$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft File: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft (raw, json) Hash identifier: ZEXWliSQEuCX/Sf0KMAwwrhd9Gapw1yqzLazCwkDhwU= Subject key identifier: C9:DE:98:3B:F3:61:AC:E8:66:B4:35:BF:C0:28:51:60:E6:40:71:A7 Authority key identifier: 0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 Certificate issuer: /CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Certificate serial: 4F78B190B9A19CB13A7814EC28672EC93489647F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 17:37:31 +0000 Manifest this update: Tue 04 Nov 2025 17:32:31 +0000 Manifest next update: Mon 10 Nov 2025 09:42:31 +0000 Files and hashes: 1: 3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa (hash: ALd1zdR/wdEwWr8XpENniianx6ebOr87tR/bFvCA3As=) 2: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl (hash: qSgqyUyLT042B938w0VGn8nUHbjB4MY9PBex6MGtECg=) 3: 3230302e37312e38382e302f32312d3234203d3e203237393936.roa (hash: r/EnoAJ/QDLRyKJ2eUMGsfZEAwWctbmLg0N+5EAKcZA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:78:b1:90:b9:a1:9c:b1:3a:78:14:ec:28:67:2e:c9:34:89:64:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Validity Not Before: Nov 4 17:32:31 2025 GMT Not After : Nov 10 09:42:31 2025 GMT Subject: CN=C9DE983BF361ACE866B435BFC0285160E64071A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:50:ff:93:81:00:4f:a4:8c:ff:6d:db:82: d2:1e:36:41:19:37:f3:af:31:be:a1:97:24:97:01: 27:72:59:08:ec:c3:fc:93:61:72:84:2c:ff:da:fc: 10:7c:87:3f:70:96:05:fb:1c:06:d4:ce:74:6d:27: 0e:1c:90:d3:b5:1c:30:9d:03:c4:04:03:da:7e:bf: c4:47:4e:2f:a5:20:c8:4e:32:8b:ab:3f:1b:4f:52: e2:f5:c5:a6:70:34:af:db:8e:49:2f:9d:29:71:1e: c2:2c:cd:c4:6b:b5:40:10:31:9b:66:e1:43:6a:b4: f6:2b:a5:3f:01:76:8c:9e:b3:8c:e9:ad:c7:22:86: f5:50:72:33:a9:d2:fe:28:46:9f:ad:d9:9a:25:6c: 3f:0d:88:f5:2f:12:07:9b:07:36:9e:cf:6d:5f:18: c7:f0:39:fe:be:ea:72:b4:81:88:fc:48:dc:3f:b7: f8:af:d3:6f:31:24:34:33:9a:b4:ea:04:95:b5:8f: 54:6e:64:20:cd:11:f0:2a:88:94:e8:70:9c:9e:08: a7:c6:3b:fe:7e:61:e5:30:53:94:70:3c:29:d7:2d: ea:07:28:96:c6:27:2b:e4:86:14:de:c2:e4:19:f1: 94:ae:c5:29:67:2c:25:68:36:cd:3a:05:4b:7f:45: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DE:98:3B:F3:61:AC:E8:66:B4:35:BF:C0:28:51:60:E6:40:71:A7 X509v3 Authority Key Identifier: keyid:0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:31:46:e0:49:04:55:c1:6a:53:1d:2a:17:a3:d9:72:75:d7: d7:29:f0:6d:5d:cc:56:12:e8:bb:4e:9c:36:ed:99:f1:96:9e: ca:c9:b4:1d:0a:b0:f3:f3:3c:93:1c:2a:1f:dc:76:89:d2:d1: f5:95:78:b4:01:ba:af:f6:67:9a:5b:be:e3:45:6a:83:69:9b: da:a1:85:6b:7b:d1:76:5f:1c:a8:33:e0:9f:0b:f0:b7:ff:27: 51:69:45:ad:67:90:88:ca:87:c1:c8:07:6c:40:e9:38:f3:73: bf:56:d4:d2:f2:3d:83:e7:d0:c4:e0:7b:11:a6:e5:38:2f:81: fe:8a:23:f4:0c:46:b2:ed:d2:48:12:c9:fc:ef:e5:a8:56:fd: 33:a0:52:dd:25:7e:8a:a6:b1:01:32:bd:a0:5b:b7:f0:94:72: 45:01:03:a5:f2:d5:66:fc:f8:e9:49:52:eb:31:7c:c9:c0:b5: 00:29:2a:2b:40:27:aa:f0:9c:02:c9:3b:ce:81:cf:3d:6d:af: c9:bd:0d:2a:f0:50:18:3c:f4:4d:f2:5c:d4:56:ba:ea:fb:1e: 23:9a:79:9c:a0:ea:94:5c:a7:ee:8a:c9:91:55:66:fa:e7:ee: 5e:d1:29:f2:7a:99:31:23:e3:cc:57:c6:c9:90:e8:d8:58:10: d5:ae:32:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUT3ixkLmhnLE6eBTsKGcuyTSJZH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENCMEM3NzY2ODcwMDFBNkJFRkE5RUREMjBGOUJBNkM4 ODhFRTg1NDAeFw0yNTExMDQxNzMyMzFaFw0yNTExMTAwOTQyMzFaMDMxMTAvBgNV BAMTKEM5REU5ODNCRjM2MUFDRTg2NkI0MzVCRkMwMjg1MTYwRTY0MDcxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKlD/k4EAT6SM/23bgtIeNkEZ N/OvMb6hlySXASdyWQjsw/yTYXKELP/a/BB8hz9wlgX7HAbUznRtJw4ckNO1HDCd A8QEA9p+v8RHTi+lIMhOMourPxtPUuL1xaZwNK/bjkkvnSlxHsIszcRrtUAQMZtm 4UNqtPYrpT8Bdoyes4zprccihvVQcjOp0v4oRp+t2ZolbD8NiPUvEgebBzaez21f GMfwOf6+6nK0gYj8SNw/t/iv028xJDQzmrTqBJW1j1RuZCDNEfAqiJTocJyeCKfG O/5+YeUwU5RwPCnXLeoHKJbGJyvkhhTewuQZ8ZSuxSlnLCVoNs06BUt/RYm7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyd6YO/NhrOhmtDW/wChRYOZAcacwHwYDVR0j BBgwFoAUDLDHdmhwAaa++p7dIPm6bIiO6FQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkY0RjNFMUEyQkY5RkExNTVGMzM4RkNCREE1RjYwNDIy QkRCODEwRDc0OUZEMTE2N0VDQUQ4RURCNERCOEQxLzAvMENCMEM3NzY2ODcwMDFB NkJFRkE5RUREMjBGOUJBNkM4ODhFRTg1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0IwQzc3NjY4NzAwMUE2QkVG QTlFREQyMEY5QkE2Qzg4OEVFODU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZGNEYzRTFBMkJGOUZBMTU1RjMzOEZDQkRBNUY2MDQyMkJEQjgxMEQ3 NDlGRDExNjdFQ0FEOEVEQjREQjhEMS8wLzBDQjBDNzc2Njg3MDAxQTZCRUZBOUVE RDIwRjlCQTZDODg4RUU4NTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuMUbgSQRVwWpTHSoXo9lyddfX KfBtXcxWEui7Tpw27Znxlp7KybQdCrDz8zyTHCof3HaJ0tH1lXi0Abqv9meaW77j RWqDaZvaoYVre9F2XxyoM+CfC/C3/ydRaUWtZ5CIyofByAdsQOk483O/VtTS8j2D 59DE4HsRpuU4L4H+iiP0DEay7dJIEsn87+WoVv0zoFLdJX6KprEBMr2gW7fwlHJF AQOl8tVm/PjpSVLrMXzJwLUAKSorQCeq8JwCyTvOgc89ba/JvQ0q8FAYPPRN8lzU Vrrq+x4jmnmcoOqUXKfuismRVWb65+5e0SnyepkxI+PMV8bJkOjYWBDVrjI/ -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:28 2025 by rpki-client