$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft File: EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft (raw, json) Hash identifier: 36edIauQQy5dQNuI0DifrLUEAeUU377RkUvDyN26K0s= Subject key identifier: 49:01:AC:0E:E5:DC:AC:25:7D:C8:CC:BA:FA:6C:3C:80:5B:0F:A8:CC Authority key identifier: EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7 Certificate issuer: /CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7 Certificate serial: 3BA33CBBDC62DC8B75BB85C27712ACC5C9F5B43E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft Manifest number: 0125 Signing time: Sun 19 Oct 2025 03:07:19 +0000 Manifest this update: Sun 19 Oct 2025 03:02:19 +0000 Manifest next update: Fri 24 Oct 2025 16:00:19 +0000 Files and hashes: 1: 3133312e37322e3234332e302f32342d3234203d3e203532333239.roa (hash: Um0u1O+tmhpLEfVskHvXJ/FletzGKkUNgHJr6C5ERf0=) 2: 3133312e37322e3234302e302f32332d3234203d3e203532333237.roa (hash: unB+4ILAK+5yszVtQHA0dkiDzd4sRKiZY6aQANPyBx4=) 3: 3138362e3134382e3234302e302f32312d3234203d3e203532333239.roa (hash: GGVX4j3lWjQutn99KGVZtLmABPxDxHvxJM4KmfqFhvI=) 4: 3133312e37322e3234312e302f32342d3234203d3e203532333239.roa (hash: 4DXaiuYnfSrGKFRrUrCdDqxhnpt+D2cN4Jj+fvzhyKc=) 5: EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl (hash: zoIVVg3blSbsqKTs++MVeHYbcHwV1zsuIPUNZ3QcxSI=) 6: 3133312e37322e3234312e302f32342d3234203d3e203532333237.roa (hash: cTzwHNWvzUyPd0SwhrADcxj6rBq+KqLfLbxR9KIvTk4=) 7: 3133312e37322e3234322e302f32342d3234203d3e203532333237.roa (hash: JhACII2hNPj+CUpX/n/UTLxcJoQoiIYpKDhIbvziY68=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a3:3c:bb:dc:62:dc:8b:75:bb:85:c2:77:12:ac:c5:c9:f5:b4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7 Validity Not Before: Oct 19 03:02:19 2025 GMT Not After : Oct 24 16:00:19 2025 GMT Subject: CN=4901AC0EE5DCAC257DC8CCBAFA6C3C805B0FA8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:aa:f1:95:66:93:3a:d0:e2:96:6f:ff:01:ba: ac:fa:0e:10:be:77:81:7d:da:50:5e:3a:30:12:08: 51:0e:ec:70:a7:95:9b:b8:1b:68:3f:60:d7:f2:c3: 24:c1:b6:6d:08:8c:5a:dd:70:6d:08:06:18:06:0d: c5:54:5f:52:a7:d2:97:49:aa:bb:9b:ad:51:50:b6: 78:1b:7e:e1:73:50:4e:7f:dd:d4:a0:57:49:2f:ba: f3:c6:e2:d1:1a:b3:2b:2a:be:a1:cb:59:a6:e5:35: b1:c1:72:a5:24:37:b2:a9:a8:4e:58:b6:14:7b:77: 2a:a5:6a:af:5a:76:ff:e7:a9:a0:c9:2b:c9:a0:c4: 0e:d7:bd:a7:c2:eb:b3:2b:98:4e:03:88:e0:55:42: 58:86:5c:5e:ef:71:81:03:79:ed:9f:41:3d:3f:fa: e4:8e:c2:02:33:4c:71:21:85:0b:a1:0d:3a:1a:cc: a5:64:1d:aa:88:31:57:90:b8:83:21:f6:6a:33:9c: 3c:ce:f6:66:af:cc:0a:19:5e:dc:66:38:12:21:80: 27:c1:fb:89:c6:27:1b:0f:c6:ab:a7:5f:db:d8:33: 01:11:dc:3d:15:16:f9:5c:c4:48:44:0a:be:87:df: 6d:1a:f1:79:17:63:f6:2d:55:12:3a:41:8e:00:c6: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:01:AC:0E:E5:DC:AC:25:7D:C8:CC:BA:FA:6C:3C:80:5B:0F:A8:CC X509v3 Authority Key Identifier: keyid:EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:db:91:59:a4:22:da:48:81:00:bf:fb:d1:da:5f:3f:c6:b7: 25:f0:3a:b6:3d:98:36:4f:f7:cf:97:8f:95:3f:20:82:23:30: 58:3b:ed:ac:f2:b5:22:55:5a:70:94:a6:5b:00:b2:f9:be:a7: d4:36:83:ea:0d:ca:59:68:74:71:c1:7c:09:c8:08:3d:4a:3e: 96:e8:40:05:d1:32:9d:5c:39:48:fa:7b:6d:b2:94:6a:0a:b9: ef:1d:78:b1:87:32:9b:16:74:34:75:6b:a7:05:8a:cb:68:83: 11:99:57:96:28:55:c4:96:25:0c:5e:90:73:36:c1:82:61:58: 22:1f:a0:92:05:3f:8d:3a:d6:67:26:61:6c:e6:8e:f2:eb:c5: 8d:15:53:31:2d:b4:34:b9:1c:f1:ef:ca:20:01:a5:16:f8:d3: 9f:84:21:0c:ab:9d:56:67:3e:c1:9c:97:77:1b:c2:1d:5d:92: 9c:d5:eb:6c:ad:b9:3a:79:0f:5c:f0:91:4f:77:19:58:97:5b: 04:4b:31:d7:e9:ff:18:a1:c6:12:72:49:9e:3d:55:6b:bb:db: 30:04:f8:b8:aa:d3:9a:c2:fb:49:14:37:00:8c:94:11:1d:9f: ea:3f:b7:b3:8a:a1:d9:95:41:e2:83:7c:57:83:63:bb:fd:66: 59:19:67:0b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUO6M8u9xi3It1u4XCdxKsxcn1tD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM4NjlCQUZCNUEzODgyRkI3Q0I2RDdGMjJGRDM2Njg1 OTYxQzVCNzAeFw0yNTEwMTkwMzAyMTlaFw0yNTEwMjQxNjAwMTlaMDMxMTAvBgNV BAMTKDQ5MDFBQzBFRTVEQ0FDMjU3REM4Q0NCQUZBNkMzQzgwNUIwRkE4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqvGVZpM60OKWb/8Buqz6DhC+ d4F92lBeOjASCFEO7HCnlZu4G2g/YNfywyTBtm0IjFrdcG0IBhgGDcVUX1Kn0pdJ qrubrVFQtngbfuFzUE5/3dSgV0kvuvPG4tEasysqvqHLWablNbHBcqUkN7KpqE5Y thR7dyqlaq9adv/nqaDJK8mgxA7XvafC67MrmE4DiOBVQliGXF7vcYEDee2fQT0/ +uSOwgIzTHEhhQuhDToazKVkHaqIMVeQuIMh9moznDzO9mavzAoZXtxmOBIhgCfB +4nGJxsPxqunX9vYMwER3D0VFvlcxEhECr6H320a8XkXY/YtVRI6QY4AxvSRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSQGsDuXcrCV9yMy6+mw8gFsPqMwwHwYDVR0j BBgwFoAU7Iabr7WjiC+3y21/Iv02aFlhxbcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNTJFMkQyNTBGNUJBQUJFRjI2NEU5RTBBNTJGRjcxRThD OUFDQkRDODc4MzVBNUJGQkM1QUZFRTY4OUM3MUVBLzAvRUM4NjlCQUZCNUEzODgy RkI3Q0I2RDdGMjJGRDM2Njg1OTYxQzVCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzg2OUJBRkI1QTM4ODJGQjdD QjZEN0YyMkZEMzY2ODU5NjFDNUI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzUyRTJEMjUwRjVCQUFCRUYyNjRFOUUwQTUyRkY3MUU4QzlBQ0JEQzg3 ODM1QTVCRkJDNUFGRUU2ODlDNzFFQS8wL0VDODY5QkFGQjVBMzg4MkZCN0NCNkQ3 RjIyRkQzNjY4NTk2MUM1QjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCb25FZpCLaSIEAv/vR2l8/xrcl 8Dq2PZg2T/fPl4+VPyCCIzBYO+2s8rUiVVpwlKZbALL5vqfUNoPqDcpZaHRxwXwJ yAg9Sj6W6EAF0TKdXDlI+nttspRqCrnvHXixhzKbFnQ0dWunBYrLaIMRmVeWKFXE liUMXpBzNsGCYVgiH6CSBT+NOtZnJmFs5o7y68WNFVMxLbQ0uRzx78ogAaUW+NOf hCEMq51WZz7BnJd3G8IdXZKc1etsrbk6eQ9c8JFPdxlYl1sESzHX6f8YocYSckme PVVru9swBPi4qtOawvtJFDcAjJQRHZ/qP7eziqHZlUHig3xXg2O7/WZZGWcL -----END CERTIFICATE-----Generated at Mon Oct 20 16:32:37 2025 by rpki-client