$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft File: C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft (raw, json) Hash identifier: 1L20JyZm2s2Ifun91FtojLjmK+TFbl9BLdt/ZmJWt3g= Subject key identifier: 37:37:B7:AA:29:E4:C0:5E:57:F3:DF:C9:66:B7:2A:A4:F5:56:F7:1D Authority key identifier: C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35 Certificate issuer: /CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35 Certificate serial: 2D40976A9BAB4788E1722D221C4ECFBB49796C5B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 20:39:07 +0000 Manifest this update: Tue 04 Nov 2025 20:34:07 +0000 Manifest next update: Mon 10 Nov 2025 18:56:07 +0000 Files and hashes: 1: 3139302e3130332e3134342e302f32322d3234203d3e20323730303630.roa (hash: z8PWDQjgXLgHvlgmt5clddGGBCsaQqa/XrM1PWBGK5A=) 2: C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl (hash: Io2C4tPHgszNRy+QgYjf72MSlIfEMGmrrLrMN/54CPE=) 3: 3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa (hash: v2rEv3FgDufDMfiddhOq/5IMaazVdU1+nzVGmOOrvh4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:40:97:6a:9b:ab:47:88:e1:72:2d:22:1c:4e:cf:bb:49:79:6c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35 Validity Not Before: Nov 4 20:34:07 2025 GMT Not After : Nov 10 18:56:07 2025 GMT Subject: CN=3737B7AA29E4C05E57F3DFC966B72AA4F556F71D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:36:fc:a7:0c:05:ea:c4:1d:f0:d4:ed:87: 27:09:61:14:72:6d:b5:c9:76:c4:db:d8:4b:5c:a7: 5d:99:be:e7:b0:cb:2b:5b:cd:70:60:35:c4:14:5f: bf:1a:7b:5d:99:f4:75:41:0a:03:93:fb:f3:4c:bb: ee:4a:4f:c5:c0:70:2f:c2:e8:a3:76:18:b7:13:46: 6f:e5:ba:b3:34:23:0e:ba:4b:f7:e7:67:07:af:49: 05:e3:36:0d:d4:2e:43:3a:8d:42:7f:db:64:8c:ae: d0:7e:d4:e1:25:ef:3f:70:bc:10:d3:b5:d1:bb:a9: 58:da:9a:64:63:0b:88:bf:aa:65:5e:a7:af:ff:22: b7:13:9d:57:fe:e4:fe:c8:01:0f:07:f1:7b:31:7a: f7:0e:65:99:05:8b:1b:81:bc:3a:4b:43:d4:87:0e: bc:bb:22:f2:a7:72:ef:00:82:5c:da:ba:e4:87:1c: 0e:d8:26:37:64:84:af:ee:b1:a7:d8:c0:5f:9c:2e: d3:0f:cf:9e:13:b6:03:8a:76:de:62:f9:14:e3:fc: 38:b2:b8:01:a6:c1:68:cc:6f:b6:61:fe:5f:3b:dd: 8b:7f:aa:18:5d:53:71:1f:d5:33:04:3e:5e:0a:ed: da:36:9d:4d:20:2e:86:16:36:ec:de:32:a0:27:5c: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:37:B7:AA:29:E4:C0:5E:57:F3:DF:C9:66:B7:2A:A4:F5:56:F7:1D X509v3 Authority Key Identifier: keyid:C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d7:69:e3:65:72:9c:ea:cd:ba:e9:21:78:95:34:15:a6:92: 61:de:66:3c:c5:aa:27:e6:63:d1:45:2e:ea:e5:1b:06:e7:fb: 75:0e:d1:9c:17:a5:55:24:a0:31:3b:bb:6e:f3:30:df:18:d0: 8f:8a:7e:1f:3c:6e:d3:ff:26:01:2a:af:49:4a:89:ff:7d:ff: ae:39:a9:e4:21:a9:5a:5b:31:0d:76:f9:11:90:c7:2c:f5:1f: 9f:fe:f6:99:4b:bd:9c:eb:33:9c:8b:d9:06:44:fa:7d:81:aa: 73:3a:40:87:f4:dd:ac:23:2d:6e:4d:38:d5:38:b7:d2:f9:44: e1:29:2e:6b:bb:2b:86:4c:c7:17:af:c0:5f:58:f2:a5:6c:16: 46:8e:4b:fd:27:72:b9:fc:b8:e1:0c:42:93:99:3e:99:d8:af: 55:e1:f4:d6:4c:02:a0:93:b0:42:e5:06:9e:cf:2e:a5:ca:89: 1a:ab:33:28:f4:3b:9b:fb:86:69:15:75:6b:a3:91:7e:60:55: 50:1a:0f:9d:33:2d:0f:dc:c0:89:a0:d7:9e:21:31:ec:be:ab: a9:20:35:25:b5:9f:7d:af:09:4f:2c:70:98:16:b0:62:b2:4d: a7:40:3b:09:f2:dd:85:fc:4e:fa:d8:dc:ee:8d:ff:fd:1e:49: cc:52:a3:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULUCXapurR4jhci0iHE7Pu0l5bFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwOEM0NzM4RDA0QjVENTNGN0JDOTA4N0RERUJCNzc3 MTE5Q0EzNTAeFw0yNTExMDQyMDM0MDdaFw0yNTExMTAxODU2MDdaMDMxMTAvBgNV BAMTKDM3MzdCN0FBMjlFNEMwNUU1N0YzREZDOTY2QjcyQUE0RjU1NkY3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7Db8pwwF6sQd8NTthycJYRRy bbXJdsTb2Etcp12ZvuewyytbzXBgNcQUX78ae12Z9HVBCgOT+/NMu+5KT8XAcC/C 6KN2GLcTRm/lurM0Iw66S/fnZwevSQXjNg3ULkM6jUJ/22SMrtB+1OEl7z9wvBDT tdG7qVjammRjC4i/qmVep6//IrcTnVf+5P7IAQ8H8XsxevcOZZkFixuBvDpLQ9SH Dry7IvKncu8AglzauuSHHA7YJjdkhK/usafYwF+cLtMPz54TtgOKdt5i+RTj/Diy uAGmwWjMb7Zh/l873Yt/qhhdU3Ef1TMEPl4K7do2nU0gLoYWNuzeMqAnXFDfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNze3qinkwF5X89/JZrcqpPVW9x0wHwYDVR0j BBgwFoAUxwjEc40EtdU/e8kIfd67d3EZyjUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQjlDQjc3OUI1RjYyNTlDOTBEOUJBMjZFRjkwNUEwOEI0 OUYxOEQxRjVFRDEzMEVCMzBDMDIwQzM2RTQ4QzkwLzAvQzcwOEM0NzM4RDA0QjVE NTNGN0JDOTA4N0RERUJCNzc3MTE5Q0EzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzA4QzQ3MzhEMDRCNUQ1M0Y3 QkM5MDg3RERFQkI3NzcxMTlDQTM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEI5Q0I3NzlCNUY2MjU5QzkwRDlCQTI2RUY5MDVBMDhCNDlGMThEMUY1 RUQxMzBFQjMwQzAyMEMzNkU0OEM5MC8wL0M3MDhDNDczOEQwNEI1RDUzRjdCQzkw ODdEREVCQjc3NzExOUNBMzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo12njZXKc6s266SF4lTQVppJh 3mY8xaon5mPRRS7q5RsG5/t1DtGcF6VVJKAxO7tu8zDfGNCPin4fPG7T/yYBKq9J Son/ff+uOankIalaWzENdvkRkMcs9R+f/vaZS72c6zOci9kGRPp9gapzOkCH9N2s Iy1uTTjVOLfS+UThKS5ruyuGTMcXr8BfWPKlbBZGjkv9J3K5/LjhDEKTmT6Z2K9V 4fTWTAKgk7BC5Qaezy6lyokaqzMo9Dub+4ZpFXVro5F+YFVQGg+dMy0P3MCJoNee ITHsvqupIDUltZ99rwlPLHCYFrBisk2nQDsJ8t2F/E762Nzujf/9HknMUqPJ -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:25 2025 by rpki-client