$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft File: CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft (raw, json) Hash identifier: gW9Mj6EeR/Z6GFWLCemtg/+dH6FTOFiQhB3dfdLtmb4= Subject key identifier: A1:8F:31:CB:E8:94:3A:9E:5E:60:B1:02:7C:F9:14:8A:64:6D:45:8C Authority key identifier: CA:7B:F9:7A:5E:16:EE:FA:00:A5:E2:77:FF:4A:C5:AB:E3:08:6E:EF Certificate issuer: /CN=CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF Certificate serial: 3E252758D6FEB7F1C97F075FC42F8A18A1FA7EC7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft Manifest number: 28 Signing time: Mon 03 Nov 2025 14:07:07 +0000 Manifest this update: Mon 03 Nov 2025 14:02:07 +0000 Manifest next update: Sat 08 Nov 2025 13:26:07 +0000 Files and hashes: 1: 323830363a3434643a3a2f33322d3438203d3e20323732333330.roa (hash: XigWSFr7AAFm3F7T60/7ZLlycFdTx2hwLiIv5FBo7zM=) 2: CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.crl (hash: zryz7/c16hlhg96ipLNUlrGpzqVihKzaVsJzzgggqxw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.crl rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 13:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:25:27:58:d6:fe:b7:f1:c9:7f:07:5f:c4:2f:8a:18:a1:fa:7e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF Validity Not Before: Nov 3 14:02:07 2025 GMT Not After : Nov 8 13:26:07 2025 GMT Subject: CN=A18F31CBE8943A9E5E60B1027CF9148A646D458C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:7d:84:38:ac:08:42:6b:6d:8f:9a:19:f0: 2c:b9:c4:3c:28:04:ff:c2:03:ba:9b:70:d8:74:ab: 0e:b2:6a:05:ec:ae:01:d7:cd:0f:19:a9:c9:28:6e: 9c:37:19:07:25:38:52:22:44:26:b1:e5:26:52:5f: bf:65:af:2c:96:45:a4:09:f4:74:c2:a1:c2:23:e2: cb:b9:9a:b0:7a:fa:a0:9b:9f:f0:a0:d8:30:40:54: a5:d4:be:54:0b:f0:95:84:ea:c7:ee:29:fe:b4:2d: e5:c6:9f:2a:dd:11:72:d7:c5:eb:a8:19:88:4d:98: 96:f9:ca:4e:67:7d:a1:ab:a3:8d:31:99:fa:93:38: 5a:30:dd:87:3a:3d:60:40:ba:d3:e1:6e:4f:ad:8c: e8:55:fa:cb:ae:55:7e:3e:d9:67:93:b2:3d:ab:23: e7:89:fa:74:d9:01:7d:f4:3c:67:92:b5:8d:e6:89: eb:55:1e:d6:c8:36:5b:8d:47:21:19:cf:0f:f1:b1: bc:b0:dd:52:64:be:da:81:fb:64:18:f7:22:ca:3e: 1d:3d:f3:20:51:e3:0a:d0:41:70:67:26:66:1c:db: 70:f3:6c:84:15:7d:1e:cc:47:7e:7e:9c:ea:01:34: 66:87:3e:b1:f2:b0:b5:c7:7f:37:a1:e5:fe:b0:78: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:31:CB:E8:94:3A:9E:5E:60:B1:02:7C:F9:14:8A:64:6D:45:8C X509v3 Authority Key Identifier: keyid:CA:7B:F9:7A:5E:16:EE:FA:00:A5:E2:77:FF:4A:C5:AB:E3:08:6E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8D8106EE7F836C3F5DEF05EADA415D5EB60E0479CE6A0C155D0506C1EC167D3/0/CA7BF97A5E16EEFA00A5E277FF4AC5ABE3086EEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d2:94:be:1a:6a:0b:23:64:32:b8:e2:d1:bc:19:fc:8b:f6: 84:bd:00:02:1e:5b:22:50:95:d2:d2:7d:ac:ae:36:d1:a3:42: e3:0b:94:76:20:c9:b8:d9:c5:ca:ff:b9:6b:18:29:6f:d3:ab: 38:ab:09:b9:30:07:ef:9f:15:be:19:5f:d6:a7:d4:80:55:ab: e5:d1:5c:19:d5:8d:20:26:1b:d7:34:17:dc:50:37:18:5c:e5: 4e:1a:f8:6e:81:44:2d:e0:4b:13:df:73:cc:c7:58:6e:38:0a: 0a:f8:92:56:66:99:86:3b:0f:11:e5:06:3a:ae:ef:07:7e:0e: 46:30:75:07:60:ef:27:d2:47:c0:a9:54:fe:3b:cd:9d:71:99: b9:32:ae:16:ce:1f:ee:91:8b:d7:7a:e7:39:bd:b7:47:ad:0b: fb:d5:df:3c:4a:c7:75:db:8f:73:fd:36:1a:62:63:20:d4:20: 66:28:16:58:9d:a8:e8:05:5e:c6:41:b3:84:fe:c6:5f:9e:f2: 9f:4d:63:b7:66:8a:68:76:2f:ee:22:44:46:55:89:c2:21:de: 81:43:be:1a:7a:4b:1a:b4:8a:f5:d7:74:ac:f2:9b:6b:62:50: 72:75:f9:fa:f5:52:fc:0b:60:b5:ea:fc:bc:ba:10:d1:f9:61: 49:7f:11:dd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPiUnWNb+t/HJfwdfxC+KGKH6fscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3QkY5N0E1RTE2RUVGQTAwQTVFMjc3RkY0QUM1QUJF MzA4NkVFRjAeFw0yNTExMDMxNDAyMDdaFw0yNTExMDgxMzI2MDdaMDMxMTAvBgNV BAMTKEExOEYzMUNCRTg5NDNBOUU1RTYwQjEwMjdDRjkxNDhBNjQ2RDQ1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBX2EOKwIQmttj5oZ8Cy5xDwo BP/CA7qbcNh0qw6yagXsrgHXzQ8Zqckobpw3GQclOFIiRCax5SZSX79lryyWRaQJ 9HTCocIj4su5mrB6+qCbn/Cg2DBAVKXUvlQL8JWE6sfuKf60LeXGnyrdEXLXxeuo GYhNmJb5yk5nfaGro40xmfqTOFow3Yc6PWBAutPhbk+tjOhV+suuVX4+2WeTsj2r I+eJ+nTZAX30PGeStY3mietVHtbINluNRyEZzw/xsbyw3VJkvtqB+2QY9yLKPh09 8yBR4wrQQXBnJmYc23DzbIQVfR7MR35+nOoBNGaHPrHysLXHfzeh5f6weAE5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoY8xy+iUOp5eYLECfPkUimRtRYwwHwYDVR0j BBgwFoAUynv5el4W7voApeJ3/0rFq+MIbu8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOEQ4MTA2RUU3RjgzNkMzRjVERUYwNUVBREE0MTVENUVC NjBFMDQ3OUNFNkEwQzE1NUQwNTA2QzFFQzE2N0QzLzAvQ0E3QkY5N0E1RTE2RUVG QTAwQTVFMjc3RkY0QUM1QUJFMzA4NkVFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTdCRjk3QTVFMTZFRUZBMDBB NUUyNzdGRjRBQzVBQkUzMDg2RUVGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzhEODEwNkVFN0Y4MzZDM0Y1REVGMDVFQURBNDE1RDVFQjYwRTA0NzlD RTZBMEMxNTVEMDUwNkMxRUMxNjdEMy8wL0NBN0JGOTdBNUUxNkVFRkEwMEE1RTI3 N0ZGNEFDNUFCRTMwODZFRUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD0pS+GmoLI2QyuOLRvBn8i/aE vQACHlsiUJXS0n2srjbRo0LjC5R2IMm42cXK/7lrGClv06s4qwm5MAfvnxW+GV/W p9SAVavl0VwZ1Y0gJhvXNBfcUDcYXOVOGvhugUQt4EsT33PMx1huOAoK+JJWZpmG Ow8R5QY6ru8Hfg5GMHUHYO8n0kfAqVT+O82dcZm5Mq4Wzh/ukYvXeuc5vbdHrQv7 1d88Ssd1249z/TYaYmMg1CBmKBZYnajoBV7GQbOE/sZfnvKfTWO3Zopodi/uIkRG VYnCId6BQ74aeksatIr113Ss8ptrYlBydfn69VL8C2C16vy8uhDR+WFJfxHd -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:43 2025 by rpki-client