$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: oF5dAazdLi9LV9kcyHHyAXW4UyttVklxxiEp0C84q6E= Subject key identifier: 24:F2:5D:A7:5B:3F:14:95:9A:38:3B:0B:3D:9B:D2:26:00:CA:64:AA Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 48EC265669B23021DA426C4A998E5E5451FBC70A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 22:11:34 +0000 Manifest this update: Mon 03 Nov 2025 22:06:34 +0000 Manifest next update: Sun 09 Nov 2025 09:52:34 +0000 Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (hash: Vc/Evbtc4Ei/5ZokRHixlnyDU63F54JdlowpFPJdT9k=) 2: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: SL2zBcYxLPxsmXfx8NXj5Xk9ldEmwty+Pp3AUkewhpc=) 3: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: Mu1aiZbTuKob4P/uHzlI5H1bWCj0RfxIyLfLzn5wSP0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ec:26:56:69:b2:30:21:da:42:6c:4a:99:8e:5e:54:51:fb:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Nov 3 22:06:34 2025 GMT Not After : Nov 9 09:52:34 2025 GMT Subject: CN=24F25DA75B3F14959A383B0B3D9BD22600CA64AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:95:54:a9:c5:ef:78:9c:02:0f:2f:c6:a8: 02:2b:36:a7:fb:33:11:d2:12:d5:cf:70:94:66:91: d7:ef:60:42:2d:9b:a6:9d:d9:e7:89:01:fe:89:f3: a9:ad:e5:24:65:30:bb:ea:9e:9f:fc:80:68:90:fd: 42:d8:41:c1:b5:9a:8b:a5:bd:b7:7d:51:4e:1b:70: 4a:dc:df:2d:3b:5a:ba:33:54:01:d9:df:b7:71:fa: e4:e7:62:39:ea:49:7b:54:df:99:a7:75:de:23:71: c2:7a:f7:fd:0e:9a:91:40:0d:af:3d:bf:85:2a:4f: a6:8b:88:c8:b1:61:b8:60:69:72:10:63:dd:7d:04: 4c:25:e0:bf:fd:4c:83:e2:d8:7f:56:d4:94:fa:43: 88:34:08:a9:6c:66:c1:55:84:3f:e9:92:1a:b6:15: f4:ad:c2:1d:1a:8e:07:8b:92:8c:7a:b9:10:39:bc: 45:90:a7:9c:64:df:41:87:b7:e3:d7:01:99:3b:02: a0:cc:23:b9:3d:39:08:88:c9:b6:56:9d:9b:3d:51: 69:0a:1c:51:b1:31:da:9c:40:9a:fa:9a:9f:8d:87: ce:be:36:a2:73:53:96:26:54:b0:fb:7f:7f:36:26: 89:ef:09:52:bb:09:32:3c:46:b3:f8:4f:bc:ff:a8: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:5D:A7:5B:3F:14:95:9A:38:3B:0B:3D:9B:D2:26:00:CA:64:AA X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:49:24:fd:22:8a:8b:3a:17:10:96:cb:ce:93:88:12:cb:27: f3:f1:73:7e:12:6a:49:f6:c1:c2:5d:4f:12:66:ac:fb:5c:8d: 20:70:57:0a:6e:08:b0:3f:e3:67:1d:cd:c9:02:12:c6:48:d0: a3:af:d3:f2:aa:f5:44:8a:52:c3:d9:91:51:20:08:18:c1:c4: 37:fa:a0:c6:b6:02:46:95:ec:d3:4a:b4:67:7b:22:f0:a4:1e: 36:55:de:62:c1:af:00:1f:81:a6:df:6d:a2:3a:e6:8c:a5:0d: bd:1f:22:26:09:22:04:d5:07:53:af:14:3a:1c:42:9d:38:46: d1:04:cb:95:4b:73:25:d9:f0:56:d5:b9:aa:a2:83:40:fd:c8: 07:46:6e:df:24:0a:32:45:fd:aa:43:06:ad:58:3d:8d:3a:03: de:1d:58:16:7a:15:9c:d7:d9:5e:71:b6:b9:4e:2e:77:7c:23: fc:6f:48:94:06:44:45:21:37:e6:04:d5:76:10:08:c7:95:e4: 35:db:d3:57:11:74:d2:15:a7:de:c1:2f:57:0a:63:d0:a7:e6: 0c:1b:d1:70:eb:09:6c:77:66:d9:02:04:f3:41:64:ce:20:2f: cb:49:4d:b3:53:6d:af:72:8b:46:d0:56:68:eb:ea:b3:7d:fd: 1f:5e:c1:ce -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSOwmVmmyMCHaQmxKmY5eVFH7xwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNTExMDMyMjA2MzRaFw0yNTExMDkwOTUyMzRaMDMxMTAvBgNV BAMTKDI0RjI1REE3NUIzRjE0OTU5QTM4M0IwQjNEOUJEMjI2MDBDQTY0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEpVUqcXveJwCDy/GqAIrNqf7 MxHSEtXPcJRmkdfvYEItm6ad2eeJAf6J86mt5SRlMLvqnp/8gGiQ/ULYQcG1moul vbd9UU4bcErc3y07WrozVAHZ37dx+uTnYjnqSXtU35mndd4jccJ69/0OmpFADa89 v4UqT6aLiMixYbhgaXIQY919BEwl4L/9TIPi2H9W1JT6Q4g0CKlsZsFVhD/pkhq2 FfStwh0ajgeLkox6uRA5vEWQp5xk30GHt+PXAZk7AqDMI7k9OQiIybZWnZs9UWkK HFGxMdqcQJr6mp+Nh86+NqJzU5YmVLD7f382JonvCVK7CTI8RrP4T7z/qNp/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJPJdp1s/FJWaODsLPZvSJgDKZKowHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3SST9IoqLOhcQlsvOk4gSyyfz 8XN+EmpJ9sHCXU8SZqz7XI0gcFcKbgiwP+NnHc3JAhLGSNCjr9PyqvVEilLD2ZFR IAgYwcQ3+qDGtgJGlezTSrRneyLwpB42Vd5iwa8AH4Gm322iOuaMpQ29HyImCSIE 1QdTrxQ6HEKdOEbRBMuVS3Ml2fBW1bmqooNA/cgHRm7fJAoyRf2qQwatWD2NOgPe HVgWehWc19lecba5Ti53fCP8b0iUBkRFITfmBNV2EAjHleQ129NXEXTSFafewS9X CmPQp+YMG9Fw6wlsd2bZAgTzQWTOIC/LSU2zU22vcotG0FZo6+qzff0fXsHO -----END CERTIFICATE-----Generated at Wed Nov 5 20:07:08 2025 by rpki-client