$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft File: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft (raw, json) Hash identifier: OuHnfdrrFBauSrskDh8oC0eQMXLB1V0Q0OSHXsqTpC0= Subject key identifier: 07:95:E0:A3:6C:63:FB:EC:55:86:38:3E:47:CC:2F:52:0D:19:22:B3 Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8 Certificate issuer: /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8 Certificate serial: 2FD89D126833781AFBA16161B4492264806FEAA6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft Manifest number: 0138 Signing time: Mon 20 Oct 2025 21:50:52 +0000 Manifest this update: Mon 20 Oct 2025 21:45:52 +0000 Manifest next update: Sat 25 Oct 2025 04:55:52 +0000 Files and hashes: 1: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl (hash: h8SnMBbveivR53ZcL4zxJYpeZpvLfez12HA6jbOKU88=) 2: 323830313a3137323a3a2f34382d3438203d3e203134303830.roa (hash: mGXnjOmUkivco7UWNXNOXRqozorBrbTRwCXCle8sZ60=) 3: 323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa (hash: Rb9y9DwnR6tHMoVEq1jQr1oPiLPO/N9wM0q5+pYQLp8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Oct 2025 04:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d8:9d:12:68:33:78:1a:fb:a1:61:61:b4:49:22:64:80:6f:ea:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8 Validity Not Before: Oct 20 21:45:52 2025 GMT Not After : Oct 25 04:55:52 2025 GMT Subject: CN=0795E0A36C63FBEC5586383E47CC2F520D1922B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:0d:64:93:c5:e1:67:b8:d6:86:1f:b9:7f: bb:40:00:48:6e:c6:72:bf:39:57:bb:92:8e:fc:05: e5:78:e8:91:e5:d8:28:c3:a0:9b:56:e3:c9:fd:2a: 45:46:d0:53:ca:87:18:fe:1a:67:6f:c8:2c:45:e4: fc:84:e7:07:72:1d:42:a6:c4:97:c8:49:ec:82:c5: 9d:36:c5:63:f9:47:89:d0:e5:50:60:6f:8c:3b:61: e7:d7:79:4b:39:44:53:2c:7b:5f:50:d7:98:c6:7b: ea:f3:62:00:be:02:4f:f1:2f:7a:f2:89:09:c4:da: 2f:3a:7d:05:8b:0c:58:ef:27:1b:4d:45:b2:5c:d6: 47:60:5b:8d:e0:d7:f5:67:65:fe:ea:e6:59:6e:9d: f9:24:e7:57:d4:27:54:aa:07:8b:6b:77:5d:40:86: 49:0a:7c:44:70:23:93:a1:84:67:b7:06:a3:f0:22: 5e:83:8e:ba:8b:75:4d:92:fb:9a:7c:5e:b6:4b:34: 1e:e2:2f:38:32:20:a3:cb:6c:4c:1b:33:98:d3:07: 5f:00:76:a0:bf:06:6f:ff:81:2a:fd:3e:c9:a2:69: 7e:0f:bf:45:0c:0a:9c:6e:b0:8c:f1:ab:a7:7d:c0: 74:8b:3f:56:c3:7d:20:a3:db:78:0a:4c:b6:41:79: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:95:E0:A3:6C:63:FB:EC:55:86:38:3E:47:CC:2F:52:0D:19:22:B3 X509v3 Authority Key Identifier: keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:08:e6:2a:57:db:8a:0f:d5:b0:b8:e0:8c:ef:50:15:d5:4b: bd:51:de:8b:61:44:3b:f0:07:11:82:af:4e:86:e0:2d:32:9b: 79:14:00:41:2f:17:de:5a:81:3b:cd:61:ff:0b:e2:19:fa:25: 4d:af:1f:d3:c9:c7:e7:31:b8:5a:2d:aa:ee:d9:72:ef:5a:6b: e1:00:91:70:4d:d0:00:a2:98:76:7b:20:9a:f8:cf:38:dc:a3: 4d:a0:27:bb:07:b0:64:9f:bf:45:93:4c:2e:0e:c2:a6:e7:ab: 3d:b3:18:50:72:31:30:cf:b1:f0:79:8c:5e:e5:86:e7:d8:c7: d6:bd:60:67:e0:02:b7:df:78:57:78:ac:fa:c9:91:d2:5a:f2: f9:28:c3:68:0d:8f:1d:c2:ed:2b:93:07:2b:21:85:cd:25:f7: 90:a2:36:99:37:f2:0a:ca:c7:24:ca:81:14:fe:1e:ae:37:12: 61:bd:36:34:d5:21:b0:98:de:21:21:0a:28:69:dc:e1:32:eb: 29:ef:80:5b:58:b3:19:7e:ce:31:bc:d7:0c:52:85:c6:9a:3f: 97:8d:f7:ac:8e:b5:86:20:ff:a6:da:a2:fb:4f:df:b9:ee:9a: d5:42:91:a8:b9:75:af:b4:9b:42:f6:e4:82:36:2c:2a:d9:02: d1:0b:a6:0a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL9idEmgzeBr7oWFhtEkiZIBv6qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRCOTVGRTNDRThDRDYxNDM3ODkzMjRGODlEMjc5MURB QkJCNUFEODAeFw0yNTEwMjAyMTQ1NTJaFw0yNTEwMjUwNDU1NTJaMDMxMTAvBgNV BAMTKDA3OTVFMEEzNkM2M0ZCRUM1NTg2MzgzRTQ3Q0MyRjUyMEQxOTIyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCg1kk8XhZ7jWhh+5f7tAAEhu xnK/OVe7ko78BeV46JHl2CjDoJtW48n9KkVG0FPKhxj+GmdvyCxF5PyE5wdyHUKm xJfISeyCxZ02xWP5R4nQ5VBgb4w7YefXeUs5RFMse19Q15jGe+rzYgC+Ak/xL3ry iQnE2i86fQWLDFjvJxtNRbJc1kdgW43g1/VnZf7q5llunfkk51fUJ1SqB4trd11A hkkKfERwI5OhhGe3BqPwIl6DjrqLdU2S+5p8XrZLNB7iLzgyIKPLbEwbM5jTB18A dqC/Bm//gSr9PsmiaX4Pv0UMCpxusIzxq6d9wHSLP1bDfSCj23gKTLZBeQdZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUB5Xgo2xj++xVhjg+R8wvUg0ZIrMwHwYDVR0j BBgwFoAUxLlf486M1hQ3iTJPidJ5Hau7WtgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNjUzQ0Y3MjI0MjQ0RDczODg1RTM0QjYyQTgwNTREMzFC NTIzMzQwRjVBNjMwQzVGRDY5OUYyOTlBRkYyQ0QzLzAvQzRCOTVGRTNDRThDRDYx NDM3ODkzMjRGODlEMjc5MURBQkJCNUFEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEI5NUZFM0NFOENENjE0Mzc4 OTMyNEY4OUQyNzkxREFCQkI1QUQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDY1M0NGNzIyNDI0NEQ3Mzg4NUUzNEI2MkE4MDU0RDMxQjUyMzM0MEY1 QTYzMEM1RkQ2OTlGMjk5QUZGMkNEMy8wL0M0Qjk1RkUzQ0U4Q0Q2MTQzNzg5MzI0 Rjg5RDI3OTFEQUJCQjVBRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLCOYqV9uKD9WwuOCM71AV1Uu9 Ud6LYUQ78AcRgq9OhuAtMpt5FABBLxfeWoE7zWH/C+IZ+iVNrx/TycfnMbhaLaru 2XLvWmvhAJFwTdAAoph2eyCa+M843KNNoCe7B7Bkn79Fk0wuDsKm56s9sxhQcjEw z7HweYxe5Ybn2MfWvWBn4AK333hXeKz6yZHSWvL5KMNoDY8dwu0rkwcrIYXNJfeQ ojaZN/IKysckyoEU/h6uNxJhvTY01SGwmN4hIQooadzhMusp74BbWLMZfs4xvNcM UoXGmj+XjfesjrWGIP+m2qL7T9+57prVQpGouXWvtJtC9uSCNiwq2QLRC6YK -----END CERTIFICATE-----Generated at Tue Oct 21 12:03:21 2025 by rpki-client