$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft File: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft (raw, json) Hash identifier: vy9JuzZfJY+vkvjcabpAd8xt0J3jX0ynjZLHTdzQk3M= Subject key identifier: 09:77:1A:4F:FD:F1:F8:D7:34:A9:35:DF:66:02:5F:FD:4A:19:12:B4 Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59 Certificate issuer: /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59 Certificate serial: 23AD1D85989F5C05A0F6211E83C1754D49A19A7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft Manifest number: 0131 Signing time: Sun 19 Oct 2025 10:27:54 +0000 Manifest this update: Sun 19 Oct 2025 10:22:54 +0000 Manifest next update: Fri 24 Oct 2025 22:11:54 +0000 Files and hashes: 1: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (hash: LECpA5bPBejVOnzCUoO1kdwDq77N413G1QKuYnH703M=) 2: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (hash: 2dAG7U5n47XTp12aSGxvzNB0rrTxyRySK9VodyiPoqQ=) 3: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl (hash: xX0t7PlfRc/G9qaktBrvebAWLZs9FBaY3T1kadojc9U=) 4: 3139302e382e3137362e302f32322d3232203d3e203532333335.roa (hash: vREyyI+AZN7N3SkaHJXvgZvl0PshHIYkwZO60lmC2W0=) 5: 3138352e37342e31362e302f32332d3233203d3e203532333335.roa (hash: AA9n1lVR5HX9REgcEvpVDwT20zFoSkoU8JDEA1qlUsc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ad:1d:85:98:9f:5c:05:a0:f6:21:1e:83:c1:75:4d:49:a1:9a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59 Validity Not Before: Oct 19 10:22:54 2025 GMT Not After : Oct 24 22:11:54 2025 GMT Subject: CN=09771A4FFDF1F8D734A935DF66025FFD4A1912B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:a1:77:73:f9:6f:77:76:a1:e8:cb:17:01: 7b:fd:e0:33:1b:27:39:a9:15:0a:fb:3e:a2:76:87: 72:33:f5:b0:3b:52:d9:e8:db:75:bd:9f:1c:c2:97: 8e:54:12:52:a3:a1:0b:87:05:0f:7b:8b:45:86:59: e1:5a:1d:66:66:36:67:af:65:f8:5f:4e:4c:86:d0: 1a:84:f8:c8:f3:df:4f:01:7f:65:b1:a9:7b:1e:6b: 73:9e:e8:16:c8:66:57:f8:6b:74:ea:bc:71:4f:cc: 24:d5:e4:c3:53:b4:95:87:a6:91:be:6f:cf:08:99: 11:47:c4:0d:19:b1:8c:34:1b:a6:01:47:1f:cc:3b: 4c:4d:58:cb:a6:75:e0:1d:9b:3e:a6:cf:e3:1e:57: 08:da:45:3d:a9:ab:d3:1a:65:0f:78:14:db:03:48: 73:32:ef:15:ec:b8:1e:65:bb:a3:c1:89:ae:c0:21: 71:6b:c2:08:d2:22:f4:72:c3:61:94:39:c2:a9:dd: bc:a8:a7:74:59:37:9f:60:b1:08:7a:03:fe:c4:c9: 9d:31:7b:58:af:b2:28:96:b6:ab:82:71:b8:a7:22: 8a:5b:c3:19:f9:34:33:74:bc:3c:04:69:3e:13:d9: e4:ff:f3:a9:2e:7e:3f:da:0b:e2:aa:23:a0:71:e4: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:77:1A:4F:FD:F1:F8:D7:34:A9:35:DF:66:02:5F:FD:4A:19:12:B4 X509v3 Authority Key Identifier: keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:79:26:84:19:c8:1f:e3:de:b2:8d:22:7e:13:17:8d:1a:58: 0c:5e:ae:9e:2c:e8:5b:c8:b7:d3:c0:90:8f:35:00:51:3d:5f: 75:f8:d1:61:23:28:0e:a9:c7:de:f7:2e:8b:c8:59:93:d4:f0: 3f:7c:34:b7:7b:20:80:d5:a3:87:51:f1:7f:04:69:f2:5b:37: ec:36:99:95:bd:da:6a:6e:6e:73:67:7e:2f:92:93:d9:65:d0: d5:22:05:d1:de:a7:7b:fa:b2:83:44:b2:76:44:b1:e0:8a:c4: 23:e5:a7:fd:32:7f:ec:b0:bc:6a:49:64:9f:b2:72:0a:ad:8a: b1:45:43:dd:98:d0:5c:ab:0e:f9:f1:d9:00:e5:43:1c:aa:38: 58:b3:8b:a2:30:4f:b9:84:73:4e:4c:65:67:15:e5:d7:9f:37: ac:49:ab:64:44:78:01:58:46:b2:39:f8:93:9c:9c:09:60:cc: e8:51:46:e8:d9:20:b2:1d:cf:24:6d:86:01:04:05:aa:1c:af: fb:5e:6a:87:e8:3c:33:c2:b9:41:8a:4a:f1:9b:36:00:d5:8e: ec:f2:48:41:da:74:2e:89:62:58:49:17:26:5b:57:be:ab:5b: 63:47:be:8c:13:bd:a4:7f:2b:1d:38:77:56:08:d6:b2:92:9e: 03:f1:e5:b3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI60dhZifXAWg9iEeg8F1TUmhmn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGNEVCOTRBM0NBNDI0MEU5OUQ1MTVGODE4QzcwMDkw QTVCRUY1OTAeFw0yNTEwMTkxMDIyNTRaFw0yNTEwMjQyMjExNTRaMDMxMTAvBgNV BAMTKDA5NzcxQTRGRkRGMUY4RDczNEE5MzVERjY2MDI1RkZENEExOTEyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmKF3c/lvd3ah6MsXAXv94DMb JzmpFQr7PqJ2h3Iz9bA7Utno23W9nxzCl45UElKjoQuHBQ97i0WGWeFaHWZmNmev ZfhfTkyG0BqE+Mjz308Bf2WxqXsea3Oe6BbIZlf4a3TqvHFPzCTV5MNTtJWHppG+ b88ImRFHxA0ZsYw0G6YBRx/MO0xNWMumdeAdmz6mz+MeVwjaRT2pq9MaZQ94FNsD SHMy7xXsuB5lu6PBia7AIXFrwgjSIvRyw2GUOcKp3byop3RZN59gsQh6A/7EyZ0x e1ivsiiWtquCcbinIopbwxn5NDN0vDwEaT4T2eT/86kufj/aC+KqI6Bx5ObrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCXcaT/3x+Nc0qTXfZgJf/UoZErQwHwYDVR0j BBgwFoAUz/TrlKPKQkDpnVFfgYxwCQpb71kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80RDA5NjYxRjZBNTUwQjNFMjE2MjdFNTQ5NTdEOENEOEU4 QzdDNUZFREQ5MjIyNkMxRkIwMTk2MUUyNTkzRjEwLzAvQ0ZGNEVCOTRBM0NBNDI0 MEU5OUQ1MTVGODE4QzcwMDkwQTVCRUY1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkY0RUI5NEEzQ0E0MjQwRTk5 RDUxNUY4MThDNzAwOTBBNUJFRjU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEQwOTY2MUY2QTU1MEIzRTIxNjI3RTU0OTU3RDhDRDhFOEM3QzVGRURE OTIyMjZDMUZCMDE5NjFFMjU5M0YxMC8wL0NGRjRFQjk0QTNDQTQyNDBFOTlENTE1 RjgxOEM3MDA5MEE1QkVGNTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7eSaEGcgf496yjSJ+ExeNGlgM Xq6eLOhbyLfTwJCPNQBRPV91+NFhIygOqcfe9y6LyFmT1PA/fDS3eyCA1aOHUfF/ BGnyWzfsNpmVvdpqbm5zZ34vkpPZZdDVIgXR3qd7+rKDRLJ2RLHgisQj5af9Mn/s sLxqSWSfsnIKrYqxRUPdmNBcqw758dkA5UMcqjhYs4uiME+5hHNOTGVnFeXXnzes SatkRHgBWEayOfiTnJwJYMzoUUbo2SCyHc8kbYYBBAWqHK/7XmqH6DwzwrlBikrx mzYA1Y7s8khB2nQuiWJYSRcmW1e+q1tjR76ME72kfysdOHdWCNaykp4D8eWz -----END CERTIFICATE-----Generated at Mon Oct 20 14:14:29 2025 by rpki-client