$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft File: C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft (raw, json) Hash identifier: Fv73vSwe+9vFUnZeyFoFMKGfMZWUYzZf3Ss1g8nCdcE= Subject key identifier: 74:E3:8B:09:D5:85:78:AC:DA:51:97:1D:F1:50:26:39:B5:C1:7C:E6 Authority key identifier: C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82 Certificate issuer: /CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982 Certificate serial: 6B4F874EF96FD7B637821DBB66FEC0DCDB09484D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft Manifest number: 012C Signing time: Tue 04 Nov 2025 10:03:20 +0000 Manifest this update: Tue 04 Nov 2025 09:58:20 +0000 Manifest next update: Sat 08 Nov 2025 21:55:20 +0000 Files and hashes: 1: 3137372e3230302e3233382e302f32332d3234203d3e20323639393833.roa (hash: /AZGGJO6JfRPKTzT9VJDzGjJgoqotE6CkvbZX42NXac=) 2: C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl (hash: emfIRzXHwt6zft22NO989ZTh8frXb56qUpAr0jrPcSU=) 3: 323830333a326565303a3a2f33322d3438203d3e20323639393833.roa (hash: 20dhYSeJNmiJ0gq0ycna7RczAtYwTwSv/nYb0+F/uUs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 21:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4f:87:4e:f9:6f:d7:b6:37:82:1d:bb:66:fe:c0:dc:db:09:48:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982 Validity Not Before: Nov 4 09:58:20 2025 GMT Not After : Nov 8 21:55:20 2025 GMT Subject: CN=74E38B09D58578ACDA51971DF1502639B5C17CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:c3:40:99:4f:6e:3f:86:dc:81:f4:45:b3: 61:09:1e:70:e7:67:b7:df:16:fe:bf:85:59:ad:45: 7a:99:89:e6:67:f6:0b:68:23:46:ad:7a:2e:71:3d: cc:e4:97:b6:13:66:a8:c0:9a:de:72:23:07:23:de: 39:89:7f:61:95:9c:88:9b:13:83:c1:5e:e8:c5:d2: f2:8e:ad:3b:a4:96:29:25:85:0d:fe:d7:a6:28:a1: a0:75:0c:7f:37:4f:06:d7:61:7a:40:ca:52:10:db: 99:dc:71:60:f8:c0:11:3b:c1:b4:1c:b4:b4:19:b5: b0:54:be:a0:56:19:d8:d9:ae:6f:d0:e7:17:a7:6b: dc:7e:8e:b7:ba:a2:71:13:5b:f6:4c:78:52:d4:91: 36:85:0f:f0:9a:0a:e5:ba:57:dc:07:55:d4:b2:52: 43:8f:e3:c7:01:cc:6f:54:5e:7f:4c:bf:ec:7c:29: 99:d8:85:ff:11:b8:bf:c8:ee:b8:ef:cd:35:9a:1e: 1f:28:14:8f:d5:6b:77:9e:b9:17:5c:be:a1:2d:1f: b6:68:6c:b5:c6:1b:9f:dc:d0:e8:14:2b:e2:72:99: 61:fd:b7:64:26:e6:24:da:fe:51:6f:b5:38:bd:8b: f6:2d:9f:bc:10:21:ce:5f:3e:4e:d3:96:80:fa:73: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:8B:09:D5:85:78:AC:DA:51:97:1D:F1:50:26:39:B5:C1:7C:E6 X509v3 Authority Key Identifier: keyid:C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ed:23:e4:f6:71:e2:3b:e8:6f:92:86:1a:b6:e0:57:35:c8: ba:ba:51:db:57:cc:e3:f4:91:eb:0a:dc:53:aa:ca:c8:62:d6: 53:7a:a3:4d:90:bc:e8:79:82:4c:b7:c0:06:85:87:8a:9f:4a: 35:b0:0c:13:32:22:f6:19:65:bc:19:31:dd:db:07:cf:e3:a5: e7:6d:e3:98:84:1e:26:34:e0:27:d0:29:a6:ac:9b:d1:1f:53: c7:63:4d:33:bb:bc:04:38:c3:63:5e:66:de:18:11:2d:aa:fd: 1d:db:b5:22:c4:b6:4d:26:a8:6b:b9:96:86:a8:14:5e:43:f9: 3b:d2:8f:f6:3d:65:e1:df:71:7c:1f:6a:a7:2b:01:95:00:9b: d7:4c:4e:b5:8f:39:45:6d:75:29:31:de:3b:37:6b:6b:3d:87: 37:64:5e:e1:6f:54:14:d3:41:2c:1c:4e:7f:a4:64:e9:65:10: a4:08:5d:cd:f0:c0:74:a4:9c:1c:06:e0:98:4d:49:f9:4f:b2: bb:09:e5:29:eb:9b:84:7a:2e:bc:ac:d0:a3:59:e9:52:8e:df: e4:d3:5d:f8:29:e1:7b:c6:79:7c:99:3f:24:32:7f:66:e7:96: 02:46:fe:ba:af:d4:4f:7b:c3:a4:d5:57:44:9c:26:18:2b:a5: 0d:c4:e2:a5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa0+HTvlv17Y3gh27Zv7A3NsJSE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDODY4REFFNDYyQ0YxRUZBQzRFRjM1QjI1MTUwNUFD NEM3Rjk4MjAeFw0yNTExMDQwOTU4MjBaFw0yNTExMDgyMTU1MjBaMDMxMTAvBgNV BAMTKDc0RTM4QjA5RDU4NTc4QUNEQTUxOTcxREYxNTAyNjM5QjVDMTdDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4sNAmU9uP4bcgfRFs2EJHnDn Z7ffFv6/hVmtRXqZieZn9gtoI0atei5xPczkl7YTZqjAmt5yIwcj3jmJf2GVnIib E4PBXujF0vKOrTukliklhQ3+16YooaB1DH83TwbXYXpAylIQ25nccWD4wBE7wbQc tLQZtbBUvqBWGdjZrm/Q5xena9x+jre6onETW/ZMeFLUkTaFD/CaCuW6V9wHVdSy UkOP48cBzG9UXn9Mv+x8KZnYhf8RuL/I7rjvzTWaHh8oFI/Va3eeuRdcvqEtH7Zo bLXGG5/c0OgUK+JymWH9t2Qm5iTa/lFvtTi9i/Ytn7wQIc5fPk7TloD6cyXBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdOOLCdWFeKzaUZcd8VAmObXBfOYwHwYDVR0j BBgwFoAUwcho2uRizx76xO81slFQWsTH+YIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRkEwNUI5MUMwQjY1MDJGMzgzQzczQkNDRTcyODczRDEz NDIyQTBDMjJCMEJDNEEzMEFFMUZGNTNCNEIyODMzLzAvQzFDODY4REFFNDYyQ0Yx RUZBQzRFRjM1QjI1MTUwNUFDNEM3Rjk4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMUM4NjhEQUU0NjJDRjFFRkFD NEVGMzVCMjUxNTA1QUM0QzdGOTgyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0ZBMDVCOTFDMEI2NTAyRjM4M0M3M0JDQ0U3Mjg3M0QxMzQyMkEwQzIy QjBCQzRBMzBBRTFGRjUzQjRCMjgzMy8wL0MxQzg2OERBRTQ2MkNGMUVGQUM0RUYz NUIyNTE1MDVBQzRDN0Y5ODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/7SPk9nHiO+hvkoYatuBXNci6 ulHbV8zj9JHrCtxTqsrIYtZTeqNNkLzoeYJMt8AGhYeKn0o1sAwTMiL2GWW8GTHd 2wfP46XnbeOYhB4mNOAn0CmmrJvRH1PHY00zu7wEOMNjXmbeGBEtqv0d27UixLZN JqhruZaGqBReQ/k70o/2PWXh33F8H2qnKwGVAJvXTE61jzlFbXUpMd47N2trPYc3 ZF7hb1QU00EsHE5/pGTpZRCkCF3N8MB0pJwcBuCYTUn5T7K7CeUp65uEei68rNCj WelSjt/k0134KeF7xnl8mT8kMn9m55YCRv66r9RPe8Ok1VdEnCYYK6UNxOKl -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:44 2025 by rpki-client