$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft File: CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft (raw, json) Hash identifier: GARlxHYjqg3zAhInsSe7zt89Pc68F7qB3VFHJgToAZQ= Subject key identifier: A4:B6:E7:BB:B1:94:D9:F7:25:2C:81:24:27:CF:B0:BD:5B:DB:8B:D6 Authority key identifier: CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8 Certificate issuer: /CN=CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8 Certificate serial: 4224D329E817F52D59804E21D968C445C8AA0A7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft Manifest number: 0120 Signing time: Mon 15 Sep 2025 06:03:29 +0000 Manifest this update: Mon 15 Sep 2025 05:58:29 +0000 Manifest next update: Sat 20 Sep 2025 11:10:29 +0000 Files and hashes: 1: 3136382e3232382e3131312e302f32342d3234203d3e2033383136.roa (hash: Oxf9MXdLHeoqweloHQWm248U/pLu1wfclNKJTgiZhoI=) 2: CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl (hash: Jl1M4XJ3tBbzm6rMaRc4jSGMp9J62Kao0eMgTDXTSVQ=) 3: 3136382e3232382e3130382e302f32322d3234203d3e203134303830.roa (hash: bqd121Wxroa7r8lLYM2nZjqFUhGeowChkpmVzBwnZz4=) 4: 323830313a3164383a3a2f33362d3336203d3e203134303830.roa (hash: kTsqiTci25ScwNDqEcNIcuEq8KwkM/5PXZ6KQoWzavM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 21:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:24:d3:29:e8:17:f5:2d:59:80:4e:21:d9:68:c4:45:c8:aa:0a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8 Validity Not Before: Sep 15 05:58:29 2025 GMT Not After : Sep 20 11:10:29 2025 GMT Subject: CN=A4B6E7BBB194D9F7252C812427CFB0BD5BDB8BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:34:d0:b1:e1:be:d6:1d:34:9d:c6:5d:67: be:f8:ba:c7:53:43:86:51:8c:5c:e2:d5:69:1b:e6: dc:39:41:19:26:b6:7d:5f:da:d8:ec:ef:4a:a7:4f: d1:48:0f:e7:2e:3e:33:fa:9d:88:17:cd:f7:b6:b8: 77:7f:53:f6:38:1b:35:b9:70:7d:93:f2:33:ec:7b: ad:25:5a:92:fe:17:28:bf:39:fd:e2:4b:3f:bb:3b: e6:1d:6d:d8:49:4e:1d:2e:48:b7:23:a1:6b:c0:05: 20:99:12:56:06:62:b9:aa:67:b2:4b:16:b3:e8:3e: 44:b1:ea:cc:0c:d5:03:5d:aa:4c:28:c6:ae:76:6e: 05:1e:fb:93:13:21:bd:fc:9c:be:ef:dc:9c:fa:65: 9a:68:ad:0d:c8:5a:b6:75:90:1b:a0:df:1d:c3:d3: 42:8e:32:f9:58:04:43:bd:9c:3f:1a:e8:65:6a:e7: 13:5d:0d:31:08:ea:70:5f:80:38:f8:76:9e:57:d3: c4:71:e9:c6:a3:de:88:58:ef:01:fb:d2:ac:b8:e2: da:46:19:8f:44:62:42:79:e2:9b:83:de:cf:f5:7e: b4:8e:d3:15:fe:b4:a5:55:8e:8c:b1:78:a4:1d:3a: e9:a1:01:50:e3:77:a9:3b:7a:6d:31:4c:ec:aa:4e: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B6:E7:BB:B1:94:D9:F7:25:2C:81:24:27:CF:B0:BD:5B:DB:8B:D6 X509v3 Authority Key Identifier: keyid:CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:97:c5:4b:30:0b:71:c9:a8:ea:1d:d0:a4:ee:e0:b2:ea: 24:1f:cf:8c:28:a1:ec:4a:2d:37:bc:d3:11:59:e7:bd:0b:b4: be:1d:67:a6:4a:99:aa:39:2b:ec:67:95:f0:23:b7:65:75:6b: 8e:9e:cb:14:bf:a5:4f:50:ed:5d:9f:f3:1c:c2:25:30:cc:55: ec:0b:22:d3:c2:1b:98:15:83:dd:73:d5:30:10:bb:2d:20:24: e1:7a:23:cb:e5:72:aa:58:9b:26:79:05:7e:37:9e:1e:a7:75: 8f:42:8b:81:13:e4:26:ad:e1:80:3d:05:ec:92:dd:b8:25:9a: 82:3f:18:02:a9:31:fd:f3:e0:80:24:ad:53:7e:aa:46:70:6a: 22:4b:36:7f:90:ca:d7:9a:24:7f:70:89:3c:a1:66:73:6c:34: 31:ca:9f:05:27:4c:c3:36:b3:1e:14:6a:cd:00:b8:bf:f7:85: 59:94:01:55:62:9b:43:54:27:35:c9:9f:a3:41:47:8b:b9:50: 78:44:56:ab:7d:b2:b7:7f:9b:54:f2:6b:35:7c:33:22:d1:cf: 18:87:e8:ed:21:e8:46:b8:ca:d3:91:76:39:11:cb:94:cf:99: 72:1b:0a:ef:3e:b0:a3:da:7c:40:49:df:08:eb:b8:77:52:42: a8:5c:57:d0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQiTTKegX9S1ZgE4h2WjERciqCnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFQzk1QzA0MkY3MThDRkRFRkQzOEJDODVDNEFGQkEz RTdBOUFGODAeFw0yNTA5MTUwNTU4MjlaFw0yNTA5MjAxMTEwMjlaMDMxMTAvBgNV BAMTKEE0QjZFN0JCQjE5NEQ5RjcyNTJDODEyNDI3Q0ZCMEJENUJEQjhCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComDTQseG+1h00ncZdZ774usdT Q4ZRjFzi1Wkb5tw5QRkmtn1f2tjs70qnT9FID+cuPjP6nYgXzfe2uHd/U/Y4GzW5 cH2T8jPse60lWpL+Fyi/Of3iSz+7O+YdbdhJTh0uSLcjoWvABSCZElYGYrmqZ7JL FrPoPkSx6swM1QNdqkwoxq52bgUe+5MTIb38nL7v3Jz6ZZporQ3IWrZ1kBug3x3D 00KOMvlYBEO9nD8a6GVq5xNdDTEI6nBfgDj4dp5X08Rx6caj3ohY7wH70qy44tpG GY9EYkJ54puD3s/1frSO0xX+tKVVjoyxeKQdOumhAVDjd6k7em0xTOyqTqgzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpLbnu7GU2fclLIEkJ8+wvVvbi9YwHwYDVR0j BBgwFoAUz+yVwEL3GM/e/Ti8hcSvuj56mvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMTQxRUI2MUFBOTc3ODk4RjU2MzgxMjgwNTY1MTAyNTdB MUVCNEYxODA0MkUzNTNDRTJFRjg4NkU4RDIwOTgzLzAvQ0ZFQzk1QzA0MkY3MThD RkRFRkQzOEJDODVDNEFGQkEzRTdBOUFGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkVDOTVDMDQyRjcxOENGREVG RDM4QkM4NUM0QUZCQTNFN0E5QUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjE0MUVCNjFBQTk3Nzg5OEY1NjM4MTI4MDU2NTEwMjU3QTFFQjRGMTgw NDJFMzUzQ0UyRUY4ODZFOEQyMDk4My8wL0NGRUM5NUMwNDJGNzE4Q0ZERUZEMzhC Qzg1QzRBRkJBM0U3QTlBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTB5fFSzALccmo6h3QpO7gsuok H8+MKKHsSi03vNMRWee9C7S+HWemSpmqOSvsZ5XwI7dldWuOnssUv6VPUO1dn/Mc wiUwzFXsCyLTwhuYFYPdc9UwELstICTheiPL5XKqWJsmeQV+N54ep3WPQouBE+Qm reGAPQXskt24JZqCPxgCqTH98+CAJK1TfqpGcGoiSzZ/kMrXmiR/cIk8oWZzbDQx yp8FJ0zDNrMeFGrNALi/94VZlAFVYptDVCc1yZ+jQUeLuVB4RFarfbK3f5tU8ms1 fDMi0c8Yh+jtIehGuMrTkXY5EcuUz5lyGwrvPrCj2nxASd8I67h3UkKoXFfQ -----END CERTIFICATE-----Generated at Tue Sep 16 02:47:20 2025 by rpki-client