$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft File: CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft (raw, json) Hash identifier: KgSHqJENlxK8H8Jh0Z4gHX02Tr67PdOnTpr5kUdAqUI= Subject key identifier: D8:2F:EB:97:F7:B1:2B:01:4E:E9:B0:6F:22:98:B9:9F:3A:38:A1:85 Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC Certificate issuer: /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC Certificate serial: 69C46DE847B2CCBFA9683910218BE78F3C920AF9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft Manifest number: 0138 Signing time: Mon 03 Nov 2025 20:10:38 +0000 Manifest this update: Mon 03 Nov 2025 20:05:38 +0000 Manifest next update: Sat 08 Nov 2025 19:05:38 +0000 Files and hashes: 1: 323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa (hash: 1wtUMbnLOMBq5oNtn1FuywsbTz5Q1EwM+4Rtv8Pr3Xg=) 2: 323830333a343538303a3a2f33322d3438203d3e203532343638.roa (hash: /6K+xrx79hp+Vsg2PT5w28Bi9veUajpIvFLG9fMYIcg=) 3: 3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa (hash: kqk0FVT3Avr003dFwjqxdZpHIM9oOM/l/YzONjSQKlw=) 4: 323830333a343538303a383130303a3a2f34302d3438203d3e203532343638.roa (hash: RGbcxUVpDXE6cYzEOhP4C/BPlUKymxgZsW3JP5M4ZPg=) 5: 323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa (hash: SSLK6hbYj9qXklhUwKCDBgygOVCAVVt4ouUKSkwrito=) 6: 323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa (hash: HSrJfGxmZU+Z5MOr6vZnq38dNgaA4hFjOkMnDk+vcRA=) 7: 323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa (hash: pXcUltmPJX1mPRX60MEEtE51m78n1eywr0krDtE4BZE=) 8: CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl (hash: oeqKIXSKbcYObnL5D9jBGKvearg1aw59HKre8pDT2ds=) 9: 3138362e3137392e36342e302f32302d3234203d3e203532343638.roa (hash: zkMjyQ9YuxxNrSWSHViqsoqWXFtH6nfFKMmPI6XhXkQ=) 10: 323830333a376130303a3a2f33322d3438203d3e203532343638.roa (hash: Bmt/RHBOuR6KqQ9AY04ZI4o2cxEoy+x1DalEkocgsmw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 19:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c4:6d:e8:47:b2:cc:bf:a9:68:39:10:21:8b:e7:8f:3c:92:0a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC Validity Not Before: Nov 3 20:05:38 2025 GMT Not After : Nov 8 19:05:38 2025 GMT Subject: CN=D82FEB97F7B12B014EE9B06F2298B99F3A38A185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:f7:2f:85:77:e6:82:4d:d2:fc:ca:29:d7: cd:8d:b3:3b:08:ef:c6:bb:b7:f8:8d:3f:6b:1a:9e: 7b:10:a7:fa:d8:d1:d5:70:0c:8f:db:80:53:0d:ed: 47:99:41:b8:ec:ca:fc:08:e1:37:26:3b:91:3f:96: 9d:e2:9d:e2:17:09:ef:1f:08:84:01:45:4c:63:02: e8:c8:f2:32:a3:ce:7c:64:60:ff:c3:fc:c1:2c:6b: 36:fd:00:df:e7:0a:1f:27:04:56:de:8d:24:54:e5: 7e:7f:cc:2c:f0:11:aa:1a:ca:bd:2a:99:f7:f6:3b: 8c:16:ae:26:75:c3:2b:4e:f8:52:6c:28:e0:9c:35: b7:2f:77:8c:01:49:e2:47:08:75:fd:84:11:57:53: 4b:c2:b2:00:05:fb:35:4c:14:33:ce:85:d7:be:02: 2b:a5:9d:d1:27:d0:18:c8:2e:40:80:0a:49:b2:c4: c0:93:72:af:f0:02:77:ea:01:aa:1f:09:de:c9:11: 33:71:62:17:9e:c2:05:b2:51:70:b7:4e:ef:63:c3: bb:06:bc:08:7b:38:8b:41:01:4f:73:f8:e2:62:49: 3a:ff:42:3f:43:ca:7c:8b:c2:30:ed:6a:eb:4a:3a: 1e:49:a0:fc:c3:0a:f5:6b:39:c1:de:d8:57:13:4b: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2F:EB:97:F7:B1:2B:01:4E:E9:B0:6F:22:98:B9:9F:3A:38:A1:85 X509v3 Authority Key Identifier: keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c5:d7:39:1b:83:43:2c:bd:78:c9:27:3e:5a:b3:5b:ca:c3: b1:2e:e4:3c:1e:4e:d7:ba:fa:84:40:2b:7a:91:f0:3f:ab:33: a5:e7:cc:74:43:5a:c4:9b:f7:b2:78:11:3d:64:fb:ed:df:93: 3d:43:a1:45:bd:5b:69:80:79:4d:e5:4d:ac:c6:df:f3:bb:81: 1f:a3:87:6b:ff:87:a1:8f:1f:e1:c3:69:0d:a5:cf:d5:71:18: c1:78:16:85:d9:b8:1c:a0:0c:6e:9c:2c:6c:66:37:37:6c:d4: 36:6e:10:c8:2e:9b:07:20:2c:a0:7f:db:20:e6:25:36:c8:e1: 02:f0:9d:0c:67:6e:3f:1e:8b:63:75:48:33:80:51:51:ed:ba: b2:32:64:af:51:8d:ce:05:b5:a0:10:3a:4c:01:f8:7d:63:fa: 29:fc:41:84:c5:20:f2:86:bd:f9:9a:b4:fe:cd:4e:08:01:c1: 22:0d:3e:23:09:e9:49:10:e8:eb:77:15:fc:c8:0b:2c:ac:c8: 3b:7f:f2:eb:8a:30:11:4e:5a:6e:d8:02:99:fa:40:bc:78:bf: c8:44:86:a6:ff:99:e5:c8:20:e6:60:bc:94:98:6f:af:b9:9a: 4a:b1:d7:58:c0:9d:1b:eb:4f:d0:1d:99:45:1f:bd:e2:00:b8: 21:9d:76:b9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUacRt6EeyzL+paDkQIYvnjzySCvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDOUE0ODhEMDc5QUVFN0ZFMEIyMTY2NEExQTRBRUUx Qzg5OUZEQzAeFw0yNTExMDMyMDA1MzhaFw0yNTExMDgxOTA1MzhaMDMxMTAvBgNV BAMTKEQ4MkZFQjk3RjdCMTJCMDE0RUU5QjA2RjIyOThCOTlGM0EzOEExODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoPcvhXfmgk3S/Mop182NszsI 78a7t/iNP2sannsQp/rY0dVwDI/bgFMN7UeZQbjsyvwI4TcmO5E/lp3ineIXCe8f CIQBRUxjAujI8jKjznxkYP/D/MEsazb9AN/nCh8nBFbejSRU5X5/zCzwEaoayr0q mff2O4wWriZ1wytO+FJsKOCcNbcvd4wBSeJHCHX9hBFXU0vCsgAF+zVMFDPOhde+ AiulndEn0BjILkCACkmyxMCTcq/wAnfqAaofCd7JETNxYheewgWyUXC3Tu9jw7sG vAh7OItBAU9z+OJiSTr/Qj9DynyLwjDtautKOh5JoPzDCvVrOcHe2FcTS8hZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2C/rl/exKwFO6bBvIpi5nzo4oYUwHwYDVR0j BBgwFoAUzsmkiNB5ruf+CyFmShpK7hyJn9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNUVBNTdFRENGQjhEM0M1NTVCN0IwOUQyRTVENjU4RTZE MjQxMkJDODlGMUJDN0E1NDc3N0ZEQzE1QzkzODczLzAvQ0VDOUE0ODhEMDc5QUVF N0ZFMEIyMTY2NEExQTRBRUUxQzg5OUZEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM5QTQ4OEQwNzlBRUU3RkUw QjIxNjY0QTFBNEFFRTFDODk5RkRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzVFQTU3RURDRkI4RDNDNTU1QjdCMDlEMkU1RDY1OEU2RDI0MTJCQzg5 RjFCQzdBNTQ3NzdGREMxNUM5Mzg3My8wL0NFQzlBNDg4RDA3OUFFRTdGRTBCMjE2 NjRBMUE0QUVFMUM4OTlGREMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmxdc5G4NDLL14ySc+WrNbysOx LuQ8Hk7XuvqEQCt6kfA/qzOl58x0Q1rEm/eyeBE9ZPvt35M9Q6FFvVtpgHlN5U2s xt/zu4Efo4dr/4ehjx/hw2kNpc/VcRjBeBaF2bgcoAxunCxsZjc3bNQ2bhDILpsH ICygf9sg5iU2yOEC8J0MZ24/HotjdUgzgFFR7bqyMmSvUY3OBbWgEDpMAfh9Y/op /EGExSDyhr35mrT+zU4IAcEiDT4jCelJEOjrdxX8yAssrMg7f/LrijARTlpu2AKZ +kC8eL/IRIam/5nlyCDmYLyUmG+vuZpKsddYwJ0b60/QHZlFH73iALghnXa5 -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:59 2025 by rpki-client