$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft File: CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft (raw, json) Hash identifier: ZXonu/MrlnvDqNsJItPDicqrUlvTgw2xEfc6qzNrFUE= Subject key identifier: 68:9C:85:68:62:26:7F:A8:F9:A5:53:B5:22:B8:2E:0D:41:34:E1:5D Authority key identifier: CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3 Certificate issuer: /CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3 Certificate serial: 5F9EC65893A1DEE2F6593BBADAC7C1998474BE92 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 07:06:40 +0000 Manifest this update: Tue 04 Nov 2025 07:01:40 +0000 Manifest next update: Sun 09 Nov 2025 18:45:40 +0000 Files and hashes: 1: 3230362e3232312e38302e302f32302d3234203d3e203130363937.roa (hash: A63DPWaGu4ncao5SbuzzNORnyJp3efH7wi7W3ibdfqs=) 2: 3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa (hash: RPlSJwAa9hJihfh1yMG/936mXOrCgRuCAxGXhLPTmYA=) 3: 323830333a376538303a3a2f33322d3332203d3e203130363937.roa (hash: 0Qn0E7vPhpgg1CGcGhP6Q7/IBFamZE+35UWnAibGbyk=) 4: CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl (hash: hCOFql7+7b0la1K7kgQEP23W02OO4MOWFyH6T9/nskk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9e:c6:58:93:a1:de:e2:f6:59:3b:ba:da:c7:c1:99:84:74:be:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3 Validity Not Before: Nov 4 07:01:40 2025 GMT Not After : Nov 9 18:45:40 2025 GMT Subject: CN=689C856862267FA8F9A553B522B82E0D4134E15D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:49:c4:31:1c:5f:71:61:9e:ff:3f:06:09: 69:44:46:93:a4:c5:09:70:06:6d:90:c0:8c:1a:ce: b6:5b:3d:ea:e4:8e:3f:1e:fc:da:5a:25:9e:ed:b4: d2:13:5a:0c:d9:39:d1:e7:29:cb:2a:80:cf:7a:e7: 50:37:31:c5:e4:3e:ae:f9:be:73:16:e4:fe:8d:de: 20:c0:36:f8:42:02:17:11:e1:87:64:a5:1d:3e:bd: a4:91:a3:db:aa:7d:90:e9:8c:51:96:43:90:08:27: 1e:1d:0d:c5:29:fb:3e:b4:9f:73:50:93:53:55:5f: b3:c7:65:03:10:9c:ca:36:e5:16:f5:4a:bd:91:14: 79:98:95:25:f9:d1:49:0d:38:8e:ea:ae:d4:bb:ef: fc:06:29:86:5e:f4:b8:b7:9a:e6:bb:de:22:33:83: fc:03:2e:34:e5:db:f1:24:6e:d8:03:7c:97:7b:aa: 09:24:05:d8:e9:b5:f4:12:7d:02:59:cd:9e:07:4a: 29:25:bc:45:0b:e4:f9:a5:90:a5:f6:12:18:71:b0: 66:4d:dd:e2:ab:19:1e:34:17:3e:92:5d:78:f7:6f: ac:32:eb:c1:9b:eb:a4:30:64:8a:7d:68:4b:6d:a3: 6a:8f:f2:bf:83:ca:48:34:89:41:b7:fb:57:20:ab: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9C:85:68:62:26:7F:A8:F9:A5:53:B5:22:B8:2E:0D:41:34:E1:5D X509v3 Authority Key Identifier: keyid:CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ef:81:f9:06:ea:5f:31:b3:eb:7e:65:14:14:fa:9c:16:06: 1b:4c:72:f7:f9:eb:28:ee:76:2b:74:3a:dc:53:2d:65:af:87: 33:ef:43:94:20:ac:d1:ad:b4:27:db:a3:26:1b:88:39:65:83: b2:df:75:6a:2c:80:13:75:75:3d:83:76:e4:e0:03:23:96:54: 0d:81:a0:8e:e4:f6:b6:34:cd:d1:de:61:a2:c4:01:73:7d:14: 9f:4f:af:5c:73:49:11:aa:52:d0:1c:b1:9d:f9:22:65:4d:a2: 37:40:15:25:06:18:04:e4:93:3c:0d:de:99:e8:65:79:96:6c: b2:ca:83:76:92:28:ab:a4:dd:72:b7:b2:60:88:9e:b2:e0:f8: 77:73:c2:ee:9b:00:bd:ef:25:f3:22:75:72:46:bb:f7:6c:22: c2:09:6b:e6:8e:2f:60:e7:0a:6d:66:38:88:7b:e8:3c:4d:64: 95:3a:28:e0:ab:98:8b:3f:48:df:ca:41:57:20:2a:93:5f:68: fe:d6:4b:83:92:a9:e1:69:02:5e:82:32:e3:49:37:0d:77:5c: 70:ba:f3:df:7a:b2:09:fa:b0:c3:6a:50:86:e6:e4:51:42:5c: 7b:53:07:b5:83:f7:d5:1a:54:5f:a6:d8:a1:07:e9:6d:89:d7: 14:e9:c9:9b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUX57GWJOh3uL2WTu62sfBmYR0vpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCOTM0QUE3QjIxRUU4MjYyQTdGNzQ1QkNDOTRCRDRD NDc5RkFEMzAeFw0yNTExMDQwNzAxNDBaFw0yNTExMDkxODQ1NDBaMDMxMTAvBgNV BAMTKDY4OUM4NTY4NjIyNjdGQThGOUE1NTNCNTIyQjgyRTBENDEzNEUxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSUnEMRxfcWGe/z8GCWlERpOk xQlwBm2QwIwazrZbPerkjj8e/NpaJZ7ttNITWgzZOdHnKcsqgM9651A3McXkPq75 vnMW5P6N3iDANvhCAhcR4YdkpR0+vaSRo9uqfZDpjFGWQ5AIJx4dDcUp+z60n3NQ k1NVX7PHZQMQnMo25Rb1Sr2RFHmYlSX50UkNOI7qrtS77/wGKYZe9Li3mua73iIz g/wDLjTl2/EkbtgDfJd7qgkkBdjptfQSfQJZzZ4HSiklvEUL5PmlkKX2EhhxsGZN 3eKrGR40Fz6SXXj3b6wy68Gb66QwZIp9aEtto2qP8r+Dykg0iUG3+1cgq+cbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaJyFaGImf6j5pVO1IrguDUE04V0wHwYDVR0j BBgwFoAUzbk0qnsh7oJip/dFvMlL1MR5+tMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRkU2MUVERTA3NTdGOUYxMjkzNUE1RjNCRTI0ODA3OUI3 RkU2MzI3MkY4NTUxOUQwMTVDQjA3RUQ1MjM0NjA4LzAvQ0RCOTM0QUE3QjIxRUU4 MjYyQTdGNzQ1QkNDOTRCRDRDNDc5RkFEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREI5MzRBQTdCMjFFRTgyNjJB N0Y3NDVCQ0M5NEJENEM0NzlGQUQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkZFNjFFREUwNzU3RjlGMTI5MzVBNUYzQkUyNDgwNzlCN0ZFNjMyNzJG ODU1MTlEMDE1Q0IwN0VENTIzNDYwOC8wL0NEQjkzNEFBN0IyMUVFODI2MkE3Rjc0 NUJDQzk0QkQ0QzQ3OUZBRDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc74H5BupfMbPrfmUUFPqcFgYb THL3+eso7nYrdDrcUy1lr4cz70OUIKzRrbQn26MmG4g5ZYOy33VqLIATdXU9g3bk 4AMjllQNgaCO5Pa2NM3R3mGixAFzfRSfT69cc0kRqlLQHLGd+SJlTaI3QBUlBhgE 5JM8Dd6Z6GV5lmyyyoN2kiirpN1yt7JgiJ6y4Ph3c8LumwC97yXzInVyRrv3bCLC CWvmji9g5wptZjiIe+g8TWSVOijgq5iLP0jfykFXICqTX2j+1kuDkqnhaQJegjLj STcNd1xwuvPferIJ+rDDalCG5uRRQlx7Uwe1g/fVGlRfptihB+ltidcU6cmb -----END CERTIFICATE-----Generated at Wed Nov 5 18:51:42 2025 by rpki-client