$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft File: CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft (raw, json) Hash identifier: mYM8kmuCnvo91NCUuetEjabsAyy/rApWSgBS57Hc5B4= Subject key identifier: 77:5A:F9:A3:7F:BB:77:30:4F:40:08:43:8C:98:C7:86:F4:5D:19:BA Authority key identifier: CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5 Certificate issuer: /CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5 Certificate serial: 58A030A7E17C40D8B23DCE8A8992F60B9C0A176C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft Manifest number: 0139 Signing time: Tue 04 Nov 2025 17:22:25 +0000 Manifest this update: Tue 04 Nov 2025 17:17:25 +0000 Manifest next update: Sun 09 Nov 2025 18:16:25 +0000 Files and hashes: 1: 34352e3136332e32302e302f32322d3234203d3e20323637363839.roa (hash: UVmTjFLy2cWO3HRxLeqe2gRQzzd3npLxFwmizWy8voQ=) 2: 323830333a3161303a3a2f33322d3438203d3e20323637363839.roa (hash: DRHCzcpv5c6QsE11Z1eGXr6S+kUvnqyW1+55Onqm738=) 3: CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl (hash: k9Zn+3C0hZpowLpAMnSdLErYmghJzl7ecECZb2tT2lg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a0:30:a7:e1:7c:40:d8:b2:3d:ce:8a:89:92:f6:0b:9c:0a:17:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5 Validity Not Before: Nov 4 17:17:25 2025 GMT Not After : Nov 9 18:16:25 2025 GMT Subject: CN=775AF9A37FBB77304F4008438C98C786F45D19BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:e9:fd:04:da:05:82:44:fa:e2:2d:6e:b9: 34:ba:3d:2d:ec:7a:4c:a5:3b:e4:f4:b7:2e:9e:59: 9c:1b:2a:31:bb:95:de:d2:f8:18:80:01:26:09:9a: f6:8a:0d:07:d0:fe:04:01:12:9d:fa:1d:be:6b:1b: 38:ba:af:e3:11:d2:a4:b8:cb:97:02:8c:7d:6e:dd: d5:2f:df:41:cc:2e:c0:a6:c9:b9:e4:97:d4:1b:31: 12:06:96:58:36:d8:48:e7:1b:39:0c:7d:f2:aa:cb: a2:91:31:d9:5c:9e:a1:45:f6:d1:15:82:9b:7a:3e: e5:0b:dd:d8:28:7d:3c:a6:67:a1:f0:00:f8:6e:74: 0e:0b:8b:f2:c6:bd:92:f1:a3:8b:c8:19:22:7e:9a: ac:53:4a:a2:04:86:59:dd:76:a9:d2:7c:50:07:24: be:15:7c:64:69:9f:d6:9a:0b:44:47:02:21:8f:f6: 33:21:30:95:06:73:64:b6:03:b2:45:0d:7e:31:0c: 21:db:16:e7:05:79:ee:bc:8f:69:44:fb:e0:b2:2e: 11:df:a7:a3:6f:94:92:d4:18:13:35:e5:72:93:21: 98:fa:06:13:87:ff:d2:b8:eb:71:fc:0c:16:d1:cf: b0:15:a2:55:c0:a6:d8:57:cc:b9:62:da:d8:f2:f6: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5A:F9:A3:7F:BB:77:30:4F:40:08:43:8C:98:C7:86:F4:5D:19:BA X509v3 Authority Key Identifier: keyid:CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1f:51:ce:a1:03:5a:d5:1d:79:ec:e6:8d:2f:87:3a:fd:d0: fa:75:80:2f:14:20:c2:86:86:30:90:f4:e0:25:56:7b:42:d0: 5a:36:d9:59:75:71:32:f9:66:63:9c:a0:1a:9e:08:39:54:ce: 89:99:d5:50:71:11:13:34:64:0b:68:c5:df:e0:01:c8:3a:07: 04:48:73:40:59:90:fe:1d:44:58:92:6f:6e:af:43:e4:ff:7b: 76:0f:67:f9:65:99:f2:cb:03:84:a9:59:bb:89:61:c1:fa:ed: aa:06:51:6f:86:bf:4a:e3:9a:58:02:85:8f:f9:a7:5c:c8:5f: 78:04:49:a9:03:4e:fc:a9:c5:10:94:d3:9e:ea:b3:ab:a3:6e: a3:b0:cd:e9:37:f0:52:7e:4a:1c:8f:26:e5:16:63:62:4a:9b: 86:6a:a6:44:11:09:0e:00:27:31:f4:f2:1c:72:30:87:10:09: 65:6b:70:f5:b7:01:e9:34:e9:85:e4:c5:f4:e1:53:b8:97:a1: d6:cb:81:c8:e1:d4:79:c5:61:90:5e:a2:18:d9:ae:ee:25:bf: 65:3a:e9:34:eb:b7:61:8e:51:53:ca:7a:b4:7e:cc:50:0f:c4: d3:74:0a:75:d0:de:10:4a:5d:83:0a:12:81:93:bc:51:da:e0: f8:a4:0e:3d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWKAwp+F8QNiyPc6KiZL2C5wKF2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQkJFOUVEQzQ0RjRCNUI0MTEyQkUwMDk3RTNCNUE5 MjBDNjhCNTAeFw0yNTExMDQxNzE3MjVaFw0yNTExMDkxODE2MjVaMDMxMTAvBgNV BAMTKDc3NUFGOUEzN0ZCQjc3MzA0RjQwMDg0MzhDOThDNzg2RjQ1RDE5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3++n9BNoFgkT64i1uuTS6PS3s ekylO+T0ty6eWZwbKjG7ld7S+BiAASYJmvaKDQfQ/gQBEp36Hb5rGzi6r+MR0qS4 y5cCjH1u3dUv30HMLsCmybnkl9QbMRIGllg22EjnGzkMffKqy6KRMdlcnqFF9tEV gpt6PuUL3dgofTymZ6HwAPhudA4Li/LGvZLxo4vIGSJ+mqxTSqIEhlnddqnSfFAH JL4VfGRpn9aaC0RHAiGP9jMhMJUGc2S2A7JFDX4xDCHbFucFee68j2lE++CyLhHf p6NvlJLUGBM15XKTIZj6BhOH/9K463H8DBbRz7AVolXApthXzLli2tjy9i4xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUd1r5o3+7dzBPQAhDjJjHhvRdGbowHwYDVR0j BBgwFoAUyqu+ntxE9LW0ESvgCX47WpIMaLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MzNBOUFCNzcxODNEMUFCQjBFRDZFRUMwNkQ0NTNDMzE3 N0Q5Nzc0QjNGOUM4NzJGQTYwQTk0NTI5QUI4NEZGLzAvQ0FBQkJFOUVEQzQ0RjRC NUI0MTEyQkUwMDk3RTNCNUE5MjBDNjhCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUFCQkU5RURDNDRGNEI1QjQx MTJCRTAwOTdFM0I1QTkyMEM2OEI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTMzQTlBQjc3MTgzRDFBQkIwRUQ2RUVDMDZENDUzQzMxNzdEOTc3NEIz RjlDODcyRkE2MEE5NDUyOUFCODRGRi8wL0NBQUJCRTlFREM0NEY0QjVCNDExMkJF MDA5N0UzQjVBOTIwQzY4QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUH1HOoQNa1R157OaNL4c6/dD6 dYAvFCDChoYwkPTgJVZ7QtBaNtlZdXEy+WZjnKAangg5VM6JmdVQcRETNGQLaMXf 4AHIOgcESHNAWZD+HURYkm9ur0Pk/3t2D2f5ZZnyywOEqVm7iWHB+u2qBlFvhr9K 45pYAoWP+adcyF94BEmpA078qcUQlNOe6rOro26jsM3pN/BSfkocjyblFmNiSpuG aqZEEQkOACcx9PIccjCHEAlla3D1twHpNOmF5MX04VO4l6HWy4HI4dR5xWGQXqIY 2a7uJb9lOuk067dhjlFTynq0fsxQD8TTdAp10N4QSl2DChKBk7xR2uD4pA49 -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:34 2025 by rpki-client