$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft File: 0CBCF0206A415643408AB138E12C0382581355FF.mft (raw, json) Hash identifier: 9Lla8Y/oYR2ZZ4cE4T+fGkancj79Ac26VPoHj81qv5Y= Subject key identifier: 88:5C:00:19:07:C0:0E:9B:17:37:88:64:6A:4A:A4:DA:5E:31:C4:FD Authority key identifier: 0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF Certificate issuer: /CN=0CBCF0206A415643408AB138E12C0382581355FF Certificate serial: 4FAEF4A54E137D697F1CD9DB07E9B216598BB0F0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft Manifest number: 0138 Signing time: Wed 05 Nov 2025 14:33:42 +0000 Manifest this update: Wed 05 Nov 2025 14:28:42 +0000 Manifest next update: Tue 11 Nov 2025 04:48:42 +0000 Files and hashes: 1: 0CBCF0206A415643408AB138E12C0382581355FF.crl (hash: yzz/d7f8xK1dUGmJQQUkI1IDNX4GW1BQHgO1Pzcvgiw=) 2: 323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa (hash: YWYdBtnGbdKiGo1gA5L4tqkANKTIOIDqpuMEH0Ug9mk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ae:f4:a5:4e:13:7d:69:7f:1c:d9:db:07:e9:b2:16:59:8b:b0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CBCF0206A415643408AB138E12C0382581355FF Validity Not Before: Nov 5 14:28:42 2025 GMT Not After : Nov 11 04:48:42 2025 GMT Subject: CN=885C001907C00E9B173788646A4AA4DA5E31C4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:3e:7d:a8:33:83:0d:4d:f8:47:e4:41:ed: 36:91:59:cf:7b:0e:0c:e0:24:60:2f:9c:1c:ec:58: 4f:2f:d2:4d:50:51:31:16:af:8c:24:8a:e0:72:35: 70:e1:c7:67:71:e1:76:9c:6c:8d:69:3a:64:71:c4: 0d:c1:ed:5f:ba:94:0a:80:4c:97:42:6f:63:33:63: 1a:fd:4d:21:29:77:c3:40:4f:49:4e:fe:b8:9a:04: 36:39:0c:7b:7b:6c:ce:9a:04:15:34:b3:9a:88:f6: 5d:9a:6c:57:e7:63:35:0c:76:10:7f:5c:3c:34:f4: 60:fa:76:33:74:e5:6b:2e:ee:7d:99:f5:00:5f:6a: fd:68:6b:2b:95:85:c6:69:c7:de:cc:d0:ae:f6:8b: 89:05:02:e2:ee:ea:42:9d:fa:e7:2a:5c:0b:b0:a2: 9f:e3:33:84:33:c4:5b:95:61:f6:d5:33:dc:3a:b8: a7:40:f4:d9:08:f8:38:45:07:02:4e:92:d5:06:31: e2:55:a3:64:83:44:16:66:bb:cc:63:87:c8:73:70: bb:15:57:c6:bb:a3:25:52:8a:af:0a:1f:c4:f7:6c: ea:5d:8e:50:1c:ab:7b:16:56:31:d3:96:96:29:8c: cb:b5:14:04:4f:1f:d7:be:e6:b1:84:c5:f2:ea:c0: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5C:00:19:07:C0:0E:9B:17:37:88:64:6A:4A:A4:DA:5E:31:C4:FD X509v3 Authority Key Identifier: keyid:0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c6:66:80:ab:0e:39:19:52:95:17:cb:9c:e8:94:2f:3b:52: 33:59:3e:ae:74:3d:1b:32:42:b5:24:cb:9f:86:ad:91:75:65: 54:5f:f5:8f:ad:6d:0a:27:99:3f:d8:3c:d5:a8:91:16:46:40: 5c:19:0e:78:43:e6:9b:c6:87:d5:d6:94:ea:bf:b1:bb:25:e0: d1:ce:1d:c1:5d:9d:90:b1:78:b9:6c:5c:ba:bc:ad:64:64:50: 0b:9c:a2:4e:c9:81:84:25:d5:1f:54:a0:21:d9:7a:98:8f:98: 3c:6c:83:59:6f:d6:8c:46:7e:57:56:ef:57:ca:2a:5b:41:75: 7f:bd:0e:22:5a:98:48:6e:52:fe:99:7d:93:83:b8:e7:30:fa: fc:fe:51:10:7f:51:a4:0e:dc:8a:d4:14:19:46:c8:62:f2:38: 66:61:b8:ba:98:98:c1:c7:57:27:32:a5:06:e9:78:39:de:8d: fb:cb:ea:9b:e3:f2:4d:87:00:56:f1:86:52:74:e7:8c:96:7e: fa:d8:8a:e4:c4:33:34:af:07:ea:a1:4e:5c:81:ab:92:03:39: 72:cc:ff:ab:80:e8:47:62:1e:90:dc:21:76:fe:f0:06:03:f9: bb:71:19:cd:cc:95:fb:39:42:73:5f:8b:04:e6:68:fd:20:07: 9b:dc:26:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUT670pU4TfWl/HNnbB+myFlmLsPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENCQ0YwMjA2QTQxNTY0MzQwOEFCMTM4RTEyQzAzODI1 ODEzNTVGRjAeFw0yNTExMDUxNDI4NDJaFw0yNTExMTEwNDQ4NDJaMDMxMTAvBgNV BAMTKDg4NUMwMDE5MDdDMDBFOUIxNzM3ODg2NDZBNEFBNERBNUUzMUM0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSD59qDODDU34R+RB7TaRWc97 DgzgJGAvnBzsWE8v0k1QUTEWr4wkiuByNXDhx2dx4XacbI1pOmRxxA3B7V+6lAqA TJdCb2MzYxr9TSEpd8NAT0lO/riaBDY5DHt7bM6aBBU0s5qI9l2abFfnYzUMdhB/ XDw09GD6djN05Wsu7n2Z9QBfav1oayuVhcZpx97M0K72i4kFAuLu6kKd+ucqXAuw op/jM4QzxFuVYfbVM9w6uKdA9NkI+DhFBwJOktUGMeJVo2SDRBZmu8xjh8hzcLsV V8a7oyVSiq8KH8T3bOpdjlAcq3sWVjHTlpYpjMu1FARPH9e+5rGExfLqwFRBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiFwAGQfADpsXN4hkakqk2l4xxP0wHwYDVR0j BBgwFoAUDLzwIGpBVkNAirE44SwDglgTVf8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMzREMUI3ODYzNzYxNzU3QkZGQ0MyNTcyQTBCNzczNEI4 MzlDMUZFQjcyMDA3MDU3M0QzMUFDRDk3MjI1QTY1LzAvMENCQ0YwMjA2QTQxNTY0 MzQwOEFCMTM4RTEyQzAzODI1ODEzNTVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0JDRjAyMDZBNDE1NjQzNDA4 QUIxMzhFMTJDMDM4MjU4MTM1NUZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTM0RDFCNzg2Mzc2MTc1N0JGRkNDMjU3MkEwQjc3MzRCODM5QzFGRUI3 MjAwNzA1NzNEMzFBQ0Q5NzIyNUE2NS8wLzBDQkNGMDIwNkE0MTU2NDM0MDhBQjEz OEUxMkMwMzgyNTgxMzU1RkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBixmaAqw45GVKVF8uc6JQvO1Iz WT6udD0bMkK1JMufhq2RdWVUX/WPrW0KJ5k/2DzVqJEWRkBcGQ54Q+abxofV1pTq v7G7JeDRzh3BXZ2QsXi5bFy6vK1kZFALnKJOyYGEJdUfVKAh2XqYj5g8bINZb9aM Rn5XVu9XyipbQXV/vQ4iWphIblL+mX2Tg7jnMPr8/lEQf1GkDtyK1BQZRshi8jhm Ybi6mJjBx1cnMqUG6Xg53o37y+qb4/JNhwBW8YZSdOeMln762IrkxDM0rwfqoU5c gauSAzlyzP+rgOhHYh6Q3CF2/vAGA/m7cRnNzJX7OUJzX4sE5mj9IAeb3CaH -----END CERTIFICATE-----Generated at Wed Nov 5 22:19:29 2025 by rpki-client