$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: ntIWA6nadMg5xvUXkp4IFPKAyaXq9xMwxc5puhwE9oM= Subject key identifier: 03:74:D8:4B:9F:F9:08:F2:7D:26:D9:71:0D:CC:9E:D9:E3:85:DB:AB Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 762DD0F21601845CAB1D95021A8EDDC7E1108F1B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 0131 Signing time: Wed 05 Nov 2025 01:21:28 +0000 Manifest this update: Wed 05 Nov 2025 01:16:28 +0000 Manifest next update: Mon 10 Nov 2025 13:36:28 +0000 Files and hashes: 1: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: +A4iKTCl2MV1Tx5ypvBU9+eqzsUV2xgEqANt9HERoD0=) 2: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: R2w0jCj4yorI4GuNs5Kqwg+i6FTq7y3Th2GiadhEbGI=) 3: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: +Ehqe5AsijtKZOHSCGOIJa3pckbUIwcG5kJITFHRXM0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2d:d0:f2:16:01:84:5c:ab:1d:95:02:1a:8e:dd:c7:e1:10:8f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Nov 5 01:16:28 2025 GMT Not After : Nov 10 13:36:28 2025 GMT Subject: CN=0374D84B9FF908F27D26D9710DCC9ED9E385DBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:b2:fc:d5:af:8e:e1:54:4f:b6:a5:e5:68: 58:d8:55:47:54:f9:80:d5:e6:15:0d:d6:d2:40:f3: 3e:fd:a3:0f:f7:40:3a:03:91:fe:8e:eb:a6:cb:a8: f3:5d:9d:7b:47:13:9e:0f:63:f1:dd:10:ca:0e:cd: 2c:47:5c:78:ff:c7:6b:9b:e0:20:50:0d:bb:6a:cd: a9:73:2b:15:30:88:ee:8a:28:51:95:c4:37:d1:e9: b1:92:66:16:d3:01:c2:08:11:b7:e7:f0:db:7b:6b: 00:1a:f4:c0:54:f1:41:54:d2:31:ce:7c:0c:fc:48: c2:2d:45:a6:89:d5:34:d8:10:05:06:af:39:a3:66: 03:aa:98:f0:e5:e1:3e:4e:04:98:2e:ca:07:62:ce: 51:41:df:ec:72:01:14:02:66:a7:3d:95:c0:8d:c7: 42:3d:5b:30:22:62:4e:e3:eb:94:71:68:0c:e4:59: c9:75:39:b3:03:85:ae:53:f8:f8:88:96:ba:ae:4d: 15:50:b8:80:bf:4e:19:bd:ae:e8:0d:21:f7:90:3f: b1:c5:e5:0b:2d:62:97:67:18:ea:36:6d:fd:af:5f: af:5d:88:4c:b1:f2:ac:59:c1:16:63:d4:6c:55:b8: f2:ba:a2:8c:6f:37:5e:ec:0d:b9:10:94:0c:fa:23: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:D8:4B:9F:F9:08:F2:7D:26:D9:71:0D:CC:9E:D9:E3:85:DB:AB X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:e6:32:32:0d:61:0c:b0:46:4f:2e:58:01:d8:cf:11:3f: 90:b7:d0:b2:bc:d3:cf:a8:e6:7d:42:97:28:0c:5d:02:57:d0: d4:ee:2b:0b:57:60:b1:91:40:98:3b:e1:a2:46:ec:a3:d1:2e: 46:07:7e:2b:8f:2f:ce:05:59:f0:bc:a4:3f:70:f6:73:3e:a2: 58:a3:27:69:4c:50:c9:32:24:bd:aa:a4:a8:37:07:6a:9a:14: bc:be:b6:80:79:a4:d0:6e:09:6c:ec:6f:56:c8:eb:99:60:40: 29:e7:ae:18:dc:11:a0:5c:b7:c3:c2:3b:2c:ed:8e:b8:fa:df: 1e:07:ab:d4:b1:f6:c7:26:bb:d5:81:8b:c7:15:43:e7:1c:c6: d2:3f:32:1a:81:31:68:be:ba:1d:f9:5e:10:c2:37:18:fb:6e: ef:d4:d4:75:19:8c:b9:c7:4e:c8:dd:e0:81:5b:28:44:fa:ff: fd:17:c8:f4:aa:75:11:66:b9:44:79:b8:4b:b3:78:8d:03:fd: 0c:0d:4e:b1:c8:b4:23:65:88:ec:de:3b:84:3d:53:a8:1c:c8: 28:38:d3:4f:82:c9:91:30:28:54:98:f2:59:5f:58:76:e9:57: 29:05:f4:9f:c6:90:c7:5d:1a:54:0c:68:e5:4f:f8:f2:11:2b: 94:51:56:c3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdi3Q8hYBhFyrHZUCGo7dx+EQjxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNTExMDUwMTE2MjhaFw0yNTExMTAxMzM2MjhaMDMxMTAvBgNV BAMTKDAzNzREODRCOUZGOTA4RjI3RDI2RDk3MTBEQ0M5RUQ5RTM4NURCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOZLL81a+O4VRPtqXlaFjYVUdU +YDV5hUN1tJA8z79ow/3QDoDkf6O66bLqPNdnXtHE54PY/HdEMoOzSxHXHj/x2ub 4CBQDbtqzalzKxUwiO6KKFGVxDfR6bGSZhbTAcIIEbfn8Nt7awAa9MBU8UFU0jHO fAz8SMItRaaJ1TTYEAUGrzmjZgOqmPDl4T5OBJguygdizlFB3+xyARQCZqc9lcCN x0I9WzAiYk7j65RxaAzkWcl1ObMDha5T+PiIlrquTRVQuIC/Thm9rugNIfeQP7HF 5QstYpdnGOo2bf2vX69diEyx8qxZwRZj1GxVuPK6ooxvN17sDbkQlAz6I9lNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUA3TYS5/5CPJ9JtlxDcye2eOF26swHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBT+eYyMg1hDLBGTy5YAdjPET+Q t9CyvNPPqOZ9QpcoDF0CV9DU7isLV2CxkUCYO+GiRuyj0S5GB34rjy/OBVnwvKQ/ cPZzPqJYoydpTFDJMiS9qqSoNwdqmhS8vraAeaTQbgls7G9WyOuZYEAp564Y3BGg XLfDwjss7Y64+t8eB6vUsfbHJrvVgYvHFUPnHMbSPzIagTFovrod+V4QwjcY+27v 1NR1GYy5x07I3eCBWyhE+v/9F8j0qnURZrlEebhLs3iNA/0MDU6xyLQjZYjs3juE PVOoHMgoONNPgsmRMChUmPJZX1h26VcpBfSfxpDHXRpUDGjlT/jyESuUUVbD -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:45 2025 by rpki-client