$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft File: 5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft (raw, json) Hash identifier: 2sh6K9+zbt48QvKyLCBcbWkv0rEL+vQlXq/KyQu6Ja0= Subject key identifier: 7F:65:BD:D5:6C:FD:B6:C5:63:FF:38:A6:19:C2:1F:D9:8B:F3:62:CD Authority key identifier: 54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4 Certificate issuer: /CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4 Certificate serial: 76AD31F2A6CAEBA80C04B7CCA7F1C1CB607603C4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft Manifest number: BF Signing time: Sat 18 Oct 2025 22:29:28 +0000 Manifest this update: Sat 18 Oct 2025 22:24:28 +0000 Manifest next update: Fri 24 Oct 2025 15:53:28 +0000 Files and hashes: 1: 5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl (hash: tgnuIrK/kzgeTQJycRa+EJPKoMQLADDLr/zzP0oTROU=) 2: 323830363a3431333a3a2f33322d3438203d3e20323732333632.roa (hash: 3gei3c3TJdAEt3+8CEVzip+xVBL8sD0wxQZ5kOaWLIc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ad:31:f2:a6:ca:eb:a8:0c:04:b7:cc:a7:f1:c1:cb:60:76:03:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4 Validity Not Before: Oct 18 22:24:28 2025 GMT Not After : Oct 24 15:53:28 2025 GMT Subject: CN=7F65BDD56CFDB6C563FF38A619C21FD98BF362CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:70:8c:2c:81:fa:d0:f2:37:65:67:6f:37: 8c:1d:08:2a:63:e6:dc:9d:ed:6f:c6:6e:38:d7:0c: 26:c2:30:9c:d9:e5:a2:72:a5:bb:8a:dd:3f:7c:ad: a2:a1:64:19:b8:0d:55:ff:13:dd:5b:5a:84:3e:1b: 88:43:f4:8b:c0:81:8a:10:db:5d:f2:4c:66:f1:dc: 02:57:38:fe:03:cc:33:e7:9a:cd:6c:4c:58:84:ef: 36:9d:6d:8b:f1:69:db:96:fd:7e:0b:f6:f5:15:4d: 05:8f:cb:e0:50:4a:0f:1a:eb:02:32:5c:5b:35:5d: d6:b4:fd:f2:07:9e:52:28:3d:70:7c:89:06:f0:38: e1:dd:97:60:c0:3e:9f:33:10:7e:4d:24:88:eb:54: 3c:a6:f7:c4:a6:78:da:ef:69:7c:21:4a:1f:7e:b7: d2:33:32:78:b1:43:f4:d5:75:6e:cb:15:a4:89:ac: 62:3c:a5:5c:50:7c:3d:2d:b6:74:5d:2c:bc:5e:54: 32:92:15:ed:4c:30:01:e5:50:e6:44:0f:48:79:10: 4b:46:aa:d9:cd:7e:39:29:6a:9d:13:81:d3:bb:b4: e9:6a:74:b1:d7:d5:fb:78:ea:ce:67:66:a6:a9:8d: 16:33:c0:70:95:20:8b:c2:a8:6a:8a:1f:3e:df:88: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:65:BD:D5:6C:FD:B6:C5:63:FF:38:A6:19:C2:1F:D9:8B:F3:62:CD X509v3 Authority Key Identifier: keyid:54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bb:8e:8f:eb:80:8f:dd:b5:1d:04:a8:9f:7f:cc:3f:2d:ad: b2:4e:92:3b:c8:9c:96:ce:21:36:5b:25:1c:0a:7a:ac:d1:e0: fb:68:80:26:49:aa:5a:28:e6:cd:29:12:c5:3a:97:50:fd:bf: e6:50:72:ad:e8:e9:55:4b:42:08:38:b1:a1:6b:28:52:57:fb: 5f:eb:2e:d0:99:38:3b:b6:d6:7e:71:97:0d:de:ed:aa:ac:b7: e9:04:46:cc:ce:e8:54:ae:f1:ff:d6:86:59:3a:78:90:58:da: 7e:f7:52:35:e0:41:0a:e6:8e:d5:77:6c:a2:c1:7f:9c:5e:e3: 50:8e:8d:28:2d:0a:6e:ed:de:a7:4e:24:77:b4:e7:fe:49:78: 74:a5:61:f8:bb:ac:0b:8e:d7:0a:62:f4:99:54:5f:13:ed:7b: 4b:c1:ef:40:44:3e:3c:34:2a:90:77:65:78:24:01:6d:9b:68: c9:77:5b:ce:5c:17:8a:f3:c0:38:c3:51:21:6a:53:84:ba:b7: c9:23:ae:f2:8e:dc:31:c5:e6:f7:89:2c:ba:29:49:e6:20:15: 78:f3:b3:fb:29:6a:1f:dd:3b:76:40:2b:c5:d5:55:58:55:ce: 8a:45:0f:89:ab:fb:40:9c:a0:f5:75:16:36:f0:66:13:06:af: 68:79:dd:31 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdq0x8qbK66gMBLfMp/HBy2B2A8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ1OENBMUIxMEJDMjgzQTIxRTlDOUQzNTY5MDM4RTgw RjU2NzZFNDAeFw0yNTEwMTgyMjI0MjhaFw0yNTEwMjQxNTUzMjhaMDMxMTAvBgNV BAMTKDdGNjVCREQ1NkNGREI2QzU2M0ZGMzhBNjE5QzIxRkQ5OEJGMzYyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvP3CMLIH60PI3ZWdvN4wdCCpj 5tyd7W/GbjjXDCbCMJzZ5aJypbuK3T98raKhZBm4DVX/E91bWoQ+G4hD9IvAgYoQ 213yTGbx3AJXOP4DzDPnms1sTFiE7zadbYvxaduW/X4L9vUVTQWPy+BQSg8a6wIy XFs1Xda0/fIHnlIoPXB8iQbwOOHdl2DAPp8zEH5NJIjrVDym98SmeNrvaXwhSh9+ t9IzMnixQ/TVdW7LFaSJrGI8pVxQfD0ttnRdLLxeVDKSFe1MMAHlUOZED0h5EEtG qtnNfjkpap0TgdO7tOlqdLHX1ft46s5nZqapjRYzwHCVIIvCqGqKHz7fiEtvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUf2W91Wz9tsVj/zimGcIf2YvzYs0wHwYDVR0j BBgwFoAUVFjKGxC8KDoh6cnTVpA46A9WduQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yNjU4NjM5MjI1NjAxNDM2QzE5QkYxNTA0MzQ4OEJCQjQ5 MjA4REYyQjAyMDkxRUJDQkVCRDA4QTYyRkYyNjQ1LzAvNTQ1OENBMUIxMEJDMjgz QTIxRTlDOUQzNTY5MDM4RTgwRjU2NzZFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NDU4Q0ExQjEwQkMyODNBMjFF OUM5RDM1NjkwMzhFODBGNTY3NkU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjY1ODYzOTIyNTYwMTQzNkMxOUJGMTUwNDM0ODhCQkI0OTIwOERGMkIw MjA5MUVCQ0JFQkQwOEE2MkZGMjY0NS8wLzU0NThDQTFCMTBCQzI4M0EyMUU5QzlE MzU2OTAzOEU4MEY1Njc2RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFu46P64CP3bUdBKiff8w/La2y TpI7yJyWziE2WyUcCnqs0eD7aIAmSapaKObNKRLFOpdQ/b/mUHKt6OlVS0IIOLGh ayhSV/tf6y7QmTg7ttZ+cZcN3u2qrLfpBEbMzuhUrvH/1oZZOniQWNp+91I14EEK 5o7Vd2yiwX+cXuNQjo0oLQpu7d6nTiR3tOf+SXh0pWH4u6wLjtcKYvSZVF8T7XtL we9ARD48NCqQd2V4JAFtm2jJd1vOXBeK88A4w1EhalOEurfJI67yjtwxxeb3iSy6 KUnmIBV487P7KWof3Tt2QCvF1VVYVc6KRQ+Jq/tAnKD1dRY28GYTBq9oed0x -----END CERTIFICATE-----Generated at Mon Oct 20 10:55:07 2025 by rpki-client