$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft File: CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft (raw, json) Hash identifier: ce0bBupP4vfVCgH98NwV4EMKDG4GqxVW6XsfxSXcK+o= Subject key identifier: F0:02:0A:22:05:AD:E5:13:86:C3:52:56:BA:4E:63:C0:7E:92:AA:75 Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9 Certificate issuer: /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9 Certificate serial: 2D241C52937EE05FAAE4E151BC447AB508669DA4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft Manifest number: 0134 Signing time: Mon 03 Nov 2025 20:15:40 +0000 Manifest this update: Mon 03 Nov 2025 20:10:40 +0000 Manifest next update: Sat 08 Nov 2025 15:58:40 +0000 Files and hashes: 1: CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl (hash: W0sma31EqJpgnyAa7dKxRloii2W/JyDdDbigtI68MgI=) 2: 323830333a643034303a3a2f33322d3438203d3e203631343937.roa (hash: KPCzcyChvyPeehaWnhvSTDPTdKfFfKuYkiILeOULoU8=) 3: 3133382e39392e3133362e302f32322d3234203d3e203631343937.roa (hash: w6YQeVzBbdGX4ZtqxOWuTiF9w7pymQdvj42qCjcXegM=) 4: 3133382e39392e3133392e302f32342d3234203d3e203631343937.roa (hash: Lp8itGX8i8BvTiHNYK6IyXru0xDfdNKADzCredWO6SM=) 5: 323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa (hash: C3W/w2y6r/ZFYMQY4Ut83wrH6Dgf7/0VGr9hKowpp2Y=) 6: 3133382e39392e3133362e302f32342d3234203d3e203631343937.roa (hash: RK0nikVIaqyMaMoCsLHM0XvVg3ZPgIO9Hx7uNumFi3A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:24:1c:52:93:7e:e0:5f:aa:e4:e1:51:bc:44:7a:b5:08:66:9d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9 Validity Not Before: Nov 3 20:10:40 2025 GMT Not After : Nov 8 15:58:40 2025 GMT Subject: CN=F0020A2205ADE51386C35256BA4E63C07E92AA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:69:61:7e:b2:fe:78:2c:1a:8a:f6:78:9f: a9:fd:46:2f:42:cf:01:23:a1:3d:6e:c6:2a:91:da: fb:d7:f7:88:b6:4b:49:f6:69:9e:8f:23:c1:c8:8f: d4:6d:8b:5f:1d:16:3b:c8:a6:bd:87:c9:85:7c:66: bb:bc:70:ce:aa:3b:7e:db:d8:10:67:1a:db:06:e4: 62:0b:6d:43:69:a7:df:b6:a2:3e:77:ab:f9:cc:84: bf:54:83:21:a9:0c:ef:df:75:b9:51:4e:a4:6f:0a: 57:0f:4a:00:78:06:3e:db:09:e7:83:42:2a:c1:47: 74:31:85:94:17:e8:5f:0e:fc:02:e7:1c:47:0d:fb: 06:04:67:ed:91:d2:64:3a:66:41:33:6a:25:e9:47: 64:16:57:c5:f4:c2:93:56:4d:30:09:88:61:59:ed: ac:56:0d:65:3e:ae:01:75:e4:cd:9c:3a:82:5b:70: 65:c8:2c:8a:72:82:f9:b6:ea:eb:c2:f0:e8:17:7c: 28:cd:39:6d:76:2a:c6:5f:55:ca:77:19:ab:b2:22: 09:44:6a:25:a7:75:35:bd:47:e1:ca:b7:f5:6f:53: f7:27:b9:36:fd:31:6b:06:9d:c4:59:86:30:60:0a: 79:c6:62:12:57:5d:7a:87:be:d3:ae:e3:7e:10:77: be:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:02:0A:22:05:AD:E5:13:86:C3:52:56:BA:4E:63:C0:7E:92:AA:75 X509v3 Authority Key Identifier: keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6f:11:d4:ee:73:0c:0e:38:79:43:45:04:5d:30:a6:5e:a9: ad:ac:5b:a5:4d:8e:48:af:a6:54:b9:07:73:ea:77:ec:9b:af: 7d:9a:65:71:15:5e:59:6b:7f:40:fc:3d:c9:d3:48:34:5b:ce: e1:f9:69:1d:90:9a:8d:3a:da:09:d5:09:de:39:b2:2c:35:08: 5d:2e:96:0c:6d:da:05:7a:ec:54:1a:2c:45:89:71:30:65:0b: 0b:61:3a:fd:9e:8d:11:3c:16:c4:e0:46:16:74:8e:fa:ec:a1: 72:3b:90:53:03:67:98:38:b7:4c:21:b4:5e:26:d6:a1:04:71: 73:4a:e7:a2:30:e0:f3:59:87:55:da:c7:57:a5:df:50:7d:18: 96:fd:5c:71:15:51:fe:a1:9e:03:db:ed:b9:08:69:e4:7b:0e: 2a:1f:87:4a:fd:12:68:f4:44:8b:bc:1b:d1:cc:c1:9c:d4:99: 5e:75:3d:76:d1:63:9e:02:29:f9:25:3a:f0:71:09:a5:87:0e: ed:05:9a:f9:ee:57:d6:5a:b9:7b:4a:55:87:a9:10:e3:3e:08: 19:79:a4:04:fb:5d:f5:fe:fc:80:b4:1f:ee:ae:95:be:45:3d: b1:c5:cc:97:b3:b1:81:98:c6:11:f2:61:71:d8:28:c4:23:55: 04:1b:7c:41 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULSQcUpN+4F+q5OFRvER6tQhmnaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VEMTMwMkVCQzQ4NEM3QzY5RTYzN0U0NUFFRjY3NzVE NUU2MThBOTAeFw0yNTExMDMyMDEwNDBaFw0yNTExMDgxNTU4NDBaMDMxMTAvBgNV BAMTKEYwMDIwQTIyMDVBREU1MTM4NkMzNTI1NkJBNEU2M0MwN0U5MkFBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfD2lhfrL+eCwaivZ4n6n9Ri9C zwEjoT1uxiqR2vvX94i2S0n2aZ6PI8HIj9Rti18dFjvIpr2HyYV8Zru8cM6qO37b 2BBnGtsG5GILbUNpp9+2oj53q/nMhL9UgyGpDO/fdblRTqRvClcPSgB4Bj7bCeeD QirBR3QxhZQX6F8O/ALnHEcN+wYEZ+2R0mQ6ZkEzaiXpR2QWV8X0wpNWTTAJiGFZ 7axWDWU+rgF15M2cOoJbcGXILIpygvm26uvC8OgXfCjNOW12KsZfVcp3GauyIglE aiWndTW9R+HKt/VvU/cnuTb9MWsGncRZhjBgCnnGYhJXXXqHvtOu434Qd74TAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8AIKIgWt5ROGw1JWuk5jwH6SqnUwHwYDVR0j BBgwFoAUztEwLrxITHxp5jfkWu9nddXmGKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NjQyOUQzRkM0ODk4QzQzRkQwQzg5RTkwNUFDQUU4M0Q1 NTNENDUyMTcxMDZBOEUwREIwNDA4OEVFNEZGMTFELzAvQ0VEMTMwMkVCQzQ4NEM3 QzY5RTYzN0U0NUFFRjY3NzVENUU2MThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUQxMzAyRUJDNDg0QzdDNjlF NjM3RTQ1QUVGNjc3NUQ1RTYxOEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzY0MjlEM0ZDNDg5OEM0M0ZEMEM4OUU5MDVBQ0FFODNENTUzRDQ1MjE3 MTA2QThFMERCMDQwODhFRTRGRjExRC8wL0NFRDEzMDJFQkM0ODRDN0M2OUU2MzdF NDVBRUY2Nzc1RDVFNjE4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdbxHU7nMMDjh5Q0UEXTCmXqmt rFulTY5Ir6ZUuQdz6nfsm699mmVxFV5Za39A/D3J00g0W87h+WkdkJqNOtoJ1Qne ObIsNQhdLpYMbdoFeuxUGixFiXEwZQsLYTr9no0RPBbE4EYWdI767KFyO5BTA2eY OLdMIbReJtahBHFzSueiMODzWYdV2sdXpd9QfRiW/VxxFVH+oZ4D2+25CGnkew4q H4dK/RJo9ESLvBvRzMGc1JledT120WOeAin5JTrwcQmlhw7tBZr57lfWWrl7SlWH qRDjPggZeaQE+131/vyAtB/urpW+RT2xxcyXs7GBmMYR8mFx2CjEI1UEG3xB -----END CERTIFICATE-----Generated at Tue Nov 4 10:58:32 2025 by rpki-client