$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft File: CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft (raw, json) Hash identifier: hslVTFZkZafpSZQFlRy4jthp+0v/6hMX2pB4akhfnY4= Subject key identifier: 8A:AF:80:27:72:77:6A:07:9C:95:BA:E6:FB:8B:FC:45:5A:3B:00:25 Authority key identifier: CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0 Certificate issuer: /CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0 Certificate serial: 203163F23718A7061A108D3DA27EB9457C3CD170 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 21:46:23 +0000 Manifest this update: Mon 03 Nov 2025 21:41:23 +0000 Manifest next update: Sun 09 Nov 2025 18:23:23 +0000 Files and hashes: 1: 323830333a653034303a3a2f33322d3332203d3e203238313030.roa (hash: Xmcg9na2zPYnEP04KwXb0ZAcJAqdN+FzOt5chec7fqs=) 2: 3133382e39372e3233362e302f32322d3234203d3e203238313030.roa (hash: VVk5r8T92bVE2YlJ5zpM1vr9Jh6mo06jNQHxOf3Mj28=) 3: CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl (hash: eJLbyJ+cxPuSoHK33eHlRFbuXg2lcd1xSQ/wZwy/vt4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:63:f2:37:18:a7:06:1a:10:8d:3d:a2:7e:b9:45:7c:3c:d1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0 Validity Not Before: Nov 3 21:41:23 2025 GMT Not After : Nov 9 18:23:23 2025 GMT Subject: CN=8AAF802772776A079C95BAE6FB8BFC455A3B0025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:63:3e:83:86:a2:3b:a8:b0:7d:d7:36:a9: c4:e9:58:65:8e:65:a6:31:55:bb:43:d0:57:0f:69: 65:bc:f9:29:58:b7:33:a2:90:a1:26:86:f5:2f:d0: 16:96:25:bf:aa:bf:17:da:2d:5d:2a:a0:57:7e:7b: d1:50:26:e5:1b:4f:5a:4e:71:0c:73:de:61:c6:30: 45:19:6b:27:67:65:7f:61:a4:e9:35:3d:f0:ce:c2: f3:cc:6e:84:1a:36:e9:a3:ba:f1:4e:95:d1:00:b1: d3:28:79:11:8d:18:e1:87:31:1b:a1:b1:f6:e8:e9: 89:fc:db:e9:93:0d:8d:c6:d6:93:18:e3:69:68:8a: ad:8a:a4:8d:1c:92:df:4c:fc:5f:fd:06:30:c1:c0: 28:2b:35:36:54:a1:fe:3b:40:03:3f:84:1f:ad:e1: 91:7b:e8:44:3e:39:c8:f1:2a:ee:79:5d:d6:ed:01: e5:8b:ba:3f:c4:ce:3e:bc:12:62:e7:58:5d:ef:ef: 9c:6d:df:5b:7f:7f:b2:b5:50:bb:24:43:e4:10:3b: ea:5c:a8:a5:dd:61:86:09:f1:a6:db:b6:5f:39:da: d3:ad:65:91:54:f6:79:47:10:44:7d:7d:0c:60:53: 90:8c:77:a7:a2:23:ea:ea:88:85:28:85:35:74:cf: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AF:80:27:72:77:6A:07:9C:95:BA:E6:FB:8B:FC:45:5A:3B:00:25 X509v3 Authority Key Identifier: keyid:CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7f:bf:19:de:2b:26:ff:0d:89:e1:94:47:44:9e:3e:67:41: b8:52:c7:e1:e0:78:56:dd:02:0e:2a:51:09:cf:61:27:18:69: 08:8e:d7:00:43:f0:1e:2a:fe:8e:b8:37:e2:be:8e:85:d5:37: e2:2c:a4:b4:bf:2a:d7:a1:91:00:63:2c:7a:1a:aa:5e:9d:55: 62:29:eb:c6:16:8f:a2:12:ed:39:91:c4:e0:03:88:79:36:f3: 92:80:c9:46:ca:9c:5c:6c:9a:e9:c3:c2:7a:4c:0e:2b:29:22: 48:1d:31:0f:bb:f7:f0:56:15:97:72:26:d0:55:72:e1:96:ef: ff:12:63:b9:0b:31:5f:a5:ad:4d:9d:ab:36:67:d5:5f:22:b0: c9:0d:e9:4f:ec:9e:27:bb:cf:58:84:c0:75:0c:7a:8d:eb:a1: be:cc:aa:9f:1b:ac:4a:60:6d:b1:82:96:89:19:8f:f5:6b:54: f7:f7:9f:b2:f0:fb:e3:18:ff:59:85:aa:23:ef:95:90:a2:b9: 74:c1:69:85:ef:32:32:1b:d7:c4:96:85:5b:ae:a0:47:6e:16: 7f:9d:98:1a:ef:f2:d2:43:3e:95:4e:37:41:b1:36:86:a8:69: 51:78:8d:72:df:1a:f3:e2:51:94:f3:fa:b4:36:96:c1:bd:69: b0:70:e6:7d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIDFj8jcYpwYaEI09on65RXw80XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCN0NFQzZCMjUxNTkxMjk1Q0MwNEVBNDI3NDE0MEY2 RkI2NTJFMDAeFw0yNTExMDMyMTQxMjNaFw0yNTExMDkxODIzMjNaMDMxMTAvBgNV BAMTKDhBQUY4MDI3NzI3NzZBMDc5Qzk1QkFFNkZCOEJGQzQ1NUEzQjAwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvGM+g4aiO6iwfdc2qcTpWGWO ZaYxVbtD0FcPaWW8+SlYtzOikKEmhvUv0BaWJb+qvxfaLV0qoFd+e9FQJuUbT1pO cQxz3mHGMEUZaydnZX9hpOk1PfDOwvPMboQaNumjuvFOldEAsdMoeRGNGOGHMRuh sfbo6Yn82+mTDY3G1pMY42loiq2KpI0ckt9M/F/9BjDBwCgrNTZUof47QAM/hB+t 4ZF76EQ+OcjxKu55XdbtAeWLuj/Ezj68EmLnWF3v75xt31t/f7K1ULskQ+QQO+pc qKXdYYYJ8abbtl852tOtZZFU9nlHEER9fQxgU5CMd6eiI+rqiIUohTV0z2mPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiq+AJ3J3ageclbrm+4v8RVo7ACUwHwYDVR0j BBgwFoAUy7fOxrJRWRKVzATqQnQUD2+2UuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQzM0MTNFNjUwNUJEMjJERUEwMTQzMEVDMkQ5NjVBMjlB Q0ExRDZCRkVGMjQ0OTM0MUM0OEE3MkJENEVCNEYxLzAvQ0JCN0NFQzZCMjUxNTkx Mjk1Q0MwNEVBNDI3NDE0MEY2RkI2NTJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI3Q0VDNkIyNTE1OTEyOTVD QzA0RUE0Mjc0MTQwRjZGQjY1MkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUMzNDEzRTY1MDVCRDIyREVBMDE0MzBFQzJEOTY1QTI5QUNBMUQ2QkZF RjI0NDkzNDFDNDhBNzJCRDRFQjRGMS8wL0NCQjdDRUM2QjI1MTU5MTI5NUNDMDRF QTQyNzQxNDBGNkZCNjUyRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHf78Z3ism/w2J4ZRHRJ4+Z0G4 Usfh4HhW3QIOKlEJz2EnGGkIjtcAQ/AeKv6OuDfivo6F1TfiLKS0vyrXoZEAYyx6 GqpenVViKevGFo+iEu05kcTgA4h5NvOSgMlGypxcbJrpw8J6TA4rKSJIHTEPu/fw VhWXcibQVXLhlu//EmO5CzFfpa1Nnas2Z9VfIrDJDelP7J4nu89YhMB1DHqN66G+ zKqfG6xKYG2xgpaJGY/1a1T395+y8PvjGP9Zhaoj75WQorl0wWmF7zIyG9fEloVb rqBHbhZ/nZga7/LSQz6VTjdBsTaGqGlReI1y3xrz4lGU8/q0NpbBvWmwcOZ9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:53 2025 by rpki-client