$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft File: CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft (raw, json) Hash identifier: +OoS3FcO4wt6w0SkbVOKxZ3UW393AMDzr1V2BC/Lk3c= Subject key identifier: F7:D0:7D:87:2C:8B:15:C4:22:3E:BA:17:E9:2D:D0:F9:67:D3:89:CD Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94 Certificate issuer: /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994 Certificate serial: 7999D0F7B37A8AE43395BAFF8834D8FCC6B15EBB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft Manifest number: 013D Signing time: Wed 29 Oct 2025 20:53:14 +0000 Manifest this update: Wed 29 Oct 2025 20:48:14 +0000 Manifest next update: Tue 04 Nov 2025 19:37:14 +0000 Files and hashes: 1: 3230302e32362e3138362e302f32342d3234203d3e203631333137.roa (hash: fK/b2WDuubQwP3UyGCNSbD9C7/WYZ/lk+kcO76rDYbo=) 2: 3230302e32362e3138352e302f32342d3234203d3e20323639303730.roa (hash: dW5VuKC8CHdooeWs3YbaX6t43NdWhJq8QkAY2U16Tqs=) 3: 3230302e32362e3139312e302f32342d3234203d3e203634313631.roa (hash: H+3fPb1aZ1im5/guMO7Te2ueR24Kkv88QTPjlxPFxh0=) 4: 3230302e32362e3139302e302f32342d3234203d3e20323131343339.roa (hash: MMkvv46DYdUmHh2HqqC4Nmofjw3BUmgorvZAXRJaJjo=) 5: 3230302e32362e3138342e302f32342d3234203d3e20323732313130.roa (hash: BDd25UGZydltpOab2kZokmmyEsds+xUzD/aEnSkJsaE=) 6: CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl (hash: dkjnLqPmmv/2KgS5qEQUh2WqISsBddLxD3p1tMCN8Wc=) 7: 3230302e32362e3138392e302f32342d3234203d3e203138373437.roa (hash: d23utni53CayRraHk5tC6+X91gbvJdq5s6WjZzGLbCk=) 8: 3230302e32362e3138392e302f32342d3234203d3e203230323037.roa (hash: Qh+wLsZPKtFp5NG4vCn5F8D8h2hxZ+zrNY8cDAwCfRA=) 9: 3230302e32362e3138382e302f32342d3234203d3e203632333930.roa (hash: kUsYJfIA28DfzylZdC7kaAqI+oXKzNhg4CoejTzzLko=) 10: 3230302e32362e3138352e302f32342d3234203d3e20323133363930.roa (hash: Fa79schiViN2LtdP9dTStbF+5cmcXPNoql0dQAzl0TI=) 11: 3230302e32362e3138372e302f32342d3234203d3e20323732313130.roa (hash: t7TL1EpAw5rM1fKwkB5TtvtstIWS0txQUDh37ZuKbI8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:99:d0:f7:b3:7a:8a:e4:33:95:ba:ff:88:34:d8:fc:c6:b1:5e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994 Validity Not Before: Oct 29 20:48:14 2025 GMT Not After : Nov 4 19:37:14 2025 GMT Subject: CN=F7D07D872C8B15C4223EBA17E92DD0F967D389CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:b5:20:d3:69:4f:17:0f:ef:23:c4:f8:c5: 53:93:91:70:41:4c:3e:0f:4e:83:5e:cb:f0:68:7a: 53:0a:db:1d:b7:66:0a:c9:38:57:93:3e:05:40:82: 1c:84:4f:85:f2:57:cd:aa:61:f0:ca:66:01:66:75: b7:29:ad:0c:5c:f0:98:57:d8:57:57:72:06:89:25: 41:e2:70:ce:15:cc:8d:f7:82:1c:61:fa:9b:02:48: ae:2e:c0:41:cf:53:71:a6:b2:d5:ab:cf:a8:bd:97: f7:fc:56:fc:7d:d0:16:2b:f6:e3:d1:ae:fe:97:d2: 6d:e7:59:8c:cc:51:4d:65:a8:28:36:d9:73:b5:92: 1d:b9:64:0f:a0:ab:de:d0:c8:79:86:2a:a5:df:02: f5:07:4d:8c:52:3d:a3:3e:db:c1:05:a1:ae:c9:44: ba:89:f8:af:c5:40:df:42:c0:d2:b4:02:45:e1:81: 23:1c:53:6d:20:3a:51:93:9d:b0:30:27:8e:d9:39: 01:aa:e9:71:75:b5:13:13:29:6f:3b:2e:ab:9b:b5: 13:b5:ce:df:92:1f:97:12:06:1e:69:67:93:3e:7c: 60:9c:b2:3e:74:7d:b6:40:f9:e7:85:61:fc:df:0f: d7:0e:a3:fc:6f:77:83:39:95:c8:c7:1c:19:8e:b5: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D0:7D:87:2C:8B:15:C4:22:3E:BA:17:E9:2D:D0:F9:67:D3:89:CD X509v3 Authority Key Identifier: keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0d:fa:c6:37:f7:4b:15:5a:9a:fa:4f:94:77:a8:6f:7f:53: 2b:cd:5e:eb:e6:c1:66:20:aa:c0:20:47:60:5a:35:6a:20:2f: 2c:0f:4a:f9:66:6b:da:66:9e:7f:74:c6:6e:4d:6a:6c:91:fc: 6f:87:f8:61:98:c2:f9:ca:3b:68:29:15:b2:66:89:5c:75:14: 2e:b6:52:fe:07:22:0f:ea:01:2f:05:7f:72:c0:dc:59:56:4c: e6:87:0d:e9:28:0e:36:a8:03:77:03:64:95:d3:5d:ef:72:b8: 36:24:71:5e:b2:ce:3a:ce:82:45:03:e9:6b:cf:3e:c9:f7:1a: f9:f7:70:b7:40:0e:34:d0:8c:6d:57:8f:be:b0:9e:f8:fe:39: 7e:3a:da:71:69:18:ae:bb:1e:35:c9:01:c4:22:88:f8:7f:b4: 96:57:e1:34:2f:d1:72:47:ab:be:bd:22:8e:f2:2f:de:19:b2: 6e:3a:f9:34:26:9a:3d:8c:27:85:94:98:4c:8a:e4:98:10:d4: 68:bb:5f:e8:13:1d:76:7f:f9:88:55:0b:11:d0:4a:dc:d1:fb: 8c:48:f7:d1:0e:67:eb:5c:bf:ea:e6:74:64:71:79:35:5b:72: 31:e7:8b:c0:53:f0:f7:80:29:41:5d:a5:54:a2:c3:d0:38:e9: a9:37:21:bd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeZnQ97N6iuQzlbr/iDTY/MaxXrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzlCRDNENEFDRTc4OTU4MzZCNUU0MkU2RTVCNUY2 Q0E1NTk5NDAeFw0yNTEwMjkyMDQ4MTRaFw0yNTExMDQxOTM3MTRaMDMxMTAvBgNV BAMTKEY3RDA3RDg3MkM4QjE1QzQyMjNFQkExN0U5MkREMEY5NjdEMzg5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/LUg02lPFw/vI8T4xVOTkXBB TD4PToNey/BoelMK2x23ZgrJOFeTPgVAghyET4XyV82qYfDKZgFmdbcprQxc8JhX 2FdXcgaJJUHicM4VzI33ghxh+psCSK4uwEHPU3GmstWrz6i9l/f8Vvx90BYr9uPR rv6X0m3nWYzMUU1lqCg22XO1kh25ZA+gq97QyHmGKqXfAvUHTYxSPaM+28EFoa7J RLqJ+K/FQN9CwNK0AkXhgSMcU20gOlGTnbAwJ47ZOQGq6XF1tRMTKW87LqubtRO1 zt+SH5cSBh5pZ5M+fGCcsj50fbZA+eeFYfzfD9cOo/xvd4M5lcjHHBmOtavzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU99B9hyyLFcQiProX6S3Q+WfTic0wHwYDVR0j BBgwFoAUzseb09Ss54lYNrXkLm5bX2ylWZQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQTNDMjI3RTE5QUEzNzE2Qzc3N0Q0OTVDNTlFNTc1MjU2 MEFEMUQyNEVEOUQyQjY3NDVDNkRBNUZCN0ZDMzExLzAvQ0VDNzlCRDNENEFDRTc4 OTU4MzZCNUU0MkU2RTVCNUY2Q0E1NTk5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM3OUJEM0Q0QUNFNzg5NTgz NkI1RTQyRTZFNUI1RjZDQTU1OTk0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUEzQzIyN0UxOUFBMzcxNkM3NzdENDk1QzU5RTU3NTI1NjBBRDFEMjRF RDlEMkI2NzQ1QzZEQTVGQjdGQzMxMS8wL0NFQzc5QkQzRDRBQ0U3ODk1ODM2QjVF NDJFNkU1QjVGNkNBNTU5OTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcDfrGN/dLFVqa+k+Ud6hvf1Mr zV7r5sFmIKrAIEdgWjVqIC8sD0r5ZmvaZp5/dMZuTWpskfxvh/hhmML5yjtoKRWy ZolcdRQutlL+ByIP6gEvBX9ywNxZVkzmhw3pKA42qAN3A2SV013vcrg2JHFess46 zoJFA+lrzz7J9xr593C3QA400IxtV4++sJ74/jl+OtpxaRiuux41yQHEIoj4f7SW V+E0L9FyR6u+vSKO8i/eGbJuOvk0Jpo9jCeFlJhMiuSYENRou1/oEx12f/mIVQsR 0Erc0fuMSPfRDmfrXL/q5nRkcXk1W3Ix54vAU/D3gClBXaVUosPQOOmpNyG9 -----END CERTIFICATE-----Generated at Fri Oct 31 20:16:29 2025 by rpki-client