$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft File: CE9B6041658E7187B06A984F435470A36286EB73.mft (raw, json) Hash identifier: bfm33Qj0Sm9NKuuKb9X/D0gMS58/EG7MYQkrPoAAfjs= Subject key identifier: 31:5F:08:F9:FF:D8:48:3F:E5:55:38:A2:6A:ED:7F:10:72:5B:4D:BE Authority key identifier: CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73 Certificate issuer: /CN=CE9B6041658E7187B06A984F435470A36286EB73 Certificate serial: 78C2FA9EC9DEE03A9A5895D3948537F1B0492372 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft Manifest number: 0139 Signing time: Tue 04 Nov 2025 07:57:13 +0000 Manifest this update: Tue 04 Nov 2025 07:52:13 +0000 Manifest next update: Sat 08 Nov 2025 19:45:13 +0000 Files and hashes: 1: 3137302e37382e3138392e302f32342d3234203d3e203132363834.roa (hash: NAHgBzNK993JbaIuFotMUys3NTrml0xvlxI450IRl0s=) 2: CE9B6041658E7187B06A984F435470A36286EB73.crl (hash: O9DNd4Pyan5HZ6I7FycJkzpR9q8R0xCpGyEevQAV8xw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.crl rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 19:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c2:fa:9e:c9:de:e0:3a:9a:58:95:d3:94:85:37:f1:b0:49:23:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE9B6041658E7187B06A984F435470A36286EB73 Validity Not Before: Nov 4 07:52:13 2025 GMT Not After : Nov 8 19:45:13 2025 GMT Subject: CN=315F08F9FFD8483FE55538A26AED7F10725B4DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:52:28:20:8f:d0:92:e7:38:93:01:f0:0f: 7d:6d:80:ab:d6:02:db:6b:50:62:92:2f:d0:a2:d2: a3:d2:16:80:e7:09:99:57:38:c9:52:e0:2b:9e:34: 5a:79:0d:54:37:5f:82:fa:b8:1b:09:a4:f3:69:6f: a7:ab:ca:7b:6e:d5:ec:2e:00:49:de:80:89:dd:d7: 77:f8:8b:f4:ab:bb:80:67:d0:25:f6:93:ba:48:28: 1e:0c:52:81:7d:3f:e8:d2:ee:ba:f0:33:72:b6:4e: 6e:57:36:0b:0e:38:87:a1:05:44:d7:0a:da:e4:21: 78:18:4f:b7:10:36:a1:ae:e7:48:e3:af:63:08:bc: 27:58:ac:7d:28:6d:dc:39:8b:52:63:b8:69:42:eb: 3a:ac:b7:21:86:4b:95:db:24:d1:ff:ab:84:07:9c: 11:6e:f2:64:0c:b4:1f:13:fb:3c:c2:0d:a4:0a:7c: b1:31:e4:db:0c:cf:85:0d:88:27:fb:87:73:32:99: 91:95:42:8e:b8:0b:75:17:2b:18:68:f3:f1:9b:64: fa:79:6c:c2:31:f0:bd:47:46:a3:41:61:86:eb:2f: 6f:aa:b5:6a:dd:4f:fe:c5:0a:ad:99:0b:07:b1:ef: 3a:42:45:aa:a5:0e:c0:25:c8:8c:61:30:55:a1:16: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5F:08:F9:FF:D8:48:3F:E5:55:38:A2:6A:ED:7F:10:72:5B:4D:BE X509v3 Authority Key Identifier: keyid:CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:51:c3:52:9c:da:74:f6:70:e3:96:54:f5:28:0f:48:75:b1: 7d:f6:65:56:f5:80:79:fd:b1:7b:4b:71:e3:35:9a:ea:fb:09: 41:eb:e2:cd:85:28:6c:89:ec:bd:a1:c5:da:9c:21:26:9e:a4: b9:b4:f6:c8:16:57:89:75:21:a6:12:f7:e6:72:3b:a6:06:eb: 46:d9:b1:2e:a6:86:3a:ac:92:f5:eb:0d:52:be:8e:6f:6f:b3: 13:ef:65:3c:28:41:e4:35:5b:90:e7:b1:2b:87:82:b4:37:1d: 95:07:04:fc:29:6f:07:25:19:40:2b:55:4f:78:4b:ee:c5:5c: 36:e7:5a:53:71:f4:6e:ea:8f:0b:f7:d2:30:82:f4:35:f0:b0: 84:1f:2c:7c:5e:75:0a:d8:d1:e2:cb:b2:74:6d:b7:51:5a:01: 62:73:f2:fc:da:5a:b9:e0:eb:5e:e8:e1:44:69:72:d9:34:d0: 71:74:18:36:d5:31:a5:f6:2a:30:81:00:54:4e:5a:8c:58:55: fa:fc:13:1d:e1:4f:8d:ef:51:dd:00:6a:04:d1:09:eb:a2:d6: 4c:8e:20:ad:50:55:68:bc:da:fb:56:b1:5b:8d:51:ff:c4:3e: 45:ff:a7:0f:ed:e3:aa:2c:a5:b8:a9:43:6e:02:b4:71:22:08: e6:bc:2d:18 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeML6nsne4DqaWJXTlIU38bBJI3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5QjYwNDE2NThFNzE4N0IwNkE5ODRGNDM1NDcwQTM2 Mjg2RUI3MzAeFw0yNTExMDQwNzUyMTNaFw0yNTExMDgxOTQ1MTNaMDMxMTAvBgNV BAMTKDMxNUYwOEY5RkZEODQ4M0ZFNTU1MzhBMjZBRUQ3RjEwNzI1QjREQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5b1IoII/Qkuc4kwHwD31tgKvW AttrUGKSL9Ci0qPSFoDnCZlXOMlS4CueNFp5DVQ3X4L6uBsJpPNpb6eryntu1ewu AEnegInd13f4i/Sru4Bn0CX2k7pIKB4MUoF9P+jS7rrwM3K2Tm5XNgsOOIehBUTX CtrkIXgYT7cQNqGu50jjr2MIvCdYrH0obdw5i1JjuGlC6zqstyGGS5XbJNH/q4QH nBFu8mQMtB8T+zzCDaQKfLEx5NsMz4UNiCf7h3MymZGVQo64C3UXKxho8/GbZPp5 bMIx8L1HRqNBYYbrL2+qtWrdT/7FCq2ZCwex7zpCRaqlDsAlyIxhMFWhFuL/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMV8I+f/YSD/lVTiiau1/EHJbTb4wHwYDVR0j BBgwFoAUzptgQWWOcYewaphPQ1Rwo2KG63MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84REMyMEY2M0QwOEFCREQ5MkZCRUYzOURDQjNENUMwREIy OUFCRUQ0NjYwM0VCREU5M0YyNzg0MkFGOTdGRDIyLzAvQ0U5QjYwNDE2NThFNzE4 N0IwNkE5ODRGNDM1NDcwQTM2Mjg2RUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRTlCNjA0MTY1OEU3MTg3QjA2 QTk4NEY0MzU0NzBBMzYyODZFQjczLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOERDMjBGNjNEMDhBQkREOTJGQkVGMzlEQ0IzRDVDMERCMjlBQkVENDY2 MDNFQkRFOTNGMjc4NDJBRjk3RkQyMi8wL0NFOUI2MDQxNjU4RTcxODdCMDZBOTg0 RjQzNTQ3MEEzNjI4NkVCNzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiUcNSnNp09nDjllT1KA9IdbF9 9mVW9YB5/bF7S3HjNZrq+wlB6+LNhShsiey9ocXanCEmnqS5tPbIFleJdSGmEvfm cjumButG2bEupoY6rJL16w1Svo5vb7MT72U8KEHkNVuQ57Erh4K0Nx2VBwT8KW8H JRlAK1VPeEvuxVw251pTcfRu6o8L99IwgvQ18LCEHyx8XnUK2NHiy7J0bbdRWgFi c/L82lq54Ote6OFEaXLZNNBxdBg21TGl9iowgQBUTlqMWFX6/BMd4U+N71HdAGoE 0QnrotZMjiCtUFVovNr7VrFbjVH/xD5F/6cP7eOqLKW4qUNuArRxIgjmvC0Y -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:13 2025 by rpki-client