$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft File: C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft (raw, json) Hash identifier: W5jnjPtcRCcyxO+btyMyg2Yx1jAnjT9tEpCJVJOkN7Q= Subject key identifier: E8:1A:BE:A1:89:D0:C2:11:10:C4:41:96:17:AB:52:E8:40:C6:CC:B8 Authority key identifier: C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95 Certificate issuer: /CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595 Certificate serial: 4DFE19422D69A46350B135A40A8A9B8823FB0716 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft Manifest number: 0111 Signing time: Tue 04 Nov 2025 07:26:56 +0000 Manifest this update: Tue 04 Nov 2025 07:21:56 +0000 Manifest next update: Sun 09 Nov 2025 17:38:56 +0000 Files and hashes: 1: 323830333a343939303a3a2f33322d3434203d3e20323732393436.roa (hash: JVhaJdgbnv2SJprFq14lEebt7lGydAQv8zUbeMt3+dI=) 2: 323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa (hash: y/4wjK/Jt/iTK3j0hy466LuR/ZFqVp1vtHyk877IFds=) 3: C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl (hash: dvSpqcfOooy7KwcR7dQHp+p8S62eAtYCvuNmyonhfDM=) 4: 323830333a343939303a343330303a3a2f34382d3438203d3e20323732393436.roa (hash: Tlwm9mQuLGnNCCRwde0ljkYq7UJKvJRsVeCPLri3OkU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fe:19:42:2d:69:a4:63:50:b1:35:a4:0a:8a:9b:88:23:fb:07:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595 Validity Not Before: Nov 4 07:21:56 2025 GMT Not After : Nov 9 17:38:56 2025 GMT Subject: CN=E81ABEA189D0C21110C4419617AB52E840C6CCB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:10:7e:de:eb:dc:d7:60:01:3f:21:ae:3e: 7c:d8:54:17:a7:e1:7e:07:db:85:a9:fc:39:c6:b4: c5:a3:59:ca:01:06:ec:dc:60:0e:f6:65:1b:a1:35: d1:d4:9a:b2:2a:31:1d:9f:87:b2:88:7e:c3:cd:9c: 26:09:21:d3:04:2f:06:13:3c:d1:50:ab:ca:a0:3f: 8e:3f:a8:af:76:c7:c2:b5:09:3c:44:87:84:ec:a5: 5e:c5:d2:c6:bb:7f:59:50:6e:26:5f:b2:33:b1:53: b3:bc:76:75:b0:89:04:7c:3f:26:8d:16:7c:0c:81: 34:d8:2f:90:b3:ab:3a:40:9b:88:5f:9e:63:0d:53: b4:9a:ec:7c:ff:4a:7c:51:26:1c:58:f9:94:c0:ea: ca:9f:f6:da:64:da:f8:d0:4f:74:7f:c0:36:84:00: 97:86:7d:02:d9:b3:5e:c2:9b:b0:d0:b9:41:e6:10: 88:3f:0a:5a:39:02:20:c8:3f:5f:1f:ea:6b:8b:0a: 54:7f:c0:10:3e:4d:78:42:2c:29:c4:62:72:2b:9f: f9:ed:d4:cb:12:36:a6:61:bc:26:05:3e:70:b6:7b: 69:84:23:46:69:86:9b:cb:cc:5a:3d:7b:4b:72:92: a4:5a:33:37:b4:2b:d0:fe:4d:1f:1a:64:bd:e5:6f: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1A:BE:A1:89:D0:C2:11:10:C4:41:96:17:AB:52:E8:40:C6:CC:B8 X509v3 Authority Key Identifier: keyid:C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b5:31:61:ff:82:b7:e1:d1:b9:20:80:7e:f2:c0:cb:8c:8b: b3:17:8b:12:c1:d9:0b:77:34:8d:a3:69:91:ba:19:6a:1f:06: 5d:2a:64:6e:4a:70:1f:eb:94:38:4f:97:e8:ec:fd:12:54:4e: e6:51:f5:e4:a3:78:c2:3c:b3:27:ef:9a:ec:6e:71:0f:0e:73: 2f:d2:12:93:5d:c8:2f:8b:b8:1f:8d:9d:8f:72:07:35:4a:c3: b2:23:b5:f6:67:52:4d:7c:ae:55:a6:14:56:15:77:f8:f5:0f: d0:49:70:c6:c1:d1:c9:d9:9e:a2:49:b4:68:fe:3d:dc:9a:52: ab:bf:2a:d2:f6:83:4c:7d:62:2f:01:c8:ab:75:b7:04:9b:06: c9:04:18:97:eb:31:53:2a:74:95:f8:ef:a7:32:ec:a4:c5:9a: e6:52:1b:9b:c6:e9:8e:6b:1e:58:80:bb:2c:3e:99:d9:3c:79: 3a:54:46:b8:2a:68:d8:c9:93:93:28:1f:b0:0a:53:42:a3:a9: f3:cf:dd:2d:f0:6a:62:58:49:62:c2:e5:98:37:d7:62:45:3c: 2e:f5:f4:56:a2:72:87:85:d2:a1:88:ff:24:31:e9:29:80:21: 55:46:ba:e8:37:58:d3:bd:5f:53:5e:13:36:de:0a:76:51:97: 83:32:86:78 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTf4ZQi1ppGNQsTWkCoqbiCP7BxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJCQjM4M0IxMjc4NUZGREJBOURCRDY4RDYwMUJEM0JB OTNCMjU5NTAeFw0yNTExMDQwNzIxNTZaFw0yNTExMDkxNzM4NTZaMDMxMTAvBgNV BAMTKEU4MUFCRUExODlEMEMyMTExMEM0NDE5NjE3QUI1MkU4NDBDNkNDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUBB+3uvc12ABPyGuPnzYVBen 4X4H24Wp/DnGtMWjWcoBBuzcYA72ZRuhNdHUmrIqMR2fh7KIfsPNnCYJIdMELwYT PNFQq8qgP44/qK92x8K1CTxEh4TspV7F0sa7f1lQbiZfsjOxU7O8dnWwiQR8PyaN FnwMgTTYL5CzqzpAm4hfnmMNU7Sa7Hz/SnxRJhxY+ZTA6sqf9tpk2vjQT3R/wDaE AJeGfQLZs17Cm7DQuUHmEIg/Clo5AiDIP18f6muLClR/wBA+TXhCLCnEYnIrn/nt 1MsSNqZhvCYFPnC2e2mEI0ZphpvLzFo9e0tykqRaMze0K9D+TR8aZL3lb7vrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6Bq+oYnQwhEQxEGWF6tS6EDGzLgwHwYDVR0j BBgwFoAUwrs4OxJ4X/26nb1o1gG9O6k7JZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84M0RCNENBRUE1NURBMDg3QUE2RTEzRUZFMDEzQkQ0Mjc5 NEQ5MzBEMDk0NEM5QkQ0OUJGRUNGNTBENkQ0OUYxLzAvQzJCQjM4M0IxMjc4NUZG REJBOURCRDY4RDYwMUJEM0JBOTNCMjU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkJCMzgzQjEyNzg1RkZEQkE5 REJENjhENjAxQkQzQkE5M0IyNTk1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODNEQjRDQUVBNTVEQTA4N0FBNkUxM0VGRTAxM0JENDI3OTREOTMwRDA5 NDRDOUJENDlCRkVDRjUwRDZENDlGMS8wL0MyQkIzODNCMTI3ODVGRkRCQTlEQkQ2 OEQ2MDFCRDNCQTkzQjI1OTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFtTFh/4K34dG5IIB+8sDLjIuz F4sSwdkLdzSNo2mRuhlqHwZdKmRuSnAf65Q4T5fo7P0SVE7mUfXko3jCPLMn75rs bnEPDnMv0hKTXcgvi7gfjZ2Pcgc1SsOyI7X2Z1JNfK5VphRWFXf49Q/QSXDGwdHJ 2Z6iSbRo/j3cmlKrvyrS9oNMfWIvAcirdbcEmwbJBBiX6zFTKnSV+O+nMuykxZrm UhubxumOax5YgLssPpnZPHk6VEa4KmjYyZOTKB+wClNCo6nzz90t8GpiWEliwuWY N9diRTwu9fRWonKHhdKhiP8kMekpgCFVRrroN1jTvV9TXhM23gp2UZeDMoZ4 -----END CERTIFICATE-----Generated at Wed Nov 5 22:49:20 2025 by rpki-client