$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft File: CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft (raw, json) Hash identifier: zdgaiyZxiW7oLObAA0IXFTZP2LrrlghIhN3wlgQp6w8= Subject key identifier: DC:A1:D3:14:F5:56:59:8F:C5:DA:83:9C:8C:14:87:95:D8:AA:B4:EA Authority key identifier: CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D Certificate issuer: /CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D Certificate serial: 0E88AF071D8C6D34E7E3B41D146B5B607C0F4DB8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft Manifest number: 012B Signing time: Sun 19 Oct 2025 10:12:46 +0000 Manifest this update: Sun 19 Oct 2025 10:07:46 +0000 Manifest next update: Fri 24 Oct 2025 03:26:46 +0000 Files and hashes: 1: 323830333a313265303a3a2f33322d3332203d3e20323639393234.roa (hash: T3kuSsUQg8wLrJbQLbZUZYrWwt/NFR0jQ0OQgfO9Cn4=) 2: CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl (hash: 3coC64ObFOiNTgN8ihcxvxRwst7INmPaNHpYbltwmvw=) 3: 3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa (hash: HwF8jM6XhVJlwX2VuQmMsPtBvqjrEGL6EWEhZzl60pA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:88:af:07:1d:8c:6d:34:e7:e3:b4:1d:14:6b:5b:60:7c:0f:4d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D Validity Not Before: Oct 19 10:07:46 2025 GMT Not After : Oct 24 03:26:46 2025 GMT Subject: CN=DCA1D314F556598FC5DA839C8C148795D8AAB4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:19:29:2b:3c:05:0e:0e:d7:0d:ab:38:f1: 43:ef:4d:ca:63:83:23:58:c6:06:a7:e1:9a:de:de: 44:a5:2b:4c:f4:ce:9e:25:f1:68:c5:24:2a:cd:01: ed:40:a1:5b:a4:53:34:5b:26:cb:40:61:f7:66:e4: 9a:b4:68:7e:02:ae:bd:8b:ce:8b:e9:60:75:32:c7: 6b:26:f5:a7:67:cb:a3:ec:f7:c0:c9:25:1f:39:47: 24:2a:63:c9:9e:e4:87:0d:5f:7d:b6:93:fb:9f:2e: 14:20:1f:93:e5:19:e9:9c:89:4f:57:09:84:5c:3e: a8:dd:18:2c:fa:b3:59:27:04:9f:9f:48:84:b4:77: 78:32:ed:38:a5:74:f1:dc:a1:0c:d7:10:e9:2f:2e: 42:67:04:5d:7f:db:20:93:ea:07:08:9e:31:b8:2e: 2a:cc:e7:ae:41:c1:eb:d4:97:d6:b9:c5:a4:cb:78: 68:33:45:8e:18:82:39:c4:77:33:b5:01:e4:8f:4f: 76:1a:2b:2a:34:33:b5:ff:cb:60:05:f2:df:3c:0e: c7:1e:b2:fc:2a:65:f5:09:d1:6d:ed:62:ce:d5:41: 73:a2:89:7e:3f:1b:fa:da:7a:12:00:bf:b1:44:6b: fc:3f:2c:6b:c5:8c:38:61:b9:3c:8b:c8:3d:ea:30: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A1:D3:14:F5:56:59:8F:C5:DA:83:9C:8C:14:87:95:D8:AA:B4:EA X509v3 Authority Key Identifier: keyid:CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:f4:20:67:ac:7d:be:3f:58:9c:6b:3d:0e:37:62:2f:b9: ba:1e:c9:5c:8f:85:3b:40:d2:02:2e:a5:1e:b4:6c:97:70:60: 0c:43:8f:e1:26:bd:21:68:cb:be:24:57:23:b4:41:67:4c:18: 7d:af:10:40:ea:87:31:89:bb:70:7b:8c:6e:ac:4a:e2:96:81: fb:93:6d:0d:d1:bc:d9:74:e8:52:d9:ea:6e:48:96:78:c7:31: 7d:23:22:06:17:6e:f0:9d:5c:e4:70:c1:75:f3:8e:7e:08:b6: 7c:ba:ec:e1:e9:1d:23:5b:3f:f1:df:03:6b:a9:a1:49:67:4e: 3e:57:6f:fe:6c:2a:b6:7a:32:24:ee:18:a7:f7:c0:bc:60:dc: 88:d9:7a:96:5e:bb:23:80:20:7f:a0:ff:f4:ae:24:59:9f:9a: dc:30:3c:91:54:1d:82:d3:5a:f9:c4:cf:ed:3c:e0:41:02:22: e0:49:82:b0:f4:fb:55:e9:44:26:2c:fa:e1:87:ef:b9:4c:6a: 81:22:29:f7:22:6d:81:31:26:55:38:8a:6e:c9:79:bf:f8:6b: 53:0f:aa:ba:e2:f1:54:27:41:15:ed:d2:48:01:67:dd:2e:2e: 5f:ba:f3:30:a5:08:8f:a1:51:6d:05:eb:05:e4:c7:94:55:1f: 2f:5b:68:43 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDoivBx2MbTTn47QdFGtbYHwPTbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCREFEOUM3MUU2MTM0MjU2NUVCM0Q2NTQwMjlGNDFG MkFGNTMzRDAeFw0yNTEwMTkxMDA3NDZaFw0yNTEwMjQwMzI2NDZaMDMxMTAvBgNV BAMTKERDQTFEMzE0RjU1NjU5OEZDNURBODM5QzhDMTQ4Nzk1RDhBQUI0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR4xkpKzwFDg7XDas48UPvTcpj gyNYxgan4Zre3kSlK0z0zp4l8WjFJCrNAe1AoVukUzRbJstAYfdm5Jq0aH4Crr2L zovpYHUyx2sm9adny6Ps98DJJR85RyQqY8me5IcNX322k/ufLhQgH5PlGemciU9X CYRcPqjdGCz6s1knBJ+fSIS0d3gy7TildPHcoQzXEOkvLkJnBF1/2yCT6gcInjG4 LirM565BwevUl9a5xaTLeGgzRY4YgjnEdzO1AeSPT3YaKyo0M7X/y2AF8t88Dsce svwqZfUJ0W3tYs7VQXOiiX4/G/raehIAv7FEa/w/LGvFjDhhuTyLyD3qMFcpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3KHTFPVWWY/F2oOcjBSHldiqtOowHwYDVR0j BBgwFoAUzr2tnHHmE0JWXrPWVAKfQfKvUz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MDI4ODdDRDMzQjA5QTBFOEY4OTAyMTdEQjAzRkEwQjg4 OUQ0NzhGQjE2MzkxMEU4NDRDQTAxMEE0OENDMjc1LzAvQ0VCREFEOUM3MUU2MTM0 MjU2NUVCM0Q2NTQwMjlGNDFGMkFGNTMzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUJEQUQ5QzcxRTYxMzQyNTY1 RUIzRDY1NDAyOUY0MUYyQUY1MzNELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTAyODg3Q0QzM0IwOUEwRThGODkwMjE3REIwM0ZBMEI4ODlENDc4RkIx NjM5MTBFODQ0Q0EwMTBBNDhDQzI3NS8wL0NFQkRBRDlDNzFFNjEzNDI1NjVFQjNE NjU0MDI5RjQxRjJBRjUzM0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuBfQgZ6x9vj9YnGs9DjdiL7m6 Hslcj4U7QNICLqUetGyXcGAMQ4/hJr0haMu+JFcjtEFnTBh9rxBA6ocxibtwe4xu rEriloH7k20N0bzZdOhS2epuSJZ4xzF9IyIGF27wnVzkcMF1845+CLZ8uuzh6R0j Wz/x3wNrqaFJZ04+V2/+bCq2ejIk7hin98C8YNyI2XqWXrsjgCB/oP/0riRZn5rc MDyRVB2C01r5xM/tPOBBAiLgSYKw9PtV6UQmLPrhh++5TGqBIin3Im2BMSZVOIpu yXm/+GtTD6q64vFUJ0EV7dJIAWfdLi5fuvMwpQiPoVFtBesF5MeUVR8vW2hD -----END CERTIFICATE-----Generated at Mon Oct 20 05:45:01 2025 by rpki-client