$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft File: CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft (raw, json) Hash identifier: gRoS8GiILO9YwRhRSHJGMt3rEu3T6ND/y0j/eGhJ+qE= Subject key identifier: 51:00:0E:8A:61:FF:3A:C3:A2:9E:2E:F8:A1:55:62:0D:23:C9:C7:80 Authority key identifier: CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D Certificate issuer: /CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D Certificate serial: 1631E997AEDD7596487FC0B6C3800AB7B967A549 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 19:08:22 +0000 Manifest this update: Tue 04 Nov 2025 19:03:22 +0000 Manifest next update: Sun 09 Nov 2025 16:32:22 +0000 Files and hashes: 1: 3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa (hash: HwF8jM6XhVJlwX2VuQmMsPtBvqjrEGL6EWEhZzl60pA=) 2: CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl (hash: 1A605LVBs0ZfTjcYYWRnlEsCVVrYRLtwoLYVgIn6T7Q=) 3: 323830333a313265303a3a2f33322d3332203d3e20323639393234.roa (hash: T3kuSsUQg8wLrJbQLbZUZYrWwt/NFR0jQ0OQgfO9Cn4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:31:e9:97:ae:dd:75:96:48:7f:c0:b6:c3:80:0a:b7:b9:67:a5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D Validity Not Before: Nov 4 19:03:22 2025 GMT Not After : Nov 9 16:32:22 2025 GMT Subject: CN=51000E8A61FF3AC3A29E2EF8A155620D23C9C780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:9a:44:0b:ae:07:61:04:51:3f:b2:17:28: 71:62:dc:9f:40:a3:c3:ed:65:f6:a4:6d:fc:3b:3d: 96:0d:ad:16:f7:d2:19:7c:a4:d5:b6:0f:47:2f:7d: 3b:6a:a9:1e:b7:3e:9d:17:5f:33:36:cf:af:00:b0: 1f:c9:33:f6:d0:a7:bf:cf:7f:79:3e:64:83:df:0c: 4c:7f:fa:62:af:e6:de:fd:66:53:92:80:ad:e6:6e: 36:0c:24:90:0e:25:67:69:d7:57:d5:be:5a:d5:4e: 9b:f2:1d:b6:cf:14:45:6f:39:d1:3a:35:44:b8:84: 34:1b:96:cf:2a:d4:fb:af:87:d1:51:be:d7:e7:66: 5e:f4:11:e8:0e:e4:c6:10:87:f1:b7:9b:32:34:39: 69:45:e8:31:1a:02:3e:83:2a:44:c0:d4:b7:8b:54: 37:97:6e:ce:71:32:95:4b:b6:b7:3b:19:e6:c3:18: 03:22:04:13:9a:52:2a:65:aa:5f:d4:3c:3e:82:b1: b2:01:7c:43:90:37:5c:0f:65:26:7e:ed:dc:2f:66: ff:fa:05:7f:ae:d9:d4:e4:54:08:76:6e:91:5f:4c: e7:e4:5d:73:15:07:b8:bb:47:ec:b7:f9:a6:e9:4b: ca:d6:65:f7:7f:9e:fc:a4:bd:16:09:a1:c9:e5:06: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:0E:8A:61:FF:3A:C3:A2:9E:2E:F8:A1:55:62:0D:23:C9:C7:80 X509v3 Authority Key Identifier: keyid:CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:99:2c:b7:7e:8a:bb:e1:8b:fd:34:6d:e4:4f:39:44:5c:0c: 5c:e3:2d:ef:81:46:c2:6b:82:9e:a3:4f:00:08:e6:56:fa:8b: 2f:6c:97:b6:9c:21:a1:18:7a:03:c1:ec:bc:d0:4f:1f:1a:80: 74:52:37:41:ae:45:60:80:98:40:7f:98:5a:a3:81:6b:86:ed: 80:59:1b:c0:b2:83:d4:a0:da:cf:5b:81:bd:94:de:44:da:2d: c1:35:eb:e2:75:2c:b7:dd:81:69:14:a7:bd:b3:16:74:cb:8a: ed:ac:16:ff:ec:70:8d:9f:1a:69:f4:82:7a:0d:ae:b8:63:5f: 55:2f:2e:fe:f2:88:bb:29:ef:f5:a5:04:59:f4:21:da:42:c9: 8c:e4:1f:37:d6:2f:cb:77:d0:05:56:3a:2e:12:c1:30:c8:b4: 67:df:7c:c6:a6:cb:6a:51:e5:c0:b3:1e:83:df:b9:e2:ea:f2: 66:fd:4a:cb:79:92:99:ee:fd:0d:37:97:3b:42:7c:1d:ee:2c: 3c:2e:1e:a8:6d:1b:a4:b1:fc:02:7a:07:cb:38:32:ca:73:1e: e2:62:b9:36:d1:bd:21:7d:06:ab:40:75:a0:46:08:48:fa:06: 0d:7c:bd:42:59:e8:36:a3:94:c2:07:03:78:19:71:c5:d8:ca: 5b:03:9f:93 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFjHpl67ddZZIf8C2w4AKt7lnpUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCREFEOUM3MUU2MTM0MjU2NUVCM0Q2NTQwMjlGNDFG MkFGNTMzRDAeFw0yNTExMDQxOTAzMjJaFw0yNTExMDkxNjMyMjJaMDMxMTAvBgNV BAMTKDUxMDAwRThBNjFGRjNBQzNBMjlFMkVGOEExNTU2MjBEMjNDOUM3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTM5pEC64HYQRRP7IXKHFi3J9A o8PtZfakbfw7PZYNrRb30hl8pNW2D0cvfTtqqR63Pp0XXzM2z68AsB/JM/bQp7/P f3k+ZIPfDEx/+mKv5t79ZlOSgK3mbjYMJJAOJWdp11fVvlrVTpvyHbbPFEVvOdE6 NUS4hDQbls8q1Puvh9FRvtfnZl70EegO5MYQh/G3mzI0OWlF6DEaAj6DKkTA1LeL VDeXbs5xMpVLtrc7GebDGAMiBBOaUiplql/UPD6CsbIBfEOQN1wPZSZ+7dwvZv/6 BX+u2dTkVAh2bpFfTOfkXXMVB7i7R+y3+abpS8rWZfd/nvykvRYJocnlBt/RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUQAOimH/OsOini74oVViDSPJx4AwHwYDVR0j BBgwFoAUzr2tnHHmE0JWXrPWVAKfQfKvUz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MDI4ODdDRDMzQjA5QTBFOEY4OTAyMTdEQjAzRkEwQjg4 OUQ0NzhGQjE2MzkxMEU4NDRDQTAxMEE0OENDMjc1LzAvQ0VCREFEOUM3MUU2MTM0 MjU2NUVCM0Q2NTQwMjlGNDFGMkFGNTMzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUJEQUQ5QzcxRTYxMzQyNTY1 RUIzRDY1NDAyOUY0MUYyQUY1MzNELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTAyODg3Q0QzM0IwOUEwRThGODkwMjE3REIwM0ZBMEI4ODlENDc4RkIx NjM5MTBFODQ0Q0EwMTBBNDhDQzI3NS8wL0NFQkRBRDlDNzFFNjEzNDI1NjVFQjNE NjU0MDI5RjQxRjJBRjUzM0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXmSy3foq74Yv9NG3kTzlEXAxc 4y3vgUbCa4Keo08ACOZW+osvbJe2nCGhGHoDwey80E8fGoB0UjdBrkVggJhAf5ha o4Frhu2AWRvAsoPUoNrPW4G9lN5E2i3BNevidSy33YFpFKe9sxZ0y4rtrBb/7HCN nxpp9IJ6Da64Y19VLy7+8oi7Ke/1pQRZ9CHaQsmM5B831i/Ld9AFVjouEsEwyLRn 33zGpstqUeXAsx6D37ni6vJm/UrLeZKZ7v0NN5c7Qnwd7iw8Lh6obRuksfwCegfL ODLKcx7iYrk20b0hfQarQHWgRghI+gYNfL1CWeg2o5TCBwN4GXHF2MpbA5+T -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:33 2025 by rpki-client