$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft File: CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft (raw, json) Hash identifier: t3/609LgwNRzaMFapdn2JlmV1auGz6ZFujopdrnB5GU= Subject key identifier: DD:5E:29:CE:5F:EC:3C:B6:4E:2F:20:7B:22:78:AD:C9:18:30:A7:AB Authority key identifier: CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D Certificate issuer: /CN=CF1757B269E35FD938A83FC994D18AC167C0FC8D Certificate serial: 32F9E8AB3D98F99F9A246DF5BD4E84A67A07727D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft Manifest number: 30 Signing time: Tue 04 Nov 2025 20:50:00 +0000 Manifest this update: Tue 04 Nov 2025 20:45:00 +0000 Manifest next update: Sun 09 Nov 2025 15:07:00 +0000 Files and hashes: 1: 323830333a373235303a3a2f33322d3438203d3e20323733313732.roa (hash: tiXPMxw4efnl6ssPq6UCr7FsoaxLJGh64LUtex8qqxI=) 2: CF1757B269E35FD938A83FC994D18AC167C0FC8D.crl (hash: XtARPRT5WqTiqMLBxdU7G2kwtkzo5FJlQ1cBD8ZQ0g0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.crl rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f9:e8:ab:3d:98:f9:9f:9a:24:6d:f5:bd:4e:84:a6:7a:07:72:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF1757B269E35FD938A83FC994D18AC167C0FC8D Validity Not Before: Nov 4 20:45:00 2025 GMT Not After : Nov 9 15:07:00 2025 GMT Subject: CN=DD5E29CE5FEC3CB64E2F207B2278ADC91830A7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:1e:a6:77:7f:4b:5c:cb:93:76:bd:81:20: c3:09:2b:32:21:9a:f7:17:d1:3e:53:d3:af:a3:26: 7f:27:07:68:61:0b:b2:3b:b2:c4:33:ed:cb:82:7e: 88:75:ae:b9:25:a1:52:55:21:10:d8:13:26:71:f5: 3b:59:26:98:e6:c9:ca:8e:1d:91:3f:2e:94:17:28: d4:91:0d:e0:da:7b:d1:f5:ab:ec:e7:8f:de:7a:6c: fd:06:49:03:2d:30:32:5f:73:a5:26:a5:3f:72:4c: c6:e9:5e:22:1e:c4:ec:b1:3e:30:df:51:28:9c:f0: 7a:35:47:72:00:79:3b:cd:94:b7:d0:95:e4:08:57: e2:fc:ee:61:b3:44:54:69:65:51:8b:d4:7e:01:91: c8:bf:2b:0c:58:6b:9a:77:5b:7c:5c:c6:6c:90:f2: ee:98:46:97:9b:2e:9a:0f:b8:3b:ad:31:00:b6:69: 91:aa:1b:b1:5c:2e:3c:0e:72:f0:5e:b4:07:35:e2: 2f:68:33:47:b5:81:9a:07:53:b2:18:c8:c6:43:85: e6:44:d5:b5:e8:36:57:b5:68:59:e5:49:b5:0b:c3: 23:76:a9:26:96:34:9c:6f:58:d8:65:99:c0:bb:26: bd:0a:35:3b:e7:dd:e9:69:c3:62:39:8d:95:1c:d3: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:29:CE:5F:EC:3C:B6:4E:2F:20:7B:22:78:AD:C9:18:30:A7:AB X509v3 Authority Key Identifier: keyid:CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:31:83:93:3b:b7:82:85:32:f5:70:dc:70:58:c3:25:d5:63: 58:c9:6e:6f:cd:51:20:d2:c3:5d:79:db:34:34:ab:dd:0b:82: a5:9e:08:3b:2a:92:39:ca:7a:ba:8f:49:a5:fd:5a:e4:8d:18: 7f:f2:c0:66:cf:62:e3:7c:e9:d8:bf:b2:ff:44:ee:d9:57:ba: b7:c3:0e:a4:ad:25:69:d0:f0:b4:ba:c8:3b:b2:18:8c:eb:70: 2a:22:18:cc:21:36:1f:20:cc:35:f1:73:b7:a6:cd:e6:bc:78: a0:1e:56:5c:d4:19:25:53:20:e2:73:8e:5e:4a:b9:a8:63:83: 77:6a:1a:a5:5d:ce:ea:b8:ca:74:4e:6f:3d:2d:f7:e1:d2:db: 7a:7a:3b:ba:bd:43:5a:53:9d:64:1b:17:b9:b1:c0:12:9b:17: f0:2f:6a:af:1a:98:fe:c4:80:9c:db:28:48:ab:b8:f9:1a:e1: 34:8e:a5:85:f4:1d:d1:1a:26:e2:99:ce:3a:a0:d7:f4:14:90: 8b:01:07:b9:3d:76:71:06:66:c4:8b:d7:4c:48:77:e8:e9:b2: ac:8b:fd:ca:3b:bb:62:3c:72:5c:aa:b2:28:35:68:0c:82:d8: 75:2d:b2:73:35:43:6e:3d:bf:1a:28:50:ed:6e:1d:0d:bc:b2: 26:55:f3:c3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMvnoqz2Y+Z+aJG31vU6EpnoHcn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YxNzU3QjI2OUUzNUZEOTM4QTgzRkM5OTREMThBQzE2 N0MwRkM4RDAeFw0yNTExMDQyMDQ1MDBaFw0yNTExMDkxNTA3MDBaMDMxMTAvBgNV BAMTKERENUUyOUNFNUZFQzNDQjY0RTJGMjA3QjIyNzhBREM5MTgzMEE3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8x6md39LXMuTdr2BIMMJKzIh mvcX0T5T06+jJn8nB2hhC7I7ssQz7cuCfoh1rrkloVJVIRDYEyZx9TtZJpjmycqO HZE/LpQXKNSRDeDae9H1q+znj956bP0GSQMtMDJfc6UmpT9yTMbpXiIexOyxPjDf USic8Ho1R3IAeTvNlLfQleQIV+L87mGzRFRpZVGL1H4Bkci/KwxYa5p3W3xcxmyQ 8u6YRpebLpoPuDutMQC2aZGqG7FcLjwOcvBetAc14i9oM0e1gZoHU7IYyMZDheZE 1bXoNle1aFnlSbULwyN2qSaWNJxvWNhlmcC7Jr0KNTvn3elpw2I5jZUc0xjrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3V4pzl/sPLZOLyB7InityRgwp6swHwYDVR0j BBgwFoAUzxdXsmnjX9k4qD/JlNGKwWfA/I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9COEI1MjlBRDg5ODAyNEJCMDMxNzg4NkU0MjI1Rjc4MkQy MTAyOUY2REZFNUNDM0ZFMEM2NDRFNEU5RkREQTMyLzAvQ0YxNzU3QjI2OUUzNUZE OTM4QTgzRkM5OTREMThBQzE2N0MwRkM4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjE3NTdCMjY5RTM1RkQ5MzhB ODNGQzk5NEQxOEFDMTY3QzBGQzhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjhCNTI5QUQ4OTgwMjRCQjAzMTc4ODZFNDIyNUY3ODJEMjEwMjlGNkRG RTVDQzNGRTBDNjQ0RTRFOUZEREEzMi8wL0NGMTc1N0IyNjlFMzVGRDkzOEE4M0ZD OTk0RDE4QUMxNjdDMEZDOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXMYOTO7eChTL1cNxwWMMl1WNY yW5vzVEg0sNdeds0NKvdC4Klngg7KpI5ynq6j0ml/VrkjRh/8sBmz2LjfOnYv7L/ RO7ZV7q3ww6krSVp0PC0usg7shiM63AqIhjMITYfIMw18XO3ps3mvHigHlZc1Bkl UyDic45eSrmoY4N3ahqlXc7quMp0Tm89Lffh0tt6eju6vUNaU51kGxe5scASmxfw L2qvGpj+xICc2yhIq7j5GuE0jqWF9B3RGibimc46oNf0FJCLAQe5PXZxBmbEi9dM SHfo6bKsi/3KO7tiPHJcqrIoNWgMgth1LbJzNUNuPb8aKFDtbh0NvLImVfPD -----END CERTIFICATE-----Generated at Wed Nov 5 09:56:59 2025 by rpki-client