$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft File: 5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft (raw, json) Hash identifier: XP62FHx+T7cjFwTeLRPpi8JDOFchhGMOlFDhf/p2ufw= Subject key identifier: B4:32:6E:EC:FB:3B:DE:E6:E6:5F:25:7E:E8:89:73:7E:A1:43:E1:10 Authority key identifier: 5C:A9:B7:20:4E:C5:BF:0F:17:89:3E:6C:6F:C3:AE:A1:EB:38:32:BA Certificate issuer: /CN=5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA Certificate serial: 42A224AF1E4C586ECEB677755766BE351F2FE1D9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 11:20:47 +0000 Manifest this update: Mon 03 Nov 2025 11:15:47 +0000 Manifest next update: Sat 08 Nov 2025 11:54:47 +0000 Files and hashes: 1: 5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.crl (hash: +BRMehCrQ2mGi7uwaM/FfFc9GrQ89IffEvvvtDxHiYE=) 2: 3138372e3130322e3233362e302f32322d3234203d3e20323730313134.roa (hash: YhwhLlPige5hlOKUpbP41/aJApwr7M9ZKEmrpb233Lk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.crl rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 11:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a2:24:af:1e:4c:58:6e:ce:b6:77:75:57:66:be:35:1f:2f:e1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA Validity Not Before: Nov 3 11:15:47 2025 GMT Not After : Nov 8 11:54:47 2025 GMT Subject: CN=B4326EECFB3BDEE6E65F257EE889737EA143E110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4c:e0:47:61:c4:4d:38:b5:ba:4b:32:8c:41: 68:bb:0a:10:b8:44:c2:38:65:c7:ad:10:a0:e8:ea: 89:9d:03:c2:ad:33:6a:ff:e5:57:8a:e1:b2:f6:3e: a8:35:02:9a:4e:ae:43:cd:e0:57:6f:34:68:d1:b2: e4:cc:f7:20:df:5f:76:cd:b8:1c:de:2c:c1:70:23: e4:fa:26:e5:71:15:f6:da:85:25:b8:b7:dd:01:2d: 7a:15:df:45:a5:08:38:0d:43:06:08:db:7f:f0:3f: 5e:13:68:dc:5b:c8:87:09:57:70:fa:23:5e:66:92: 87:53:8c:db:5d:d1:08:81:9e:2f:29:01:c5:e2:44: 4b:f9:9f:e4:c6:ef:0f:fc:dd:46:3c:f4:d3:9d:c7: c5:f7:e0:d1:37:d9:14:6a:8b:62:e3:cf:aa:7d:63: c2:88:63:7b:cb:66:c5:56:0a:6c:d5:13:5a:77:3f: b1:62:73:58:cc:c5:a1:cd:0d:2b:b7:d1:6e:04:5f: e4:4b:39:06:33:78:a9:c0:76:e8:07:c3:e1:aa:dc: 6e:1e:00:3d:20:8d:71:93:e1:e7:4c:c5:01:20:b5: 14:4b:95:69:9d:b3:70:d7:2b:d3:4a:a8:0b:25:51: 3b:3e:e1:77:25:97:13:45:44:62:e9:70:01:36:1a: 4b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:32:6E:EC:FB:3B:DE:E6:E6:5F:25:7E:E8:89:73:7E:A1:43:E1:10 X509v3 Authority Key Identifier: keyid:5C:A9:B7:20:4E:C5:BF:0F:17:89:3E:6C:6F:C3:AE:A1:EB:38:32:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c5:f4:e4:3d:84:04:60:5a:b1:08:5b:58:f5:e4:07:07:1f: a7:ba:88:d1:c3:9c:6f:fd:bd:75:0a:01:b9:0f:50:2f:2b:82: e1:10:2b:77:be:6c:2f:b1:4a:e5:70:e4:f9:0e:04:37:ee:26: 9d:4c:4a:cb:5e:fa:1b:6e:be:13:2c:25:6e:c6:98:89:c7:92: 1d:93:67:31:e3:85:0c:f0:71:c0:98:34:fe:8b:9f:eb:e6:10: 48:34:72:d9:a1:a0:f9:6f:c6:4c:71:9a:21:2a:d6:ea:83:e3: 43:f6:d4:05:40:54:61:cd:86:8e:a1:dc:8f:03:08:4c:d2:2d: 71:60:fc:57:c8:5a:dc:12:7a:01:07:f8:56:c4:6c:83:0f:1e: b2:9d:2f:f4:d5:4e:f4:f7:40:d6:0d:27:3a:f1:6c:4f:85:ff: 37:4a:f8:28:1a:79:70:15:f7:e2:d1:e1:3a:71:31:65:1a:24: f1:5f:8c:a4:e1:9a:a7:a6:4d:ff:a4:a3:9d:59:74:19:be:d5: c2:c2:90:48:8d:6e:62:74:4e:75:2e:12:d4:6a:ef:63:03:88: d1:d8:56:47:f5:79:f1:b7:f5:4e:52:8b:c8:0c:37:e3:88:55: bb:1a:58:7f:15:67:e7:46:86:57:f8:22:9a:41:d2:01:0a:f6: e6:f4:51:ce -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQqIkrx5MWG7Otnd1V2a+NR8v4dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNBOUI3MjA0RUM1QkYwRjE3ODkzRTZDNkZDM0FFQTFF QjM4MzJCQTAeFw0yNTExMDMxMTE1NDdaFw0yNTExMDgxMTU0NDdaMDMxMTAvBgNV BAMTKEI0MzI2RUVDRkIzQkRFRTZFNjVGMjU3RUU4ODk3MzdFQTE0M0UxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKTOBHYcRNOLW6SzKMQWi7ChC4 RMI4ZcetEKDo6omdA8KtM2r/5VeK4bL2Pqg1AppOrkPN4FdvNGjRsuTM9yDfX3bN uBzeLMFwI+T6JuVxFfbahSW4t90BLXoV30WlCDgNQwYI23/wP14TaNxbyIcJV3D6 I15mkodTjNtd0QiBni8pAcXiREv5n+TG7w/83UY89NOdx8X34NE32RRqi2Ljz6p9 Y8KIY3vLZsVWCmzVE1p3P7Fic1jMxaHNDSu30W4EX+RLOQYzeKnAdugHw+Gq3G4e AD0gjXGT4edMxQEgtRRLlWmds3DXK9NKqAslUTs+4XcllxNFRGLpcAE2GksJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUtDJu7Ps73ubmXyV+6IlzfqFD4RAwHwYDVR0j BBgwFoAUXKm3IE7Fvw8XiT5sb8Ouoes4MrowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNUVFMDA0NDkxQUY0MDAxNkQyRUUwMDQ2NTU2OEIxRTQz MUI5MzIzNDMyMzJBNUQxRjlGMDJENDMyMzM1N0U3LzAvNUNBOUI3MjA0RUM1QkYw RjE3ODkzRTZDNkZDM0FFQTFFQjM4MzJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81Q0E5QjcyMDRFQzVCRjBGMTc4 OTNFNkM2RkMzQUVBMUVCMzgzMkJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzVFRTAwNDQ5MUFGNDAwMTZEMkVFMDA0NjU1NjhCMUU0MzFCOTMyMzQz MjMyQTVEMUY5RjAyRDQzMjMzNTdFNy8wLzVDQTlCNzIwNEVDNUJGMEYxNzg5M0U2 QzZGQzNBRUExRUIzODMyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+xfTkPYQEYFqxCFtY9eQHBx+n uojRw5xv/b11CgG5D1AvK4LhECt3vmwvsUrlcOT5DgQ37iadTErLXvobbr4TLCVu xpiJx5Idk2cx44UM8HHAmDT+i5/r5hBINHLZoaD5b8ZMcZohKtbqg+ND9tQFQFRh zYaOodyPAwhM0i1xYPxXyFrcEnoBB/hWxGyDDx6ynS/01U7090DWDSc68WxPhf83 SvgoGnlwFffi0eE6cTFlGiTxX4yk4Zqnpk3/pKOdWXQZvtXCwpBIjW5idE51LhLU au9jA4jR2FZH9Xnxt/VOUovIDDfjiFW7Glh/FWfnRoZX+CKaQdIBCvbm9FHO -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:56 2025 by rpki-client