$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft File: CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft (raw, json) Hash identifier: sP+IJEOkWgTasE/F7ePhglXl/oOe9lalXVsPdJD6HN4= Subject key identifier: EA:5D:58:35:E4:81:7E:44:3C:C9:12:21:B6:DA:9D:A7:CA:50:9C:48 Authority key identifier: CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61 Certificate issuer: /CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61 Certificate serial: 5DDE1FEA79F696EC574F1A14B9415BB7C6FFE3B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft Manifest number: 012A Signing time: Fri 24 Oct 2025 21:18:37 +0000 Manifest this update: Fri 24 Oct 2025 21:13:37 +0000 Manifest next update: Wed 29 Oct 2025 14:10:37 +0000 Files and hashes: 1: 323830333a333363303a3a2f33322d3438203d3e20323635373231.roa (hash: 28sYketazM6vH2UAZi3oACqjsw2rnkaG+eluVXsRIXQ=) 2: 3132382e3230312e3131322e302f32322d3234203d3e20323635373231.roa (hash: CMkBruGYKL80Ok5wn8mmC59u6wsCZ/dDxiwJ+THiyQ0=) 3: CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl (hash: JHL2ej3ZlIYZnXcAfhvK6MJc3qUGksJn6Th6tRhe/lQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 14:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:de:1f:ea:79:f6:96:ec:57:4f:1a:14:b9:41:5b:b7:c6:ff:e3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61 Validity Not Before: Oct 24 21:13:37 2025 GMT Not After : Oct 29 14:10:37 2025 GMT Subject: CN=EA5D5835E4817E443CC91221B6DA9DA7CA509C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:38:28:8f:65:51:e3:9c:f2:47:6f:d9:53: 28:dd:a0:d7:13:e2:ae:4b:6e:53:ae:96:38:de:71: f9:68:80:87:27:58:ba:59:fc:71:2d:d8:34:9f:38: aa:73:5d:66:1f:64:1c:f4:af:3b:be:3c:88:3d:1b: cb:48:29:e8:a2:9f:32:a8:df:6b:c4:35:f0:dc:e6: 62:b4:e7:1a:65:35:16:f5:b8:65:a2:82:e3:bf:d0: 05:34:c7:4e:46:3d:7f:f3:b1:0f:47:43:4d:0c:10: d8:07:ca:56:fa:91:c3:f7:6f:2e:b1:c2:df:87:65: f3:c4:fe:f6:00:81:85:30:16:69:48:c9:ae:34:d2: 45:78:8b:a5:85:53:de:00:00:cb:72:92:85:73:5c: 77:c9:a6:62:0d:ba:8f:88:f2:eb:4a:1c:d0:7b:f1: 62:8b:fd:19:d9:9d:41:c4:90:4f:b6:d1:64:a2:45: 49:7b:f7:17:4a:f9:5a:c9:33:f3:15:6a:bd:52:65: 6e:0f:2a:36:ae:83:43:bb:b7:ec:03:1a:ae:10:c9: 9f:2e:e6:5d:1c:a7:38:f5:30:80:de:a6:3e:33:55: 5c:a2:c5:35:e9:94:10:08:d5:18:9e:2f:d1:64:04: 9f:c5:87:b9:61:42:3a:1a:3a:9b:01:84:17:97:4e: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5D:58:35:E4:81:7E:44:3C:C9:12:21:B6:DA:9D:A7:CA:50:9C:48 X509v3 Authority Key Identifier: keyid:CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:44:b1:fb:71:2a:8a:16:e6:33:fd:fa:b9:c8:74:f1:d1:fd: d1:1a:d4:95:24:3b:e7:f3:61:c7:9d:4b:95:4f:d4:44:7c:e4: ba:72:02:37:cf:cc:ac:18:61:97:2f:36:1d:b4:8b:07:2e:1c: b1:44:06:85:08:a6:e9:10:8f:4e:ac:56:6c:58:ed:89:c3:a9: 0f:c7:f6:2d:0d:f7:88:60:14:0e:2e:1f:49:fe:0a:22:12:13: d4:20:67:02:23:ec:d7:d7:15:c3:fc:59:a3:65:3c:91:3c:cb: f4:5b:54:a0:81:8d:c9:23:cc:9c:48:41:f0:5f:41:1c:03:b2: 9b:08:87:77:c1:64:6b:cf:d9:73:4b:48:39:97:3a:03:d0:b4: d0:65:61:8f:33:78:a1:59:b9:03:7e:e1:73:e7:69:5f:a2:f9: ae:3a:30:64:a2:c2:ee:97:e9:fc:45:07:ad:83:6f:80:a8:ee: 9e:3a:4d:2b:4d:64:05:b4:15:40:e4:10:a4:17:f1:d6:31:5d: 79:73:05:b4:d8:03:16:6b:58:c0:50:98:c0:6d:2c:6c:25:36: 66:45:9b:b1:85:2b:b9:5b:47:81:cc:f9:ac:de:f5:5e:b4:82: dd:93:ab:23:4f:7d:39:8e:6e:22:b0:4a:4a:83:79:35:f8:d2: e1:8f:3b:b3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXd4f6nn2luxXTxoUuUFbt8b/47cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBOEQ1QUVFMkZGRDUxNjlCODYzRTg0MEY4NjNBQzAy NjkxOUE2MTAeFw0yNTEwMjQyMTEzMzdaFw0yNTEwMjkxNDEwMzdaMDMxMTAvBgNV BAMTKEVBNUQ1ODM1RTQ4MTdFNDQzQ0M5MTIyMUI2REE5REE3Q0E1MDlDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMzgoj2VR45zyR2/ZUyjdoNcT 4q5LblOuljjecflogIcnWLpZ/HEt2DSfOKpzXWYfZBz0rzu+PIg9G8tIKeiinzKo 32vENfDc5mK05xplNRb1uGWiguO/0AU0x05GPX/zsQ9HQ00MENgHylb6kcP3by6x wt+HZfPE/vYAgYUwFmlIya400kV4i6WFU94AAMtykoVzXHfJpmINuo+I8utKHNB7 8WKL/RnZnUHEkE+20WSiRUl79xdK+VrJM/MVar1SZW4PKjaug0O7t+wDGq4QyZ8u 5l0cpzj1MIDepj4zVVyixTXplBAI1RieL9FkBJ/Fh7lhQjoaOpsBhBeXTpljAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6l1YNeSBfkQ8yRIhttqdp8pQnEgwHwYDVR0j BBgwFoAUz6jVruL/1Rabhj6ED4Y6wCaRmmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMDA4OTI5MTVCNEY3NjQ5NTIwN0M1NEI5QjIzQjE2MjlG NkZCQUQ4QTU2NTlFRTRGNUIwOUU5ODJCQTU0RTYzLzAvQ0ZBOEQ1QUVFMkZGRDUx NjlCODYzRTg0MEY4NjNBQzAyNjkxOUE2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkE4RDVBRUUyRkZENTE2OUI4 NjNFODQwRjg2M0FDMDI2OTE5QTYxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzAwODkyOTE1QjRGNzY0OTUyMDdDNTRCOUIyM0IxNjI5RjZGQkFEOEE1 NjU5RUU0RjVCMDlFOTgyQkE1NEU2My8wL0NGQThENUFFRTJGRkQ1MTY5Qjg2M0U4 NDBGODYzQUMwMjY5MTlBNjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+RLH7cSqKFuYz/fq5yHTx0f3R GtSVJDvn82HHnUuVT9REfOS6cgI3z8ysGGGXLzYdtIsHLhyxRAaFCKbpEI9OrFZs WO2Jw6kPx/YtDfeIYBQOLh9J/goiEhPUIGcCI+zX1xXD/FmjZTyRPMv0W1SggY3J I8ycSEHwX0EcA7KbCId3wWRrz9lzS0g5lzoD0LTQZWGPM3ihWbkDfuFz52lfovmu OjBkosLul+n8RQetg2+AqO6eOk0rTWQFtBVA5BCkF/HWMV15cwW02AMWa1jAUJjA bSxsJTZmRZuxhSu5W0eBzPms3vVetILdk6sjT305jm4isEpKg3k1+NLhjzuz -----END CERTIFICATE-----Generated at Sun Oct 26 11:35:14 2025 by rpki-client