$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft File: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json) Hash identifier: GyebwPBICFxjaSEpNJIR64ri6s0GkAOnSKTbvy3mI3s= Subject key identifier: 8E:63:99:30:31:EE:F0:DA:9A:DD:B9:3D:91:10:3B:B8:68:2E:A5:BB Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F Certificate issuer: /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Certificate serial: 4F5EF897175D32BEBCB223B5B7D28D21976F6773 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft Manifest number: 013A Signing time: Tue 04 Nov 2025 04:25:10 +0000 Manifest this update: Tue 04 Nov 2025 04:20:10 +0000 Manifest next update: Sun 09 Nov 2025 21:53:10 +0000 Files and hashes: 1: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: I1spZtmjli5MIwwNOJwdw/M5IEaUcgYj0x1Wd2NiQeY=) 2: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: l8o1GdsPLa2A2Bl+HXY03zAP5Da27OG5BFwldaylppc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5e:f8:97:17:5d:32:be:bc:b2:23:b5:b7:d2:8d:21:97:6f:67:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Validity Not Before: Nov 4 04:20:10 2025 GMT Not After : Nov 9 21:53:10 2025 GMT Subject: CN=8E63993031EEF0DA9ADDB93D91103BB8682EA5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:20:6e:5e:46:6a:21:f4:39:92:f0:a6:d4: 3d:11:c5:78:7c:43:32:1d:a7:08:c7:29:0f:42:33: 31:75:34:f3:fa:5e:3f:29:98:86:db:fc:b2:c3:0a: a6:d3:65:89:40:9d:49:70:02:26:3b:b6:02:2b:6b: 12:e4:cb:10:fe:1d:7a:7f:ab:46:b9:e8:c6:d2:6d: 8d:db:cb:78:47:94:52:5e:0d:4e:45:55:a5:fd:58: 80:73:ac:be:57:77:37:a8:49:88:b3:64:20:5b:68: 42:75:2a:d5:2f:7b:0d:6f:4e:8d:2f:e8:7f:84:e2: 95:00:5e:a0:19:43:49:be:2b:01:e8:78:bf:01:6e: af:a9:d7:30:f5:bf:40:ab:2c:b3:9c:f2:a5:00:14: 30:a3:2d:6c:99:e5:37:8f:51:71:f6:4f:84:52:9e: 2c:f2:88:e3:05:f5:a2:6d:ee:7e:d4:16:28:b2:82: a4:b3:43:1f:b1:24:06:2b:0a:71:7b:e6:89:db:9b: 48:05:4b:1a:14:0a:a1:aa:e3:07:b0:4e:a3:5d:e8: a2:36:53:50:8b:60:32:cf:4f:58:a3:9d:a8:5c:6d: 12:0a:89:2c:ce:06:d2:45:38:01:0e:6c:05:9a:21: 43:15:68:99:ae:36:d6:49:b5:a1:f8:1d:70:82:98: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:99:30:31:EE:F0:DA:9A:DD:B9:3D:91:10:3B:B8:68:2E:A5:BB X509v3 Authority Key Identifier: keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0b:e7:1e:86:b2:25:b6:df:31:fe:43:bf:eb:fa:85:0b:26: 26:95:36:bc:2f:9b:cb:e3:3b:57:35:41:0b:35:58:ad:48:92: 9d:69:c9:f8:ee:2c:dd:8d:e5:9e:b1:ab:e4:db:82:ea:8e:6f: e3:02:b7:a0:6a:fa:c3:d7:36:f2:25:aa:37:ad:33:92:05:d5: dd:77:2f:7a:77:c9:5d:35:14:b2:84:51:d1:02:37:0a:08:52: 78:c0:3c:5f:f9:c0:a3:5b:07:fd:4d:2a:f9:26:eb:ad:1c:4f: 25:a6:96:21:12:57:83:1f:bc:eb:3e:d5:d5:c8:4f:96:69:e5: f8:07:be:3f:f9:af:77:d8:ee:fb:72:4e:42:10:5b:46:4b:10: 39:d9:cb:32:b5:2f:81:9c:56:d3:1a:a7:ed:56:98:bc:c7:c5: 69:3a:78:31:41:12:bc:e9:43:46:11:10:94:1d:eb:3b:29:ab: 19:35:9d:e2:96:13:9d:f6:ee:54:a0:27:d8:d3:c5:12:1b:36: b2:be:f3:d9:d6:24:90:9c:5b:ff:36:93:49:9a:9d:05:b8:2c: 94:35:57:73:71:79:df:fd:57:d9:6d:65:c5:fe:e6:d5:28:15: 83:02:13:0f:c5:af:73:ce:b8:c0:4b:9c:99:7a:9f:d2:ef:de: e7:f2:d3:b9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUT174lxddMr68siO1t9KNIZdvZ3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NDFEQjczRDk5NUFFNTVDODA4QTBFNzdDQkZGODcz Q0NBRTQ0RjAeFw0yNTExMDQwNDIwMTBaFw0yNTExMDkyMTUzMTBaMDMxMTAvBgNV BAMTKDhFNjM5OTMwMzFFRUYwREE5QUREQjkzRDkxMTAzQkI4NjgyRUE1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VSBuXkZqIfQ5kvCm1D0RxXh8 QzIdpwjHKQ9CMzF1NPP6Xj8pmIbb/LLDCqbTZYlAnUlwAiY7tgIraxLkyxD+HXp/ q0a56MbSbY3by3hHlFJeDU5FVaX9WIBzrL5XdzeoSYizZCBbaEJ1KtUvew1vTo0v 6H+E4pUAXqAZQ0m+KwHoeL8Bbq+p1zD1v0CrLLOc8qUAFDCjLWyZ5TePUXH2T4RS nizyiOMF9aJt7n7UFiiygqSzQx+xJAYrCnF75onbm0gFSxoUCqGq4wewTqNd6KI2 U1CLYDLPT1ijnahcbRIKiSzOBtJFOAEObAWaIUMVaJmuNtZJtaH4HXCCmC57AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjmOZMDHu8Nqa3bk9kRA7uGgupbswHwYDVR0j BBgwFoAUy1Qdtz2ZWuVcgIoOd8v/hzzK5E8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0IwQkI3NkQ4NURBMTY5MjUxNThENUU3NjE4MDkyOUJG REQwM0RDQjFCNDZBRkQzQjE1NjFFQjMxRDgyOTc2LzAvQ0I1NDFEQjczRDk5NUFF NTVDODA4QTBFNzdDQkZGODczQ0NBRTQ0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU0MURCNzNEOTk1QUU1NUM4 MDhBMEU3N0NCRkY4NzNDQ0FFNDRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNCMEJCNzZEODVEQTE2OTI1MTU4RDVFNzYxODA5MjlCRkREMDNEQ0Ix QjQ2QUZEM0IxNTYxRUIzMUQ4Mjk3Ni8wL0NCNTQxREI3M0Q5OTVBRTU1QzgwOEEw RTc3Q0JGRjg3M0NDQUU0NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPC+cehrIltt8x/kO/6/qFCyYm lTa8L5vL4ztXNUELNVitSJKdacn47izdjeWesavk24Lqjm/jAregavrD1zbyJao3 rTOSBdXddy96d8ldNRSyhFHRAjcKCFJ4wDxf+cCjWwf9TSr5JuutHE8lppYhEleD H7zrPtXVyE+WaeX4B74/+a932O77ck5CEFtGSxA52csytS+BnFbTGqftVpi8x8Vp OngxQRK86UNGERCUHes7KasZNZ3ilhOd9u5UoCfY08USGzayvvPZ1iSQnFv/NpNJ mp0FuCyUNVdzcXnf/VfZbWXF/ubVKBWDAhMPxa9zzrjAS5yZep/S797n8tO5 -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:08 2025 by rpki-client