$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft File: C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft (raw, json) Hash identifier: 0lVY/tMFRsr9LtXxd9xNPVoRuk+uHf2JsjKz3UWIZYc= Subject key identifier: A4:B2:D8:EA:8C:0E:0C:F2:1E:2C:91:96:FB:9C:52:DC:15:CC:3C:1F Authority key identifier: C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35 Certificate issuer: /CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35 Certificate serial: 7AEBF50F6048F13008390A086ABC079DB466AD3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft Manifest number: 0131 Signing time: Sun 02 Nov 2025 03:06:11 +0000 Manifest this update: Sun 02 Nov 2025 03:01:11 +0000 Manifest next update: Fri 07 Nov 2025 20:34:11 +0000 Files and hashes: 1: 3139302e3130332e3134342e302f32322d3234203d3e20323730303630.roa (hash: z8PWDQjgXLgHvlgmt5clddGGBCsaQqa/XrM1PWBGK5A=) 2: C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl (hash: 64HFjUw158EmUJMdW9A0PuxWL3qul/zqtVdV1oiIuJ4=) 3: 3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa (hash: v2rEv3FgDufDMfiddhOq/5IMaazVdU1+nzVGmOOrvh4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 20:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:eb:f5:0f:60:48:f1:30:08:39:0a:08:6a:bc:07:9d:b4:66:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35 Validity Not Before: Nov 2 03:01:11 2025 GMT Not After : Nov 7 20:34:11 2025 GMT Subject: CN=A4B2D8EA8C0E0CF21E2C9196FB9C52DC15CC3C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:c4:d5:bc:61:fa:a7:5c:60:0a:5a:7e:5b: 65:c7:28:42:d7:6b:0a:79:cb:d0:b5:95:61:68:8b: 20:5f:d8:69:f2:f2:62:46:8d:33:41:1a:33:1c:f8: 5a:1f:df:24:3c:b7:cf:06:aa:b7:b9:1f:40:51:5e: 57:9b:43:db:c1:db:b0:f9:42:59:74:f6:42:39:21: c1:55:2d:de:9a:f3:9e:3a:22:e2:ae:16:f2:a4:5e: b7:81:ab:1e:49:17:c9:e9:52:63:4c:b2:2a:47:dc: a4:d6:3a:06:5b:04:33:85:39:79:7b:61:ef:86:ec: 1e:2a:ae:d2:31:71:12:46:aa:c1:d1:32:8d:b4:40: c2:9d:3f:6e:29:db:85:22:98:76:f5:63:15:ed:cf: 6d:8b:b8:58:76:70:7b:af:2d:07:1c:18:e1:88:bc: e6:ba:7f:8c:81:ff:67:20:e4:b3:ae:0a:48:e2:da: b9:f9:d4:b0:2c:0b:90:f4:5b:90:f3:c5:40:18:47: 4a:7a:cf:95:4f:1b:91:48:80:9b:b4:9f:58:54:f7: 0b:0e:23:ac:a1:5f:25:92:d7:24:a6:b3:7a:3c:19: dc:45:c9:27:05:89:d1:f6:da:34:39:ff:46:0e:ce: e1:ec:a9:54:99:a1:0f:c8:63:7c:68:ad:5c:4b:d1: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:D8:EA:8C:0E:0C:F2:1E:2C:91:96:FB:9C:52:DC:15:CC:3C:1F X509v3 Authority Key Identifier: keyid:C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6a:bb:28:0a:c9:3b:cc:6e:de:a1:ff:1f:bc:5a:3b:05:be: cf:2c:57:da:7e:75:14:70:8b:fd:11:e8:5c:eb:9b:02:eb:c0: 65:a7:6b:87:49:46:d9:5a:64:78:8d:a6:e2:38:86:ea:13:7f: 11:64:06:8c:d5:32:71:33:ad:d3:d0:cb:aa:15:71:6f:11:64: 46:2a:fe:a8:08:0c:cc:a2:b0:03:70:79:b9:cd:75:46:c8:78: d0:6a:c9:38:f0:67:f3:2b:49:f1:af:22:cc:d4:29:f5:aa:2a: 80:b7:86:5a:5e:a9:76:59:6b:37:71:ce:cc:4f:cb:ad:8b:9b: fa:b8:a2:0e:e1:af:e6:f8:22:83:ad:fd:1a:aa:1b:03:89:77: c7:0d:06:de:a8:73:18:a0:7c:bd:8d:5d:27:e0:fc:ab:84:63: 2c:3b:1c:db:5b:5c:c1:f1:4b:c0:8b:83:b4:ec:56:c2:2a:1f: c8:5a:fe:e5:84:bb:9d:3a:05:93:51:75:23:25:96:40:b4:17: b6:26:44:b5:93:f3:2f:4d:3a:17:72:19:dc:a6:d8:67:69:b6: 09:c1:3a:1b:0a:f7:04:f7:03:e1:b3:b2:bc:92:1b:ff:dc:01: 15:7a:af:ce:52:9f:43:9b:ea:ca:ca:70:34:99:34:dd:da:d8: b9:54:4a:eb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeuv1D2BI8TAIOQoIarwHnbRmrT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwOEM0NzM4RDA0QjVENTNGN0JDOTA4N0RERUJCNzc3 MTE5Q0EzNTAeFw0yNTExMDIwMzAxMTFaFw0yNTExMDcyMDM0MTFaMDMxMTAvBgNV BAMTKEE0QjJEOEVBOEMwRTBDRjIxRTJDOTE5NkZCOUM1MkRDMTVDQzNDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwMTVvGH6p1xgClp+W2XHKELX awp5y9C1lWFoiyBf2Gny8mJGjTNBGjMc+Fof3yQ8t88Gqre5H0BRXlebQ9vB27D5 Qll09kI5IcFVLd6a8546IuKuFvKkXreBqx5JF8npUmNMsipH3KTWOgZbBDOFOXl7 Ye+G7B4qrtIxcRJGqsHRMo20QMKdP24p24UimHb1YxXtz22LuFh2cHuvLQccGOGI vOa6f4yB/2cg5LOuCkji2rn51LAsC5D0W5DzxUAYR0p6z5VPG5FIgJu0n1hU9wsO I6yhXyWS1ySms3o8GdxFyScFidH22jQ5/0YOzuHsqVSZoQ/IY3xorVxL0aPnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpLLY6owODPIeLJGW+5xS3BXMPB8wHwYDVR0j BBgwFoAUxwjEc40EtdU/e8kIfd67d3EZyjUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQjlDQjc3OUI1RjYyNTlDOTBEOUJBMjZFRjkwNUEwOEI0 OUYxOEQxRjVFRDEzMEVCMzBDMDIwQzM2RTQ4QzkwLzAvQzcwOEM0NzM4RDA0QjVE NTNGN0JDOTA4N0RERUJCNzc3MTE5Q0EzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzA4QzQ3MzhEMDRCNUQ1M0Y3 QkM5MDg3RERFQkI3NzcxMTlDQTM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEI5Q0I3NzlCNUY2MjU5QzkwRDlCQTI2RUY5MDVBMDhCNDlGMThEMUY1 RUQxMzBFQjMwQzAyMEMzNkU0OEM5MC8wL0M3MDhDNDczOEQwNEI1RDUzRjdCQzkw ODdEREVCQjc3NzExOUNBMzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASarsoCsk7zG7eof8fvFo7Bb7P LFfafnUUcIv9Eehc65sC68Blp2uHSUbZWmR4jabiOIbqE38RZAaM1TJxM63T0Muq FXFvEWRGKv6oCAzMorADcHm5zXVGyHjQask48GfzK0nxryLM1Cn1qiqAt4ZaXql2 WWs3cc7MT8uti5v6uKIO4a/m+CKDrf0aqhsDiXfHDQbeqHMYoHy9jV0n4PyrhGMs OxzbW1zB8UvAi4O07FbCKh/IWv7lhLudOgWTUXUjJZZAtBe2JkS1k/MvTToXchnc pthnabYJwTobCvcE9wPhs7K8khv/3AEVeq/OUp9Dm+rKynA0mTTd2ti5VErr -----END CERTIFICATE-----Generated at Tue Nov 4 07:28:07 2025 by rpki-client