$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft File: 1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft (raw, json) Hash identifier: 4ta6I5MNFGMsVBaTYLr2o7oFtaM5vbHh/fi2koKTLfU= Subject key identifier: 26:75:54:B0:5A:36:D0:EE:15:61:DB:D7:B5:67:0A:7D:9A:CA:F7:5B Authority key identifier: 1C:BD:B3:7A:B8:E4:CD:D5:71:7B:BF:2A:56:ED:47:FC:4E:35:F1:67 Certificate issuer: /CN=1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167 Certificate serial: 10DF050F900D7CFA1C5C6FA5547E515F05586A7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft Manifest number: 0131 Signing time: Mon 20 Oct 2025 11:29:08 +0000 Manifest this update: Mon 20 Oct 2025 11:24:08 +0000 Manifest next update: Sat 25 Oct 2025 21:50:08 +0000 Files and hashes: 1: 1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl (hash: oazQ4c3i0lmwZ2YoLSf+cLCUjIwYfu9dBhSRhvd+vmw=) 2: 323830313a31303a3830303a3a2f34382d3438203d3e203138373437.roa (hash: FpdtKovKQN2/OcXNHQIfKL9k5wdU39zR3a6EvXhQvJM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:df:05:0f:90:0d:7c:fa:1c:5c:6f:a5:54:7e:51:5f:05:58:6a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167 Validity Not Before: Oct 20 11:24:08 2025 GMT Not After : Oct 25 21:50:08 2025 GMT Subject: CN=267554B05A36D0EE1561DBD7B5670A7D9ACAF75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:af:dd:dd:73:b3:64:65:07:5c:3c:70:93:3c: 4c:d4:2d:29:e0:46:ad:30:4b:27:86:19:5e:5d:6e: b7:bd:b3:41:5f:f9:20:26:5d:00:08:fb:c5:bd:7d: 01:4f:0f:2b:30:ed:5b:39:92:42:11:1a:68:9c:79: ef:cb:3f:60:58:46:c4:b5:07:d2:6e:ab:c5:b2:96: e6:6d:fd:af:e3:98:2c:1f:7c:d2:c7:c0:ad:a5:8d: 12:8b:60:77:76:c7:b3:b3:69:ae:94:bf:20:43:89: 58:9f:67:ee:b6:65:35:d9:10:22:c2:de:9b:21:ab: a2:65:38:2d:5d:7e:15:6e:fc:39:7c:56:44:6f:93: a7:53:1f:84:b5:b8:a2:e6:03:ea:39:85:28:e8:ce: 62:66:e2:30:6c:f1:82:dc:19:97:09:b1:3a:9a:ba: 62:65:6f:0b:b4:b8:8d:43:aa:30:3a:23:d1:4a:19: 46:c9:2f:9e:ec:8b:60:ec:0b:a7:d0:d1:ad:eb:0d: 96:b9:46:19:8a:f9:3f:bf:04:b0:cb:66:64:73:74: 47:3c:ca:96:fe:0e:41:ae:02:ee:7c:dd:b1:1c:54: fa:1c:1c:bc:57:1b:52:a9:39:fa:82:b9:6f:55:0c: 0b:90:63:bc:ba:55:16:57:e8:e3:52:91:01:31:ba: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:75:54:B0:5A:36:D0:EE:15:61:DB:D7:B5:67:0A:7D:9A:CA:F7:5B X509v3 Authority Key Identifier: keyid:1C:BD:B3:7A:B8:E4:CD:D5:71:7B:BF:2A:56:ED:47:FC:4E:35:F1:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:81:8e:7b:38:fd:e1:b8:cd:b9:2f:68:bd:6d:89:7a:d6:ef: fa:db:a4:db:bc:46:5e:7f:00:e6:b2:a2:af:cc:f9:13:94:24: 01:35:20:eb:2d:1c:9d:2b:cd:d4:97:99:79:28:b4:2a:96:65: 76:95:cc:38:70:03:5a:09:2b:42:fc:7e:c0:37:e9:2d:10:ea: 48:1c:6b:f1:a9:7a:60:39:b5:8b:a0:54:90:94:10:b1:c7:25: d5:b4:10:0b:8c:cd:c4:49:60:1c:9e:0f:47:58:38:fb:80:79: fd:8f:6e:93:5e:60:1e:88:e3:71:9a:f2:00:d8:be:a6:52:4f: a4:00:19:65:60:5c:81:25:10:97:8d:4f:3f:af:bd:5d:c6:ae: dd:93:a8:b0:7b:3b:e8:ca:e8:e5:d4:36:d9:12:e3:95:52:fa: 08:e8:80:7e:79:88:0b:4b:4b:41:ed:c9:db:db:67:7a:58:28: dc:c1:42:2d:1d:c5:89:e7:19:48:92:0f:b4:14:71:a7:ef:dd: 22:00:2a:25:72:b5:9f:39:7e:6b:d4:e0:97:01:c2:eb:d6:0a: 5f:0a:06:d1:6f:b4:aa:d9:83:32:3e:f6:07:75:75:ff:7b:32: 92:04:8a:ee:69:d3:cb:17:2b:64:c7:86:fc:6a:02:ff:4d:ef: 47:29:5f:58 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEN8FD5ANfPocXG+lVH5RXwVYanowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNCREIzN0FCOEU0Q0RENTcxN0JCRjJBNTZFRDQ3RkM0 RTM1RjE2NzAeFw0yNTEwMjAxMTI0MDhaFw0yNTEwMjUyMTUwMDhaMDMxMTAvBgNV BAMTKDI2NzU1NEIwNUEzNkQwRUUxNTYxREJEN0I1NjcwQTdEOUFDQUY3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjr93dc7NkZQdcPHCTPEzULSng Rq0wSyeGGV5dbre9s0Ff+SAmXQAI+8W9fQFPDysw7Vs5kkIRGmicee/LP2BYRsS1 B9Juq8WyluZt/a/jmCwffNLHwK2ljRKLYHd2x7Ozaa6UvyBDiVifZ+62ZTXZECLC 3pshq6JlOC1dfhVu/Dl8VkRvk6dTH4S1uKLmA+o5hSjozmJm4jBs8YLcGZcJsTqa umJlbwu0uI1DqjA6I9FKGUbJL57si2DsC6fQ0a3rDZa5RhmK+T+/BLDLZmRzdEc8 ypb+DkGuAu583bEcVPocHLxXG1KpOfqCuW9VDAuQY7y6VRZX6ONSkQExunbZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJnVUsFo20O4VYdvXtWcKfZrK91swHwYDVR0j BBgwFoAUHL2zerjkzdVxe78qVu1H/E418WcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUQwNTQ4QTIyMEFERThGM0ZGN0NEMTA2RDMwN0JBNUI5 NjM3NTBDMjc2RjUyOTBGRjdDQ0FCRDAzMjVBQTc1LzAvMUNCREIzN0FCOEU0Q0RE NTcxN0JCRjJBNTZFRDQ3RkM0RTM1RjE2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQ0JEQjM3QUI4RTRDREQ1NzE3 QkJGMkE1NkVENDdGQzRFMzVGMTY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFEMDU0OEEyMjBBREU4RjNGRjdDRDEwNkQzMDdCQTVCOTYzNzUwQzI3 NkY1MjkwRkY3Q0NBQkQwMzI1QUE3NS8wLzFDQkRCMzdBQjhFNENERDU3MTdCQkYy QTU2RUQ0N0ZDNEUzNUYxNjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEgY57OP3huM25L2i9bYl61u/6 26TbvEZefwDmsqKvzPkTlCQBNSDrLRydK83Ul5l5KLQqlmV2lcw4cANaCStC/H7A N+ktEOpIHGvxqXpgObWLoFSQlBCxxyXVtBALjM3ESWAcng9HWDj7gHn9j26TXmAe iONxmvIA2L6mUk+kABllYFyBJRCXjU8/r71dxq7dk6iwezvoyujl1DbZEuOVUvoI 6IB+eYgLS0tB7cnb22d6WCjcwUItHcWJ5xlIkg+0FHGn790iAColcrWfOX5r1OCX AcLr1gpfCgbRb7Sq2YMyPvYHdXX/ezKSBIruadPLFytkx4b8agL/Te9HKV9Y -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:47 2025 by rpki-client