$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft File: CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft (raw, json) Hash identifier: kveTqHq2Ue6VE9cHUs8vX4p0HR0X4bkZc1jvsC2BI+Y= Subject key identifier: 8B:4E:05:CE:44:C4:0B:BB:1E:89:AB:35:FC:29:C5:1C:C2:29:7B:7A Authority key identifier: CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C Certificate issuer: /CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C Certificate serial: 6269C4177CF235B557D6B7EA4BE81A2700E51187 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft Manifest number: 0139 Signing time: Mon 03 Nov 2025 19:25:15 +0000 Manifest this update: Mon 03 Nov 2025 19:20:15 +0000 Manifest next update: Sun 09 Nov 2025 09:32:15 +0000 Files and hashes: 1: CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl (hash: vpSHQi/fcgAxYckdW1v8jeKU5wj0XUcsSE5JCIPiRR8=) 2: 3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa (hash: BNJk2fyz8MX0zLw9d5G+Z1dWbMRo51I6pv47DVU8OUQ=) 3: 323830303a6161303a3a2f33322d3438203d3e203532333530.roa (hash: oYv9FW1x7Sv6nNKwSSYnsl949bZtUgfEdM2DZpYFg/A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:69:c4:17:7c:f2:35:b5:57:d6:b7:ea:4b:e8:1a:27:00:e5:11:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C Validity Not Before: Nov 3 19:20:15 2025 GMT Not After : Nov 9 09:32:15 2025 GMT Subject: CN=8B4E05CE44C40BBB1E89AB35FC29C51CC2297B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:d4:c2:22:b6:9d:29:a3:14:d4:98:66:b7: 80:fb:18:14:8c:39:a6:ec:0d:3d:98:43:a3:56:37: 93:a5:31:56:5a:62:e9:58:14:f1:f0:f7:75:eb:be: 0f:9c:9a:fe:09:76:6b:22:55:bb:33:0e:8a:e6:e4: 2d:c3:33:41:f2:59:e3:72:03:ca:66:14:d7:97:53: 32:16:f0:98:69:fc:c1:28:84:a1:32:b9:e4:c6:3b: ba:8c:2d:46:5b:db:54:57:74:ff:4f:2b:68:36:ad: 6c:2e:45:2b:b1:34:2e:83:4d:2d:7d:98:a0:36:f8: 65:d9:60:c4:c9:80:1f:ad:7a:6a:e2:6e:93:cd:8a: 2c:83:ee:85:c2:85:fc:0d:c5:57:e7:11:98:4b:ce: 52:a1:b9:98:81:33:0f:06:c9:9b:5d:f9:37:37:61: ec:fc:f7:8c:2f:78:22:f2:4a:00:27:dd:12:72:6b: 9c:57:9d:4a:7e:9f:fe:74:c0:11:95:12:32:51:a2: b4:1b:c7:9c:7e:99:fc:2d:0a:36:6e:2b:6e:60:95: 91:a2:5a:2e:c8:d1:ee:ca:d0:7f:00:cf:b1:21:f5: b1:e0:39:8e:b3:df:36:7a:9e:ba:0c:d5:06:3c:23: 59:a6:ac:78:06:c1:78:40:00:30:4c:01:3a:a8:bf: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4E:05:CE:44:C4:0B:BB:1E:89:AB:35:FC:29:C5:1C:C2:29:7B:7A X509v3 Authority Key Identifier: keyid:CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:20:ec:df:5e:e0:68:4c:e2:5a:96:d1:94:1d:c4:6e:2e:82: 26:de:22:67:62:af:38:67:4d:b7:43:dc:6d:20:88:7e:d2:c5: 0a:e9:cd:1c:9d:2c:2d:cc:67:7e:a5:41:2e:ee:a8:b5:16:e6: 12:64:1d:38:c4:57:35:3a:1b:9e:1c:2c:b2:25:c4:7a:5d:ac: 48:0a:6e:50:9a:ae:32:ac:01:f7:6c:1c:d7:64:cd:da:74:2e: 8d:a9:55:e7:f9:2f:91:24:58:7d:63:c2:9f:aa:02:83:76:52: 6a:3d:f9:b9:b1:82:53:54:24:7c:1f:dd:d9:b6:9c:22:41:5c: 1f:e8:7a:71:9f:3e:25:9d:0f:aa:9a:a3:a9:bc:60:b0:3c:03: 2e:84:56:7d:e8:23:c5:19:56:31:5f:9a:13:25:32:e1:59:c6: 91:eb:e4:a7:74:96:dd:51:8c:8a:2b:a2:50:00:a9:3a:ec:19: 9a:9c:47:ab:36:d0:2d:ec:3a:8e:41:81:cd:d3:88:31:9a:1d: a6:05:05:26:25:a2:03:43:ca:c2:9a:2d:bb:e8:b5:77:18:1d: 54:16:ce:4d:bc:38:32:e3:bb:a3:c3:38:2b:8e:2e:4e:c7:94: 84:66:f9:e5:9a:9d:30:15:82:cd:0a:6c:a9:9c:ea:b9:6e:ef: 7a:eb:03:92 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYmnEF3zyNbVX1rfqS+gaJwDlEYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxRkM5M0EzRjIwMzI2QkU4M0I2NDI0RjY3OEUyRUE2 NzE0NDMzQzAeFw0yNTExMDMxOTIwMTVaFw0yNTExMDkwOTMyMTVaMDMxMTAvBgNV BAMTKDhCNEUwNUNFNDRDNDBCQkIxRTg5QUIzNUZDMjlDNTFDQzIyOTdCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRtTCIradKaMU1Jhmt4D7GBSM OabsDT2YQ6NWN5OlMVZaYulYFPHw93Xrvg+cmv4JdmsiVbszDorm5C3DM0HyWeNy A8pmFNeXUzIW8Jhp/MEohKEyueTGO7qMLUZb21RXdP9PK2g2rWwuRSuxNC6DTS19 mKA2+GXZYMTJgB+temribpPNiiyD7oXChfwNxVfnEZhLzlKhuZiBMw8GyZtd+Tc3 Yez894wveCLySgAn3RJya5xXnUp+n/50wBGVEjJRorQbx5x+mfwtCjZuK25glZGi Wi7I0e7K0H8Az7Eh9bHgOY6z3zZ6nroM1QY8I1mmrHgGwXhAADBMATqov94dAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUi04FzkTEC7seias1/CnFHMIpe3owHwYDVR0j BBgwFoAUzh/JOj8gMmvoO2Qk9nji6mcUQzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NjdENEY0MkNDM0FENkFERkMzNkE0ODU3RTREOEEyOUU3 MjJBNjkwOUE4NTNGMEU2QzExOEUwMzcwQTFBOTZGLzAvQ0UxRkM5M0EzRjIwMzI2 QkU4M0I2NDI0RjY3OEUyRUE2NzE0NDMzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRTFGQzkzQTNGMjAzMjZCRTgz QjY0MjRGNjc4RTJFQTY3MTQ0MzNDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODY3RDRGNDJDQzNBRDZBREZDMzZBNDg1N0U0RDhBMjlFNzIyQTY5MDlB ODUzRjBFNkMxMThFMDM3MEExQTk2Ri8wL0NFMUZDOTNBM0YyMDMyNkJFODNCNjQy NEY2NzhFMkVBNjcxNDQzM0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCIOzfXuBoTOJaltGUHcRuLoIm 3iJnYq84Z023Q9xtIIh+0sUK6c0cnSwtzGd+pUEu7qi1FuYSZB04xFc1OhueHCyy JcR6XaxICm5Qmq4yrAH3bBzXZM3adC6NqVXn+S+RJFh9Y8KfqgKDdlJqPfm5sYJT VCR8H93ZtpwiQVwf6Hpxnz4lnQ+qmqOpvGCwPAMuhFZ96CPFGVYxX5oTJTLhWcaR 6+SndJbdUYyKK6JQAKk67BmanEerNtAt7DqOQYHN04gxmh2mBQUmJaIDQ8rCmi27 6LV3GB1UFs5NvDgy47ujwzgrji5Ox5SEZvnlmp0wFYLNCmypnOq5bu966wOS -----END CERTIFICATE-----Generated at Wed Nov 5 15:24:42 2025 by rpki-client