$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft File: CF2E2C753A200707CD61AACD7110A7372C505538.mft (raw, json) Hash identifier: tljzQKL5orLEHUPt4+9rKAVXrz+bDyW4odmm1+yuGso= Subject key identifier: 4D:60:09:4D:94:AE:39:49:28:CE:2C:4D:AA:7A:2E:B0:44:04:66:CB Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38 Certificate issuer: /CN=CF2E2C753A200707CD61AACD7110A7372C505538 Certificate serial: 2338C7A7A774B6869337ABB7FF09234F25022BED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft Manifest number: 0123 Signing time: Tue 04 Nov 2025 14:45:54 +0000 Manifest this update: Tue 04 Nov 2025 14:40:54 +0000 Manifest next update: Sun 09 Nov 2025 15:37:54 +0000 Files and hashes: 1: 3138362e3138392e3234342e302f32332d3233203d3e20323633373236.roa (hash: NgBPQazejyVb7dpLb8G2ndQyaNvK906bKF8pAgj0UXQ=) 2: CF2E2C753A200707CD61AACD7110A7372C505538.crl (hash: F3nVNj/5oTbwO6NN9o/JVMgWgxqVRFo2gZrTuZV6ATw=) 3: 3138362e3138392e3234342e302f32342d3234203d3e20323634373538.roa (hash: BG+24Hw3MhpMmWLT9ajXYnmvy4L3rRESVs+ad/lUWV8=) 4: 3138362e3138392e3234352e302f32342d3234203d3e20323633373236.roa (hash: V3zCFxqDd+g8v/dU5mynO8IKLMbv79z3vmnz8bbnSf8=) 5: 3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa (hash: o++tbVYNGfXTgG2ZM4JDkbYUOlez3yG+fLJv7M6G6mk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:38:c7:a7:a7:74:b6:86:93:37:ab:b7:ff:09:23:4f:25:02:2b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538 Validity Not Before: Nov 4 14:40:54 2025 GMT Not After : Nov 9 15:37:54 2025 GMT Subject: CN=4D60094D94AE394928CE2C4DAA7A2EB0440466CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:7c:85:74:4d:5c:1c:4b:9b:16:36:0f:f1: 1a:c3:51:5a:e3:50:7c:2b:59:d0:43:70:1a:33:58: b4:23:bd:97:4e:c9:31:e5:07:92:76:7e:1f:89:ef: bf:3d:7f:1b:55:3d:3b:55:bd:16:6d:c0:e0:4b:79: 6a:d8:1c:9a:9b:b3:e6:92:0f:e1:7e:2a:ba:36:15: 5f:d3:6e:cc:2b:29:7c:fd:81:bd:4e:0e:cc:10:7b: 3c:0d:1a:f9:f0:d0:d0:b3:d9:47:99:32:c8:3a:35: 14:0b:54:54:0d:12:dc:a5:97:b3:25:56:b0:db:16: 71:ae:65:7a:3a:11:72:ff:ae:9c:38:d2:14:38:4d: 7f:ac:41:ce:ca:e4:ff:21:91:c5:21:7b:bf:82:f4: c2:0d:70:6f:6f:14:7e:88:39:25:e3:4d:a7:82:ab: 82:e9:62:a8:84:7e:af:78:f6:f2:f5:fc:2c:e5:76: e1:25:54:b3:61:e8:2b:7d:c3:1a:ab:4f:38:df:22: 4b:ed:a7:05:cc:e2:d3:0a:5a:ca:9c:88:77:18:61: 01:03:c1:25:03:ef:cc:bd:f1:24:f5:aa:34:2d:b7: d6:38:ce:ee:5f:aa:c6:e4:93:5e:4b:bc:3c:81:ca: 90:22:54:8b:ac:d6:f7:92:9f:79:34:e9:37:e6:af: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:60:09:4D:94:AE:39:49:28:CE:2C:4D:AA:7A:2E:B0:44:04:66:CB X509v3 Authority Key Identifier: keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e5:50:d0:15:fd:cd:0c:8a:b0:e0:9a:50:c7:19:bf:cd:37: 2d:d1:3d:67:22:f8:b4:91:63:01:f4:35:82:91:a4:4c:a7:5d: 60:74:b0:a8:46:af:03:dc:ca:cf:c5:1c:23:ea:20:a6:00:52: f2:8b:06:1a:dd:ef:bf:11:e7:ff:29:82:27:d4:fc:74:31:68: e3:92:e9:b5:3f:e2:ac:3e:df:2d:1b:f1:ed:b6:c6:20:b4:3a: c0:06:4d:62:77:c6:21:56:6a:9b:ec:e7:53:9d:d3:10:56:bd: 95:7d:b5:46:fe:71:56:1c:7b:9a:a8:1a:03:aa:46:80:47:89: e6:e4:b3:cc:df:83:9f:da:66:9a:61:b7:d1:58:4e:f4:1a:f8: 69:f6:a2:99:89:03:34:23:31:1f:f3:83:3d:9b:78:a7:19:b1: c8:f2:58:9f:03:fb:06:ff:c3:65:76:93:b2:72:7c:40:a8:4b: 6c:4d:a9:e7:d5:67:cc:f6:d6:6e:4a:f1:92:fe:ce:65:9f:9a: 79:ff:91:2a:85:0b:5c:73:62:26:df:21:70:51:33:1d:52:18: 0c:7b:b9:0d:32:cf:1b:51:f9:d2:2f:3c:e6:7d:b3:5e:ca:88: bd:d4:67:d9:f5:f0:82:ed:81:1e:32:a1:8b:82:b0:2e:b8:29: d5:bc:d4:fa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIzjHp6d0toaTN6u3/wkjTyUCK+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyRTJDNzUzQTIwMDcwN0NENjFBQUNENzExMEE3Mzcy QzUwNTUzODAeFw0yNTExMDQxNDQwNTRaFw0yNTExMDkxNTM3NTRaMDMxMTAvBgNV BAMTKDRENjAwOTREOTRBRTM5NDkyOENFMkM0REFBN0EyRUIwNDQwNDY2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubnyFdE1cHEubFjYP8RrDUVrj UHwrWdBDcBozWLQjvZdOyTHlB5J2fh+J7789fxtVPTtVvRZtwOBLeWrYHJqbs+aS D+F+Kro2FV/TbswrKXz9gb1ODswQezwNGvnw0NCz2UeZMsg6NRQLVFQNEtyll7Ml VrDbFnGuZXo6EXL/rpw40hQ4TX+sQc7K5P8hkcUhe7+C9MINcG9vFH6IOSXjTaeC q4LpYqiEfq949vL1/CzlduElVLNh6Ct9wxqrTzjfIkvtpwXM4tMKWsqciHcYYQED wSUD78y98ST1qjQtt9Y4zu5fqsbkk15LvDyBypAiVIus1veSn3k06Tfmr0xlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTWAJTZSuOUkozixNqnousEQEZsswHwYDVR0j BBgwFoAUzy4sdTogBwfNYarNcRCnNyxQVTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMDhFMjZGRjRCNTcwRTNCMENBODhFODQwRjU3ODcwQzJB NDY1OEVDMENGODM1QTNDRjQ5QjNCNTMwQTU4Mzc0LzAvQ0YyRTJDNzUzQTIwMDcw N0NENjFBQUNENzExMEE3MzcyQzUwNTUzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjJFMkM3NTNBMjAwNzA3Q0Q2 MUFBQ0Q3MTEwQTczNzJDNTA1NTM4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzA4RTI2RkY0QjU3MEUzQjBDQTg4RTg0MEY1Nzg3MEMyQTQ2NThFQzBD RjgzNUEzQ0Y0OUIzQjUzMEE1ODM3NC8wL0NGMkUyQzc1M0EyMDA3MDdDRDYxQUFD RDcxMTBBNzM3MkM1MDU1MzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf5VDQFf3NDIqw4JpQxxm/zTct 0T1nIvi0kWMB9DWCkaRMp11gdLCoRq8D3MrPxRwj6iCmAFLyiwYa3e+/Eef/KYIn 1Px0MWjjkum1P+KsPt8tG/HttsYgtDrABk1id8YhVmqb7OdTndMQVr2VfbVG/nFW HHuaqBoDqkaAR4nm5LPM34Of2maaYbfRWE70Gvhp9qKZiQM0IzEf84M9m3inGbHI 8lifA/sG/8NldpOycnxAqEtsTann1WfM9tZuSvGS/s5ln5p5/5EqhQtcc2Im3yFw UTMdUhgMe7kNMs8bUfnSLzzmfbNeyoi91GfZ9fCC7YEeMqGLgrAuuCnVvNT6 -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:29 2025 by rpki-client