$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft File: 1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft (raw, json) Hash identifier: 5r8mBtRHffv+q6SaAsqqDBqWMjDNlp07+AE+nX9s9Uc= Subject key identifier: 45:5F:3B:FE:EF:F8:22:D9:A6:64:48:19:AA:3B:A2:AD:8D:82:D6:FF Authority key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF Certificate issuer: /CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Certificate serial: 7D0D03889A8B2900F4056021B36FAC0813B5A6A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft Manifest number: 013C Signing time: Wed 05 Nov 2025 21:07:22 +0000 Manifest this update: Wed 05 Nov 2025 21:02:22 +0000 Manifest next update: Mon 10 Nov 2025 17:13:22 +0000 Files and hashes: 1: 1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl (hash: 5qbC/A4Fh+9G+fmhMxEY0ptb3NRavnyL70B8G7ECiPk=) 2: 323830313a3163323a3a2f34342d3434203d3e203138373437.roa (hash: 0JrBOL6u2dm+Cm9kZjS4jiaUToSdq6cuOgarPFFknJ8=) 3: 323830313a3163323a3a2f34342d3434203d3e203133343839.roa (hash: qcrgEML1r6HNgZMtsjFoYssgiItMtjuICQrIZZ2mbXc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 10 Nov 2025 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0d:03:88:9a:8b:29:00:f4:05:60:21:b3:6f:ac:08:13:b5:a6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Validity Not Before: Nov 5 21:02:22 2025 GMT Not After : Nov 10 17:13:22 2025 GMT Subject: CN=455F3BFEEFF822D9A6644819AA3BA2AD8D82D6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:92:c3:01:40:35:a3:b9:94:a9:ac:bb:80: 6b:3b:8d:d7:06:ec:b9:3a:25:77:d1:05:cd:9f:a0: be:f1:20:90:e2:6d:d3:bb:b1:17:d9:7d:5a:3a:c6: 75:5d:57:ea:74:66:bc:ca:19:53:9e:bd:ea:ff:ba: 05:60:94:6f:80:46:1d:ac:45:b6:30:70:1a:4a:58: ab:24:22:b7:78:f1:7d:4b:06:3b:50:0b:2a:54:c8: e2:c6:dd:9c:6f:d3:02:47:52:09:75:ac:f1:27:ee: f3:d4:e1:b7:d1:f8:d9:31:10:7d:9c:3f:16:42:23: ab:10:50:f5:6d:a8:74:0e:99:6b:73:98:2f:1a:f9: 04:c8:90:ef:df:bc:0c:ff:45:27:a6:68:65:7c:b2: 11:2a:59:3a:96:d7:99:b2:48:b1:db:bb:6d:d0:d1: 26:69:5a:2c:ef:8a:03:3b:d9:e6:19:1f:13:39:e8: 8e:f0:4e:08:79:51:88:ca:98:2c:2c:cc:e4:34:e8: 8a:54:45:41:ed:45:64:82:d4:e4:53:ae:69:39:4c: ba:d0:b9:8b:ca:dc:25:71:c0:0f:fb:91:63:1a:86: c9:4b:e3:e7:2a:ec:9b:43:75:2c:d6:f4:58:95:fa: 20:c9:32:58:6c:81:73:a9:98:ed:cd:c9:47:68:0b: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5F:3B:FE:EF:F8:22:D9:A6:64:48:19:AA:3B:A2:AD:8D:82:D6:FF X509v3 Authority Key Identifier: keyid:1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cf:b8:a2:0b:b3:64:89:e9:f8:0d:2f:e0:9e:bf:d2:2f:33: d1:04:32:13:4d:07:9b:bc:11:8c:22:4d:dc:56:d6:a6:15:05: 9f:b0:f6:73:74:b0:cf:4b:3f:bc:03:57:7c:c6:26:00:51:d5: db:81:8d:72:a3:62:4e:64:3e:e9:ef:75:6c:dd:b8:aa:6f:d0: 7c:6c:0a:90:96:3b:bd:28:3b:8c:c9:f8:48:ec:2f:34:ad:8d: a0:39:88:ac:2d:e8:d5:2c:98:63:7a:73:a0:5f:8c:cf:df:d8: 88:d4:01:ae:f0:4b:20:22:ed:bc:5c:18:18:53:a7:17:bc:fa: d7:dc:1b:d8:ab:1d:ca:13:a7:54:4d:c0:d8:ca:39:b3:ef:01: af:1d:d3:d9:7d:fc:4f:ba:55:a3:b9:ac:8c:9d:f9:67:b2:94: 1e:bf:0a:7d:d5:59:5f:39:92:6a:b4:b2:d9:96:34:d6:08:26: e3:32:2f:23:22:ce:31:d1:56:85:a5:5f:50:dd:57:63:70:53: 70:04:09:12:7f:48:3c:93:c2:14:f1:4c:8e:7f:84:22:5c:55: b7:e6:ca:0f:b8:dd:a6:f2:54:1b:6d:47:a6:c0:1d:e0:a8:f5: aa:41:88:03:b2:0b:8e:fd:e4:7e:d6:b4:15:79:38:4e:6c:a2: b2:db:84:c5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfQ0DiJqLKQD0BWAhs2+sCBO1pqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCNkVGM0NDNTQyMUFDM0FGNzFDQ0RDREY0M0JCMDU1 NkU2QkVGRjAeFw0yNTExMDUyMTAyMjJaFw0yNTExMTAxNzEzMjJaMDMxMTAvBgNV BAMTKDQ1NUYzQkZFRUZGODIyRDlBNjY0NDgxOUFBM0JBMkFEOEQ4MkQ2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ppLDAUA1o7mUqay7gGs7jdcG 7Lk6JXfRBc2foL7xIJDibdO7sRfZfVo6xnVdV+p0ZrzKGVOever/ugVglG+ARh2s RbYwcBpKWKskIrd48X1LBjtQCypUyOLG3Zxv0wJHUgl1rPEn7vPU4bfR+NkxEH2c PxZCI6sQUPVtqHQOmWtzmC8a+QTIkO/fvAz/RSemaGV8shEqWTqW15mySLHbu23Q 0SZpWizvigM72eYZHxM56I7wTgh5UYjKmCwszOQ06IpURUHtRWSC1ORTrmk5TLrQ uYvK3CVxwA/7kWMahslL4+cq7JtDdSzW9FiV+iDJMlhsgXOpmO3NyUdoCzE5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURV87/u/4ItmmZEgZqjuirY2C1v8wHwYDVR0j BBgwFoAUHrbvPMVCGsOvcczc30O7BVbmvv8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DREMxMEZGRTI5MEMyNjcwRkIzM0Y4MTI3N0Y3NUEzRTg1 NkM5RTJBNTA0MjFCNEExQjZGQ0RFQjNEM0IwMTQyLzAvMUVCNkVGM0NDNTQyMUFD M0FGNzFDQ0RDREY0M0JCMDU1NkU2QkVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRUI2RUYzQ0M1NDIxQUMzQUY3 MUNDRENERjQzQkIwNTU2RTZCRUZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0RDMTBGRkUyOTBDMjY3MEZCMzNGODEyNzdGNzVBM0U4NTZDOUUyQTUw NDIxQjRBMUI2RkNERUIzRDNCMDE0Mi8wLzFFQjZFRjNDQzU0MjFBQzNBRjcxQ0NE Q0RGNDNCQjA1NTZFNkJFRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvz7iiC7Nkien4DS/gnr/SLzPR BDITTQebvBGMIk3cVtamFQWfsPZzdLDPSz+8A1d8xiYAUdXbgY1yo2JOZD7p73Vs 3biqb9B8bAqQlju9KDuMyfhI7C80rY2gOYisLejVLJhjenOgX4zP39iI1AGu8Esg Iu28XBgYU6cXvPrX3BvYqx3KE6dUTcDYyjmz7wGvHdPZffxPulWjuayMnflnspQe vwp91VlfOZJqtLLZljTWCCbjMi8jIs4x0VaFpV9Q3VdjcFNwBAkSf0g8k8IU8UyO f4QiXFW35soPuN2m8lQbbUemwB3gqPWqQYgDsguO/eR+1rQVeThObKKy24TF -----END CERTIFICATE-----Generated at Fri Nov 7 18:47:43 2025 by rpki-client