$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft File: EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft (raw, json) Hash identifier: 3c4/HkQlA9j8YDXhPsbikXD/XoAE+IpTVCVE/AUbfpk= Subject key identifier: 7F:77:AC:F7:D6:FA:CA:53:D9:8D:9A:31:B7:9D:F2:AE:E6:96:B8:54 Authority key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52 Certificate issuer: /CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52 Certificate serial: 40A3246C495052DDDB66BC5716315932C56B83EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft Manifest number: 0120 Signing time: Fri 17 Oct 2025 09:15:22 +0000 Manifest this update: Fri 17 Oct 2025 09:10:22 +0000 Manifest next update: Thu 23 Oct 2025 04:55:22 +0000 Files and hashes: 1: 323830333a323363303a3a2f33322d3438203d3e203532343434.roa (hash: 9dMrJ4n4SbQNZPKrI9zVNGYZpNpV9xPcLDMG3pbIj6w=) 2: EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl (hash: ez6YHzuHgmVvnfi5miXxdKWdXf7ZX7G90v8Y9CHFZEU=) 3: 34352e372e3234302e302f32322d3234203d3e203532343434.roa (hash: Whyu8HjeYjmaiHjxKG1nNjPC2A1UqHFnHswAg59WUpM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 04:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a3:24:6c:49:50:52:dd:db:66:bc:57:16:31:59:32:c5:6b:83:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52 Validity Not Before: Oct 17 09:10:22 2025 GMT Not After : Oct 23 04:55:22 2025 GMT Subject: CN=7F77ACF7D6FACA53D98D9A31B79DF2AEE696B854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:7f:ce:83:06:e6:a5:00:be:ee:eb:37:a0: de:02:83:e5:be:5f:46:9a:d0:f7:ea:84:b6:4b:40: 0e:82:11:5b:c4:ca:51:46:9e:a1:59:97:69:68:43: e7:a7:53:a4:08:7e:75:2f:fa:61:d0:1d:a1:18:29: 2d:59:fd:90:b6:53:f6:e8:60:74:fa:d4:3f:cb:31: 9b:c1:d7:00:e8:09:28:c2:35:ac:0c:76:de:1c:5f: 1d:0e:af:3d:73:98:a2:86:ce:77:a6:a4:7a:b1:45: d0:df:07:13:9f:2c:11:27:0c:0b:47:e0:fd:62:a6: 8f:1a:d8:85:52:22:f0:14:f2:02:7d:24:57:b7:b1: 37:11:97:07:4b:5f:09:02:a3:90:22:93:bc:aa:71: 1a:fa:e9:c7:2a:c9:22:5a:47:2b:5b:fa:3b:c4:eb: a8:21:15:9f:45:af:1b:7e:4b:de:c8:52:fd:69:68: 1c:e6:50:47:2d:01:c5:68:b5:1c:b3:9a:79:be:92: be:00:fb:02:82:31:cd:c7:1d:17:73:28:91:d7:0d: 90:cc:13:91:30:70:1e:fa:06:c8:97:bf:dd:a2:92: 64:68:17:7c:08:e2:c4:92:29:db:c7:49:91:a1:57: 4b:75:2c:bd:92:26:78:3d:1e:1c:9e:a2:0b:8a:b0: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:AC:F7:D6:FA:CA:53:D9:8D:9A:31:B7:9D:F2:AE:E6:96:B8:54 X509v3 Authority Key Identifier: keyid:EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f4:91:f9:eb:8e:67:e2:2b:fb:24:30:ea:11:3b:c1:0c:b7: ca:75:41:4f:36:a7:45:62:4b:83:82:5f:2d:f9:dc:a7:73:a8: 00:90:7f:77:f7:7d:5d:76:fa:0a:e1:cb:96:ae:63:8c:b8:d1: d8:22:6e:57:d0:78:68:50:a5:3c:56:a5:3c:35:8f:f1:5f:7f: 74:a9:1d:6a:6a:83:5e:30:7c:61:2b:25:4d:e2:bb:80:aa:51: 67:4d:5c:36:a1:1d:a1:19:0f:ca:d2:05:70:cc:36:fd:30:7b: d9:e3:a4:35:a4:a6:40:76:fb:b4:6b:f3:fd:da:12:01:cd:34: f1:35:05:da:96:24:86:bb:c8:a9:e9:ab:f8:1a:6f:95:c2:02: d9:58:89:93:bf:ad:19:3c:b8:e1:0a:e9:ad:2a:56:7c:e8:fc: 0c:8e:03:59:fc:51:8c:fe:7d:99:48:73:ed:43:fd:bf:90:d3: 87:2c:0e:84:47:92:41:18:83:94:18:53:ec:f5:2d:5d:8a:8e: 65:9e:58:fa:e1:a6:0c:bc:54:c6:0f:5f:65:74:17:93:4d:16: 1b:32:b7:25:31:0a:4f:3e:02:93:df:ac:53:9f:cd:8d:9e:a4: 04:00:fa:a7:65:d6:b9:52:e2:14:54:d2:88:e3:e6:e7:b3:f2: a7:22:db:41 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQKMkbElQUt3bZrxXFjFZMsVrg+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1MkE3QjA2QzAwQTc5QTYxQ0JGMkM3MTIzMkFGNjFE M0REQUY1MjAeFw0yNTEwMTcwOTEwMjJaFw0yNTEwMjMwNDU1MjJaMDMxMTAvBgNV BAMTKDdGNzdBQ0Y3RDZGQUNBNTNEOThEOUEzMUI3OURGMkFFRTY5NkI4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/S3/OgwbmpQC+7us3oN4Cg+W+ X0aa0PfqhLZLQA6CEVvEylFGnqFZl2loQ+enU6QIfnUv+mHQHaEYKS1Z/ZC2U/bo YHT61D/LMZvB1wDoCSjCNawMdt4cXx0Orz1zmKKGznempHqxRdDfBxOfLBEnDAtH 4P1ipo8a2IVSIvAU8gJ9JFe3sTcRlwdLXwkCo5Aik7yqcRr66ccqySJaRytb+jvE 66ghFZ9Frxt+S97IUv1paBzmUEctAcVotRyzmnm+kr4A+wKCMc3HHRdzKJHXDZDM E5EwcB76BsiXv92ikmRoF3wI4sSSKdvHSZGhV0t1LL2SJng9HhyeoguKsB95AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUf3es99b6ylPZjZoxt53yruaWuFQwHwYDVR0j BBgwFoAU7FKnsGwAp5phy/LHEjKvYdPdr1IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RTUzQjVGODAxN0U2RTQ3Mjk0MzU1RDkwQ0NCQTBDMjI0 QTE1NjQ2REQ5NzAxN0Y4RkUwQkJBQkQ3NkUxQUI5LzAvRUM1MkE3QjA2QzAwQTc5 QTYxQ0JGMkM3MTIzMkFGNjFEM0REQUY1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzUyQTdCMDZDMDBBNzlBNjFD QkYyQzcxMjMyQUY2MUQzRERBRjUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkU1M0I1RjgwMTdFNkU0NzI5NDM1NUQ5MENDQkEwQzIyNEExNTY0NkRE OTcwMTdGOEZFMEJCQUJENzZFMUFCOS8wL0VDNTJBN0IwNkMwMEE3OUE2MUNCRjJD NzEyMzJBRjYxRDNEREFGNTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe9JH5645n4iv7JDDqETvBDLfK dUFPNqdFYkuDgl8t+dync6gAkH93931ddvoK4cuWrmOMuNHYIm5X0HhoUKU8VqU8 NY/xX390qR1qaoNeMHxhKyVN4ruAqlFnTVw2oR2hGQ/K0gVwzDb9MHvZ46Q1pKZA dvu0a/P92hIBzTTxNQXaliSGu8ip6av4Gm+VwgLZWImTv60ZPLjhCumtKlZ86PwM jgNZ/FGM/n2ZSHPtQ/2/kNOHLA6ER5JBGIOUGFPs9S1dio5lnlj64aYMvFTGD19l dBeTTRYbMrclMQpPPgKT36xTn82NnqQEAPqnZda5UuIUVNKI4+bns/KnIttB -----END CERTIFICATE-----Generated at Mon Oct 20 00:36:12 2025 by rpki-client