$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft File: B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft (raw, json) Hash identifier: AW1s6zqoPQ6Zpcph8nKutd3xSRqDJh+jUSQoDFNJFh4= Subject key identifier: CE:54:08:51:2C:1C:E0:5F:20:F8:77:3C:76:8C:AD:0F:32:57:F4:D3 Authority key identifier: B7:D7:A4:0F:B3:E2:DE:95:7B:3C:A0:5B:5B:E4:97:3F:FA:10:6D:AE Certificate issuer: /CN=B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE Certificate serial: 2C1BEA762A0964680AA0257D7BCDF8B7DFC54686 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft Manifest number: 0130 Signing time: Fri 31 Oct 2025 09:58:44 +0000 Manifest this update: Fri 31 Oct 2025 09:53:44 +0000 Manifest next update: Wed 05 Nov 2025 05:34:44 +0000 Files and hashes: 1: 3139302e39392e36342e302f32312d3234203d3e203532323335.roa (hash: AF4PWzVTVcDVav2uZi1dfaQQJ1R0UxjVwgKzqWoDxX8=) 2: B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.crl (hash: hE3wxxZnKMnDM9Z/aV1uMybpWLVObLmpN7dGf96ZoXI=) 3: 3139302e39392e37312e302f32342d3234203d3e203532323335.roa (hash: 1cmr6jOcUlBnocBNI7aUpQ9YUI5j6e6UIrhSe00IwcE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.crl rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1b:ea:76:2a:09:64:68:0a:a0:25:7d:7b:cd:f8:b7:df:c5:46:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE Validity Not Before: Oct 31 09:53:44 2025 GMT Not After : Nov 5 05:34:44 2025 GMT Subject: CN=CE5408512C1CE05F20F8773C768CAD0F3257F4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:33:9c:6b:de:99:93:4c:4e:37:18:01:47: 6a:c2:b7:d3:d7:76:c1:80:56:74:3e:38:35:05:41: f9:32:ea:80:0a:ed:1e:88:98:c3:aa:08:da:7a:d1: 7c:c7:45:b6:fd:50:53:e2:9b:fb:11:e7:72:1b:f5: ad:ab:ee:b4:4f:05:06:22:38:91:33:0a:f0:57:79: 72:30:fb:43:0c:8f:4c:95:bd:fe:55:d2:a6:f7:07: d8:60:cb:d5:4c:50:9a:26:6a:bd:54:ad:eb:cf:08: 3b:47:ef:90:56:dc:22:b9:b7:70:8d:78:e5:34:0f: e7:2d:1f:2f:67:64:b9:be:ba:14:b7:e8:c8:e5:6b: 14:ee:f5:86:01:ac:c3:5b:d5:4b:8b:74:c7:26:17: 9c:70:fb:18:22:03:07:90:d3:3c:06:f4:55:97:cf: e1:c3:d7:af:4c:1c:08:39:f4:be:74:6f:81:77:d4: c5:0e:26:db:25:80:aa:14:c7:70:08:a3:f5:97:03: 92:fb:6f:79:03:7d:5c:0b:c6:d1:19:2a:33:06:96: 9a:f2:a4:68:5e:dd:2c:fd:13:e5:31:a3:ad:d8:72: c1:fc:8f:3c:82:ee:4d:6a:2b:be:a8:a8:aa:f7:db: 9a:ee:45:6c:62:69:23:ec:42:6a:b0:fd:7f:14:ba: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:54:08:51:2C:1C:E0:5F:20:F8:77:3C:76:8C:AD:0F:32:57:F4:D3 X509v3 Authority Key Identifier: keyid:B7:D7:A4:0F:B3:E2:DE:95:7B:3C:A0:5B:5B:E4:97:3F:FA:10:6D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c2:86:32:78:d5:9e:80:03:92:31:e5:6c:39:62:61:66:2f: 98:50:2f:e2:bd:95:69:8c:06:84:b4:09:ee:a0:b8:9b:91:73: fe:99:7a:1c:04:6e:34:23:4d:a6:1e:f8:63:f5:d0:e0:b2:b3: 88:e9:be:0b:eb:61:d7:99:6c:3d:82:6e:77:c7:25:82:ce:2a: 26:2d:b0:3d:7b:fb:50:f3:c0:db:e5:68:f0:90:aa:71:eb:1d: 04:f9:bb:2d:b9:72:78:65:c0:bf:20:88:36:ce:3c:b3:1d:01: 54:16:74:70:ab:c6:9a:21:1b:6b:3e:08:7c:19:b8:1a:65:2e: 62:92:dd:0b:d5:f9:a1:a1:85:0d:5c:62:ee:ca:a5:bb:9b:26: 71:67:87:41:8b:1b:f3:9a:70:b3:9c:8a:0a:75:7e:28:56:41: 00:df:48:fe:f6:c1:8e:5e:17:45:d4:b6:0c:03:8f:fc:25:8e: 3e:98:4b:8e:4a:93:b7:c3:96:2b:b0:8b:e3:ce:4b:07:40:54: f4:71:21:73:04:0f:75:5c:ae:1d:88:67:7e:d2:ed:70:f3:53: 95:40:69:21:da:2f:7f:7d:b8:f2:01:9b:41:26:d7:31:2a:5f: b1:5e:a4:4a:e8:da:8f:e0:53:63:b4:44:22:b5:fb:e4:32:72: 26:09:66:1f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULBvqdioJZGgKoCV9e834t9/FRoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEN0E0MEZCM0UyREU5NTdCM0NBMDVCNUJFNDk3M0ZG QTEwNkRBRTAeFw0yNTEwMzEwOTUzNDRaFw0yNTExMDUwNTM0NDRaMDMxMTAvBgNV BAMTKENFNTQwODUxMkMxQ0UwNUYyMEY4NzczQzc2OENBRDBGMzI1N0Y0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMjOca96Zk0xONxgBR2rCt9PX dsGAVnQ+ODUFQfky6oAK7R6ImMOqCNp60XzHRbb9UFPim/sR53Ib9a2r7rRPBQYi OJEzCvBXeXIw+0MMj0yVvf5V0qb3B9hgy9VMUJomar1UrevPCDtH75BW3CK5t3CN eOU0D+ctHy9nZLm+uhS36MjlaxTu9YYBrMNb1UuLdMcmF5xw+xgiAweQ0zwG9FWX z+HD169MHAg59L50b4F31MUOJtslgKoUx3AIo/WXA5L7b3kDfVwLxtEZKjMGlpry pGhe3Sz9E+Uxo63YcsH8jzyC7k1qK76oqKr325ruRWxiaSPsQmqw/X8UunYPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzlQIUSwc4F8g+Hc8doytDzJX9NMwHwYDVR0j BBgwFoAUt9ekD7Pi3pV7PKBbW+SXP/oQba4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DN0U5QjE1NzE0RjgyNUUzMTkwREZBQTdGNjgwMUJBRENB RjIzQ0M4QjIxMkJDNUM2MTI1OTkxNUQzMTIyMzc0LzAvQjdEN0E0MEZCM0UyREU5 NTdCM0NBMDVCNUJFNDk3M0ZGQTEwNkRBRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0Q3QTQwRkIzRTJERTk1N0Iz Q0EwNUI1QkU0OTczRkZBMTA2REFFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzdFOUIxNTcxNEY4MjVFMzE5MERGQUE3RjY4MDFCQURDQUYyM0NDOEIy MTJCQzVDNjEyNTk5MTVEMzEyMjM3NC8wL0I3RDdBNDBGQjNFMkRFOTU3QjNDQTA1 QjVCRTQ5NzNGRkExMDZEQUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXwoYyeNWegAOSMeVsOWJhZi+Y UC/ivZVpjAaEtAnuoLibkXP+mXocBG40I02mHvhj9dDgsrOI6b4L62HXmWw9gm53 xyWCziomLbA9e/tQ88Db5WjwkKpx6x0E+bstuXJ4ZcC/IIg2zjyzHQFUFnRwq8aa IRtrPgh8GbgaZS5ikt0L1fmhoYUNXGLuyqW7myZxZ4dBixvzmnCznIoKdX4oVkEA 30j+9sGOXhdF1LYMA4/8JY4+mEuOSpO3w5YrsIvjzksHQFT0cSFzBA91XK4diGd+ 0u1w81OVQGkh2i9/fbjyAZtBJtcxKl+xXqRK6NqP4FNjtEQitfvkMnImCWYf -----END CERTIFICATE-----Generated at Sat Nov 1 10:29:24 2025 by rpki-client