0yNTA5MjExOTIyMDdaMDMxMTAvBgNV BAMTKDA2MEUwQzdBQzk0RDlFMTE5MjlCREUzQjY0MTkzNDMzMDI3MjUwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/bym84mxMHowyVjsYvgCsEeK g2lhbvqlyFlIiBsQajpV6kLxp/R3oC4Lpb0jNK4W8cM/oD/kifYcawfbb1MwHoRP vEXOWpzPW8K5SZHha0suFk/7Of1MGOHBH7L0g5wmU4hxiOp3BgFeYhGLUGhx0oA+ z/9PbiZOpdYAZC7zw/gcFgYPLlt7zdR0u8LtraLWJluBnahfpkVlrUFMDmbqp8/n Vyt6Mj30M4co5zb1qzWwRE+b5EIBQQjqzYreovtAXPPOTVVCUDM22KahfryqsRzm Llq2cnDngUdda507t8q+53nDBwpdwwC2kcKlHM86yDL+PS1cqFxbOT5zV/bvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUBg4MeslNnhGSm947ZBk0MwJyUAUwHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9axq3RoVU6UOGy9BhqbNAfkYo cTEnEsWYRvfXoCmuIh4t05H8flbzwYvWCKHR6vEbLPrJ4Zcp/3/3ngr4muluc09M ampwY/zwjLDbV66R0gOpicZ9pUt+pMOVvDMfwy7CFWOzSgdeQldz8qquvz0fe2S0 mjLA8AV3BwP5gVt+T9PRuq9eeTwBhO6vWoq/vy+y2FFqTuDkE4vPPndoVcg41nVA OyCem40RXbi8ohBbf4pjekUT9Km4FQxnUsGT53ANvkIilJTJxMQ5N3UtzuQiF+F/ nCrisB9jblaCGgv931r2eDrOpTfe6aVgxCHIgLJNTeg9PeIBccqTUZe9zlSL -----END CERTIFICATE-----Generated at Thu Sep 18 13:02:24 2025 by rpki-client