$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft File: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json) Hash identifier: lRuyZNwp2M96tzBjnpkcZLswFcHEmtMpLr2OUSj24MM= Subject key identifier: 9D:F4:73:80:D7:AF:9A:40:92:54:54:FD:09:08:F2:72:70:D6:7A:80 Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F Certificate issuer: /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Certificate serial: 1DB48598EAB69D8C361AED9E973FADA7C56E2C63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft Manifest number: 0135 Signing time: Sat 25 Oct 2025 10:52:26 +0000 Manifest this update: Sat 25 Oct 2025 10:47:26 +0000 Manifest next update: Thu 30 Oct 2025 15:33:26 +0000 Files and hashes: 1: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: TLgGPHxqxf2lzEXMKkGQdbSKqXF28yuoim7M/dYfs7k=) 2: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: I1spZtmjli5MIwwNOJwdw/M5IEaUcgYj0x1Wd2NiQeY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 30 Oct 2025 15:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b4:85:98:ea:b6:9d:8c:36:1a:ed:9e:97:3f:ad:a7:c5:6e:2c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Validity Not Before: Oct 25 10:47:26 2025 GMT Not After : Oct 30 15:33:26 2025 GMT Subject: CN=9DF47380D7AF9A40925454FD0908F27270D67A80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:4c:2b:a2:f9:62:fe:51:da:1a:36:5b:f9: f5:bf:cd:76:91:46:08:f8:39:cd:fc:32:ad:29:06: 40:e2:fb:ec:09:51:77:a0:ef:b7:dc:8d:54:9e:d9: 51:70:ab:98:85:7d:50:6c:56:c6:31:9c:6a:f7:09: dc:5d:dd:93:f4:de:53:5f:80:50:eb:06:88:c7:ef: f5:04:d0:75:35:1d:9b:59:fe:06:88:3c:4e:d7:63: 1f:f8:dc:c3:a4:58:3f:fc:d2:87:47:53:fa:f9:39: 27:ce:b9:71:39:16:37:43:6e:8e:73:87:9d:fd:dd: 10:64:23:a8:28:08:6f:e6:6a:d3:70:7b:3c:90:aa: 4e:79:6d:2b:57:8d:6a:a9:a2:4e:54:91:01:88:a5: e1:f1:24:60:c1:f0:ff:e9:fb:cd:b8:5e:a9:d9:7c: a9:ab:32:08:d9:ab:6b:fb:3c:23:a0:dd:a2:91:24: c4:39:0b:33:b2:c1:ab:6b:ef:96:45:27:fe:3b:4f: 26:7f:7a:33:69:c2:61:0d:e1:01:12:48:aa:95:32: a6:1d:1d:46:07:96:69:e4:13:11:ad:88:da:f4:b9: d7:83:47:d0:d3:b1:32:b5:b3:33:87:e2:5e:e0:98: 63:bc:8a:c1:84:0f:63:f9:ac:dd:a0:12:65:ef:66: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F4:73:80:D7:AF:9A:40:92:54:54:FD:09:08:F2:72:70:D6:7A:80 X509v3 Authority Key Identifier: keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e1:a4:7e:37:f6:21:e7:58:46:25:69:d2:98:5c:f2:bc:ca: 74:46:a3:c0:d1:f7:83:bf:6d:5b:51:81:91:8e:9e:f5:13:e3: d6:74:10:96:9e:8c:09:7c:79:46:f1:78:35:15:59:50:47:7f: f7:39:c4:9e:b8:ed:5d:10:73:f6:8f:ce:be:4c:87:ed:05:70: 88:e2:5c:f2:de:3e:e7:2c:dc:3d:eb:e4:8c:70:8a:7c:49:31: 6e:ff:62:98:80:8e:0f:39:f0:c7:41:66:d2:17:72:26:c5:02: 9d:c1:61:84:52:95:02:95:42:e1:6c:cf:12:4c:ec:24:57:d9: 7d:fd:64:5a:ad:3c:ff:a8:12:e5:17:38:bf:06:38:59:37:5f: 31:a5:3f:b3:af:89:d3:f9:c6:66:ed:a6:40:a3:1e:37:8f:2d: dd:23:3a:80:bd:5d:28:3d:da:37:c9:50:78:b4:ac:7d:12:fe: 0f:3c:6e:b7:7a:2a:4a:51:c2:70:34:ae:38:4e:e9:7b:32:79: 18:c1:01:58:d7:af:51:da:16:e1:ac:c9:ad:74:e4:4b:a1:28: 23:bb:ec:70:bc:c6:5d:5b:3a:35:5f:c6:c1:75:f2:99:a4:52: a4:64:75:fa:91:b2:af:21:fd:9a:f6:cf:d4:22:f5:bc:b9:71: b0:34:d7:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHbSFmOq2nYw2Gu2elz+tp8VuLGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NDFEQjczRDk5NUFFNTVDODA4QTBFNzdDQkZGODcz Q0NBRTQ0RjAeFw0yNTEwMjUxMDQ3MjZaFw0yNTEwMzAxNTMzMjZaMDMxMTAvBgNV BAMTKDlERjQ3MzgwRDdBRjlBNDA5MjU0NTRGRDA5MDhGMjcyNzBENjdBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSUwrovli/lHaGjZb+fW/zXaR Rgj4Oc38Mq0pBkDi++wJUXeg77fcjVSe2VFwq5iFfVBsVsYxnGr3Cdxd3ZP03lNf gFDrBojH7/UE0HU1HZtZ/gaIPE7XYx/43MOkWD/80odHU/r5OSfOuXE5FjdDbo5z h5393RBkI6goCG/matNwezyQqk55bStXjWqpok5UkQGIpeHxJGDB8P/p+824XqnZ fKmrMgjZq2v7PCOg3aKRJMQ5CzOywatr75ZFJ/47TyZ/ejNpwmEN4QESSKqVMqYd HUYHlmnkExGtiNr0udeDR9DTsTK1szOH4l7gmGO8isGED2P5rN2gEmXvZpsBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnfRzgNevmkCSVFT9CQjycnDWeoAwHwYDVR0j BBgwFoAUy1Qdtz2ZWuVcgIoOd8v/hzzK5E8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0IwQkI3NkQ4NURBMTY5MjUxNThENUU3NjE4MDkyOUJG REQwM0RDQjFCNDZBRkQzQjE1NjFFQjMxRDgyOTc2LzAvQ0I1NDFEQjczRDk5NUFF NTVDODA4QTBFNzdDQkZGODczQ0NBRTQ0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU0MURCNzNEOTk1QUU1NUM4 MDhBMEU3N0NCRkY4NzNDQ0FFNDRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNCMEJCNzZEODVEQTE2OTI1MTU4RDVFNzYxODA5MjlCRkREMDNEQ0Ix QjQ2QUZEM0IxNTYxRUIzMUQ4Mjk3Ni8wL0NCNTQxREI3M0Q5OTVBRTU1QzgwOEEw RTc3Q0JGRjg3M0NDQUU0NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx4aR+N/Yh51hGJWnSmFzyvMp0 RqPA0feDv21bUYGRjp71E+PWdBCWnowJfHlG8Xg1FVlQR3/3OcSeuO1dEHP2j86+ TIftBXCI4lzy3j7nLNw96+SMcIp8STFu/2KYgI4POfDHQWbSF3ImxQKdwWGEUpUC lULhbM8STOwkV9l9/WRarTz/qBLlFzi/BjhZN18xpT+zr4nT+cZm7aZAox43jy3d IzqAvV0oPdo3yVB4tKx9Ev4PPG63eipKUcJwNK44Tul7MnkYwQFY169R2hbhrMmt dORLoSgju+xwvMZdWzo1X8bBdfKZpFKkZHX6kbKvIf2a9s/UIvW8uXGwNNej -----END CERTIFICATE-----Generated at Mon Oct 27 12:10:48 2025 by rpki-client